last executing test programs:

23.041044418s ago: executing program 4 (id=841):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
shutdown(r2, 0x0)

22.88975621s ago: executing program 4 (id=845):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6)
fcntl$setpipe(r0, 0x407, 0x7000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48)
open$dir(0x0, 0x18100, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

22.595163134s ago: executing program 4 (id=846):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b7000000000007"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats})
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

22.26947365s ago: executing program 4 (id=851):
modify_ldt$read(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

21.669810628s ago: executing program 4 (id=854):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000400)})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000200)})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==")
getdents64(0xffffffffffffffff, 0x0, 0x31)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000200000000000d00000000000000c40000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

21.541016919s ago: executing program 4 (id=855):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

21.490718313s ago: executing program 32 (id=855):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

5.861631176s ago: executing program 0 (id=1028):
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
mkdir(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

5.852992367s ago: executing program 0 (id=1029):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvfrom$packet(r0, &(0x7f0000000340)=""/116, 0x74, 0x652664ffe1045787, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
brk(0x101)
renameat(r0, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00')

5.299567902s ago: executing program 0 (id=1030):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)={0x4000201a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

4.527327454s ago: executing program 0 (id=1035):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
fallocate(r0, 0x10, 0x160483b7, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
unshare(0x42000000)
syz_clone3(&(0x7f00000003c0)={0x44084000, 0x0, 0x0, &(0x7f0000000140), {0x3}, &(0x7f0000000180)=""/163, 0xa3, 0x0, 0x0, 0x0, {r0}}, 0x58)

3.014072866s ago: executing program 3 (id=1046):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r0, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = getpid()
fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r5=>0x0)
fcntl$setown(r2, 0x8, r5)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.747219678s ago: executing program 0 (id=1047):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003c6000085000000060000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")

2.265396827s ago: executing program 1 (id=1057):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1000"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r7, 0x0, 0x700, 0x4000000, 0xfffffffe, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @private=0xa014101, @dev={0xac, 0x14, 0x14, 0x14}}}}})

2.152659466s ago: executing program 3 (id=1058):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x11, r0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x11, r0)
ptrace(0x10, r1)
ptrace(0x11, r1)
ptrace(0x10, r0)
ptrace(0x11, r0)
ptrace(0x10, r1)
ptrace(0x11, r1)
ptrace(0xffffffffffffffff, 0x0)

2.063545843s ago: executing program 3 (id=1059):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.994841729s ago: executing program 1 (id=1060):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000)
dup3(r0, r1, 0x0)
sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003240)="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", 0x373}], 0x4}}], 0x2, 0x0)

1.865814609s ago: executing program 3 (id=1062):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
pipe(&(0x7f00000001c0))
socket(0x22, 0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000200), 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r4, 0x0, 0xff91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

1.85713319s ago: executing program 2 (id=1063):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmsg$kcm(r0, 0x0, 0x12000)

1.240349s ago: executing program 2 (id=1067):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000)
mount$9p_unix(&(0x7f00000030c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, &(0x7f00000011c0), 0x10018, 0x0)
statfs(0x0, 0x0)
syz_read_part_table(0x5c0, &(0x7f0000000000)="$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")
syz_io_uring_setup(0x24fa, &(0x7f00000005c0)={0x0, 0x0, 0x4, 0x0, 0x64}, &(0x7f0000000100)=<r2=>0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

1.069612494s ago: executing program 1 (id=1070):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20)
socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000002c0)=@chain)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

1.034983286s ago: executing program 1 (id=1071):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x415}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000)

944.121724ms ago: executing program 3 (id=1072):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
io_setup(0x7, &(0x7f0000000280))
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x0)
dup(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
ioprio_set$pid(0x2, 0x0, 0x4007)

758.517759ms ago: executing program 5 (id=1074):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x36, 0x1, 0x8, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delqdisc={0x30, 0x26, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c800)
splice(r2, &(0x7f0000000040)=0xf, 0xffffffffffffffff, &(0x7f0000000180)=0x7fff, 0x6, 0x5)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7)

670.944476ms ago: executing program 5 (id=1075):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0x84, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6ebdcd03}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)

669.974406ms ago: executing program 2 (id=1076):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

584.513133ms ago: executing program 2 (id=1077):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local}}}, 0x30)
shutdown(0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
getrandom(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x12b82, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})

535.686966ms ago: executing program 2 (id=1078):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x9, [@restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x6d, 0x7}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}, @union={0xf, 0x9, 0x0, 0x5, 0x0, 0x1, [{0xc, 0x5, 0x401}, {0xc, 0x3, 0x9b0}, {0xa, 0x0, 0xa6}, {0xc, 0x2, 0x400}, {0x4, 0x1, 0x8}, {0x5, 0x2, 0x7}, {0x4, 0x2, 0x5}, {0xe, 0x5, 0xe}, {0x3, 0x5, 0xfffffffa}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x30]}}, &(0x7f0000000740)=""/139, 0xd9, 0x8b, 0x1, 0x100}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffc65, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

198.349584ms ago: executing program 0 (id=1079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x400, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850010003b0000007600ebff000000002700000000000000950800000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sock_rcvqueue_full\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
io_uring_setup(0x4e4d, &(0x7f0000000080)={0x0, 0x5275, 0x80, 0x9, 0x200000})
pause()

197.445464ms ago: executing program 5 (id=1080):
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
mkdir(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

169.633966ms ago: executing program 1 (id=1081):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00')
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000005c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89\x89\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zpo\xd0\xc7\'CT')
write$binfmt_aout(r2, &(0x7f0000000640)={{0x10b, 0x7, 0x55, 0x344, 0x1f6, 0x80, 0x283, 0x4}, "e13413ec8b7749140913494e42"}, 0x2d)
fcntl$setownex(r0, 0xf, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})

168.019696ms ago: executing program 5 (id=1082):
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_clone3(&(0x7f00000004c0)={0x48080000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x1}, 0x58)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000040)=0x1001082, 0x4)

164.667167ms ago: executing program 3 (id=1083):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff000)
close(0x4)

134.363609ms ago: executing program 1 (id=1084):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0)

128.350239ms ago: executing program 2 (id=1085):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789")
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)
unshare(0x2040400)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)

12.183799ms ago: executing program 5 (id=1086):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ufshcd_command\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001"], 0xe4}}, 0x20050800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvfrom(r5, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea8, './file0/file1\x00'}})

0s ago: executing program 5 (id=1087):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r1=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0x0, 0x4}, {0xfffd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8810}, 0x0)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="9e4361c17704a93bc1f330faa1bb5f6de06507f4b811b8f9422a7cf6c99a61cc793593dbacebf20a64278e4a4bdabcc0cb62b2", 0x33}], 0x1, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3c}}}}], 0x20}, 0x20000010)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41)
recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)

kernel console output (not intermixed with test programs):

