last executing test programs:

4.596651862s ago: executing program 2 (id=638):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)={[{@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@flush}, {@dots}, {@dots}, {@fat=@flush}, {@fat=@gid}, {@fat=@nfs}, {@fat=@allow_utime}, {@fat=@tz_utc}, {@dots}, {@fat=@discard}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001080)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000a00)="$eJzs3c9qK2UUAPAz+deoiwRxowgO6MJVuXXrplGuIHalRFAXGrz3giThwi0ErGDsqk/g0vfwEdy48Q0Et4K7dlEZmcxMk9CkrTWm0Pv7rQ7zzTlz8n0lXeXMV6+Ph4+eJnF8+nu020nU9mM/zpLoRi0qP0QjAID74yzL4q/sNpmN2ua7AQC2ofj/X7jrXgCA7fjks88/6h0cPPw4Tdvxaudk0k8iYnwy6RfrvSfxTYzicTyITpxHZBeK+IMPDx5GI811463xdNLPM8df/lrW7/0ZMcvfi050V+fvpYWF/Omk34wXI43ek2bVaideWZ3/zor86Lfi7TcX+t+NTvz2dTyNUTyKPHee//1emr6f/Xj63Rf5Y/L8pBb9ndl9c1l9m+cCAAAAAAAAAAAAAAAAAAAAAMD9tpumSTG+Zza/J79Uzt+pn8/Wd9NKd3k+T5GfVIWK+UBZlCN6pln8VM3XeZCmaVbeOM9vxGsNLxYAAAAAAAAAAAAAAAAAAACA3OG3R8PBaPT42UaCahpA9bP+29bZX7jyRhwNB/X1BXdu/qzFaQN5r1feHI1GbGhbrgteyPvZeOWd+eF+GkVQHcy/L9hcn/Xye0XRo+EgLZeqTR4Okuue1a4O7ufFpVb8103IZn8S59nymbYvWl3Oam1o51svrVz6O8uym9V594/ijMoryWzExs2e3iyDlR8wD9qXz+KX9QXXfmXUN/LFAwAAAAAAAAAAAAAAAAAAXDL/0e+KxeMrU2v/W1MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGXz9/9XQTsilq9cCqZl8lX3lEErnh3e8UcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBPAAAA//8s7E5o")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0)

4.531088907s ago: executing program 0 (id=642):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket(0x11, 0x800000003, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x224, &(0x7f00000009c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

4.530830796s ago: executing program 0 (id=643):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}]}, 0x10)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100005, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r5, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

4.530320226s ago: executing program 2 (id=644):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYRES32=r2, @ANYRES8=r2, @ANYRES32, @ANYRES32], 0x6, 0x360, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSzcw8uzOZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEAk9RiQhYYfyysyfP7+4vllMegVqJb/xak4pNTf/w8efpfxmZ9NykX3/8o/c7xfPXjx/+e/Gh2VLlS1VrTWUrrZrvzb0bdNQu2Wroim1ahq6Zahy1TLqXv13/n7M2t5eU+nV3dn0Xt2wLKVXm6piNFWjphr1ptI/0MtVpWmamk0LblI8XlvT80MG74y4MxiTej2vT4lIqqemeDyRDgEAgInqzv+jTko/IP+PXpf/b8lcobC8ppzG7fz/5KXzxsw7p3N+/n+W6Jf/v/aLt6+O/N85nWjn/zXv/KB0c/7/tdwh/+/NiB6XofP/7Bg6g+HMJ3qKIh3PnPw/7b9/XUfvnSy6G+T/AAAAAAAAAAAAAAAAAAAAAAA8Da5sO2PbdiZ4DH7alxD4z/EgDZr/aRFJOrNvM/8P2frmliTdC/ecOTa/2C/uF71Hv8G5iJhi/GN3c9ZGcOWRcmTlR/PAjz/YL065NfmSlJ14WZKMZN31FIq37ZW3CstLyuPHty5TSofjc5KRZ8Lx37ur04nPdcb7x0/IywuheE0y8tOO1MSUXTeyffzPl5R68+1CV3zKbSciv937pAAAAAAAMGKaaul7/q5pg+q9bxnJl9yPiQxZlIz83f/8frHv+Xks80Js0qMHAAAAAOBxsJqfVnSJGnV3wzT7baRkYNUINmIdJXER6ds40VUSv27PU6ER3rY/CfHuYPJ/x/VN8KreJSr4Rwqn460q/44qMlx/gvG7JZHY8NMUORR3ARyGq6Jyi/BYd+fnnQLVt/HCwP0c+QNplQQfGyUGvM6y2ruf6DUrId5TYkeGWwDPffXtX6N7g7x+6q+AT25ufGQa9oHcZlK6NpxD9FbFx/6LBwAAAMC9ayf9Qckb4erwjUTCN8vhL/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzQWL7Sr2tj0mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnhT/BQAA//8G1fOS")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x9, @void}, 0x10)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
socket(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r5, 0xffffffffffffffff, 0x6, 0x0, @val=@tcx={@void, @value}}, 0x40)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, 0x0, &(0x7f0000000400))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0)

4.517553577s ago: executing program 0 (id=645):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x8b946080, 0x0, 0x0, 0x0, 0x0, 0x0)

4.487881609s ago: executing program 0 (id=647):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="800008000000000000b000afeef264239d5b75b69cdd2e82498dd01f28c6d5a302c7a1f909c9a63d1ba9155b4cbd3801cd6335b798e7ac4445b70bd4de8b75cd6989ff3a98a4e854c0e2612519", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000500"/21], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000f6498b20a3e100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x9c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc0802}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x4, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000005c0))
brk(0x20ffc004)
unlink(&(0x7f0000000080)='./file0\x00')
shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = fcntl$dupfd(r4, 0x0, r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0)

4.444217132s ago: executing program 2 (id=648):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast2, 0x0, 0x6c}}}, 0xe8)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x0, 0x40000, 0x0, 0x0, 0x7})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
listen(r0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
keyctl$clear(0x6, 0xfffffffffffffffb)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0)

4.443471582s ago: executing program 0 (id=649):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000100010000000000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mlockall(0x1)
r1 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"/1305], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:file_context_t:s0\x00', 0x24, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}})

4.442742663s ago: executing program 2 (id=650):
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$unlink(0x9, r0, 0xffffffffffffffff)
r1 = socket(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x2}}}}]}, 0x78}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140))
r8 = socket(0x2, 0x1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r9, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)

4.420060734s ago: executing program 2 (id=651):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001100)='nv\x00', 0x3)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000002240))
r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t')
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x202800, 0x0)
unshare(0x22020600)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
eventfd2(0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)

4.104235385s ago: executing program 0 (id=653):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
preadv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1, 0x0, 0xc)

3.501229985s ago: executing program 2 (id=666):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
gettid()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1, 0x0, 0xc)

2.83712054s ago: executing program 3 (id=681):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x2b)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
request_key(0x0, 0x0, &(0x7f0000002240)='vfat\x00', 0xffffffffffffffff)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x80800)

1.914418512s ago: executing program 3 (id=688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = memfd_create(&(0x7f0000000300), 0x0)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000400)="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", 0xfc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4)
fallocate(r3, 0x0, 0x0, 0x4b8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0xff06, 0x0, 0x0, 0xffff, 0x0, "12003f00"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x16)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
pread64(r7, &(0x7f00000002c0)=""/213, 0xd5, 0x11)

1.893451113s ago: executing program 3 (id=690):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x100)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x400454a4, &(0x7f0000000000))
unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x3)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

1.831950457s ago: executing program 3 (id=693):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4)
close(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0)

1.628692361s ago: executing program 1 (id=695):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}})

1.384191977s ago: executing program 1 (id=696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x83}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=@framed={{}, [@tail_call, @kfunc, @ringbuf_output, @tail_call, @cb_func, @generic, @snprintf, @printk={@li}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x3fd, 0x1, 0x403, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0xf, &(0x7f0000000100)={r2, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a82"], 0xffdd)

1.328336251s ago: executing program 1 (id=697):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000000500050008000000180001801400020073797a5f74756e"], 0x34}}, 0x0)

1.327958011s ago: executing program 1 (id=698):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000006cf50000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r5, @ANYBLOB="7904000000000000000001000000140009000000000000000000000000ff0300000006000a004e210000050002"], 0x38}}, 0x0)
read(r1, 0x0, 0x2006)

957.337746ms ago: executing program 3 (id=699):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18)
rt_sigpending(0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2040400)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r2, 0x0, 0x0)

516.308215ms ago: executing program 4 (id=705):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xca04, &(0x7f0000000500)=ANY=[], 0x1, 0x2df, &(0x7f00000007c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
close_range(r4, r4, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_cancel(0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000001280)="ce9e64d167e05125dab70d622a4e9a", 0xf, 0x3)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
sched_rr_get_interval(r2, &(0x7f0000000080))

492.216197ms ago: executing program 4 (id=706):
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
r5 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
write$P9_RREADDIR(r5, &(0x7f0000000ec0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file1'}, {{0x0, 0x2}, 0x0, 0x6, 0x7, './file2'}]}}, 0x49)
sendfile(r5, r5, &(0x7f0000000240), 0x7f03)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x99, 0x9}}, './file0\x00'})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000240)={<r6=>0xffffffffffffffff})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
read$qrtrtun(r7, &(0x7f0000000100)=""/241, 0xf1)
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x4000})
close_range(r6, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000200)=""/92, 0x57}, {&(0x7f0000004240)=""/4100, 0x1004}], 0x70, &(0x7f00000011c0)=[{0xffffffffffffffff}], 0x1, 0x0)
syz_io_uring_setup(0x4425, &(0x7f0000000000)={0x0, 0xd6a6, 0x40, 0x3, 0xf0}, &(0x7f0000000080), &(0x7f00000000c0))

470.538588ms ago: executing program 4 (id=707):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'})

442.122821ms ago: executing program 4 (id=708):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r7=>0x0})
sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r7}, 0x14)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_acct\x00')

441.37582ms ago: executing program 1 (id=709):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x3)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f00000005c0)=@abs={0x1}, 0x6e)
pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0x500)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYBLOB="a665915b255e1de330aa35a5edb4571b559bd76f64715bd7bf6dbca2f3f519f5cdeffa76b9ae0f788c51d0fc127121fb3884b6623e1ae0e3dfd05d6ddffb5bb3716242a818119e7f3f7ea92e"], 0xfc, 0x2b5, &(0x7f00000001c0)="$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")
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000c000000000000000000000008000100"], 0x20}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = getpid()
syz_pidfd_open(r6, 0x0)

441.060301ms ago: executing program 4 (id=710):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES16], 0x1, 0x2bc, &(0x7f0000000f80)="$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")
open(0x0, 0x0, 0x0)
write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$inet6_udp(0x4, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
mount$nfs(0x0, 0x0, 0x0, 0x1210050, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

