last executing test programs:

41.463866555s ago: executing program 3 (id=555):
socket$inet_sctp(0x2, 0x1, 0x84)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

41.283290743s ago: executing program 3 (id=559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18)
setns(0xffffffffffffffff, 0x24020000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0x7ff})
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

41.138628777s ago: executing program 3 (id=560):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="afa1ac463844720b9fc6fd58d2b227722930dbcb51a92b791232ea8bf91a13c05e8f0bb216f382e0bd3711cc2337d36eef203ca74981724c2a", @ANYRES16=0x0, @ANYRESDEC=r0], 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x80)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x4, 0x3}, 0x50)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0)
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)

40.885299662s ago: executing program 3 (id=564):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2cb, &(0x7f00000014c0)="$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")
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

40.661898484s ago: executing program 3 (id=566):
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x6000}, 0x0)

40.429669996s ago: executing program 3 (id=570):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x76a1, &(0x7f0000000500)={0x0, 0x7d0e, 0x80, 0x0, 0x1000034e}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0xd)

40.416233878s ago: executing program 32 (id=570):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x76a1, &(0x7f0000000500)={0x0, 0x7d0e, 0x80, 0x0, 0x1000034e}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0xd)

4.760098303s ago: executing program 0 (id=1116):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffff5, 0x8876}, {0x7fffd, 0x8}}, 0x0)
r0 = socket(0x18, 0x2, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

4.69261665s ago: executing program 0 (id=1118):
r0 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r1, 0x0, 0xbf2, 0x2000402)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)

4.229953255s ago: executing program 0 (id=1130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000005700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

4.062349861s ago: executing program 0 (id=1134):
r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

3.472173919s ago: executing program 1 (id=1144):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/4092, 0xffc}, {0x0}], 0x2}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x73a0}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, &(0x7f00000014c0)=""/122, 0x7a}, 0x1}], 0x3, 0x42, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
lsm_set_self_attr(0x67, &(0x7f0000000740)={0x65, 0xa, 0x20}, 0x20, 0x0)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x40000f63c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xffffffffffffffff}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)

3.070900349s ago: executing program 0 (id=1149):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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")

2.928388773s ago: executing program 2 (id=1153):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.729994112s ago: executing program 2 (id=1154):
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0xfffffffffffffede, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)

2.501764675s ago: executing program 1 (id=1156):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x10003, &(0x7f0000000280)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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")
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x9, 0x2, 0x6, 0x6, 0x2, 0x5, 0x90, 0x8000000000000000, 0x40}}, 0x43)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r2, 0x2007ffc)
sendfile(r2, r2, 0x0, 0x800000009)

2.488974996s ago: executing program 2 (id=1157):
r0 = socket$netlink(0x10, 0x3, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x26, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r3 = eventfd2(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100)

2.217595792s ago: executing program 4 (id=1161):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000f7009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10)
write(r1, &(0x7f0000000080)="240000001e005f0214fffffffffffff807000000010000000000007bc8801ff2176e8bf2", 0x24)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.603503912s ago: executing program 4 (id=1162):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0x0, 0x0})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x7f40)
rt_sigsuspend(0x0, 0x0)

1.287300684s ago: executing program 1 (id=1163):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000200)="6759f08c37021021ffad060049143821cbc216bdc8c0b580bcec783570d57302068becbf4e971c95ef86c972cca39ea1", 0x30, 0x480c0, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xfc, 0x6, @multicast}, 0x14)

1.209643501s ago: executing program 4 (id=1164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r1, 0xc4fc9e906872338b, 0x70bd2a, 0x1000, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffff7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x2}, @in6={0xa, 0x4e20, 0x1d, @empty, 0x9}}}, 0x118)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r5=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote, r5}, 0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804)
dup2(r3, r4)

1.204311662s ago: executing program 2 (id=1174):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), 0x0}, 0x20)
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x80000000006, 0x23e480)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

1.02060553s ago: executing program 4 (id=1166):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
r2 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
sendto$inet6(r1, 0x0, 0x62, 0x0, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, r0, 0x0)

870.481234ms ago: executing program 4 (id=1167):
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0xfffffffffffffede, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)

868.689755ms ago: executing program 1 (id=1178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x1, 0x80000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg$inet6(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}}], 0x1, 0x24000004)
sendmmsg(r2, &(0x7f0000001500), 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16=r4, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

820.793239ms ago: executing program 1 (id=1168):
io_uring_setup(0x1b7b, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="afa1180100181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

798.861672ms ago: executing program 4 (id=1169):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0xe112, 0x0, 0x0)