pe is disabled
[   60.164974][ T4395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.188288][ T4395] netlink: 'syz.2.306': attribute type 6 has an invalid length.
[   60.209302][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.778212][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'.
[   60.788208][ T4403] cgroup: fork rejected by pids controller in /syz4
[   60.878274][ T4455] Driver unsupported XDP return value 0 on prog  (id 252) dev N/A, expect packet loss!
[   61.341345][ T4906] netlink: 'syz.4.318': attribute type 21 has an invalid length.
[   61.349200][ T4906] netlink: 132 bytes leftover after parsing attributes in process `syz.4.318'.
[   61.372272][ T4907] loop3: detected capacity change from 0 to 512
[   61.378971][ T4907] EXT4-fs: Ignoring removed orlov option
[   61.465575][ T4907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.478383][ T4907] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.154107][ T4920] loop2: detected capacity change from 0 to 512
[   62.173484][ T4920] ext4: Bad value for 'max_batch_time'
[   62.347448][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[   62.470893][ T4931] SELinux:  Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped).
[   62.500570][ T4933] bridge1: entered allmulticast mode
[   62.698400][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.727666][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.912144][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.553439][ T4955] geneve2: entered promiscuous mode
[   63.589595][ T4955] loop3: detected capacity change from 0 to 512
[   63.618749][ T4955] EXT4-fs (loop3): orphan cleanup on readonly fs
[   63.625987][ T4955] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.335: bg 0: block 248: padding at end of block bitmap is not set
[   63.641166][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.659610][ T4960] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.334'.
[   63.669050][ T4955] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.335: Failed to acquire dquot type 1
[   63.680778][ T4955] EXT4-fs (loop3): 1 truncate cleaned up
[   63.686892][   T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.710622][ T4955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.751707][   T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.769062][   T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.779779][ T4965] $H�: renamed from bond0 (while UP)
[   63.837755][ T4965] $H�: entered promiscuous mode
[   63.842937][ T4965] bond_slave_0: entered promiscuous mode
[   63.848689][ T4965] dummy0: entered promiscuous mode
[   63.888236][   T29] kauditd_printk_skb: 114 callbacks suppressed
[   63.888309][   T29] audit: type=1400 audit(1754630905.678:1351): avc:  denied  { create } for  pid=4970 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   63.896261][ T4971] netlink: 'syz.0.338': attribute type 178 has an invalid length.
[   63.924272][   T29] audit: type=1400 audit(1754630905.688:1352): avc:  denied  { write } for  pid=4970 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   63.944708][   T29] audit: type=1400 audit(1754630905.688:1353): avc:  denied  { read } for  pid=4970 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   64.017329][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.026005][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.112981][ T4974] capability: warning: `syz.2.340' uses deprecated v2 capabilities in a way that may be insecure
[   64.157848][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.263520][ T4977] sch_fq: defrate 4294967295 ignored.
[   64.333704][ T4980] loop3: detected capacity change from 0 to 1024
[   64.339119][   T29] audit: type=1400 audit(1754630905.718:1354): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.359720][   T29] audit: type=1400 audit(1754630905.808:1355): avc:  denied  { read write } for  pid=4962 comm="syz.1.336" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.383144][   T29] audit: type=1400 audit(1754630905.808:1356): avc:  denied  { open } for  pid=4962 comm="syz.1.336" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.391149][ T4980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.406578][   T29] audit: type=1400 audit(1754630905.808:1357): avc:  denied  { ioctl } for  pid=4962 comm="syz.1.336" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.443523][   T29] audit: type=1400 audit(1754630905.888:1358): avc:  denied  { unlink } for  pid=3301 comm="syz-executor" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   64.466329][   T29] audit: type=1400 audit(1754630905.898:1359): avc:  denied  { create } for  pid=4973 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   64.486007][   T29] audit: type=1400 audit(1754630905.908:1360): avc:  denied  { bind } for  pid=4973 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   64.586534][ T4980] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   64.657097][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.774215][ T5002] geneve3: entered promiscuous mode
[   64.792762][ T5002] loop4: detected capacity change from 0 to 512
[   64.816565][ T5002] EXT4-fs (loop4): orphan cleanup on readonly fs
[   64.827951][ T5002] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.352: bg 0: block 248: padding at end of block bitmap is not set
[   64.845715][ T5002] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.352: Failed to acquire dquot type 1
[   64.857386][ T5002] EXT4-fs (loop4): 1 truncate cleaned up
[   64.863501][ T5002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   64.896623][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.034755][ T5017] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[   65.053334][ T5017] syz.4.357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   65.156025][ T5011] cgroup: fork rejected by pids controller in /syz2
[   65.354732][ T5391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.361'.
[   65.368096][ T5391] vlan2: entered promiscuous mode
[   65.832969][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'.
[   66.723028][   T41] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.732910][   T41] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   66.932551][   T41] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.942352][   T41] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   66.960780][ T6466] netlink: 'syz.1.373': attribute type 13 has an invalid length.
[   67.092930][ T6476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.376'.
[   67.148721][   T41] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.158636][   T41] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   67.198544][ T6482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6482 comm=syz.4.376
[   67.255717][ T6484] loop1: detected capacity change from 0 to 512
[   67.283284][   T41] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.293099][   T41] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   67.353514][ T6484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.392762][ T6484] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.406791][ T6494] ref_ctr increment failed for inode: 0x1a8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811a96bf40
[   67.466915][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[   67.475779][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'.
[   67.562655][   T41] bridge_slave_1: left allmulticast mode
[   67.568372][   T41] bridge_slave_1: left promiscuous mode
[   67.574147][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.616664][   T41] bridge_slave_0: left allmulticast mode
[   67.622431][   T41] bridge_slave_0: left promiscuous mode
[   67.628085][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.712841][ T6509] netlink: 'syz.2.381': attribute type 4 has an invalid length.
[   67.740886][   T41] bond1 (unregistering): (slave geneve2): Releasing active interface
[   67.823573][   T41] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.832569][   T41] bond_slave_0: left promiscuous mode
[   67.840605][   T41] $H� (unregistering): (slave dummy0): Releasing backup interface
[   67.849016][   T41] dummy0: left promiscuous mode
[   67.854744][   T41] $H� (unregistering): Released all slaves
[   67.865236][   T41] bond1 (unregistering): Released all slaves
[   67.882504][ T3430] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.923583][ T6461] chnl_net:caif_netlink_parms(): no params data found
[   67.932877][ T6484] Zero length message leads to an empty skb
[   67.956588][ T3430] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.012529][ T3430] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.024426][   T41] hsr_slave_0: left promiscuous mode
[   68.051060][   T41] hsr_slave_1: left promiscuous mode
[   68.065092][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.072554][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.090005][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.097422][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.097746][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.135827][   T41] veth1_macvtap: left promiscuous mode
[   68.148462][   T41] veth0_macvtap: left promiscuous mode
[   68.156053][   T41] veth1_vlan: left promiscuous mode
[   68.162261][   T41] veth0_vlan: left promiscuous mode
[   68.167627][ T6537] loop3: detected capacity change from 0 to 512
[   68.191144][ T6540] netlink: 'syz.4.388': attribute type 1 has an invalid length.
[   68.253855][ T6537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.292222][ T6537] EXT4-fs (loop3): orphan cleanup on readonly fs
[   68.299803][ T6537] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.384: bg 0: block 248: padding at end of block bitmap is not set
[   68.322443][ T6537] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.384: Failed to acquire dquot type 1
[   68.333929][   T41] team0 (unregistering): Port device team_slave_1 removed
[   68.345711][ T6537] EXT4-fs (loop3): 1 truncate cleaned up
[   68.354223][   T41] team0 (unregistering): Port device team_slave_0 removed
[   68.363534][ T6537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.417353][ T3430] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.434143][ T6540] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.442336][ T6546] netlink: 22 bytes leftover after parsing attributes in process `syz.2.389'.
[   68.448139][ T6526] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.384: deleted inode referenced: 12
[   68.462707][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv1
[   68.478909][ T6548] bond2: (slave batadv1): making interface the new active one
[   68.488058][ T6548] bond2: (slave batadv1): Enslaving as an active interface with an up link
[   68.498442][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.579828][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.586916][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.594330][ T6461] bridge_slave_0: entered allmulticast mode
[   68.601211][ T6461] bridge_slave_0: entered promiscuous mode
[   68.631366][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.638438][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.699493][ T6461] bridge_slave_1: entered allmulticast mode
[   68.706003][ T6461] bridge_slave_1: entered promiscuous mode
[   68.769481][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[   68.791087][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.807681][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.825879][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.850391][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.859567][ T6607] netlink: 100 bytes leftover after parsing attributes in process `syz.3.400'.
[   68.893856][ T6461] team0: Port device team_slave_0 added
[   68.914067][ T6461] team0: Port device team_slave_1 added
[   68.923929][   T29] kauditd_printk_skb: 284 callbacks suppressed
[   68.923943][   T29] audit: type=1400 audit(1754630910.718:1641): avc:  denied  { create } for  pid=6617 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   68.965456][   T29] audit: type=1400 audit(1754630910.728:1642): avc:  denied  { create } for  pid=6616 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   68.987725][ T6622] loop1: detected capacity change from 0 to 512
[   69.033160][ T6622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.111971][   T29] audit: type=1400 audit(1754630910.898:1643): avc:  denied  { block_suspend } for  pid=6588 comm="syz.2.396" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   69.141461][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.148410][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.174344][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.190790][   T29] audit: type=1400 audit(1754630910.978:1644): avc:  denied  { connect } for  pid=6620 comm="syz.1.404" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   69.211289][   T29] audit: type=1400 audit(1754630910.978:1645): avc:  denied  { read write } for  pid=6620 comm="syz.1.404" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   69.249627][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.256659][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.282717][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.294153][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.378696][ T6641] loop3: detected capacity change from 0 to 512
[   69.385918][   T29] audit: type=1400 audit(1754630911.158:1646): avc:  denied  { bind } for  pid=6632 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   69.386267][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'.
[   69.406329][   T29] audit: type=1400 audit(1754630911.168:1647): avc:  denied  { setopt } for  pid=6632 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   69.436927][ T6641] ext4: Unknown parameter 'fsname'