412.192813ms ago: executing program 4 (id=711):
gettid()
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r0, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000c00)={{r0}, "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"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x0, &(0x7f0000000400)})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10)
set_robust_list(&(0x7f0000000180)={0x0, 0x1}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd00000001000000180003"], 0x2c}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_setup(0x3604, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}}, 0x0)

411.814403ms ago: executing program 1 (id=712):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pipe(&(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b1", 0x3, 0x4014, 0x0, 0x0)
shutdown(r2, 0x1)
splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8)
statx(r1, &(0x7f0000000240)='./file0\x00', 0x800, 0x100, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
chown(&(0x7f0000000040)='./file0\x00', r4, r5)
r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14)
ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000000c0)=0x32)
close(r6)

0s ago: executing program 3 (id=713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
write$9p(r2, &(0x7f0000000b00)=';\'', 0x2)
sendfile(r2, r3, 0x0, 0xe066)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0xfc0, &(0x7f0000007940)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf8a, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "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"}}}}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = creat(0x0, 0x0)
ftruncate(r6, 0x81fd)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0)
sendfile(r2, r3, 0x0, 0xffff)

kernel console output (not intermixed with test programs):

_0: entered promiscuous mode
[   34.789652][   T40] bridge_slave_1: left allmulticast mode
[   34.795440][   T40] bridge_slave_1: left promiscuous mode
[   34.801121][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.008872][   T40] bridge_slave_0: left allmulticast mode
[   35.014600][   T40] bridge_slave_0: left promiscuous mode
[   35.020324][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.467409][ T3667] loop1: detected capacity change from 0 to 128
[   35.568636][ T3679] netlink: 'syz.0.65': attribute type 1 has an invalid length.
[   35.596677][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   35.607775][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   35.617694][   T40] bond0 (unregistering): Released all slaves
[   35.625732][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.632924][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.641156][ T3620] bridge_slave_1: entered allmulticast mode
[   35.647624][ T3620] bridge_slave_1: entered promiscuous mode
[   35.662798][ T3679] veth0_vlan: entered allmulticast mode
[   35.680655][ T3684] loop3: detected capacity change from 0 to 1024
[   35.689093][ T3682] veth0_vlan: left promiscuous mode
[   35.694552][ T3684] EXT4-fs: Ignoring removed nomblk_io_submit option
[   35.701154][ T3682] veth0_vlan: entered promiscuous mode
[   35.711679][ T3684] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   35.734193][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.755836][   T40] hsr_slave_0: left promiscuous mode
[   35.761617][   T40] hsr_slave_1: left promiscuous mode
[   35.768766][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.776359][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[   35.793679][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.801255][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[   35.832121][   T40] veth1_macvtap: left promiscuous mode
[   35.837958][   T40] veth0_macvtap: left promiscuous mode
[   35.843484][   T40] veth1_vlan: left promiscuous mode
[   35.848831][   T40] veth0_vlan: left promiscuous mode
[   35.874641][ T3695] capability: warning: `syz.2.69' uses deprecated v2 capabilities in a way that may be insecure
[   36.171224][   T40] team0 (unregistering): Port device team_slave_1 removed
[   36.204607][   T40] team0 (unregistering): Port device team_slave_0 removed
[   36.727133][ T3620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.849140][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.869544][ T3620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.971922][   T29] kauditd_printk_skb: 70 callbacks suppressed
[   36.971936][   T29] audit: type=1400 audit(1726296624.344:270): avc:  denied  { create } for  pid=3707 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   37.007776][ T3620] team0: Port device team_slave_0 added
[   37.014630][ T3708] netlink: 108 bytes leftover after parsing attributes in process `syz.2.75'.
[   37.028188][ T3620] team0: Port device team_slave_1 added
[   37.028634][   T29] audit: type=1400 audit(1726296624.394:271): avc:  denied  { write } for  pid=3707 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   37.056530][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.063000][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.069752][   T29] audit: type=1400 audit(1726296624.414:272): avc:  denied  { bind } for  pid=3710 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   37.088890][   T29] audit: type=1400 audit(1726296624.414:273): avc:  denied  { write } for  pid=3710 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   37.279572][   T29] audit: type=1400 audit(1726296624.524:274): avc:  denied  { create } for  pid=3713 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.299232][   T29] audit: type=1400 audit(1726296624.534:275): avc:  denied  { map } for  pid=3704 comm="syz.0.72" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.323140][   T29] audit: type=1400 audit(1726296624.534:276): avc:  denied  { execute } for  pid=3704 comm="syz.0.72" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.347315][   T29] audit: type=1400 audit(1726296624.594:277): avc:  denied  { connect } for  pid=3713 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.366783][   T29] audit: type=1400 audit(1726296624.604:278): avc:  denied  { ioctl } for  pid=3713 comm="syz.3.73" path="socket:[5224]" dev="sockfs" ino=5224 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.391311][   T29] audit: type=1400 audit(1726296624.604:279): avc:  denied  { write } for  pid=3713 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.419822][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.425414][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.433223][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.434720][ T3708] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   37.459242][ T3620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.477493][ T3708] infiniband sy: RDMA CMA: cma_listen_on_dev, error -98
[   37.478584][ T3719] netlink: 'syz.2.75': attribute type 10 has an invalid length.
[   37.492556][ T3719] bridge0: port 3(team0) entered blocking state
[   37.498879][ T3719] bridge0: port 3(team0) entered disabled state
[   37.505286][ T3719] team0: entered allmulticast mode
[   37.510391][ T3719] team_slave_0: entered allmulticast mode
[   37.516213][ T3719] team_slave_1: entered allmulticast mode
[   37.522845][ T3719] team0: entered promiscuous mode
[   37.528020][ T3719] team_slave_0: entered promiscuous mode
[   37.533797][ T3719] team_slave_1: entered promiscuous mode
[   37.539863][ T3719] bridge0: port 3(team0) entered blocking state
[   37.546176][ T3719] bridge0: port 3(team0) entered forwarding state
[   37.555720][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.562715][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.588792][ T3620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.602046][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.617761][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.626604][ T3620] hsr_slave_0: entered promiscuous mode
[   37.632611][ T3620] hsr_slave_1: entered promiscuous mode
[   37.638993][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.647251][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.662421][ T3708] ip6gretap0 speed is unknown, defaulting to 1000
[   37.735618][ T3741] loop2: detected capacity change from 0 to 512
[   37.743489][ T3741] EXT4-fs: dax option not supported
[   37.831023][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'.
[   37.886757][ T3754] loop2: detected capacity change from 0 to 512
[   37.910539][ T3754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.916533][ T3759] loop1: detected capacity change from 0 to 2048
[   37.924651][ T3754] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.016968][ T3763] usb usb8: usbfs: process 3763 (syz.0.79) did not claim interface 0 before use
[   38.044380][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.185422][ T3620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.279263][ T3805] netlink: 256 bytes leftover after parsing attributes in process `syz.3.81'.
[   38.290209][ T3620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.303010][ T3620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.444009][ T3620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.591704][ T3620] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.632696][ T3620] 8021q: adding VLAN 0 to HW filter on device team0
[   38.652968][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.660084][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.682228][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.689356][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.877376][ T3620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.163350][ T3620] veth0_vlan: entered promiscuous mode
[   39.203106][ T3620] veth1_vlan: entered promiscuous mode
[   39.302121][ T3620] veth0_macvtap: entered promiscuous mode
[   39.358200][ T3620] veth1_macvtap: entered promiscuous mode
[   39.398585][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.409065][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.418925][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.429399][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.439320][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.449870][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.459715][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.470176][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.481200][ T3620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.503971][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.514454][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.524277][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.534868][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.545138][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.555601][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.565459][ T3620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.575919][ T3620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.586756][ T3620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.595401][ T3620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.604184][ T3620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.612931][ T3620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.621799][ T3620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.637808][ T3884] netlink: 1392 bytes leftover after parsing attributes in process `syz.1.89'.
[   39.781878][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.789412][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.796920][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.804411][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.811807][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.819248][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.826697][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.834104][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.841501][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.848947][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.856469][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.863865][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.871322][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.878794][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.886219][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.893691][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.901107][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.908527][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.915956][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.923404][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.930838][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.938262][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.945835][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.953233][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.960730][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.968143][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.989637][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.997133][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.004525][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.011965][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.019503][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.026893][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.034292][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.041668][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.049067][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.056529][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.063916][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.071355][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.078923][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.086342][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.093725][ T3337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.126361][ T3337] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   40.145399][ T3907] loop1: detected capacity change from 0 to 512
[   40.238162][ T3913] ip6gretap0 speed is unknown, defaulting to 1000