697.419801ms ago: executing program 0 (id=1171):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x884, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xfaf, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6(0xa, 0x1, 0x0)
pipe2$watch_queue(0x0, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x8842)
r0 = socket(0xf, 0x3, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

696.789622ms ago: executing program 1 (id=1172):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

589.269102ms ago: executing program 5 (id=1173):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8990, 0x0)
recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/99, 0x63}, 0x3}], 0x1, 0x40000140, &(0x7f0000000e00)={0x77359400})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e", 0x31}], 0x1}, 0x40000)

449.764716ms ago: executing program 5 (id=1175):
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

429.859118ms ago: executing program 5 (id=1176):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
unshare(0x2c020400)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000340)=ANY=[], 0x2000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
write$tun(0xffffffffffffffff, 0x0, 0xffe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x1)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4})

327.460358ms ago: executing program 5 (id=1177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x0)

320.963668ms ago: executing program 2 (id=1179):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(0x0, 0x42, 0x1f0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x101500, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r2}, 0x18)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

222.611478ms ago: executing program 5 (id=1180):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000240), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
listen(r0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

168.241363ms ago: executing program 5 (id=1181):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0)

0s ago: executing program 2 (id=1182):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
r0 = socket(0x10, 0x3, 0x9)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)

kernel console output (not intermixed with test programs):