[   69.456453][ T6637] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.466506][ T6641] loop3: detected capacity change from 0 to 512
[   69.477998][ T6641] EXT4-fs: dax option not supported
[   69.484496][   T29] audit: type=1400 audit(1754630911.238:1648): avc:  denied  { create } for  pid=6640 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   69.504156][   T29] audit: type=1400 audit(1754630911.258:1649): avc:  denied  { connect } for  pid=6640 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   69.523821][   T29] audit: type=1400 audit(1754630911.258:1650): avc:  denied  { create } for  pid=6640 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   69.568027][ T6641] 
: renamed from bond0
[   69.600221][ T6655] loop4: detected capacity change from 0 to 128
[   69.601931][ T6461] hsr_slave_0: entered promiscuous mode
[   69.625536][ T6461] hsr_slave_1: entered promiscuous mode
[   69.632549][ T6461] debugfs: 'hsr0' already exists in 'hsr'
[   69.633500][ T6655] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.638308][ T6461] Cannot create hsr debugfs directory
[   69.656610][ T6637] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.656826][ T6655] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   69.678280][ T6650] syz.2.409 uses obsolete (PF_INET,SOCK_PACKET)
[   69.690663][ T6658] bridge: RTM_NEWNEIGH with invalid ether address
[   69.714363][ T6661] loop2: detected capacity change from 0 to 736
[   69.731154][ T6637] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.757059][ T6664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.770422][ T6661] rock: directory entry would overflow storage
[   69.776605][ T6661] rock: sig=0x3b10, size=4, remaining=3
[   69.807498][ T6637] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.827397][ T6661] netlink: 'syz.2.412': attribute type 27 has an invalid length.
[   69.871251][ T6664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.942523][ T6664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.956880][   T51] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.986630][   T51] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.001156][ T6664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.019702][   T51] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.028097][   T51] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.054403][ T6688] tipc: New replicast peer: 255.255.255.255
[   70.060601][ T6688] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.109415][   T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.183287][   T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.226098][   T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.248784][ T6461] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.275367][   T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.289767][ T6461] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.323589][ T6461] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.345811][ T6461] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.656121][ T6461] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.703525][ T6461] 8021q: adding VLAN 0 to HW filter on device team0
[   70.735768][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.742939][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.760258][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.763160][ T6461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   70.779651][ T6461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.823206][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[   70.832113][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[   70.838245][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.847957][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.862245][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[   70.883101][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[   70.891989][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[   71.030389][ T6461] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.059489][ T2954] tipc: Node number set to 312676032
[   71.119243][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.427'.
[   71.143272][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.150791][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.164010][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.171491][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.237574][ T6461] veth0_vlan: entered promiscuous mode
[   71.248462][ T6461] veth1_vlan: entered promiscuous mode
[   71.288955][ T6461] veth0_macvtap: entered promiscuous mode
[   71.305034][ T6461] veth1_macvtap: entered promiscuous mode
[   71.324256][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.355000][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.362676][ T6820] loop4: detected capacity change from 0 to 128
[   71.381585][ T6820] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   71.424842][ T3430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.426732][ T6820] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.433849][ T3430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.494272][ T3335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.546051][ T3335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.588472][   T41] dvmrp1 (unregistering): left allmulticast mode
[   71.657346][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'.
[   71.667416][   T41] bond0 (unregistering): Released all slaves
[   71.689333][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   71.701783][ T6791] chnl_net:caif_netlink_parms(): no params data found
[   71.769114][ T6853] bond_slave_0: entered promiscuous mode
[   71.774836][ T6853] bond_slave_1: entered promiscuous mode
[   71.818349][ T6853] macvtap1: entered allmulticast mode
[   71.823816][ T6853] bond0: entered allmulticast mode
[   71.829027][ T6853] bond_slave_0: entered allmulticast mode
[   71.834786][ T6853] bond_slave_1: entered allmulticast mode
[   71.881597][ T6853] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   71.891038][ T6853] bond0: left allmulticast mode
[   71.895924][ T6853] bond_slave_0: left allmulticast mode
[   71.901469][ T6853] bond_slave_1: left allmulticast mode
[   71.906948][ T6853] bond_slave_0: left promiscuous mode
[   71.912345][ T6853] bond_slave_1: left promiscuous mode
[   71.922156][   T41] tipc: Left network mode
[   71.985657][   T41] hsr_slave_1: left promiscuous mode
[   72.107508][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.113334][ T6884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6884 comm=syz.4.438
[   72.114771][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.139538][ T6791] bridge_slave_0: entered allmulticast mode
[   72.146060][ T6791] bridge_slave_0: entered promiscuous mode
[   72.170315][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.177377][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.209503][ T6791] bridge_slave_1: entered allmulticast mode
[   72.216726][ T6791] bridge_slave_1: entered promiscuous mode
[   72.248201][ T6791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.251298][ T6895] netlink: 'syz.3.439': attribute type 4 has an invalid length.
[   72.278539][ T6791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.341106][ T6791] team0: Port device team_slave_0 added
[   72.361216][ T6791] team0: Port device team_slave_1 added
[   72.455814][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.462843][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.488781][ T6791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.893881][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.901012][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.906293][ T6933] loop1: detected capacity change from 0 to 1024
[   72.927093][ T6791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.981595][ T6933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.002083][ T6933] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.019290][ T6791] hsr_slave_0: entered promiscuous mode
[   73.026882][ T6791] hsr_slave_1: entered promiscuous mode
[   73.033982][ T6931] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2
[   73.044473][ T6791] debugfs: 'hsr0' already exists in 'hsr'
[   73.050308][ T6791] Cannot create hsr debugfs directory
[   73.058872][ T6933] 0��{X��: renamed from gretap0
[   73.067054][ T6933] 0��{X��: entered allmulticast mode
[   73.076091][ T6933] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   73.153083][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.295305][ T6960] loop1: detected capacity change from 0 to 2048
[   73.362398][ T6960]  loop1: p1 < > p4
[   73.367170][ T6960] loop1: p4 size 8388608 extends beyond EOD, truncated
[   73.387889][ T2991]  loop1: p1 < > p4
[   73.399976][ T2991] loop1: p4 size 8388608 extends beyond EOD, truncated
[   73.500272][ T6791] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.508889][ T6791] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.517929][ T6791] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.551802][ T6791] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.861390][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.938550][   T29] kauditd_printk_skb: 47 callbacks suppressed
[   73.938565][   T29] audit: type=1400 audit(1754630915.728:1698): avc:  denied  { read } for  pid=7054 comm="syz.4.454" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.940450][ T6791] 8021q: adding VLAN 0 to HW filter on device team0
[   73.944710][   T29] audit: type=1400 audit(1754630915.728:1699): avc:  denied  { open } for  pid=7054 comm="syz.4.454" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.982286][ T6791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.008090][ T6791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.109958][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.117103][ T7006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.126204][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.133282][ T7006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.226358][ T6791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.258430][   T29] audit: type=1400 audit(1754630916.048:1700): avc:  denied  { read write } for  pid=7073 comm="syz.0.457" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   74.282024][   T29] audit: type=1400 audit(1754630916.048:1701): avc:  denied  { open } for  pid=7073 comm="syz.0.457" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   74.337422][   T29] audit: type=1400 audit(1754630916.098:1702): avc:  denied  { ioctl } for  pid=7073 comm="syz.0.457" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   74.429147][ T6791] veth0_vlan: entered promiscuous mode
[   74.448428][ T7085] netlink: 'syz.0.459': attribute type 13 has an invalid length.
[   74.484062][ T7059] loop1: detected capacity change from 0 to 512
[   74.503227][ T7059] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   74.516947][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.524173][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.606725][ T7090] loop3: detected capacity change from 0 to 1024
[   74.614661][ T7059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.625294][ T7090] EXT4-fs: Ignoring removed orlov option
[   74.634869][ T7059] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.647725][ T7090] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.676292][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.688004][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.696547][ T7090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.727752][   T29] audit: type=1400 audit(1754630916.518:1703): avc:  denied  { remove_name } for  pid=7089 comm="syz.3.460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   74.771595][   T29] audit: type=1400 audit(1754630916.518:1704): avc:  denied  { rename } for  pid=7089 comm="syz.3.460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   74.833447][   T29] audit: type=1400 audit(1754630916.628:1705): avc:  denied  { bind } for  pid=7093 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.888293][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.899232][ T7035] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.908591][ T7035] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.930285][ T6791] veth1_vlan: entered promiscuous mode
[   74.939451][ T7035] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.960320][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.970533][   T29] audit: type=1400 audit(1754630916.768:1706): avc:  denied  { getopt } for  pid=7096 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.970989][ T7035] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.007949][ T6791] veth0_macvtap: entered promiscuous mode
[   75.032195][ T6791] veth1_macvtap: entered promiscuous mode
[   75.039778][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.042308][   T29] audit: type=1400 audit(1754630916.828:1707): avc:  denied  { write } for  pid=7098 comm="syz.1.464" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   75.049767][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.086368][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.103561][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.114126][ T7052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.136146][ T7052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.165042][ T7052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.179900][ T7056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.333670][ T7105] loop0: detected capacity change from 0 to 512
[   75.340677][ T7105] ext4: Bad value for 'max_batch_time'
[   75.556715][ T7123] __nla_validate_parse: 7 callbacks suppressed
[   75.556738][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'.