[   40.380335][ T3907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.528911][ T3907] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.571308][ T3924] program syz.2.101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   40.595142][ T3919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 18: invalid block bitmap
[   40.631324][ T3907] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.92: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   40.658967][ T3926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.704444][ T3907] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   40.741836][ T3907] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.92: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   40.763584][ T3926] loop2: detected capacity change from 0 to 1024
[   40.770432][ T3907] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   40.783935][ T3926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   40.800055][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.804472][ T3907] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.92: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   40.855604][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.888225][ T3907] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   40.898106][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.906977][ T3907] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.92: Failed to acquire dquot type 1
[   40.961185][ T3926] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.102: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   41.108541][ T3938] netlink: 'syz.0.107': attribute type 14 has an invalid length.
[   41.190290][ T3941] Cannot find set identified by id 0 to match
[   41.306530][ T3940] netlink: 'syz.3.106': attribute type 10 has an invalid length.
[   41.317333][ T3940] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[   41.326611][ T3940] team0: Failed to send options change via netlink (err -105)
[   41.334149][ T3940] team0: Port device netdevsim1 added
[   41.475029][ T3950] capability: warning: `syz.0.110' uses 32-bit capabilities (legacy support in use)
[   41.498322][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.577073][ T3956] loop1: detected capacity change from 0 to 128
[   41.595007][ T3958] loop7: detected capacity change from 0 to 16384
[   41.613744][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.677156][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'.
[   41.749315][ T3963] loop2: detected capacity change from 0 to 512
[   41.799385][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.818131][ T3963] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.895275][ T3974] loop1: detected capacity change from 0 to 1024
[   41.906973][ T3974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   41.918344][ T3974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.957023][ T3967] loop7: detected capacity change from 16384 to 16383
[   41.965361][ T3963] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.116: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   42.004352][ T3963] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   42.051570][ T3963] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.116: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   42.185923][ T3963] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   42.201639][ T3977] IPv6: Can't replace route, no match found
[   42.208131][ T3963] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.116: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   42.232663][ T3963] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   42.242454][ T3963] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.116: bg 0: block 18: invalid block bitmap
[   42.255343][ T3963] __quota_error: 105 callbacks suppressed
[   42.255357][ T3963] Quota error (device loop2): write_blk: dquota write failed
[   42.262061][ T3978] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.116: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   42.268715][ T3963] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   42.286470][ T3978] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   42.296056][ T3963] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.116: Failed to acquire dquot type 1
[   42.315152][   T29] audit: type=1400 audit(1726296629.704:383): avc:  denied  { setattr } for  pid=3962 comm="syz.2.116" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   42.327898][   T11] I/O error, dev loop7, sector 15176 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0
[   42.339651][ T3978] Quota error (device loop2): write_blk: dquota write failed
[   42.347407][   T11] Buffer I/O error on dev loop7, logical block 1897, lost async page write
[   42.363353][   T11] Buffer I/O error on dev loop7, logical block 1898, lost async page write
[   42.367219][ T3978] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   42.371960][   T11] Buffer I/O error on dev loop7, logical block 1899, lost async page write
[   42.381743][ T3978] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.116: Failed to acquire dquot type 1
[   42.401663][   T11] Buffer I/O error on dev loop7, logical block 1900, lost async page write
[   42.410347][   T11] Buffer I/O error on dev loop7, logical block 1901, lost async page write
[   42.419049][   T11] Buffer I/O error on dev loop7, logical block 1902, lost async page write
[   42.427675][   T11] Buffer I/O error on dev loop7, logical block 1903, lost async page write
[   42.428585][ T3980] Process accounting resumed
[   42.436392][   T11] Buffer I/O error on dev loop7, logical block 1904, lost async page write
[   42.436413][   T11] Buffer I/O error on dev loop7, logical block 1905, lost async page write
[   42.458348][   T11] Buffer I/O error on dev loop7, logical block 1906, lost async page write
[   42.468366][   T11] I/O error, dev loop7, sector 16200 op 0x1:(WRITE) flags 0x0 phys_seg 22 prio class 0
[   42.482550][ T3963] syz.2.116 (3963) used greatest stack depth: 9224 bytes left
[   42.493839][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.548878][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.570829][ T3986] loop1: detected capacity change from 0 to 512
[   42.577816][ T3986] EXT4-fs: Invalid want_extra_isize 0
[   42.586813][ T3986] loop1: detected capacity change from 0 to 256
[   42.593601][ T3986] vfat: Bad value for 'dmask'
[   42.600158][ T3986] syz.1.121 (3986): /proc/3985/oom_adj is deprecated, please use /proc/3985/oom_score_adj instead.
[   42.644916][   T29] audit: type=1400 audit(1726296630.024:384): avc:  denied  { setopt } for  pid=3988 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   42.664400][   T29] audit: type=1400 audit(1726296630.024:385): avc:  denied  { getopt } for  pid=3988 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   42.692024][   T29] audit: type=1400 audit(1726296630.064:386): avc:  denied  { read } for  pid=3993 comm="syz.3.123" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   42.716128][   T29] audit: type=1400 audit(1726296630.064:387): avc:  denied  { open } for  pid=3993 comm="syz.3.123" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   43.404767][ T4003] loop4: detected capacity change from 0 to 2048
[   43.586281][   T29] audit: type=1326 audit(1726296630.964:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.1.127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f196921def9 code=0x0
[   43.628120][ T4009] program syz.4.129 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   44.460013][ T4032] loop1: detected capacity change from 0 to 764
[   44.647866][ T4037] ªªªªªª: renamed from vlan0 (while UP)
[   44.663948][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.672686][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.682791][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.692319][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.700896][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.710159][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.719811][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.725550][ T4046] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   44.742260][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.274111][ T4050] loop4: detected capacity change from 0 to 512
[   45.283953][ T4050] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   45.297133][ T4050] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.306962][ T4050] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   45.382677][ T4052] netlink: 'syz.4.143': attribute type 4 has an invalid length.
[   45.423191][ T4056] loop1: detected capacity change from 0 to 512
[   45.430607][ T4056] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   45.446617][ T4056] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   45.452695][ T4065] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[   45.455859][ T4056] EXT4-fs (loop1): 1 truncate cleaned up
[   45.461177][ T4065] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   45.461337][ T4065] vhci_hcd vhci_hcd.0: Device attached
[   45.467665][ T4056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.486506][ T4066] vhci_hcd: connection closed
[   45.494605][   T11] vhci_hcd: stop threads
[   45.503566][   T11] vhci_hcd: release socket
[   45.508082][   T11] vhci_hcd: disconnect device
[   45.535594][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.686197][ T4079] loop1: detected capacity change from 0 to 512
[   45.701607][ T4079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   45.716821][ T4079] EXT4-fs (loop1): orphan cleanup on readonly fs
[   45.727316][ T4079] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.148: bg 0: block 248: padding at end of block bitmap is not set
[   45.755334][ T4079] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.148: Failed to acquire dquot type 1
[   45.891711][ T4079] EXT4-fs (loop1): 1 truncate cleaned up
[   45.903601][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   45.975947][ T4088] xt_TCPMSS: Only works on TCP SYN packets
[   46.024479][ T4092] loop3: detected capacity change from 0 to 256
[   46.031116][ T4092] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   46.063146][ T4094] loop3: detected capacity change from 0 to 512
[   46.311659][ T4094] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.154: casefold flag without casefold feature
[   46.327120][ T4094] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.154: couldn't read orphan inode 15 (err -117)
[   46.836372][ T4100] ip6gretap0 speed is unknown, defaulting to 1000
[   47.671783][ T4096] syz.4.155 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   47.682716][ T4096] CPU: 1 UID: 0 PID: 4096 Comm: syz.4.155 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0
[   47.693395][ T4096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   47.703520][ T4096] Call Trace:
[   47.706799][ T4096]  <TASK>
[   47.709788][ T4096]  dump_stack_lvl+0xf2/0x150
[   47.714383][ T4096]  dump_stack+0x15/0x20
[   47.718563][ T4096]  dump_header+0x83/0x2d0
[   47.722890][ T4096]  oom_kill_process+0x341/0x4c0
[   47.727823][ T4096]  out_of_memory+0x9af/0xbe0
[   47.732509][ T4096]  ? __rcu_read_unlock+0x4e/0x70
[   47.737530][ T4096]  mem_cgroup_out_of_memory+0x13e/0x190
[   47.743207][ T4096]  try_charge_memcg+0x51b/0x810
[   47.748049][ T4096]  mem_cgroup_swapin_charge_folio+0x107/0x1a0
[   47.754109][ T4096]  __read_swap_cache_async+0x2b7/0x520
[   47.759566][ T4096]  swap_cluster_readahead+0x276/0x3f0
[   47.764937][ T4096]  swapin_readahead+0xe4/0x760
[   47.769692][ T4096]  ? __filemap_get_folio+0x420/0x5b0
[   47.774995][ T4096]  ? swap_cache_get_folio+0x77/0x210
[   47.780302][ T4096]  do_swap_page+0x3da/0x1ef0
[   47.784956][ T4096]  ? cgroup_rstat_updated+0x99/0x550
[   47.790258][ T4096]  ? __rcu_read_lock+0x36/0x50
[   47.795172][ T4096]  ? pte_offset_map_nolock+0x124/0x1d0
[   47.800680][ T4096]  handle_mm_fault+0x8cb/0x2a30
[   47.805545][ T4096]  exc_page_fault+0x3b9/0x650
[   47.810285][ T4096]  asm_exc_page_fault+0x26/0x30
[   47.814238][    C0] sched: RT throttling activated
[   47.820185][ T4096] RIP: 0033:0x7f22aadce89d
[   47.824591][ T4096] Code: 44 8d 56 04 4c 8d 0d 82 37 2e 00 89 f0 4c 8d 05 79 17 2e 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 <45> 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00
[   47.844274][ T4096] RSP: 002b:00007ffd885a8f98 EFLAGS: 00010282
[   47.850366][ T4096] RAX: 0000000084107cf8 RBX: 00007f22abbf5720 RCX: ffffffff84805cf8
[   47.858373][ T4096] RDX: 0000000000001cf8 RSI: ffffffff84107cf8 RDI: 0000000000000007
[   47.866362][ T4096] RBP: 0000000000000000 R08: 00007f22ab0b0000 R09: 00007f22ab0b2000
[   47.874322][ T4096] R10: 0000000084107cfc R11: 0000000000000007 R12: ffffffff84107592
[   47.882450][ T4096] R13: 00007f22ab0c6018 R14: 0000000000000008 R15: 0000000000000000
[   47.890514][ T4096]  ? __x64_sys_sendmmsg+0x12/0x70
[   47.895544][ T4096]  ? nlmsg_parse_deprecated_strict+0x48/0xa0
[   47.901750][ T4096]  ? __sys_recvmmsg+0x38/0x200
[   47.906667][ T4096]  </TASK>
[   47.909881][ T4096] memory: usage 307200kB, limit 307200kB, failcnt 250
[   47.916723][ T4096] memory+swap: usage 311244kB, limit 9007199254740988kB, failcnt 0
[   47.924722][ T4096] kmem: usage 306948kB, limit 9007199254740988kB, failcnt 0
[   47.932027][ T4096] Memory cgroup stats for /syz4:
[   47.979136][ T4096] cache 131072
[   47.987572][ T4096] rss 0
[   47.990327][ T4096] shmem 0
[   47.993243][ T4096] mapped_file 131072
[   47.997129][ T4096] dirty 131072
[   48.000480][ T4096] writeback 0
[   48.003745][ T4096] workingset_refault_anon 23
[   48.008327][ T4096] workingset_refault_file 0
[   48.012859][ T4096] swap 4272128
[   48.016233][ T4096] swapcached 4096
[   48.019845][ T4096] pgpgin 18650
[   48.023211][ T4096] pgpgout 18617
[   48.026717][ T4096] pgfault 21451
[   48.030154][ T4096] pgmajfault 9
[   48.033504][ T4096] inactive_anon 4096
[   48.037392][ T4096] active_anon 0
[   48.040914][ T4096] inactive_file 102400
[   48.044973][ T4096] active_file 24576
[   48.048817][ T4096] unevictable 0
[   48.052256][ T4096] hierarchical_memory_limit 314572800
[   48.057707][ T4096] hierarchical_memsw_limit 9223372036854771712
[   48.063842][ T4096] total_cache 131072