hout journal. Quota mode: none.
[   43.529685][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.537480][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.685208][ T3660] netlink: 260 bytes leftover after parsing attributes in process `syz.1.54'.
[   43.696378][ T3660] netlink: 260 bytes leftover after parsing attributes in process `syz.1.54'.
[   43.739500][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.787204][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.825583][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.134216][ T1751] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.170933][ T1751] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.224073][ T1751] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.244284][ T1751] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.542577][ T3688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   44.549309][ T3688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   44.557090][ T3688] vhci_hcd vhci_hcd.0: Device attached
[   44.581059][ T3689] vhci_hcd: connection closed
[   44.581425][ T1466] vhci_hcd: stop threads
[   44.590671][ T1466] vhci_hcd: release socket
[   44.595296][ T1466] vhci_hcd: disconnect device
[   44.859606][   T29] kauditd_printk_skb: 113 callbacks suppressed
[   44.859620][   T29] audit: type=1326 audit(1760894370.769:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   44.891049][   T29] audit: type=1326 audit(1760894370.769:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   44.918450][ T3700] loop3: detected capacity change from 0 to 512
[   44.926075][ T3702] 9pnet_fd: Insufficient options for proto=fd
[   44.930164][   T29] audit: type=1326 audit(1760894370.829:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   44.930194][   T29] audit: type=1326 audit(1760894370.829:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a8e58f003 code=0x7ffc0000
[   44.930219][   T29] audit: type=1326 audit(1760894370.829:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a8e58da7f code=0x7ffc0000
[   44.930250][   T29] audit: type=1326 audit(1760894370.829:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0a8e58f057 code=0x7ffc0000
[   44.930302][   T29] audit: type=1326 audit(1760894370.829:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a8e58d810 code=0x7ffc0000
[   44.930326][   T29] audit: type=1326 audit(1760894370.829:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a8e58ebcb code=0x7ffc0000
[   44.930437][   T29] audit: type=1326 audit(1760894370.839:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a8e58dc2a code=0x7ffc0000
[   44.930470][   T29] audit: type=1326 audit(1760894370.839:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a8e58dc2a code=0x7ffc0000
[   44.988210][ T3700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.093906][ T3709] netlink: 5 bytes leftover after parsing attributes in process `syz.2.65'.
[   45.101242][ T3700] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.159143][ T3709] 0�X��D: renamed from gretap0
[   45.192177][ T3709] 0�X��D: entered allmulticast mode
[   45.198001][ T3709] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[   45.306764][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   45.329050][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.502417][ T3739] netlink: 'syz.3.79': attribute type 4 has an invalid length.
[   45.611656][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.634003][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.650311][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.669724][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.677031][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.685522][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.692261][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.698802][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   45.806224][ T3752] loop0: detected capacity change from 0 to 8192
[   45.823734][ T3754] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   46.047702][ T3770] loop1: detected capacity change from 0 to 128
[   46.075270][ T3770] syz.1.93: attempt to access beyond end of device
[   46.075270][ T3770] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[   46.091193][ T3770] syz.1.93: attempt to access beyond end of device
[   46.091193][ T3770] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128
[   46.107637][ T3770] syz.1.93: attempt to access beyond end of device
[   46.107637][ T3770] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128
[   46.145132][ T3770] syz.1.93: attempt to access beyond end of device
[   46.145132][ T3770] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[   46.162757][ T3770] syz.1.93: attempt to access beyond end of device
[   46.162757][ T3770] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[   46.201150][ T3770] syz.1.93: attempt to access beyond end of device
[   46.201150][ T3770] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[   46.204962][ T3774] syz.1.93: attempt to access beyond end of device
[   46.204962][ T3774] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128
[   46.255654][ T3770] syz.1.93: attempt to access beyond end of device
[   46.255654][ T3770] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[   46.270127][ T3774] syz.1.93: attempt to access beyond end of device
[   46.270127][ T3774] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128
[   46.295274][ T3770] syz.1.93: attempt to access beyond end of device
[   46.295274][ T3770] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[   46.393513][ T3780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.455241][ T3780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.516062][ T3780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.584130][ T3780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.667942][  T555] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.688455][  T555] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.702014][  T555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.712863][  T555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.844542][ T3805] netlink: 'syz.1.106': attribute type 4 has an invalid length.
[   47.051999][ T3818] __nla_validate_parse: 1 callbacks suppressed
[   47.052023][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[   47.222957][ T3829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'.
[   47.256116][ T3829] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.275954][ T3829] vlan0: entered allmulticast mode
[   47.281189][ T3829] bond1: entered allmulticast mode
[   47.358943][ T3619] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   47.693690][ T3855] 9pnet_fd: Insufficient options for proto=fd
[   47.915913][ T3863] syzkaller0: entered promiscuous mode
[   47.921593][ T3863] syzkaller0: entered allmulticast mode
[   48.150442][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'.
[   48.173612][ T3873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'.
[   48.789163][ T3901] veth2: entered promiscuous mode
[   48.794426][ T3901] veth2: entered allmulticast mode
[   48.875017][ T3904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.145'.
[   49.103896][ T3914] netlink: 96 bytes leftover after parsing attributes in process `syz.3.149'.
[   49.238828][ T3921] Driver unsupported XDP return value 0 on prog  (id 132) dev N/A, expect packet loss!
[   49.487096][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.497613][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.956980][   T29] kauditd_printk_skb: 167 callbacks suppressed