[   75.812207][ T7128] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   75.813439][ T7132] netlink: 'syz.3.476': attribute type 13 has an invalid length.
[   75.822141][ T7128] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   75.878049][ T7133] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.474'.
[   75.887888][ T7056] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.897957][ T7056] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.919549][ T7056] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.941289][ T7128] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   75.951316][ T7128] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   75.969511][ T7056] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.987716][ T7136] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   75.997415][ T7136] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   76.027404][ T7136] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   76.036502][ T7140] bridge: RTM_NEWNEIGH with invalid ether address
[   76.061147][ T7136] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   76.070402][ T7136] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   76.081668][ T7128] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   76.091573][ T7128] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   76.145808][ T7128] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   76.155738][ T7128] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   76.169544][ T7149] loop1: detected capacity change from 0 to 512
[   76.180065][ T7149] EXT4-fs: Ignoring removed mblk_io_submit option
[   76.191600][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'.
[   76.211471][ T7152] vlan2: entered allmulticast mode
[   76.216714][ T7152] erspan0: entered allmulticast mode
[   76.223871][ T7149] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   76.233022][ T7149] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   76.244855][ T7149] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   76.255955][ T7156] loop3: detected capacity change from 0 to 512
[   76.263172][ T7025] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   76.271629][ T7025] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   76.272046][ T7149] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102]
[   76.280548][ T7025] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   76.296148][ T7025] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   76.302279][ T7149] System zones: 0-2, 18-18, 34-34
[   76.311100][ T7035] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   76.319516][ T7035] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   76.339106][ T7149] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.483: iget: bad i_size value: 360287970189639680
[   76.344041][ T7052] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   76.352387][ T7149] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.483: couldn't read orphan inode 15 (err -117)
[   76.360397][ T7052] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   76.380486][ T7149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.382484][ T7156] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.487: Failed to acquire dquot type 1
[   76.424162][ T7156] EXT4-fs (loop3): 1 truncate cleaned up
[   76.430219][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.445092][ T7156] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.461817][ T7156] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.487: Failed to acquire dquot type 1
[   76.499241][ T7166] netlink: 'syz.4.490': attribute type 13 has an invalid length.
[   76.584448][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.591766][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.633385][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.935528][ T7027] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   76.944159][ T7027] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   76.966470][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.491'.
[   76.980080][ T7027] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   76.988621][ T7027] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   77.041926][ T7174] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.049440][ T7174] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.058734][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.086372][ T7027] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   77.094925][ T7027] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   77.110484][ T7027] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   77.119009][ T7027] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   77.148400][ T7182] loop1: detected capacity change from 0 to 128
[   77.161569][ T7182] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   77.174429][ T7182] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.284171][ T7182] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   77.400378][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.541165][ T7205] netlink: 'syz.1.503': attribute type 4 has an invalid length.
[   77.647542][ T7211] netlink: 'syz.1.505': attribute type 4 has an invalid length.
[   78.184938][ T7217] loop1: detected capacity change from 0 to 1024
[   78.197500][ T7219] loop3: detected capacity change from 0 to 512
[   78.205249][ T7217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.220803][ T7219] EXT4-fs (loop3): too many log groups per flexible block group
[   78.228533][ T7219] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   78.235646][ T7219] EXT4-fs (loop3): mount failed
[   78.396711][ T7232] loop3: detected capacity change from 0 to 128
[   78.414462][ T7233] netlink: 'syz.2.511': attribute type 1 has an invalid length.
[   78.418844][ T7217] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[   78.439717][ T7232] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   78.446874][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv1
[   78.460817][ T7232] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.461318][ T7233] team0: Port device batadv1 added
[   78.525944][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.540048][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.609083][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.622186][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.942387][   T29] kauditd_printk_skb: 444 callbacks suppressed
[   78.942401][   T29] audit: type=1326 audit(1754630920.738:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4138b25ba7 code=0x7ffc0000
[   78.971824][   T29] audit: type=1326 audit(1754630920.738:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4138acadd9 code=0x7ffc0000
[   78.995252][   T29] audit: type=1326 audit(1754630920.738:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4138b2ebe9 code=0x7ffc0000
[   79.018524][   T29] audit: type=1326 audit(1754630920.748:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4138b25ba7 code=0x7ffc0000
[   79.041749][   T29] audit: type=1326 audit(1754630920.748:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4138acadd9 code=0x7ffc0000
[   79.065039][   T29] audit: type=1326 audit(1754630920.748:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4138b2ebe9 code=0x7ffc0000
[   79.088382][   T29] audit: type=1326 audit(1754630920.758:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4138b25ba7 code=0x7ffc0000
[   79.111596][   T29] audit: type=1326 audit(1754630920.758:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4138acadd9 code=0x7ffc0000
[   79.134961][   T29] audit: type=1326 audit(1754630920.758:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4138b2ebe9 code=0x7ffc0000
[   79.158207][   T29] audit: type=1326 audit(1754630920.768:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4138b25ba7 code=0x7ffc0000
[   79.480867][ T7271] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[   79.501973][ T7269] loop4: detected capacity change from 0 to 1024
[   79.531038][ T7269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.786443][ T7269] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[   79.951433][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.331769][ T7317] loop1: detected capacity change from 0 to 512
[   81.338287][ T7317] EXT4-fs: Ignoring removed orlov option
[   82.243319][ T7317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.255986][ T7317] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.988445][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.065437][ T7366] syzkaller0: entered promiscuous mode
[   83.070983][ T7366] syzkaller0: entered allmulticast mode
[   83.087577][ T7375] __nla_validate_parse: 12 callbacks suppressed
[   83.087598][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[   83.563227][ T7441] loop2: detected capacity change from 0 to 1024
[   83.591682][ T7441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.849988][ T7441] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[   83.921415][ T6791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.985117][ T7480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.546'.
[   84.005793][ T7484] netlink: 'syz.1.550': attribute type 1 has an invalid length.
[   84.020494][ T7484] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.047267][ T7489] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[   84.052047][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.053790][ T7489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.062677][ T7484] bond1: (slave batadv0): making interface the new active one
[   84.068056][ T7489] vhci_hcd vhci_hcd.0: Device attached
[   84.076902][ T7484] bond1: (slave batadv0): Enslaving as an active interface with an up link
[   84.092367][   T29] kauditd_printk_skb: 280 callbacks suppressed
[   84.092382][   T29] audit: type=1326 audit(1754630925.888:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.140011][ T7493] loop2: detected capacity change from 0 to 128
[   84.150545][ T7493] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.156605][   T29] audit: type=1326 audit(1754630925.888:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.185929][   T29] audit: type=1326 audit(1754630925.888:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.196255][ T7493] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.209254][   T29] audit: type=1326 audit(1754630925.888:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.209286][   T29] audit: type=1326 audit(1754630925.888:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.266121][   T29] audit: type=1326 audit(1754630925.888:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.289559][   T29] audit: type=1326 audit(1754630925.888:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.312899][   T29] audit: type=1326 audit(1754630925.888:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.336178][   T29] audit: type=1326 audit(1754630925.888:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.338929][ T7490] vhci_hcd: connection closed
[   84.359593][   T29] audit: type=1326 audit(1754630925.888:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   84.360731][ T1048] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[   84.400046][ T7496] ref_ctr increment failed for inode: 0x279 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811b1f2840
[   84.419599][ T7027] vhci_hcd: stop threads
[   84.424017][ T7027] vhci_hcd: release socket
[   84.428591][ T7027] vhci_hcd: disconnect device
[   84.439923][ T1048] usb 7-1: enqueue for inactive port 0
[   84.445642][ T1048] usb 7-1: enqueue for inactive port 0
[   84.451765][ T1048] usb 7-1: enqueue for inactive port 0
[   84.519512][ T1048] vhci_hcd: vhci_device speed not set
[   85.038161][ T6791] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.878123][ T7528] loop3: detected capacity change from 0 to 128
[   85.895206][ T7528] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   85.922354][ T7523] lo speed is unknown, defaulting to 1000
[   85.928272][ T7523] lo speed is unknown, defaulting to 1000
[   85.946976][ T7523] lo speed is unknown, defaulting to 1000
[   85.953765][ T7528] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   85.964871][ T7523] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.973661][ T7523] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   85.981041][ T7528] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   85.987557][ T7528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   85.995074][ T7528] vhci_hcd vhci_hcd.0: Device attached
[   86.007401][ T7523] lo speed is unknown, defaulting to 1000
[   86.014600][ T7523] lo speed is unknown, defaulting to 1000
[   86.021051][ T7523] lo speed is unknown, defaulting to 1000
[   86.027394][ T7523] lo speed is unknown, defaulting to 1000
[   86.033716][ T7523] lo speed is unknown, defaulting to 1000
[   86.066589][ T7536] pim6reg1: entered promiscuous mode
[   86.071957][ T7536] pim6reg1: entered allmulticast mode
[   86.239429][ T1048] usb 7-1: new low-speed USB device number 3 using vhci_hcd
[   86.261258][ T7543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   86.267802][ T7543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   86.275383][ T7543] vhci_hcd vhci_hcd.0: Device attached
[   86.286195][ T7544] vhci_hcd: connection closed
[   86.286515][ T7052] vhci_hcd: stop threads
[   86.295491][ T7052] vhci_hcd: release socket
[   86.299923][ T7052] vhci_hcd: disconnect device
[   86.537087][ T7533] vhci_hcd: connection reset by peer
[   86.542940][ T7062] vhci_hcd: stop threads
[   86.544850][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.547191][ T7062] vhci_hcd: release socket
[   86.547207][ T7062] vhci_hcd: disconnect device
[   86.576669][ T7563] netlink: 'syz.3.579': attribute type 1 has an invalid length.