[   48.067729][ T4096] total_rss 0
[   48.070994][ T4096] total_shmem 0
[   48.074451][ T4096] total_mapped_file 131072
[   48.078870][ T4096] total_dirty 131072
[   48.082744][ T4096] total_writeback 0
[   48.086548][ T4096] total_workingset_refault_anon 23
[   48.091712][ T4096] total_workingset_refault_file 0
[   48.096737][ T4096] total_swap 4272128
[   48.100629][ T4096] total_swapcached 4096
[   48.104909][ T4096] total_pgpgin 18650
[   48.108819][ T4096] total_pgpgout 18617
[   48.112784][ T4096] total_pgfault 21451
[   48.116758][ T4096] total_pgmajfault 9
[   48.120631][ T4096] total_inactive_anon 4096
[   48.125155][ T4096] total_active_anon 0
[   48.129186][ T4096] total_inactive_file 102400
[   48.133757][ T4096] total_active_file 24576
[   48.138188][ T4096] total_unevictable 0
[   48.142150][ T4096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.155,pid=4096,uid=0
[   48.157005][ T4096] Memory cgroup out of memory: Killed process 4096 (syz.4.155) total-vm:91412kB, anon-rss:736kB, file-rss:18084kB, shmem-rss:128kB, UID:0 pgtables:136kB oom_score_adj:1000
[   48.381583][   T29] kauditd_printk_skb: 108 callbacks suppressed
[   48.381597][   T29] audit: type=1326 audit(1726296635.754:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.434392][ T4094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.442625][ T4100] syz.4.155 (4100) used greatest stack depth: 6296 bytes left
[   48.458312][   T29] audit: type=1326 audit(1726296635.794:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.464267][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.481606][   T29] audit: type=1326 audit(1726296635.794:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.513716][   T29] audit: type=1326 audit(1726296635.794:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.528564][ T4109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18578 sclass=netlink_route_socket pid=4109 comm=syz.4.158
[   48.537002][   T29] audit: type=1326 audit(1726296635.794:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.537027][   T29] audit: type=1326 audit(1726296635.794:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.537048][   T29] audit: type=1326 audit(1726296635.794:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.619548][   T29] audit: type=1326 audit(1726296635.794:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.642914][   T29] audit: type=1326 audit(1726296635.794:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.665768][   T29] audit: type=1326 audit(1726296635.794:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   48.697454][ T4114] loop1: detected capacity change from 0 to 128
[   48.719530][ T4114] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.732921][ T4114] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   48.778877][ T4107] ip6gretap0 speed is unknown, defaulting to 1000
[   48.797633][ T4106] ip6gretap0 speed is unknown, defaulting to 1000
[   49.019730][ T4127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.160'.
[   49.153480][ T4120] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   49.236614][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.263797][ T4132] loop3: detected capacity change from 0 to 128
[   49.273580][ T4132] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[   49.292317][ T4132] syz.3.164: attempt to access beyond end of device
[   49.292317][ T4132] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128
[   49.306667][ T4132] syz.3.164: attempt to access beyond end of device
[   49.306667][ T4132] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128
[   49.384728][ T4129] usb usb8: usbfs: process 4129 (syz.2.163) did not claim interface 1 before use
[   49.406999][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.412046][ T3267] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   49.431021][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.462004][ T4145] loop1: detected capacity change from 0 to 512
[   49.469612][ T4145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.485510][ T4145] EXT4-fs (loop1): 1 orphan inode deleted
[   49.491286][ T4145] EXT4-fs (loop1): 1 truncate cleaned up
[   49.502648][ T4145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.546742][ T4151] loop4: detected capacity change from 0 to 1764
[   49.607465][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.679106][ T4155] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   49.681306][ T4159] vlan2: entered promiscuous mode
[   49.723604][ T4160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.174'.
[   49.975051][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.990751][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.136228][ T3273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.209146][ T3273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.257024][ T4176] ip6gretap0 speed is unknown, defaulting to 1000
[   50.269603][ T3273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.310655][ T3273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.335649][ T4176] chnl_net:caif_netlink_parms(): no params data found
[   50.369012][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.376161][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.383433][ T4176] bridge_slave_0: entered allmulticast mode
[   50.390023][ T4176] bridge_slave_0: entered promiscuous mode
[   50.397235][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.404337][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.411607][ T4176] bridge_slave_1: entered allmulticast mode
[   50.418069][ T4176] bridge_slave_1: entered promiscuous mode
[   50.434057][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.447164][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.470349][ T3273] bridge_slave_1: left allmulticast mode
[   50.476071][ T3273] bridge_slave_1: left promiscuous mode
[   50.481862][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.489675][ T3273] bridge_slave_0: left allmulticast mode
[   50.495343][ T3273] bridge_slave_0: left promiscuous mode
[   50.500947][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.570020][ T4199] loop1: detected capacity change from 0 to 1024
[   50.585741][ T4199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.598170][ T4199] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.612513][ T4199] hub 2-0:1.0: USB hub found
[   50.617288][ T4199] hub 2-0:1.0: 8 ports detected
[   50.622524][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   50.641577][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   50.648895][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.662067][ T3273] bond0 (unregistering): Released all slaves
[   50.703656][ T4176] team0: Port device team_slave_0 added
[   50.720357][ T4176] team0: Port device team_slave_1 added
[   50.751302][ T3273] hsr_slave_0: left promiscuous mode
[   50.762728][ T3273] hsr_slave_1: left promiscuous mode
[   50.770691][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.778202][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.796142][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.803587][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.822033][ T3273] veth1_macvtap: left promiscuous mode
[   50.827735][ T3273] veth0_macvtap: left promiscuous mode
[   50.833290][ T3273] veth1_vlan: left promiscuous mode
[   50.838667][ T3273] veth0_vlan: left promiscuous mode
[   50.882847][ T4212] loop1: detected capacity change from 0 to 1024
[   50.940939][ T3273] team0 (unregistering): Port device team_slave_1 removed
[   50.952717][ T3273] team0 (unregistering): Port device team_slave_0 removed
[   50.993635][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.001005][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.027004][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.041187][ T4209] team_slave_0: entered promiscuous mode
[   51.046982][ T4209] team_slave_1: entered promiscuous mode
[   51.052656][ T4209] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[   51.060464][ T4209] vlan2: entered promiscuous mode
[   51.065555][ T4209] team0: entered promiscuous mode
[   51.087273][ T4209] team0: left promiscuous mode
[   51.092464][ T4209] team_slave_0: left promiscuous mode
[   51.097893][ T4209] team_slave_1: left promiscuous mode
[   51.103352][ T4209] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[   51.118562][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[   51.167251][ T4215] hsr_slave_1 (unregistering): left promiscuous mode
[   51.271647][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.278741][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.304767][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.362958][ T4235] program syz.3.194 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   51.530969][ T4241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.196'.
[   51.542880][ T4176] hsr_slave_0: entered promiscuous mode
[   51.549830][ T4176] hsr_slave_1: entered promiscuous mode
[   51.578411][ T4243] hub 2-0:1.0: USB hub found
[   51.583242][ T4243] hub 2-0:1.0: 8 ports detected
[   52.080102][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.130284][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.189694][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.196914][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.216014][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.223204][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.349638][ T4176] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   52.363107][ T4176] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   52.396922][ T4176] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   52.414088][ T4176] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   52.452999][ T4302] team_slave_0: entered promiscuous mode
[   52.458713][ T4302] team_slave_1: entered promiscuous mode
[   52.470875][ T4302] vlan2: entered promiscuous mode
[   52.476028][ T4302] team0: entered promiscuous mode
[   52.485922][ T4302] team0: left promiscuous mode
[   52.490971][ T4302] team_slave_0: left promiscuous mode
[   52.496478][ T4302] team_slave_1: left promiscuous mode
[   52.564159][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.598425][ T4176] 8021q: adding VLAN 0 to HW filter on device team0
[   52.626358][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.633564][ T3273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.688964][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.696049][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.747366][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'.
[   52.796035][ T4320] hsr_slave_1 (unregistering): left promiscuous mode
[   52.797821][ T4312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.205'.
[   52.841056][ T4315] ip6gretap0 speed is unknown, defaulting to 1000
[   52.890439][ T4335] program syz.1.207 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.460649][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.993637][   T29] kauditd_printk_skb: 261 callbacks suppressed
[   53.993649][   T29] audit: type=1326 audit(1726296641.364:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.067916][   T29] audit: type=1326 audit(1726296641.394:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.091293][   T29] audit: type=1326 audit(1726296641.394:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.114517][   T29] audit: type=1326 audit(1726296641.394:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.137810][   T29] audit: type=1326 audit(1726296641.434:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.161295][   T29] audit: type=1326 audit(1726296641.434:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56a939ffe5 code=0x7ffc0000
[   54.194633][   T29] audit: type=1326 audit(1726296641.474:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.218002][   T29] audit: type=1326 audit(1726296641.474:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.241278][   T29] audit: type=1326 audit(1726296641.474:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.264506][   T29] audit: type=1326 audit(1726296641.474:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a936def9 code=0x7ffc0000
[   54.376248][ T4176] veth0_vlan: entered promiscuous mode
[   54.380703][ T4394] loop1: detected capacity change from 0 to 512
[   54.384461][ T4176] veth1_vlan: entered promiscuous mode
[   54.394327][ T4396] syz.0.214[4396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.394506][ T4396] syz.0.214[4396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.407155][ T4392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.212'.
[   54.436544][ T4176] veth0_macvtap: entered promiscuous mode
[   54.455566][ T4176] veth1_macvtap: entered promiscuous mode
[   54.468874][ T4394] EXT4-fs: Ignoring removed bh option
[   54.478857][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.489445][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.499264][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.509811][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.519692][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.530179][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.540047][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.550581][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.567512][ T4394] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.213: invalid block
[   54.567792][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.592801][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.594064][ T4394] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.213: couldn't read orphan inode 15 (err -117)
[   54.603286][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.624845][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.635315][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.642024][ T4394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.645149][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.667634][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.703227][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.731219][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.740144][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.748883][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.757650][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.796937][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.181566][ T4412] bridge0: port 3(team0) entered disabled state
[   55.198276][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.208161][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.274327][ T4417] program syz.0.218 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.290690][ T4414] bridge0: port 3(team0) entered blocking state
[   55.297026][ T4414] bridge0: port 3(team0) entered forwarding state
[   55.315777][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.322981][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.333323][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.340418][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.628929][ T4423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'.
[   57.050265][ T4440] loop1: detected capacity change from 0 to 1024
[   57.058005][ T4440] EXT4-fs: Ignoring removed nobh option
[   57.119734][ T4440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.517538][ T4450] ip6gretap0 speed is unknown, defaulting to 1000
[   57.983914][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.123525][ T4500] syz.1.229[4500] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.123587][ T4500] syz.1.229[4500] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.241580][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   58.310047][ T4512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.330755][ T4512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.767426][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'.
[   58.778279][ T4542] team_slave_0: entered promiscuous mode
[   58.784031][ T4542] team_slave_1: entered promiscuous mode
[   58.789749][ T4542] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[   58.797360][ T4542] macvtap1: entered promiscuous mode
[   58.802880][ T4542] team0: entered promiscuous mode
[   58.808579][ T4542] macvtap1: entered allmulticast mode
[   58.814029][ T4542] team0: entered allmulticast mode
[   58.819234][ T4542] team_slave_0: entered allmulticast mode
[   58.824998][ T4542] team_slave_1: entered allmulticast mode
[   58.830761][ T4542] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[   58.838640][ T4542] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   58.848601][ T4543] team0: left allmulticast mode
[   58.853500][ T4543] team_slave_0: left allmulticast mode
[   58.859025][ T4543] team_slave_1: left allmulticast mode
[   58.864545][ T4543] netdevsim netdevsim3 netdevsim1: left allmulticast mode
[   58.871695][ T4543] team0: left promiscuous mode
[   58.876880][ T4543] team_slave_0: left promiscuous mode
[   58.882290][ T4543] team_slave_1: left promiscuous mode
[   58.887726][ T4543] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[   59.001489][ T4547] loop1: detected capacity change from 0 to 2048
[   59.026993][ T4547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.190804][   T29] kauditd_printk_skb: 56 callbacks suppressed
[   59.190826][   T29] audit: type=1400 audit(1726296646.564:832): avc:  denied  { mount } for  pid=4544 comm="syz.3.236" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   60.479258][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.066992][ T4572] tipc: Can't bind to reserved service type 0
[   61.241323][ T4576] loop4: detected capacity change from 0 to 512
[   61.248056][ T4576] EXT4-fs: Ignoring removed bh option
[   61.260786][ T4576] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.244: invalid block
[   61.284483][ T4576] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.244: couldn't read orphan inode 15 (err -117)
[   61.302514][ T4576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.476729][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'.
[   61.505890][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.528669][ T4601] syz.4.248[4601] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.528726][ T4601] syz.4.248[4601] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.604585][   T29] audit: type=1400 audit(1726296648.974:833): avc:  denied  { read write } for  pid=4606 comm="syz.2.250" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   61.639380][   T29] audit: type=1400 audit(1726296648.974:834): avc:  denied  { open } for  pid=4606 comm="syz.2.250" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   61.724682][ T4607] 
@ÿ: renamed from veth0_vlan (while UP)
[   61.750669][ T4612] ip6gretap0 speed is unknown, defaulting to 1000
[   61.842936][ T4607] dns_resolver: Unsupported content type (1)
[   62.442927][ T4626] loop4: detected capacity change from 0 to 2048
[   62.458398][ T4626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.954339][   T29] audit: type=1326 audit(1726296651.314:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   63.977774][   T29] audit: type=1326 audit(1726296651.314:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.001583][   T29] audit: type=1326 audit(1726296651.314:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.025028][   T29] audit: type=1326 audit(1726296651.314:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.049007][   T29] audit: type=1326 audit(1726296651.314:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.073228][   T29] audit: type=1326 audit(1726296651.314:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.096569][   T29] audit: type=1326 audit(1726296651.314:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.226397][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.248223][   T29] kauditd_printk_skb: 14 callbacks suppressed
[   64.248243][   T29] audit: type=1326 audit(1726296651.624:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.277791][   T29] audit: type=1326 audit(1726296651.624:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.485699][   T29] audit: type=1326 audit(1726296651.854:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.508984][   T29] audit: type=1326 audit(1726296651.854:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.532350][   T29] audit: type=1326 audit(1726296651.854:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.555767][   T29] audit: type=1326 audit(1726296651.854:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.578806][   T29] audit: type=1400 audit(1726296651.854:862): avc:  denied  { compute_member } for  pid=4639 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   64.599868][   T29] audit: type=1326 audit(1726296651.854:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   64.623096][   T29] audit: type=1326 audit(1726296651.854:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   65.012036][   T29] audit: type=1326 audit(1726296652.384:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff49ddef9 code=0x7ffc0000
[   65.302226][ T4679] loop1: detected capacity change from 0 to 512
[   65.363538][ T4679] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.370142][ T4679] EXT4-fs: Ignoring removed i_version option
[   65.403434][ T4679] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 1: comm syz.1.259: invalid block
[   65.417510][ T4679] EXT4-fs (loop1): Remounting filesystem read-only
[   65.426178][ T4679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.438585][ T4679] SELinux: (dev loop1, type ext4) getxattr errno 5
[   65.445544][ T4679] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.583180][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'.
[   65.605131][ T4695] caif0: entered promiscuous mode
[   65.610216][ T4695] caif0: entered allmulticast mode
[   65.790696][ T4700] 
@ÿ: renamed from veth0_vlan (while UP)
[   65.876228][ T4698] dns_resolver: Unsupported content type (1)
[   65.954711][ T4704] syz.3.264[4704] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   65.954767][ T4704] syz.3.264[4704] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   66.232689][ T4713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4713 comm=syz.1.268
[   66.268557][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[   66.296428][ T4714] ip6gretap0 speed is unknown, defaulting to 1000
[   66.598746][ T4721] loop1: detected capacity change from 0 to 512
[   66.632022][ T4721] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.270: casefold flag without casefold feature
[   66.669532][ T4721] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.270: couldn't read orphan inode 15 (err -117)
[   66.683347][ T4721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.457134][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.553451][ T4740] ip6gretap0 speed is unknown, defaulting to 1000
[   67.845705][ T4757] ip6gretap0 speed is unknown, defaulting to 1000
[   68.276191][ T4748] loop1: detected capacity change from 0 to 128
[   68.459170][ T4854] 
@ÿ: renamed from veth0_vlan (while UP)
[   68.489445][ T4832] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.512109][ T4844] dns_resolver: Unsupported content type (1)
[   68.521387][ T4848] ip6gretap0 speed is unknown, defaulting to 1000
[   68.548352][ T4832] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.624395][ T4862] syz.4.282[4862] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.624495][ T4862] syz.4.282[4862] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.656029][ T4860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4860 comm=syz.3.281
[   68.723416][ T4832] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.737409][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'.
[   68.752112][ T4860] team_slave_0: entered promiscuous mode
[   68.757839][ T4860] team_slave_1: entered promiscuous mode
[   68.763575][ T4860] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[   68.771345][ T4860] macvtap2: entered promiscuous mode
[   68.777191][ T4860] team0: entered promiscuous mode
[   68.782739][ T4860] macvtap2: entered allmulticast mode
[   68.788169][ T4860] team0: entered allmulticast mode
[   68.793374][ T4860] team_slave_0: entered allmulticast mode
[   68.799171][ T4860] team_slave_1: entered allmulticast mode
[   68.805258][ T4860] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[   68.815888][ T4860] 8021q: adding VLAN 0 to HW filter on device macvtap2
[   68.827492][ T4848] chnl_net:caif_netlink_parms(): no params data found
[   68.838698][ T4872] team0: left allmulticast mode
[   68.843595][ T4872] team_slave_0: left allmulticast mode
[   68.849114][ T4872] team_slave_1: left allmulticast mode
[   68.854621][ T4872] netdevsim netdevsim3 netdevsim1: left allmulticast mode
[   68.861828][ T4872] team0: left promiscuous mode
[   68.866920][ T4872] team_slave_0: left promiscuous mode
[   68.872306][ T4872] team_slave_1: left promiscuous mode
[   68.877735][ T4872] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[   68.893028][ T4832] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.950660][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.957891][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.974754][ T4877] loop1: detected capacity change from 0 to 1024
[   68.988752][ T4877] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   68.998643][ T4877] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   69.008898][ T4848] bridge_slave_0: entered allmulticast mode
[   69.015902][ T4877] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   69.022783][ T4848] bridge_slave_0: entered promiscuous mode
[   69.031849][ T4877] EXT4-fs error (device loop1): ext4_get_journal_inode:5740: inode #5: comm syz.1.294: unexpected bad inode w/o EXT4_IGET_BAD
[   69.035258][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.052302][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.059784][ T4848] bridge_slave_1: entered allmulticast mode
[   69.066392][ T4848] bridge_slave_1: entered promiscuous mode
[   69.073858][ T4877] EXT4-fs (loop1): no journal found
[   69.079139][ T4877] EXT4-fs (loop1): can't get journal size
[   69.091258][ T4877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.134696][ T4832] bridge_slave_1: left allmulticast mode
[   69.140427][ T4832] bridge_slave_1: left promiscuous mode
[   69.146410][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.155749][ T4832] bridge_slave_0: left allmulticast mode
[   69.161472][ T4832] bridge_slave_0: left promiscuous mode
[   69.167379][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.190539][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.306867][ T4832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.317940][ T4832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.328787][ T4832] bond0 (unregistering): Released all slaves
[   69.343356][ T4848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.352834][ T4885] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   69.370725][ T4848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.422193][ T4848] team0: Port device team_slave_0 added
[   69.442973][ T4848] team0: Port device team_slave_1 added
[   69.458285][ T4832] hsr_slave_0: left promiscuous mode
[   69.468842][ T4895] loop1: detected capacity change from 0 to 512
[   69.479812][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.487261][ T4832] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.519001][ T4895] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   69.534057][ T4832] veth1_macvtap: left promiscuous mode
[   69.534748][ T4895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   69.539639][ T4832] veth0_macvtap: left promiscuous mode
[   69.551031][ T4895] EXT4-fs (loop1): orphan cleanup on readonly fs
[   69.553103][ T4832] veth1_vlan: left promiscuous mode
[   69.564565][ T4832] veth0_vlan: left promiscuous mode
[   69.564753][ T4895] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.286: bg 0: block 361: padding at end of block bitmap is not set
[   69.594403][ T4895] EXT4-fs (loop1): Remounting filesystem read-only
[   69.601305][ T4895] EXT4-fs (loop1): 1 truncate cleaned up
[   69.614463][ T4895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   69.627798][ T4895] SELinux: (dev loop1, type ext4) getxattr errno 5
[   69.648918][ T4895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   69.706191][ T4832] team0 (unregistering): Port device team_slave_1 removed