[   86.590624][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.613254][ T7563] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.622566][ T7563] bond0: (slave batadv0): making interface the new active one
[   86.650490][ T7563] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   86.915878][ T7576] cgroup: fork rejected by pids controller in /syz3
[   86.976595][ T7687] netlink: 76 bytes leftover after parsing attributes in process `syz.1.587'.
[   87.198488][ T8002] loop1: detected capacity change from 0 to 512
[   87.972478][ T8002] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.588: Failed to acquire dquot type 1
[   87.991235][ T8002] EXT4-fs (loop1): 1 truncate cleaned up
[   88.152717][ T8002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.187184][ T8002] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.217202][ T8002] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.588: Failed to acquire dquot type 1
[   88.402222][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.454008][ T8294] loop2: detected capacity change from 0 to 8192
[   88.738344][ T8302] lo speed is unknown, defaulting to 1000
[   88.894357][ T8304] lo speed is unknown, defaulting to 1000
[   89.131310][   T29] kauditd_printk_skb: 210 callbacks suppressed
[   89.131326][   T29] audit: type=1400 audit(1754630930.828:2654): avc:  denied  { mount } for  pid=8308 comm="syz.3.601" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   89.214209][ T8317] netlink: 156 bytes leftover after parsing attributes in process `syz.2.604'.
[   89.272828][   T29] audit: type=1400 audit(1754630930.998:2655): avc:  denied  { associate } for  pid=8315 comm="syz.2.604" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   89.294533][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'.
[   89.318781][ T8320] loop1: detected capacity change from 0 to 1024
[   89.343587][ T8320] EXT4-fs: Ignoring removed bh option
[   89.387680][ T8320] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   89.434340][   T29] audit: type=1400 audit(1754630931.228:2656): avc:  denied  { relabelfrom } for  pid=8324 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   89.454189][   T29] audit: type=1400 audit(1754630931.228:2657): avc:  denied  { relabelto } for  pid=8324 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   89.516529][ T8320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.589340][   T29] audit: type=1326 audit(1754630931.378:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8333 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   89.726910][   T29] audit: type=1326 audit(1754630931.408:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8333 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   89.750290][   T29] audit: type=1326 audit(1754630931.408:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8333 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   89.773615][   T29] audit: type=1326 audit(1754630931.408:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8333 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   89.796966][   T29] audit: type=1326 audit(1754630931.408:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8333 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   89.820337][   T29] audit: type=1326 audit(1754630931.408:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8333 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[   89.968269][ T8342] netlink: 'syz.0.612': attribute type 21 has an invalid length.
[   89.976099][ T8342] netlink: 128 bytes leftover after parsing attributes in process `syz.0.612'.
[   89.999548][ T8342] netlink: 'syz.0.612': attribute type 4 has an invalid length.
[   90.007231][ T8342] netlink: 3 bytes leftover after parsing attributes in process `syz.0.612'.
[   90.077368][ T8347] ref_ctr increment failed for inode: 0xf0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811a96b980
[   90.153533][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.242692][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.614'.
[   90.795957][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'.
[   91.038332][ T8367] netlink: 'syz.3.618': attribute type 83 has an invalid length.
[   91.333899][ T1048] usb 7-1: enqueue for inactive port 0
[   91.339453][ T1048] usb 7-1: enqueue for inactive port 0
[   91.432542][ T1048] vhci_hcd: vhci_device speed not set
[   91.550345][ T8396] netlink: 'syz.0.629': attribute type 3 has an invalid length.
[   91.569658][ T8396] netlink: 'syz.0.629': attribute type 3 has an invalid length.
[   91.578022][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'.
[   91.784446][ T8402] wg2: entered promiscuous mode
[   91.789597][ T8402] wg2: entered allmulticast mode
[   91.903787][ T8404] program syz.3.634 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.912756][ T8406] geneve2: entered promiscuous mode
[   91.918819][ T7025] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.939593][ T7025] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.942684][ T8404] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   91.956733][ T8406] loop1: detected capacity change from 0 to 512
[   91.963253][ T7025] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.973102][ T7025] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.981731][ T8406] EXT4-fs (loop1): orphan cleanup on readonly fs
[   91.988901][ T8406] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.633: bg 0: block 248: padding at end of block bitmap is not set
[   92.003567][ T8406] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.633: Failed to acquire dquot type 1
[   92.017518][ T8406] EXT4-fs (loop1): 1 truncate cleaned up
[   92.039287][ T8406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.233902][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.401952][ T8419] macvtap0: refused to change device tx_queue_len
[   92.425357][ T8421] lo speed is unknown, defaulting to 1000
[   92.756440][ T8445] loop2: detected capacity change from 0 to 8192
[   92.770153][ T8445] FAT-fs (loop2): bogus number of directory entries (9)
[   92.777130][ T8445] FAT-fs (loop2): Can't find a valid FAT filesystem
[   93.206794][ T8454] geneve2: entered promiscuous mode
[   93.231756][ T8454] loop2: detected capacity change from 0 to 512
[   93.247820][ T8454] EXT4-fs (loop2): orphan cleanup on readonly fs
[   93.254808][ T8454] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.648: bg 0: block 248: padding at end of block bitmap is not set
[   93.270990][ T8454] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.648: Failed to acquire dquot type 1
[   93.282807][ T8454] EXT4-fs (loop2): 1 truncate cleaned up
[   93.289139][ T8454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.316766][ T6791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.412159][ T8465] ipvlan2: entered promiscuous mode
[   93.428096][ T8465] bridge0: port 3(ipvlan2) entered blocking state
[   93.434891][ T8465] bridge0: port 3(ipvlan2) entered disabled state
[   93.469911][ T8466] 9pnet: p9_errstr2errno: server reported unknown error �@
[   93.479630][ T8465] ipvlan2: entered allmulticast mode
[   93.484997][ T8465] bridge0: entered allmulticast mode
[   93.505259][ T8465] ipvlan2: left allmulticast mode
[   93.510367][ T8465] bridge0: left allmulticast mode
[   93.782617][ T8483] loop3: detected capacity change from 0 to 164
[   93.793018][ T8483] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   93.824769][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.662'.
[   93.974927][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[   94.577417][   T29] kauditd_printk_skb: 433 callbacks suppressed
[   94.577463][   T29] audit: type=1326 audit(1754630936.368:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.607238][   T29] audit: type=1326 audit(1754630936.368:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.630597][   T29] audit: type=1326 audit(1754630936.378:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.654011][   T29] audit: type=1326 audit(1754630936.378:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.677352][   T29] audit: type=1326 audit(1754630936.378:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.700732][   T29] audit: type=1326 audit(1754630936.378:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.724083][   T29] audit: type=1326 audit(1754630936.378:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.747386][   T29] audit: type=1326 audit(1754630936.378:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.770723][   T29] audit: type=1326 audit(1754630936.378:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.794089][   T29] audit: type=1326 audit(1754630936.378:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63b08ebe9 code=0x7ffc0000
[   94.914992][ T8511] ipvlan2: entered promiscuous mode
[   94.922779][ T8511] bridge0: port 3(ipvlan2) entered blocking state
[   94.929244][ T8511] bridge0: port 3(ipvlan2) entered disabled state
[   94.936391][ T8511] ipvlan2: entered allmulticast mode
[   94.941854][ T8511] bridge0: entered allmulticast mode
[   94.949157][ T8511] ipvlan2: left allmulticast mode
[   94.954219][ T8511] bridge0: left allmulticast mode
[   94.967262][ T8517] 9pnet: p9_errstr2errno: server reported unknown error �@
[   95.099534][ T8519] loop3: detected capacity change from 0 to 512
[   95.130153][ T8519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.146196][ T8519] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.542915][ T8528] netlink: 'syz.0.686': attribute type 1 has an invalid length.
[   95.565732][ T8528] bond1: (slave geneve2): making interface the new active one
[   95.574035][ T8528] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   95.582905][   T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   95.591725][   T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   95.602519][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'.
[   95.615794][   T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   95.625201][ T8528] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.650474][   T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   95.662632][ T8534] loop2: detected capacity change from 0 to 512
[   95.679235][ T8534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   95.692907][ T8534] EXT4-fs (loop2): 1 truncate cleaned up
[   95.702266][ T8534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.761862][ T8538] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.679'.
[   95.799927][ T8537] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.679'.
[   95.815071][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.089104][ T6791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.114951][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'.
[   96.130782][ T8559] hsr_slave_1 (unregistering): left promiscuous mode
[   96.193035][ T8566] loop3: detected capacity change from 0 to 512
[   96.201602][ T8566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   96.223028][ T8566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.236320][ T8566] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.298792][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.390214][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'.
[   96.404040][ T8577] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.412906][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'.
[   96.422915][ T8577] bond1 (unregistering): Released all slaves
[   96.457279][ T8582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.507265][ T8582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.552552][ T8582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.642175][ T8582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.705779][ T7025] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.717320][   T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.728882][   T57] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.739806][ T7025] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.005449][ T8605] loop1: detected capacity change from 0 to 512
[   97.030281][ T8605] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.705: Failed to acquire dquot type 1
[   97.061317][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.705: corrupted inode contents
[   97.077212][ T8614] loop2: detected capacity change from 0 to 164
[   97.095673][ T8605] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.705: mark_inode_dirty error
[   97.098032][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.714'.
[   97.108456][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.705: corrupted inode contents
[   97.138032][ T8605] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.705: mark_inode_dirty error
[   97.151822][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.705: corrupted inode contents
[   97.176240][ T8605] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   97.211406][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.705: corrupted inode contents
[   97.225046][ T8605] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.705: mark_inode_dirty error
[   97.236356][ T8605] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   97.239616][ T8599] loop4: detected capacity change from 0 to 512
[   97.247495][ T8605] EXT4-fs (loop1): 1 truncate cleaned up
[   97.257895][ T8605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.266749][ T8620] netlink: 'syz.3.710': attribute type 27 has an invalid length.
[   97.272182][ T8605] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.289761][ T8599] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   97.300054][ T8620] wg2: left promiscuous mode
[   97.304663][ T8620] wg2: left allmulticast mode
[   97.310404][ T8620] geneve2: left promiscuous mode
[   97.329120][ T8620] 8021q: adding VLAN 0 to HW filter on device 