[   69.719893][ T4832] team0 (unregistering): Port device team_slave_0 removed
[   69.763948][ T4889] ip6gretap0 speed is unknown, defaulting to 1000
[   69.786893][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.793960][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.820062][ T4848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.842800][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.850005][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.876248][ T4848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.905367][ T4848] hsr_slave_0: entered promiscuous mode
[   69.911594][ T4848] hsr_slave_1: entered promiscuous mode
[   69.917998][ T4848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.932046][ T4848] Cannot create hsr debugfs directory
[   70.019943][ T4917] ip6gretap0 speed is unknown, defaulting to 1000
[   70.053221][   T29] kauditd_printk_skb: 192 callbacks suppressed
[   70.053236][   T29] audit: type=1400 audit(1726296657.414:1058): avc:  denied  { ioctl } for  pid=4918 comm="syz.4.292" path="socket:[8510]" dev="sockfs" ino=8510 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   70.276089][ T4929] ip6gretap0 speed is unknown, defaulting to 1000
[   70.949000][ T4848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.030648][ T5050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5050 comm=syz.4.296
[   71.104774][   T29] audit: type=1400 audit(1726296658.434:1059): avc:  denied  { getopt } for  pid=5048 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   71.133095][ T4848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.143615][ T4848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.217405][   T29] audit: type=1326 audit(1726296658.534:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.240846][   T29] audit: type=1326 audit(1726296658.534:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.264312][   T29] audit: type=1326 audit(1726296658.534:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.287632][   T29] audit: type=1326 audit(1726296658.534:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.311008][   T29] audit: type=1326 audit(1726296658.534:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.334453][   T29] audit: type=1326 audit(1726296658.534:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.358097][   T29] audit: type=1326 audit(1726296658.534:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.381656][   T29] audit: type=1326 audit(1726296658.534:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   71.466840][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'.
[   71.475713][ T5050] veth0_to_batadv: entered promiscuous mode
[   71.481826][ T5050] veth0_to_batadv: entered allmulticast mode
[   71.513460][ T4848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.602503][ T4848] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.640445][ T4848] 8021q: adding VLAN 0 to HW filter on device team0
[   71.654880][ T5065] loop4: detected capacity change from 0 to 1024
[   71.669154][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.676277][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.688618][ T5065] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   71.698511][ T5065] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   71.719861][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.723869][ T5065] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   71.727119][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.741220][ T5075] syz.3.298[5075] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   71.744153][ T5075] syz.3.298[5075] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   71.804963][ T5065] EXT4-fs error (device loop4): ext4_get_journal_inode:5740: inode #5: comm syz.4.297: unexpected bad inode w/o EXT4_IGET_BAD
[   71.874782][ T5065] EXT4-fs (loop4): no journal found
[   71.880116][ T5065] EXT4-fs (loop4): can't get journal size
[   71.915406][ T5065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.949170][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.993760][ T4848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.011807][ T5096] loop4: detected capacity change from 0 to 512
[   72.026563][ T5096] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.033095][ T5096] EXT4-fs: Ignoring removed i_version option
[   72.046013][ T5096] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.299: invalid block
[   72.058399][ T5096] EXT4-fs (loop4): Remounting filesystem read-only
[   72.065803][ T5096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.079144][ T5096] SELinux: (dev loop4, type ext4) getxattr errno 5
[   72.086249][ T5096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.126059][ T4848] veth0_vlan: entered promiscuous mode
[   72.139109][ T4848] veth1_vlan: entered promiscuous mode
[   72.156832][ T4848] veth0_macvtap: entered promiscuous mode
[   72.164916][ T4848] veth1_macvtap: entered promiscuous mode
[   72.178364][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.188934][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.198993][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.209505][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.219403][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.229968][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.239928][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.250520][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.264897][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.275718][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.286293][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.296225][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.306703][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.316582][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.326998][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.336927][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.347419][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.360002][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.375707][ T4848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.384462][ T4848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.393150][ T4848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.402030][ T4848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.042523][ T5150] syz.2.312[5150] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.042587][ T5150] syz.2.312[5150] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.052114][ T5152] loop1: detected capacity change from 0 to 128
[   73.112199][ T5152] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   73.178566][ T5155] ip6gretap0 speed is unknown, defaulting to 1000
[   73.261026][ T5158] loop4: detected capacity change from 0 to 512
[   73.857496][ T5158] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.300: casefold flag without casefold feature
[   73.934838][ T5158] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.300: couldn't read orphan inode 15 (err -117)
[   73.992530][ T5158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.442127][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.560434][ T4828] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   75.147957][   T29] kauditd_printk_skb: 128 callbacks suppressed
[   75.154194][   T29] audit: type=1326 audit(1726296662.524:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdb5a28df87 code=0x7ffc0000
[   75.209831][   T29] audit: type=1326 audit(1726296662.534:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb5a28c890 code=0x7ffc0000
[   75.233357][   T29] audit: type=1326 audit(1726296662.534:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdb5a28cb8a code=0x7ffc0000
[   75.256617][   T29] audit: type=1326 audit(1726296662.534:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   75.279921][   T29] audit: type=1326 audit(1726296662.534:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   75.537198][   T29] audit: type=1326 audit(1726296662.584:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   75.560669][   T29] audit: type=1326 audit(1726296662.584:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   75.583990][   T29] audit: type=1326 audit(1726296662.584:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   75.607352][   T29] audit: type=1326 audit(1726296662.594:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   75.630691][   T29] audit: type=1326 audit(1726296662.594:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   75.934901][ T5295] syz.2.318[5295] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.934984][ T5295] syz.2.318[5295] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.088145][ T5300] ip6gretap0 speed is unknown, defaulting to 1000
[   76.170042][ T5304] loop4: detected capacity change from 0 to 512
[   76.235310][ T5304] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   76.289000][ T5304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   76.326511][ T5304] EXT4-fs (loop4): orphan cleanup on readonly fs
[   76.354741][ T5304] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.319: bg 0: block 361: padding at end of block bitmap is not set
[   76.419056][ T5304] EXT4-fs (loop4): Remounting filesystem read-only
[   76.449172][ T5304] EXT4-fs (loop4): 1 truncate cleaned up
[   76.482275][ T5304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   76.532348][ T5304] SELinux: (dev loop4, type ext4) getxattr errno 5
[   76.564560][ T5304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   77.125497][ T5333] syz.4.330 (5333) used obsolete PPPIOCDETACH ioctl
[   77.525823][ T5341] ip6gretap0 speed is unknown, defaulting to 1000
[   77.696433][ T5353] syz.3.337[5353] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   77.696496][ T5353] syz.3.337[5353] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.631449][ T5380] loop4: detected capacity change from 0 to 1024
[   78.651985][ T5380] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   78.676780][ T5380] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   78.686486][ T5380] EXT4-fs (loop4): orphan cleanup on readonly fs
[   78.693246][ T5380] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.346: Freeing blocks not in datazone - block = 0, count = 4096
[   78.712037][ T5380] EXT4-fs (loop4): 1 orphan inode deleted
[   78.718321][ T5380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   78.815821][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.346: path /26/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   78.869347][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.346: path /26/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   78.892944][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 18: comm syz.4.346: path /26/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   78.914926][ T5391] 9pnet_fd: Insufficient options for proto=fd
[   78.957980][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz.4.346: path /26/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   78.980059][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz.4.346: path /26/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   79.062190][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 21: comm syz.4.346: path /26/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   79.079049][ T5393] ip6gretap0 speed is unknown, defaulting to 1000
[   79.087486][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 22: comm syz.4.346: path /26/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   79.119055][ T5380] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 23: comm syz.4.346: path /26/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   79.155792][ T5394] loop1: detected capacity change from 0 to 512
[   79.171578][ T5394] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   79.193199][ T5394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   79.201359][ T5394] EXT4-fs (loop1): orphan cleanup on readonly fs
[   79.208790][ T5394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.349: bg 0: block 361: padding at end of block bitmap is not set
[   79.223418][ T5394] EXT4-fs (loop1): Remounting filesystem read-only
[   79.223493][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.230958][ T5394] EXT4-fs (loop1): 1 truncate cleaned up
[   79.258286][ T5403] bridge0: port 3(team0) entered disabled state
[   79.277711][ T5394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   79.298644][ T5403] team0 (unregistering): left allmulticast mode
[   79.304996][ T5403] team_slave_0: left allmulticast mode
[   79.310499][ T5403] team_slave_1: left allmulticast mode
[   79.316029][ T5403] team0 (unregistering): left promiscuous mode
[   79.322461][ T5403] team_slave_0: left promiscuous mode
[   79.328023][ T5403] team_slave_1: left promiscuous mode
[   79.333576][ T5403] bridge0: port 3(team0) entered disabled state
[   79.342166][ T5394] SELinux: (dev loop1, type ext4) getxattr errno 5
[   79.350413][ T5394] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   79.382024][ T5403] team0 (unregistering): Port device team_slave_0 removed
[   79.404488][ T5403] team0 (unregistering): Port device team_slave_1 removed
[   79.558806][ T5393] veth0_vlan: left promiscuous mode
[   79.564893][ T5393] veth0_vlan: entered promiscuous mode
[   79.606667][ T5413] syz.2.354[5413] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.606725][ T5413] syz.2.354[5413] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.776654][ T5416] loop4: detected capacity change from 0 to 512
[   79.830486][ T5416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   79.868547][ T5416] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.007472][ T5439] mmap: syz.2.360 (5439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   80.104384][ T5441] ip6gretap0 speed is unknown, defaulting to 1000
[   80.240631][   T29] kauditd_printk_skb: 458 callbacks suppressed
[   80.240741][   T29] audit: type=1326 audit(1726296667.614:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.349287][   T29] audit: type=1326 audit(1726296667.644:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.372703][   T29] audit: type=1326 audit(1726296667.644:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.396104][   T29] audit: type=1326 audit(1726296667.644:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.420898][   T29] audit: type=1326 audit(1726296667.644:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.444703][   T29] audit: type=1326 audit(1726296667.654:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.468088][   T29] audit: type=1326 audit(1726296667.654:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.491457][   T29] audit: type=1326 audit(1726296667.654:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.514904][   T29] audit: type=1326 audit(1726296667.654:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.538275][   T29] audit: type=1326 audit(1726296667.654:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0183ddef9 code=0x7ffc0000
[   80.705664][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   80.759257][ T5457] team0 (unregistering): Port device team_slave_0 removed
[   80.791982][ T5457] team0 (unregistering): Port device team_slave_1 removed
[   80.973355][ T5462] syz.4.368[5462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.973435][ T5462] syz.4.368[5462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   81.282353][ T5468] ip6gretap0 speed is unknown, defaulting to 1000
[   81.369511][ T5465] loop4: detected capacity change from 0 to 512
[   81.388182][ T5465] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   81.425619][ T5465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   81.438292][ T5465] EXT4-fs (loop4): orphan cleanup on readonly fs
[   81.453053][ T5465] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.369: bg 0: block 361: padding at end of block bitmap is not set
[   81.546664][ T5465] EXT4-fs (loop4): Remounting filesystem read-only
[   81.554660][ T5465] EXT4-fs (loop4): 1 truncate cleaned up
[   81.568226][ T5465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   81.618831][ T5465] SELinux: (dev loop4, type ext4) getxattr errno 5
[   81.636553][ T5465] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   82.515938][ T5507] syz.3.379[5507] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   82.515998][ T5507] syz.3.379[5507] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   82.816080][ T5518] loop1: detected capacity change from 0 to 128
[   82.858298][ T5518] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   82.915640][ T5523] hsr_slave_0: left promiscuous mode
[   83.070378][ T5532] ip6gretap0 speed is unknown, defaulting to 1000
[   83.161876][ T5526] loop4: detected capacity change from 0 to 512
[   83.239887][ T5531] syz.1.383: attempt to access beyond end of device
[   83.239887][ T5531] loop1: rw=2049, sector=401, nr_sectors = 1 limit=128
[   83.265766][ T5526] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   83.309231][ T5526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   83.340053][ T5526] EXT4-fs (loop4): orphan cleanup on readonly fs
[   83.367579][ T5526] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.386: bg 0: block 361: padding at end of block bitmap is not set
[   83.397096][ T5526] EXT4-fs (loop4): Remounting filesystem read-only
[   83.407311][ T5526] EXT4-fs (loop4): 1 truncate cleaned up
[   83.413339][ T5526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   83.425675][ T5526] SELinux: (dev loop4, type ext4) getxattr errno 5
[   83.433014][ T5526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   83.584034][ T5542] ip6gretap0 speed is unknown, defaulting to 1000
[   83.728020][ T4828] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   83.842799][ T5558] syz.2.392[5558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   83.842859][ T5558] syz.2.392[5558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   83.860116][ T5557] loop1: detected capacity change from 0 to 2048
[   83.916054][ T5557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.618707][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.685374][ T5578] hsr_slave_0: left promiscuous mode
[   84.693044][ T5578] hsr_slave_1: left promiscuous mode
[   84.959140][ T5591] syz.0.404[5591] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.959201][ T5591] syz.0.404[5591] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   85.011945][ T5593] ip6gretap0 speed is unknown, defaulting to 1000
[   85.146624][ T5593] veth0_vlan: left promiscuous mode
[   85.152511][ T5593] veth0_vlan: entered promiscuous mode
[   85.218280][ T5596] loop4: detected capacity change from 0 to 512
[   85.236647][ T5596] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   85.244647][ T5596] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   85.245073][   T29] kauditd_printk_skb: 755 callbacks suppressed
[   85.245084][   T29] audit: type=1326 audit(1726296672.634:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1969214ea7 code=0x7ffc0000
[   85.261449][ T5602] syz.0.416[5602] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   85.282098][   T29] audit: type=1326 audit(1726296672.634:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19691b9869 code=0x7ffc0000
[   85.282158][   T29] audit: type=1326 audit(1726296672.634:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f196921def9 code=0x7ffc0000
[   85.282266][   T29] audit: type=1326 audit(1726296672.634:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1969214ea7 code=0x7ffc0000
[   85.293511][ T5602] syz.0.416[5602] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   85.316652][   T29] audit: type=1326 audit(1726296672.634:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19691b9869 code=0x7ffc0000
[   85.316675][   T29] audit: type=1326 audit(1726296672.634:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f196921def9 code=0x7ffc0000
[   85.316788][ T5596] System zones: 
[   85.368508][   T29] audit: type=1400 audit(1726296672.724:2435): avc:  denied  { module_request } for  pid=5597 comm="syz.3.406" kmod="bt-proto-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   85.374531][ T5596] 0-1
[   85.397839][   T29] audit: type=1326 audit(1726296672.724:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1969214ea7 code=0x7ffc0000
[   85.422336][ T5596] , 15-15
[   85.425402][   T29] audit: type=1326 audit(1726296672.724:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19691b9869 code=0x7ffc0000
[   85.425429][   T29] audit: type=1326 audit(1726296672.724:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f196921def9 code=0x7ffc0000
[   85.446984][ T5596] , 18-18, 34-34
[   85.530867][ T5596] EXT4-fs (loop4): orphan cleanup on readonly fs
[   85.539655][ T5596] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   85.554252][ T5596] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   85.565344][ T5596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.407: bg 0: block 40: padding at end of block bitmap is not set
[   85.593600][ T5596] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem
[   85.610794][ T5596] EXT4-fs (loop4): 1 truncate cleaned up
[   85.617892][ T5609] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   85.626582][ T5596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.646464][ T5609] raw_sendmsg: syz.0.409 forgot to set AF_INET. Fix it!
[   85.664023][ T5596] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.407: corrupted xattr block 19: bad e_name length
[   85.708271][ T5596] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   85.740004][ T5614] loop1: detected capacity change from 0 to 2048
[   85.743440][ T5596] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.407: corrupted xattr block 19: bad e_name length
[   85.776657][ T5596] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   85.787262][ T5596] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.407: corrupted xattr block 19: bad e_name length
[   85.801639][ T5596] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   85.812002][ T5614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.896746][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.107090][ T5636] ip6gretap0 speed is unknown, defaulting to 1000
[   86.158853][ T5640] loop4: detected capacity change from 0 to 512
[   86.188265][ T5640] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   86.218084][ T5640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   86.238975][ T5640] EXT4-fs (loop4): orphan cleanup on readonly fs
[   86.250832][ T5640] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.417: bg 0: block 361: padding at end of block bitmap is not set
[   86.289150][ T5640] EXT4-fs (loop4): Remounting filesystem read-only
[   86.296862][ T5640] EXT4-fs (loop4): 1 truncate cleaned up
[   86.303624][ T5640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   86.344330][ T5640] SELinux: (dev loop4, type ext4) getxattr errno 5
[   86.352136][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   86.558379][ T5645] netlink: 'syz.4.419': attribute type 29 has an invalid length.
[   86.755848][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.793503][ T5654] syz.1.421[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.793609][ T5654] syz.1.421[5654] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   87.575724][ T5666] loop4: detected capacity change from 0 to 128
[   87.608411][ T5666] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   87.708298][ T5669] ip6gretap0 speed is unknown, defaulting to 1000
[   87.789150][ T5671] syz.4.424: attempt to access beyond end of device
[   87.789150][ T5671] loop4: rw=2049, sector=401, nr_sectors = 1 limit=128
[   88.266708][ T5687] netlink: 32 bytes leftover after parsing attributes in process `syz.3.429'.
[   88.276054][ T3334] IPVS: starting estimator thread 0...
[   88.313369][ T5690] ip6gretap0 speed is unknown, defaulting to 1000
[   88.375978][ T5688] IPVS: using max 2880 ests per chain, 144000 per kthread
[   88.439065][ T4837] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   88.590182][ T5711] syz.0.437[5711] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.590295][ T5711] syz.0.437[5711] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.840684][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'.
[   88.860767][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'.
[   88.913296][ T5724] loop1: detected capacity change from 0 to 1024
[   88.966829][ T5721] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   88.973396][ T5721] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   88.981386][ T5721] vhci_hcd vhci_hcd.0: Device attached
[   89.095145][ T5724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.111878][ T5724] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.146253][ T5722] vhci_hcd: connection closed
[   89.176616][   T28] vhci_hcd: stop threads
[   89.185713][   T28] vhci_hcd: release socket
[   89.190262][   T28] vhci_hcd: disconnect device
[   89.209418][ T3339] vhci_hcd: vhci_device speed not set
[   89.392593][ T5739] hsr0: entered promiscuous mode
[   89.827373][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.058219][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'.
[   90.067270][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'.
[   90.089358][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'.
[   90.112579][ T5760] 9pnet_fd: Insufficient options for proto=fd
[   90.121952][ T5760] netlink: 68 bytes leftover after parsing attributes in process `syz.4.451'.
[   90.165535][ T5767] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[   90.166350][ T5760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.451'.
[   90.341183][ T5784] syz.2.458[5784] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.341244][ T5784] syz.2.458[5784] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.463889][ T5791] netlink: 256 bytes leftover after parsing attributes in process `syz.4.455'.
[   90.494750][   T29] kauditd_printk_skb: 388 callbacks suppressed
[   90.494765][   T29] audit: type=1326 audit(1726296677.773:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.579402][   T29] audit: type=1326 audit(1726296677.837:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.602890][   T29] audit: type=1326 audit(1726296677.837:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.626278][   T29] audit: type=1326 audit(1726296677.837:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.649632][   T29] audit: type=1326 audit(1726296677.837:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.673159][   T29] audit: type=1326 audit(1726296677.837:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.696533][   T29] audit: type=1326 audit(1726296677.837:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.719944][   T29] audit: type=1326 audit(1726296677.837:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.743496][   T29] audit: type=1326 audit(1726296677.837:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   90.766920][   T29] audit: type=1326 audit(1726296677.837:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb5a28def9 code=0x7ffc0000
[   91.235035][ T5814] loop4: detected capacity change from 0 to 164
[   92.016141][ T5821] loop1: detected capacity change from 0 to 764
[   92.051474][ T5821] Symlink component flag not implemented
[   92.073183][ T5821] Symlink component flag not implemented (129)
[   92.164587][ T5823] ip6gretap0 speed is unknown, defaulting to 1000
[   92.222322][ T5824] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   92.270155][ T5821] rock: directory entry would overflow storage
[   92.276388][ T5821] rock: sig=0x4f50, size=4, remaining=3
[   92.281990][ T5821] iso9660: Corrupted directory entry in block 6 of inode 1792
[   92.334075][ T5828] loop4: detected capacity change from 0 to 512
[   92.422575][ T5828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846c028, mo2=0002]
[   92.440868][ T5828] System zones: 1-12
[   92.449732][ T5828] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.468: Attempting to read directory block (0) that is past i_size (256)
[   92.468016][ T5834] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   92.478400][ T5828] EXT4-fs (loop4): Remounting filesystem read-only