[   97.330723][ T8599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.349285][ T8599] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.364303][ T8620] 8021q: adding VLAN 0 to HW filter on device team0
[   97.461844][ T8620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.462581][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.606316][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.625954][ T8632] loop2: detected capacity change from 0 to 1024
[   97.653131][ T8632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.064051][ T8641] loop3: detected capacity change from 0 to 256
[   99.395330][ T6791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.471709][ T8649] netlink: 96 bytes leftover after parsing attributes in process `syz.1.722'.
[   99.480728][ T8649] netlink: 80 bytes leftover after parsing attributes in process `syz.1.722'.
[   99.491805][ T8649] macvtap0: refused to change device tx_queue_len
[   99.512210][ T8649] loop1: detected capacity change from 0 to 256
[   99.526454][ T8649] bio_check_eod: 102 callbacks suppressed
[   99.526469][ T8649] syz.1.722: attempt to access beyond end of device
[   99.526469][ T8649] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256
[   99.577320][ T8653] $H�: renamed from bond0
[   99.584943][ T8653] $H�: entered promiscuous mode
[   99.590053][ T8653] bond_slave_0: entered promiscuous mode
[   99.595891][ T8653] bond_slave_1: entered promiscuous mode
[   99.732540][   T29] kauditd_printk_skb: 371 callbacks suppressed
[   99.732589][   T29] audit: type=1326 audit(1754630941.528:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.777159][   T29] audit: type=1326 audit(1754630941.558:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.800509][   T29] audit: type=1326 audit(1754630941.558:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.823723][   T29] audit: type=1326 audit(1754630941.558:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.847046][   T29] audit: type=1326 audit(1754630941.558:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.870401][   T29] audit: type=1326 audit(1754630941.558:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.893718][   T29] audit: type=1326 audit(1754630941.558:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.917056][   T29] audit: type=1326 audit(1754630941.558:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.940364][   T29] audit: type=1326 audit(1754630941.558:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[   99.963702][   T29] audit: type=1326 audit(1754630941.558:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  100.093266][ T8667] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.730'.
[  100.689035][ T8673] loop2: detected capacity change from 0 to 8192
[  100.704962][ T8679] netlink: 'syz.3.733': attribute type 10 has an invalid length.
[  100.742046][ T8679] bridge0: port 3(team0) entered blocking state
[  100.748350][ T8679] bridge0: port 3(team0) entered disabled state
[  100.754793][ T8679] team0: entered allmulticast mode
[  100.760052][ T8679] team_slave_0: entered allmulticast mode
[  100.763954][ T8681] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[  100.765777][ T8679] team_slave_1: entered allmulticast mode
[  100.773527][ T8681] __nla_validate_parse: 1 callbacks suppressed
[  100.773541][ T8681] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.734'.
[  100.780399][ T8679] team0: entered promiscuous mode
[  100.799679][ T8679] team_slave_0: entered promiscuous mode
[  100.805726][ T8679] team_slave_1: entered promiscuous mode
[  100.822510][ T8680] delete_channel: no stack
[  100.846910][ T8679] netlink: 'syz.3.733': attribute type 4 has an invalid length.
[  100.854646][ T8679] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.733'.
[  100.946100][ T8687] pim6reg1: entered promiscuous mode
[  101.203999][ T8692] lo speed is unknown, defaulting to 1000
[  101.773532][ T8705] netlink: 'syz.1.744': attribute type 1 has an invalid length.
[  101.822525][ T8705] bond2: (slave geneve3): making interface the new active one
[  101.830718][ T8705] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  101.843458][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'.
[  101.855829][ T7020] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  101.870061][ T8705] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.905925][ T7020] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  101.925781][ T7020] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  101.935754][ T7020] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  101.954457][ T8714] rdma_op ffff888119ce0980 conn xmit_rdma 0000000000000000
[  102.251384][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'.
[  102.263188][ T8716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.749'.
[  102.376696][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'.
[  102.412920][ T8730] loop1: detected capacity change from 0 to 512
[  102.422308][ T8730] EXT4-fs (loop1): orphan cleanup on readonly fs
[  102.429084][ T8730] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.763: Failed to acquire dquot type 1
[  102.441634][ T8730] EXT4-fs (loop1): 1 truncate cleaned up
[  102.448045][ T8730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.465452][ T8735] tipc: Started in network mode
[  102.470482][ T8735] tipc: Node identity b2a2d240f69f, cluster identity 4711
[  102.477687][ T8735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.518716][ T8735] tipc: Disabling bearer <eth:syzkaller0>
[  102.581360][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.924389][ T8752] lo speed is unknown, defaulting to 1000
[  103.276418][ T8754] netlink: 'syz.4.762': attribute type 1 has an invalid length.
[  103.350852][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'.
[  103.386472][ T8754] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.929947][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'.
[  103.970908][ T8773] bridge_slave_1: left allmulticast mode
[  103.976662][ T8773] bridge_slave_1: left promiscuous mode
[  103.983466][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.057812][ T8773] bridge_slave_0: left allmulticast mode
[  104.063539][ T8773] bridge_slave_0: left promiscuous mode
[  104.069233][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.215526][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.772'.
[  104.224491][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.772'.
[  104.431926][ T8797] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  104.648828][ T8803] lo speed is unknown, defaulting to 1000
[  104.906417][ T8820] lo speed is unknown, defaulting to 1000
[  105.711474][ T8824] hsr_slave_1 (unregistering): left promiscuous mode
[  105.969563][   T29] kauditd_printk_skb: 360 callbacks suppressed
[  105.969577][   T29] audit: type=1326 audit(1754630947.748:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  105.999169][   T29] audit: type=1326 audit(1754630947.748:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.025962][ T8830] loop3: detected capacity change from 0 to 512
[  106.045884][ T8830] EXT4-fs: Ignoring removed oldalloc option
[  106.116375][ T8830] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.789: Parent and EA inode have the same ino 15
[  106.150577][ T8830] EXT4-fs (loop3): 1 orphan inode deleted
[  106.156697][ T8830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.189027][   T29] audit: type=1326 audit(1754630947.828:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.212443][   T29] audit: type=1326 audit(1754630947.828:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.235743][   T29] audit: type=1326 audit(1754630947.828:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.259104][   T29] audit: type=1326 audit(1754630947.828:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.282432][   T29] audit: type=1326 audit(1754630947.828:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.305723][   T29] audit: type=1326 audit(1754630947.828:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.329076][   T29] audit: type=1326 audit(1754630947.828:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.352413][   T29] audit: type=1326 audit(1754630947.828:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be5cebe9 code=0x7ffc0000
[  106.433602][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.449179][ T8834] lo speed is unknown, defaulting to 1000
[  106.712689][ T8848] random: crng reseeded on system resumption
[  107.014134][ T8855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.089588][ T8852] tipc: Resetting bearer <eth:syzkaller0>
[  107.103218][ T8852] tipc: Disabling bearer <eth:syzkaller0>
[  107.279065][ T8861] loop4: detected capacity change from 0 to 8192
[  107.446662][ T8859] lo speed is unknown, defaulting to 1000
[  107.549629][ T8865] syzkaller0: entered promiscuous mode
[  107.555297][ T8865] syzkaller0: entered allmulticast mode
[  107.795648][ T8872] __nla_validate_parse: 3 callbacks suppressed
[  107.795667][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'.
[  107.821908][ T8874] loop2: detected capacity change from 0 to 512
[  107.841493][ T8872] hsr_slave_0 (unregistering): left promiscuous mode
[  107.864947][ T8874] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.804: Failed to acquire dquot type 1
[  107.880524][ T8874] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.804: corrupted inode contents
[  107.892753][ T8874] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.804: mark_inode_dirty error
[  107.905300][ T8874] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.804: corrupted inode contents
[  107.919534][ T8874] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.804: mark_inode_dirty error
[  108.092881][ T8874] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.804: corrupted inode contents
[  108.179589][ T8874] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  108.233311][ T8884] loop1: detected capacity change from 0 to 512
[  108.296147][ T8884] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  108.406581][ T8884] System zones: 0-7
[  108.460026][ T8884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.642514][ T8874] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.804: corrupted inode contents
[  108.655760][ T8874] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.804: mark_inode_dirty error
[  108.667032][ T8874] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  108.677935][ T8874] EXT4-fs (loop2): 1 truncate cleaned up
[  108.683961][ T8874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.696550][ T8874] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.737781][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.752749][ T6791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.816658][ T8898] GUP no longer grows the stack in syz.0.809 (8898): 200000005000-200000008000 (200000004000)
[  108.827041][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.0.809 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  108.827070][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  108.827082][ T8898] Call Trace:
[  108.827088][ T8898]  <TASK>
[  108.827161][ T8898]  __dump_stack+0x1d/0x30
[  108.827184][ T8898]  dump_stack_lvl+0xe8/0x140
[  108.827203][ T8898]  dump_stack+0x15/0x1b
[  108.827219][ T8898]  fixup_user_fault+0x50e/0x560
[  108.827300][ T8898]  fault_in_user_writeable+0x5d/0xd0
[  108.827328][ T8898]  futex_lock_pi+0x597/0x780
[  108.827392][ T8898]  ? __pfx_futex_wake_mark+0x10/0x10
[  108.827431][ T8898]  do_futex+0x21f/0x380
[  108.827461][ T8898]  __se_sys_futex+0x2ed/0x360
[  108.827539][ T8898]  ? xfd_validate_state+0x45/0xf0
[  108.827620][ T8898]  __x64_sys_futex+0x78/0x90
[  108.827649][ T8898]  x64_sys_call+0x2e39/0x2ff0
[  108.827672][ T8898]  do_syscall_64+0xd2/0x200
[  108.827700][ T8898]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  108.827806][ T8898]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  108.827831][ T8898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.827923][ T8898] RIP: 0033:0x7fbd76efebe9
[  108.827944][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.827972][ T8898] RSP: 002b:00007fbd7593e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  108.827994][ T8898] RAX: ffffffffffffffda RBX: 00007fbd77126090 RCX: 00007fbd76efebe9
[  108.828008][ T8898] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  108.828023][ T8898] RBP: 00007fbd76f81e19 R08: 0000000000000000 R09: 0000000000000000
[  108.828037][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.828051][ T8898] R13: 00007fbd77126128 R14: 00007fbd77126090 R15: 00007ffff744ab98
[  108.828074][ T8898]  </TASK>
[  108.850477][ T8898] lo speed is unknown, defaulting to 1000
[  109.099200][ T8904] lo speed is unknown, defaulting to 1000
[  109.135712][ T8906] loop3: detected capacity change from 0 to 512
[  109.162257][ T8908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.169696][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.180672][ T8906] EXT4-fs (loop3): orphan cleanup on readonly fs
[  109.187599][ T8908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.195079][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.209816][ T8906] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.814: Failed to acquire dquot type 1
[  109.225371][ T8906] EXT4-fs (loop3): 1 truncate cleaned up
[  109.231700][ T8906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.282536][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.313180][ T8918] loop3: detected capacity change from 0 to 1024
[  109.339919][ T8918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.355573][ T8918] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.368444][ T8918] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.817: lblock 3 mapped to illegal pblock 3 (length 13)
[  109.383738][ T8918] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  109.396159][ T8918] EXT4-fs (loop3): This should not happen!! Data will be lost
[  109.396159][ T8918] 
[  109.418518][ T8924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.427833][ T8924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.436606][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.456467][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  109.500057][ T8928] veth0_vlan: entered allmulticast mode
[  109.506037][ T8928] veth0_vlan: left promiscuous mode
[  109.520046][ T8928] veth0_vlan: entered promiscuous mode
[  109.664971][ T8936] loop3: detected capacity change from 0 to 512
[  109.672785][ T8936] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  109.681880][ T8936] EXT4-fs (loop3): 1 truncate cleaned up
[  109.687908][ T8936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.251069][ T8951] lo speed is unknown, defaulting to 1000
[  110.404586][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.282425][ T8957] tipc: New replicast peer: 255.255.255.83
[  111.288325][ T8957] tipc: Enabled bearer <udp:�>, priority 10
[  111.386894][ T8961] lo speed is unknown, defaulting to 1000
[  111.917137][   T29] kauditd_printk_skb: 162 callbacks suppressed
[  111.917158][   T29] audit: type=1400 audit(1754630953.708:4008): avc:  denied  { bind } for  pid=8971 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  111.923291][ T8969] binfmt_misc: register: failed to install interpreter file ./file2
[  111.924692][   T29] audit: type=1400 audit(1754630953.718:4009): avc:  denied  { remount } for  pid=8968 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  111.973389][   T29] audit: type=1400 audit(1754630953.738:4010): avc:  denied  { connect } for  pid=8971 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  112.081559][   T29] audit: type=1400 audit(1754630953.878:4011): avc:  denied  { connect } for  pid=8981 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  112.082535][ T8980] loop3: detected capacity change from 0 to 2048
[  112.107766][ T8980] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  112.170532][   T29] audit: type=1400 audit(1754630953.968:4012): avc:  denied  { ioctl } for  pid=8990 comm="syz.0.843" path="socket:[16705]" dev="sockfs" ino=16705 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  112.219326][   T29] audit: type=1400 audit(1754630953.988:4013): avc:  denied  { append } for  pid=8990 comm="syz.0.843" name="file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  112.436689][ T3396] tipc: Node number set to 1144902208
[  112.548702][ T9001] lo speed is unknown, defaulting to 1000
[  112.640776][   T29] audit: type=1326 audit(1754630954.438:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  112.657198][ T9002] lo speed is unknown, defaulting to 1000
[  112.664228][   T29] audit: type=1326 audit(1754630954.438:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  112.693829][   T29] audit: type=1326 audit(1754630954.468:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  112.721707][ T9004] netlink: 3 bytes leftover after parsing attributes in process `syz.4.846'.
[  112.730695][ T9004] 0�X���: renamed from caif0
[  112.735438][   T29] audit: type=1326 audit(1754630954.528:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  112.762777][ T9004] 0�X���: entered allmulticast mode
[  112.768036][ T9004] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  112.786209][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'.
[  112.950311][ T9016] loop4: detected capacity change from 0 to 512
[  112.960611][ T9017] netlink: 'syz.1.852': attribute type 1 has an invalid length.
[  112.969288][ T9016] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  112.974252][ T9017] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.012064][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'.
[  113.135544][ T9020] bond3 (unregistering): Released all slaves
[  113.160670][ T9022] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.851: Failed to acquire dquot type 0
[  113.174763][ T9022] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  113.223459][ T9021] bridge1: entered allmulticast mode
[  113.505935][ T3309] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /158/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[  113.970152][ T9031] lo speed is unknown, defaulting to 1000
[  114.139335][ T9045] syzkaller0: entered promiscuous mode
[  114.144880][ T9045] syzkaller0: entered allmulticast mode
[  114.173099][ T9031] chnl_net:caif_netlink_parms(): no params data found
[  114.317543][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.324647][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.399497][ T9031] bridge_slave_0: entered allmulticast mode
[  114.406070][ T9031] bridge_slave_0: entered promiscuous mode
[  114.426980][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.434122][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.461549][ T9031] bridge_slave_1: entered allmulticast mode
[  114.476460][ T9031] bridge_slave_1: entered promiscuous mode
[  114.506842][ T9031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.523987][ T9031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.558844][ T9031] team0: Port device team_slave_0 added
[  114.565438][ T9031] team0: Port device team_slave_1 added
[  114.583094][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.590104][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.616064][ T9031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.653584][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.660616][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.686605][ T9031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.788508][ T9031] hsr_slave_0: entered promiscuous mode
[  114.800024][ T9031] hsr_slave_1: entered promiscuous mode
[  114.805944][ T9031] debugfs: 'hsr0' already exists in 'hsr'
[  114.811692][ T9031] Cannot create hsr debugfs directory
[  114.939397][ T9031] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.948805][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.863'.
[  114.957762][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.863'.
[  114.968006][ T9059] loop1: detected capacity change from 0 to 2048
[  114.974497][ T9031] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  114.989644][ T9031] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  115.001401][ T9031] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  115.018229][ T9059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.038903][ T9066] netlink: 'syz.2.864': attribute type 27 has an invalid length.
[  115.054434][ T9059] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  115.099804][ T9059] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  115.112219][ T9059] EXT4-fs (loop1): This should not happen!! Data will be lost
[  115.112219][ T9059] 
[  115.121872][ T9059] EXT4-fs (loop1): Total free blocks count 0
[  115.127870][ T9059] EXT4-fs (loop1): Free/Dirty block details
[  115.133791][ T9059] EXT4-fs (loop1): free_blocks=2415919104
[  115.139535][ T9059] EXT4-fs (loop1): dirty_blocks=32
[  115.144691][ T9059] EXT4-fs (loop1): Block reservation details
[  115.150744][ T9059] EXT4-fs (loop1): i_reserved_data_blocks=2
[  115.182466][ T9061] loop3: detected capacity change from 0 to 8192
[  115.203965][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.211155][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.220979][ T9061] syz.3.863: attempt to access beyond end of device
[  115.220979][ T9061] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  115.235202][ T9061] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  115.243190][ T9061] FAT-fs (loop3): Filesystem has been set read-only
[  115.262379][ T9061] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  115.276120][ T9061] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  115.321647][ T9066] geneve2: left promiscuous mode
[  115.359872][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.396913][ T9075] 8021q: adding VLAN 0 to HW filter on device team0
[  115.408401][ T9075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.430947][   T10] lo speed is unknown, defaulting to 1000
[  115.450944][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.464234][ T7020] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.491646][ T3396] lo speed is unknown, defaulting to 1000
[  115.500316][ T9078] vlan2: entered promiscuous mode
[  115.505392][ T9078] bridge0: entered promiscuous mode
[  115.556734][ T7020] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.582235][ T7030] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.600786][ T9031] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.612500][ T9031] 8021q: adding VLAN 0 to HW filter on device team0
[  115.623310][ T7030] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.653168][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.660289][ T7030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.678206][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.685315][ T7030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.807184][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.872'.
[  115.860402][ T9031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.086186][ T9031] veth0_vlan: entered promiscuous mode
[  116.114896][ T9031] veth1_vlan: entered promiscuous mode
[  116.147256][ T9031] veth0_macvtap: entered promiscuous mode
[  116.154945][ T9031] veth1_macvtap: entered promiscuous mode
[  116.173593][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.185277][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.306315][ T7014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.341394][ T7014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.378756][ T7014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.408492][ T9125] lo speed is unknown, defaulting to 1000
[  116.431677][ T7027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.465216][ T9119] random: crng reseeded on system resumption
[  116.638409][ T9132] loop1: detected capacity change from 0 to 1024
[  116.767278][ T9132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.805540][ T9136] loop5: detected capacity change from 0 to 512
[  116.838552][ T9132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.876'.
[  116.882510][ T9136] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  116.907583][ T9136] System zones: 0-7
[  116.914029][ T9128] lo speed is unknown, defaulting to 1000
[  116.922228][ T9136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.952930][ T9132] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  117.075328][ T9031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.091745][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.150125][   T29] kauditd_printk_skb: 263 callbacks suppressed
[  117.150139][   T29] audit: type=1326 audit(1754630958.948:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa483c35ba7 code=0x7ffc0000
[  117.193790][   T29] audit: type=1326 audit(1754630958.978:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa483bdadd9 code=0x7ffc0000
[  117.217108][   T29] audit: type=1326 audit(1754630958.978:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa483c35ba7 code=0x7ffc0000
[  117.240471][   T29] audit: type=1326 audit(1754630958.978:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa483bdadd9 code=0x7ffc0000
[  117.263772][   T29] audit: type=1326 audit(1754630958.978:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa483c3ebe9 code=0x7ffc0000
[  117.287111][   T29] audit: type=1326 audit(1754630958.978:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa483c3ebe9 code=0x7ffc0000
[  117.298010][ T9152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.310671][   T29] audit: type=1326 audit(1754630958.978:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa483c3ebe9 code=0x7ffc0000
[  117.340626][   T29] audit: type=1326 audit(1754630958.978:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa483c3ebe9 code=0x7ffc0000
[  117.363961][   T29] audit: type=1326 audit(1754630958.978:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa483c3ebe9 code=0x7ffc0000
[  117.387349][   T29] audit: type=1326 audit(1754630958.978:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa483c3ebe9 code=0x7ffc0000
[  117.449861][ T9152] syzkaller0: entered promiscuous mode
[  117.455383][ T9152] syzkaller0: entered allmulticast mode
[  117.481868][ T9152] tipc: Resetting bearer <eth:syzkaller0>
[  117.490725][ T9151] tipc: Resetting bearer <eth:syzkaller0>
[  117.497407][ T9151] tipc: Disabling bearer <eth:syzkaller0>
[  117.561807][ T9156] loop3: detected capacity change from 0 to 8192
[  117.885358][ T9166] $H�: renamed from bond0 (while UP)
[  117.900131][ T9166] $H�: entered promiscuous mode
[  117.905302][ T9166] bond_slave_0: entered promiscuous mode
[  117.911094][ T9166] bond_slave_1: entered promiscuous mode
[  117.984150][ T9168] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  117.990759][ T9168] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  117.998537][ T9168] vhci_hcd vhci_hcd.0: Device attached
[  118.044816][ T9173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.052092][ T9173] IPv6: NLM_F_CREATE should be set when creating new route
[  118.078269][ T9169] vhci_hcd: connection closed
[  118.078495][   T41] vhci_hcd: stop threads
[  118.087534][   T41] vhci_hcd: release socket
[  118.091998][   T41] vhci_hcd: disconnect device
[  118.273227][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'.
[  118.305516][ T9164] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.617141][ T9193] netlink: 'syz.1.890': attribute type 9 has an invalid length.
[  118.640768][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'.
[  118.698258][ T9198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9198 comm=syz.2.893
[  118.752816][ T9200] loop5: detected capacity change from 0 to 512
[  118.771452][ T9200] EXT4-fs error (device loop5): ext4_quota_enable:7120: comm syz.5.894: Bad quota inum: 1, type: 2
[  118.784602][ T9200] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[  118.816949][ T9200] EXT4-fs (loop5): mount failed
[  118.862169][ T9210] loop3: detected capacity change from 0 to 512
[  118.902712][ T9210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.925422][ T9210] ext4 filesystem being mounted at /206/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.969608][ T9210] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm wޣ�: corrupted inode contents
[  118.983517][ T9200] lo speed is unknown, defaulting to 1000
[  119.009635][ T9217] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1
[  119.018327][ T9217] ref_ctr increment failed for inode: 0x2d offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811b1f2280
[  119.065338][ T9210] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm wޣ�: mark_inode_dirty error
[  119.100935][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'.