[   92.485091][ T5828] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   92.494962][ T5828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.507624][ T5828] SELinux: (dev loop4, type ext4) getxattr errno 5
[   92.515459][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.534517][ T5837] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[   92.593387][ T5841] loop1: detected capacity change from 0 to 128
[   92.602208][ T5841] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   92.812592][ T5842] syz.1.472: attempt to access beyond end of device
[   92.812592][ T5842] loop1: rw=2049, sector=401, nr_sectors = 1 limit=128
[   93.499236][ T5858] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.580979][ T5858] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.592002][   T28] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   93.633112][ T5861] syz.1.478[5861] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   93.633195][ T5861] syz.1.478[5861] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   93.706264][ T5858] team0: Port device netdevsim1 removed
[   93.727769][ T5858] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.881011][ T5858] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.894677][ T5869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5869 comm=syz.4.481
[   94.125245][ T5858] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.213339][ T5858] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.277452][ T5858] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.315910][ T5858] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.746312][ T5884] loop4: detected capacity change from 0 to 164
[   94.753925][ T5884] syz.4.485: attempt to access beyond end of device
[   94.753925][ T5884] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   94.774297][ T5884] syz.4.485: attempt to access beyond end of device
[   94.774297][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   94.788000][ T5884] syz.4.485: attempt to access beyond end of device
[   94.788000][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   94.803014][ T5884] syz.4.485: attempt to access beyond end of device
[   94.803014][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   94.817085][ T5884] syz.4.485: attempt to access beyond end of device
[   94.817085][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   94.832005][ T5884] syz.4.485: attempt to access beyond end of device
[   94.832005][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   94.846768][ T5884] syz.4.485: attempt to access beyond end of device
[   94.846768][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   94.860656][ T5884] syz.4.485: attempt to access beyond end of device
[   94.860656][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   94.879934][ T5884] syz.4.485: attempt to access beyond end of device
[   94.879934][ T5884] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   95.088873][ T5889] loop7: detected capacity change from 0 to 16384
[   95.194879][ T5891] ip6gretap0 speed is unknown, defaulting to 1000
[   95.310668][ T5889] I/O error, dev loop7, sector 11008 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 3
[   95.389601][ T5889] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 3
[   95.405015][ T5889] I/O error, dev loop7, sector 11008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[   95.414563][ T5889] buffer_io_error: 141 callbacks suppressed
[   95.414583][ T5889] Buffer I/O error on dev loop7, logical block 1376, async page read
[   95.481044][ T5888] I/O error, dev loop7, sector 6760 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2
[   95.491062][ T5888] Buffer I/O error on dev loop7, logical block 845, lost async page write
[   95.499851][ T5888] Buffer I/O error on dev loop7, logical block 846, lost async page write
[   95.508519][ T5888] Buffer I/O error on dev loop7, logical block 847, lost async page write
[   95.517133][ T5888] Buffer I/O error on dev loop7, logical block 848, lost async page write
[   95.525697][ T5888] Buffer I/O error on dev loop7, logical block 849, lost async page write
[   95.534203][ T5888] Buffer I/O error on dev loop7, logical block 850, lost async page write
[   95.542832][ T5888] Buffer I/O error on dev loop7, logical block 851, lost async page write
[   95.551513][ T5888] Buffer I/O error on dev loop7, logical block 852, lost async page write
[   95.560067][ T5888] Buffer I/O error on dev loop7, logical block 853, lost async page write
[   95.572102][ T5888] I/O error, dev loop7, sector 7784 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2
[   95.585350][ T5888] I/O error, dev loop7, sector 8808 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2
[   95.599638][ T5888] I/O error, dev loop7, sector 9832 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2
[   95.611232][ T5888] I/O error, dev loop7, sector 10856 op 0x1:(WRITE) flags 0x800 phys_seg 19 prio class 2
[   95.719262][ T5910] loop4: detected capacity change from 0 to 512
[   95.728750][ T5909] syz.3.503[5909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.728902][ T5909] syz.3.503[5909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.743921][ T5910] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   95.767518][ T5910] EXT4-fs (loop4): orphan cleanup on readonly fs
[   95.778810][ T5914] IPVS: stopping master sync thread 3423 ...
[   95.786404][ T5910] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   95.801485][ T5910] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   95.811373][ T5910] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.492: bg 0: block 40: padding at end of block bitmap is not set
[   95.839110][ T5910] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem
[   95.851493][ T5910] EXT4-fs (loop4): 1 truncate cleaned up
[   95.857511][ T5910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   95.879345][ T5910] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   95.896962][ T5920] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[   95.935234][ T4176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.991687][ T5922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.078250][ T5922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.166643][ T5922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.188334][ T5924] ip6gretap0 speed is unknown, defaulting to 1000
[   96.249735][ T5922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.311845][ T5922] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.330056][ T5922] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.342640][ T5922] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.356855][ T5922] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.407773][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'.
[   96.418788][ T5928] loop4: detected capacity change from 0 to 128
[   96.430237][ T5928] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.446061][ T5928] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   96.458165][ T5933] syz.2.498[5933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   96.478086][ T5933] syz.2.498[5933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   96.493936][   T29] kauditd_printk_skb: 48 callbacks suppressed
[   96.493948][   T29] audit: type=1400 audit(1726296683.311:2883): avc:  denied  { setopt } for  pid=5927 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   96.549122][   T29] audit: type=1400 audit(1726296683.357:2884): avc:  denied  { bind } for  pid=5927 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   96.632491][ T4176] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.659714][   T29] audit: type=1404 audit(1726296683.449:2885): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   96.736056][   T29] audit: type=1400 audit(1726296683.477:2886): avc:  denied  { read write } for  pid=5935 comm="syz.1.502" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   96.760137][   T29] audit: type=1400 audit(1726296683.486:2887): avc:  denied  { read write } for  pid=4176 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   96.784392][   T29] audit: type=1400 audit(1726296683.514:2888): avc:  denied  { prog_load } for  pid=5938 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   96.803440][   T29] audit: type=1400 audit(1726296683.514:2889): avc:  denied  { map_create } for  pid=5938 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   96.822504][   T29] audit: type=1400 audit(1726296683.514:2890): avc:  denied  { map_create } for  pid=5938 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   96.841566][   T29] audit: type=1400 audit(1726296683.514:2891): avc:  denied  { prog_load } for  pid=5938 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   96.860608][   T29] audit: type=1400 audit(1726296683.523:2892): avc:  denied  { prog_load } for  pid=5938 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   97.169622][ T5976] xt_CT: You must specify a L4 protocol and not use inversions on it
[   97.220995][ T5980] netlink: 'syz.2.522': attribute type 10 has an invalid length.
[   97.420103][ T6008] xt_CT: No such helper "pptp"
[   98.133229][ T6048] ip6gretap0 speed is unknown, defaulting to 1000
[   98.468152][ T6070] syz.1.562 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   98.725147][ T6091] serio: Serial port pts0
[   98.746660][ T6093] syz.4.573 uses obsolete (PF_INET,SOCK_PACKET)
[   98.774499][ T6095] pim6reg1: entered promiscuous mode
[   98.779949][ T6095] pim6reg1: entered allmulticast mode
[   99.677406][ T6115] ip6gretap0 speed is unknown, defaulting to 1000
[  101.158079][ T6184] ip6gretap0 speed is unknown, defaulting to 1000
[  102.245168][   T29] kauditd_printk_skb: 1533 callbacks suppressed
[  102.245183][   T29] audit: type=1400 audit(1726296688.618:4426): avc:  denied  { create } for  pid=6221 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  102.282432][   T29] audit: type=1400 audit(1726296688.646:4427): avc:  denied  { create } for  pid=6221 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  102.301976][   T29] audit: type=1400 audit(1726296688.646:4428): avc:  denied  { prog_load } for  pid=6221 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  102.324203][   T29] audit: type=1400 audit(1726296688.692:4429): avc:  denied  { create } for  pid=6223 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  102.344994][   T29] audit: type=1400 audit(1726296688.710:4430): avc:  denied  { prog_load } for  pid=6223 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  102.368009][   T29] audit: type=1400 audit(1726296688.729:4431): avc:  denied  { read } for  pid=6223 comm="syz.3.627" dev="nsfs" ino=4026532734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  102.389170][   T29] audit: type=1400 audit(1726296688.729:4432): avc:  denied  { create } for  pid=6223 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  102.409759][   T29] audit: type=1326 audit(1726296688.729:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.3.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb5a28def9 code=0x0
[  102.412435][ T6230] audit: audit_backlog=65 > audit_backlog_limit=64
[  102.432703][   T29] audit: type=1400 audit(1726296688.729:4434): avc:  denied  { prog_load } for  pid=6225 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  102.543264][ T6247] ip6gretap0 speed is unknown, defaulting to 1000
[  102.690049][ T6273] ebt_among: dst integrity fail: 1ad
[  103.053690][ T6285] ip6gretap0 speed is unknown, defaulting to 1000
[  103.217177][ T6294] ip6gretap0 speed is unknown, defaulting to 1000
[  103.301184][ T6300] tun0: tun_chr_ioctl cmd 1074025677
[  103.308860][ T6300] tun0: linktype set to 512
[  104.194295][ T6336] ip6gretap0 speed is unknown, defaulting to 1000
[  105.188736][ T6363] ip6gretap0 speed is unknown, defaulting to 1000
[  105.779173][ T6390] serio: Serial port pts0
[  106.347472][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.354755][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.362021][ T6402] bridge0: entered allmulticast mode
[  106.375762][ T6402] bridge_slave_1: left allmulticast mode
[  106.381503][ T6402] bridge_slave_1: left promiscuous mode
[  106.387475][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.396805][ T6402] bridge_slave_0: left allmulticast mode
[  106.402458][ T6402] bridge_slave_0: left promiscuous mode
[  106.408199][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.367352][ T6429] ==================================================================
[  107.375467][ T6429] BUG: KCSAN: data-race in atime_needs_update / touch_atime
[  107.382783][ T6429] 
[  107.385099][ T6429] write to 0xffff88810f4c69a0 of 4 bytes by task 6428 on cpu 0:
[  107.392732][ T6429]  touch_atime+0x1f3/0x350
[  107.397167][ T6429]  shmem_file_splice_read+0x56a/0x5c0
[  107.402535][ T6429]  splice_direct_to_actor+0x26c/0x670
[  107.407917][ T6429]  do_splice_direct+0xd7/0x150
[  107.412685][ T6429]  do_sendfile+0x3ab/0x950
[  107.417080][ T6429]  __x64_sys_sendfile64+0x110/0x150
[  107.422266][ T6429]  x64_sys_call+0xed5/0x2d60
[  107.426857][ T6429]  do_syscall_64+0xc9/0x1c0
[  107.431343][ T6429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.437235][ T6429] 
[  107.439546][ T6429] read to 0xffff88810f4c69a0 of 4 bytes by task 6429 on cpu 1:
[  107.447085][ T6429]  atime_needs_update+0x261/0x3e0
[  107.452129][ T6429]  touch_atime+0x4a/0x350
[  107.456456][ T6429]  shmem_file_splice_read+0x56a/0x5c0
[  107.461829][ T6429]  splice_direct_to_actor+0x26c/0x670
[  107.467200][ T6429]  do_splice_direct+0xd7/0x150
[  107.471949][ T6429]  do_sendfile+0x3ab/0x950
[  107.476352][ T6429]  __x64_sys_sendfile64+0x110/0x150
[  107.481538][ T6429]  x64_sys_call+0xed5/0x2d60
[  107.486130][ T6429]  do_syscall_64+0xc9/0x1c0
[  107.490619][ T6429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.496500][ T6429] 
[  107.498824][ T6429] value changed: 0x14869583 -> 0x15136c32
[  107.504514][ T6429] 
[  107.506816][ T6429] Reported by Kernel Concurrency Sanitizer on:
[  107.512947][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.3.713 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0
[  107.523514][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  107.533556][ T6429] ==================================================================