[  119.130043][ T9210] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm wޣ�: corrupted inode contents
[  119.153632][ T9210] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm wޣ�: mark_inode_dirty error
[  119.206357][ T9210] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm wޣ�: Failed to acquire dquot type 1
[  119.219425][ T9221] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.898: corrupted inode contents
[  119.237153][ T9221] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.898: mark_inode_dirty error
[  119.273022][ T9221] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.898: corrupted inode contents
[  119.330260][ T9221] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.898: mark_inode_dirty error
[  119.392788][ T9221] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.898: Failed to acquire dquot type 1
[  119.489444][ T9226] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.496853][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.506037][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.562832][ T9226] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.570279][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.620938][ T9216] Set syz1 is full, maxelem 65536 reached
[  119.680576][ T9231] netlink: 'syz.2.910': attribute type 21 has an invalid length.
[  119.690916][ T9229] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  119.855938][ T9246] loop2: detected capacity change from 0 to 1024
[  119.863007][ T9246] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.880613][ T9235] lo speed is unknown, defaulting to 1000
[  119.893805][ T9246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.965838][ T6791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.978835][ T9235] lo speed is unknown, defaulting to 1000
[  120.072612][ T9252] netlink: 3 bytes leftover after parsing attributes in process `syz.2.906'.
[  120.086226][ T9252] batadv0: entered promiscuous mode
[  120.091585][ T9252] batadv0: entered allmulticast mode
[  120.553889][ T9263] netlink: 156 bytes leftover after parsing attributes in process `syz.3.912'.
[  120.569442][ T9263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.912'.
[  120.600586][ T9265] loop5: detected capacity change from 0 to 512
[  120.642722][ T9265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.655386][ T9265] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.707805][ T9276] loop1: detected capacity change from 0 to 512
[  120.714529][ T9031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.728348][ T9276] netlink: zone id is out of range
[  120.733746][ T9276] netlink: zone id is out of range
[  120.738997][ T9276] netlink: zone id is out of range
[  120.744145][ T9276] netlink: zone id is out of range
[  120.749804][ T9276] netlink: zone id is out of range
[  120.762209][ T9276] netlink: zone id is out of range
[  120.772187][ T9276] netlink: zone id is out of range
[  120.794441][ T9276] netlink: zone id is out of range
[  120.804916][ T9276] netlink: zone id is out of range
[  120.888431][ T9288] ������: renamed from vlan0
[  121.018005][ T9296] lo speed is unknown, defaulting to 1000
[  121.861534][ T9311] loop5: detected capacity change from 0 to 1024
[  122.359767][ T9311] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  122.790319][ T9325] lo speed is unknown, defaulting to 1000
[  123.479585][ T9329] loop2: detected capacity change from 0 to 256
[  123.660997][   T29] kauditd_printk_skb: 414 callbacks suppressed
[  123.661011][   T29] audit: type=1400 audit(1754630965.458:4698): avc:  denied  { connect } for  pid=9326 comm="syz.1.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  123.812708][ T9311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.961458][   T29] audit: type=1326 audit(1754630965.758:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.024739][   T29] audit: type=1326 audit(1754630965.788:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.048106][   T29] audit: type=1326 audit(1754630965.798:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd76f314a5 code=0x7ffc0000
[  124.071444][   T29] audit: type=1326 audit(1754630965.798:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.094768][   T29] audit: type=1326 audit(1754630965.798:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.118637][   T29] audit: type=1326 audit(1754630965.878:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.142026][   T29] audit: type=1326 audit(1754630965.878:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.161415][ T9031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.165507][   T29] audit: type=1326 audit(1754630965.878:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.197720][   T29] audit: type=1326 audit(1754630965.878:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd76efebe9 code=0x7ffc0000
[  124.588277][ T9352] lo speed is unknown, defaulting to 1000
[  125.177674][ T9370] netlink: 'syz.3.948': attribute type 13 has an invalid length.
[  125.185504][ T9370] netlink: 'syz.3.948': attribute type 17 has an invalid length.
[  125.346611][ T9370] net_ratelimit: 3 callbacks suppressed
[  125.346623][ T9370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.398743][ T9376] syzkaller0: entered promiscuous mode
[  125.404430][ T9376] syzkaller0: entered allmulticast mode
[  125.622199][ T9377] lo speed is unknown, defaulting to 1000
[  125.702642][ T9377] lo speed is unknown, defaulting to 1000
[  126.318196][ T9404] lo speed is unknown, defaulting to 1000
[  126.482151][ T9413] lo speed is unknown, defaulting to 1000
[  126.603270][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'.
[  126.621620][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'.
[  126.892061][ T9431] serio: Serial port ttyS3
[  127.016030][ T9436] lo speed is unknown, defaulting to 1000
[  127.112247][ T9436] lo speed is unknown, defaulting to 1000
[  127.161292][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'.
[  127.170300][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'.
[  127.179227][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'.
[  127.192785][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'.
[  127.201840][ T9447] netlink: 'syz.1.978': attribute type 6 has an invalid length.
[  127.960306][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'.
[  128.230498][ T9490] Falling back ldisc for ttyS3.
[  128.387065][ T9508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1005'.
[  128.417201][ T9510] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1006'.
[  128.427231][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1006'.
[  128.672765][   T29] kauditd_printk_skb: 1191 callbacks suppressed
[  128.672780][   T29] audit: type=1400 audit(1754630970.468:5899): avc:  denied  { read write } for  pid=6791 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  128.707125][   T29] audit: type=1400 audit(1754630970.498:5900): avc:  denied  { read } for  pid=9542 comm="syz.0.1022" dev="nsfs" ino=4026533322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  128.763990][   T29] audit: type=1400 audit(1754630970.498:5901): avc:  denied  { prog_load } for  pid=9537 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  128.783211][   T29] audit: type=1400 audit(1754630970.508:5902): avc:  denied  { create } for  pid=9542 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[  128.802824][   T29] audit: type=1400 audit(1754630970.508:5903): avc:  denied  { allowed } for  pid=9542 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  128.822130][   T29] audit: type=1400 audit(1754630970.508:5904): avc:  denied  { create } for  pid=9542 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[  128.841689][   T29] audit: type=1400 audit(1754630970.508:5905): avc:  denied  { map_create } for  pid=9542 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  128.860839][   T29] audit: type=1400 audit(1754630970.518:5906): avc:  denied  { prog_load } for  pid=9545 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  128.879925][   T29] audit: type=1400 audit(1754630970.528:5907): avc:  denied  { prog_load } for  pid=9545 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  128.899040][   T29] audit: type=1400 audit(1754630970.528:5908): avc:  denied  { prog_load } for  pid=9545 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  129.063659][ T9557] netlink: 'syz.0.1026': attribute type 1 has an invalid length.
[  129.079138][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.108521][ T9559] wireguard0: entered promiscuous mode
[  129.114071][ T9559] wireguard0: entered allmulticast mode
[  129.163314][ T9557] 8021q: adding VLAN 0 to HW filter on device batadv1
[  129.172310][ T9557] bond0: (slave batadv1): making interface the new active one
[  129.224029][ T9557] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  130.105979][ T9580] lo speed is unknown, defaulting to 1000
[  130.673222][ T9587] bridge_slave_0: left allmulticast mode
[  130.678894][ T9587] bridge_slave_0: left promiscuous mode
[  130.684627][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.692425][ T9587] bridge_slave_1: left allmulticast mode
[  130.698083][ T9587] bridge_slave_1: left promiscuous mode
[  130.703892][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.731853][ T9587] $H�: (slave bond_slave_0): Releasing backup interface
[  130.739242][ T9587] bond_slave_0: left promiscuous mode
[  130.751534][ T9587] $H�: (slave bond_slave_1): Releasing backup interface
[  130.759096][ T9587] bond_slave_1: left promiscuous mode
[  130.765668][ T9587] team0: Port device team_slave_0 removed
[  130.774940][ T9587] team0: Port device team_slave_1 removed
[  130.790618][ T9587] team0: Port device batadv1 removed
[  130.852574][ T9589] lo speed is unknown, defaulting to 1000
[  130.892239][ T9588] lo speed is unknown, defaulting to 1000
[  132.661243][ T9633] __nla_validate_parse: 3 callbacks suppressed
[  132.661267][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'.
[  132.931205][ T9646] netlink: 'syz.1.1057': attribute type 21 has an invalid length.
[  132.971854][ T9644] syzkaller0: entered promiscuous mode
[  132.977354][ T9644] syzkaller0: entered allmulticast mode
[  133.019513][ T9646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1057'.
[  133.758941][   T29] kauditd_printk_skb: 491 callbacks suppressed
[  133.758957][   T29] audit: type=1400 audit(1754630975.548:6400): avc:  denied  { read write } for  pid=9031 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  133.815955][   T29] audit: type=1400 audit(1754630975.588:6401): avc:  denied  { prog_load } for  pid=9665 comm="syz.5.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  133.835203][   T29] audit: type=1400 audit(1754630975.598:6402): avc:  denied  { watch } for  pid=9665 comm="syz.5.1064" path="/34/control" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  133.857820][   T29] audit: type=1400 audit(1754630975.608:6403): avc:  denied  { read write } for  pid=9031 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  133.910744][   T29] audit: type=1400 audit(1754630975.708:6404): avc:  denied  { open } for  pid=9667 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  133.931700][   T29] audit: type=1400 audit(1754630975.718:6405): avc:  denied  { read write } for  pid=6791 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  133.955957][   T29] audit: type=1400 audit(1754630975.728:6406): avc:  denied  { open } for  pid=9667 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  133.976527][   T29] audit: type=1400 audit(1754630975.768:6407): avc:  denied  { map_create } for  pid=9667 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  133.996011][   T29] audit: type=1400 audit(1754630975.768:6408): avc:  denied  { prog_load } for  pid=9667 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  134.015057][   T29] audit: type=1400 audit(1754630975.768:6409): avc:  denied  { create } for  pid=9667 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  134.652835][ T9699] bridge0: entered promiscuous mode
[  134.923558][ T9699] macvtap1: entered allmulticast mode
[  134.928971][ T9699] bridge0: entered allmulticast mode
[  134.956782][ T9699] bridge0: port 1(macvtap1) entered blocking state
[  134.963377][ T9699] bridge0: port 1(macvtap1) entered disabled state
[  134.970931][ T9699] bridge0: left allmulticast mode
[  134.976022][ T9699] bridge0: left promiscuous mode
[  135.035458][ T9706] lo speed is unknown, defaulting to 1000
[  135.135185][ T9720] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  135.369470][ T9718] ==================================================================
[  135.377571][ T9718] BUG: KCSAN: data-race in atime_needs_update / touch_atime
[  135.384873][ T9718] 
[  135.387194][ T9718] write to 0xffff8881343b40f0 of 4 bytes by task 9710 on cpu 0:
[  135.394814][ T9718]  touch_atime+0x1e8/0x340
[  135.399241][ T9718]  shmem_file_splice_read+0x5b1/0x600
[  135.404611][ T9718]  splice_direct_to_actor+0x26f/0x680
[  135.409971][ T9718]  do_splice_direct+0xda/0x150
[  135.414738][ T9718]  do_sendfile+0x380/0x650
[  135.419162][ T9718]  __x64_sys_sendfile64+0x105/0x150
[  135.424363][ T9718]  x64_sys_call+0x2bb0/0x2ff0
[  135.429043][ T9718]  do_syscall_64+0xd2/0x200
[  135.433548][ T9718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.439438][ T9718] 
[  135.441744][ T9718] read to 0xffff8881343b40f0 of 4 bytes by task 9718 on cpu 1:
[  135.449276][ T9718]  atime_needs_update+0x25f/0x3e0
[  135.454307][ T9718]  touch_atime+0x4a/0x340
[  135.458646][ T9718]  shmem_file_splice_read+0x5b1/0x600
[  135.464032][ T9718]  splice_direct_to_actor+0x26f/0x680
[  135.469402][ T9718]  do_splice_direct+0xda/0x150
[  135.474162][ T9718]  do_sendfile+0x380/0x650
[  135.478590][ T9718]  __x64_sys_sendfile64+0x105/0x150
[  135.483788][ T9718]  x64_sys_call+0x2bb0/0x2ff0
[  135.488465][ T9718]  do_syscall_64+0xd2/0x200
[  135.492982][ T9718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.498873][ T9718] 
[  135.501184][ T9718] value changed: 0x096faf91 -> 0x0a084610
[  135.506892][ T9718] 
[  135.509203][ T9718] Reported by Kernel Concurrency Sanitizer on:
[  135.515441][ T9718] CPU: 1 UID: 0 PID: 9718 Comm: syz.3.1083 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  135.527502][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  135.537544][ T9718] ==================================================================