[   49.957028][   T29] audit: type=1326 audit(1760894631.866:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   49.987991][   T29] audit: type=1326 audit(1760894631.866:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   50.024613][   T29] audit: type=1326 audit(1760894631.926:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   50.048649][   T29] audit: type=1326 audit(1760894631.926:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   50.072866][   T29] audit: type=1326 audit(1760894631.936:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   50.096674][   T29] audit: type=1326 audit(1760894631.936:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   50.120744][   T29] audit: type=1326 audit(1760894631.936:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   50.158863][ T3949] loop3: detected capacity change from 0 to 2048
[   50.195651][ T3953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.208719][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.250182][   T29] audit: type=1400 audit(1760894632.146:387): avc:  denied  { write open } for  pid=3948 comm="syz.3.163" path="/42/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   50.273722][   T29] audit: type=1400 audit(1760894632.156:388): avc:  denied  { mounton } for  pid=3948 comm="syz.3.163" path="/42/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   50.314223][   T29] audit: type=1326 audit(1760894632.226:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3957 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   50.320089][ T3953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.352166][ T3319] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   50.389078][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.432708][ T3953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.513524][ T3953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.589329][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.608437][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.630519][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.643799][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.820173][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'.
[   51.415381][ T3990] loop1: detected capacity change from 0 to 2048
[   51.431569][ T3990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.581383][ T3313] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   51.653657][ T3998] loop3: detected capacity change from 0 to 512
[   51.686940][ T3998] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   51.700378][ T3998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   51.725160][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.799389][ T3998] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   51.850298][ T3998] EXT4-fs (loop3): 1 truncate cleaned up
[   51.875718][ T3998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.041289][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.188292][ T4006] veth4: entered promiscuous mode
[   52.193508][ T4006] veth4: entered allmulticast mode
[   52.307090][ T4016] geneve2: entered promiscuous mode
[   52.312539][ T4016] geneve2: entered allmulticast mode
[   52.344606][ T4012] mmap: syz.3.183 (4012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   52.510193][ T4034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.541120][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'.
[   52.554392][ T4036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'.
[   52.682975][ T4043] ip6erspan0: entered promiscuous mode
[   52.770167][ T4045] lo: entered promiscuous mode
[   52.775025][ T4045] lo: entered allmulticast mode
[   52.789048][ T4045] tunl0: entered promiscuous mode
[   52.794165][ T4045] tunl0: entered allmulticast mode
[   52.803168][ T4045] gre0: entered promiscuous mode
[   52.808264][ T4045] gre0: entered allmulticast mode
[   52.819981][ T4045] gretap0: entered promiscuous mode
[   52.825265][ T4045] gretap0: entered allmulticast mode
[   52.832566][ T4045] erspan0: entered promiscuous mode
[   52.837918][ T4045] erspan0: entered allmulticast mode
[   52.845118][ T4045] ip_vti0: entered promiscuous mode
[   52.850392][ T4045] ip_vti0: entered allmulticast mode
[   52.884892][ T4045] ip6_vti0: entered promiscuous mode
[   52.890445][ T4045] ip6_vti0: entered allmulticast mode
[   52.897349][ T4045] sit0: entered promiscuous mode
[   52.902696][ T4045] sit0: entered allmulticast mode
[   52.911152][ T4045] ip6tnl0: entered promiscuous mode
[   52.916656][ T4045] ip6tnl0: entered allmulticast mode
[   52.933815][ T4045] ip6gre0: entered promiscuous mode
[   52.939469][ T4045] ip6gre0: entered allmulticast mode
[   52.956268][ T4045] syz_tun: entered promiscuous mode
[   52.963985][ T4045] syz_tun: entered allmulticast mode
[   52.974396][ T4045] ip6gretap0: entered promiscuous mode
[   52.980094][ T4045] ip6gretap0: entered allmulticast mode
[   52.995910][ T4045] bridge0: entered promiscuous mode
[   53.001264][ T4045] bridge0: entered allmulticast mode
[   53.017165][ T4045] vcan0: entered promiscuous mode
[   53.022595][ T4045] vcan0: entered allmulticast mode
[   53.049370][ T4045] bond0: entered promiscuous mode
[   53.054961][ T4045] bond_slave_0: entered promiscuous mode
[   53.061099][ T4045] bond_slave_1: entered promiscuous mode
[   53.067603][ T4045] bond0: entered allmulticast mode
[   53.073198][ T4045] bond_slave_0: entered allmulticast mode
[   53.079343][ T4045] bond_slave_1: entered allmulticast mode
[   53.088170][ T4045] team0: entered promiscuous mode
[   53.093621][ T4045] team_slave_0: entered promiscuous mode
[   53.099610][ T4045] team_slave_1: entered promiscuous mode
[   53.105565][ T4045] team0: entered allmulticast mode
[   53.111125][ T4045] team_slave_0: entered allmulticast mode
[   53.117203][ T4045] team_slave_1: entered allmulticast mode
[   53.126231][ T4045] dummy0: entered promiscuous mode
[   53.132073][ T4045] dummy0: entered allmulticast mode
[   53.138645][ T4045] nlmon0: entered promiscuous mode
[   53.144141][ T4045] nlmon0: entered allmulticast mode
[   53.151099][ T4045] caif0: entered promiscuous mode
[   53.156395][ T4045] caif0: entered allmulticast mode
[   53.161886][ T4045] net_ratelimit: 24 callbacks suppressed
[   53.161901][ T4045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   53.295699][ T4063] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.358540][ T4063] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.388637][ T4070] syzkaller0: entered promiscuous mode
[   53.394502][ T4070] syzkaller0: entered allmulticast mode
[   53.443920][ T4063] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.501713][ T4078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'.
[   53.523147][ T4063] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.573696][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'.
[   53.588773][ T4078] 8021q: adding VLAN 0 to HW filter on device bond2
[   53.604075][ T4078] bond1: (slave bond2): Enslaving as an active interface with an up link
[   53.646742][ T4083] bond1 (unregistering): (slave bond2): Releasing backup interface
[   53.663827][ T4083] bond1 (unregistering): Released all slaves
[   53.695900][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.719102][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.737582][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.766354][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.951015][ T4098] netlink: 'syz.4.218': attribute type 10 has an invalid length.
[   53.960111][ T4098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.218'.
[   53.992335][ T4098] dummy0: entered promiscuous mode
[   54.017212][ T4098] bridge0: port 3(dummy0) entered blocking state
[   54.025532][ T4098] bridge0: port 3(dummy0) entered disabled state
[   54.025729][ T4104] loop4: detected capacity change from 0 to 512
[   54.042038][ T4098] dummy0: entered allmulticast mode
[   54.050263][ T4104] EXT4-fs (loop4): too many log groups per flexible block group
[   54.058370][ T4104] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   54.074499][ T4104] EXT4-fs (loop4): mount failed
[   54.079947][ T4098] bridge0: port 3(dummy0) entered blocking state
[   54.086752][ T4098] bridge0: port 3(dummy0) entered forwarding state
[   54.454894][ T4127] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   54.478780][ T4127] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   54.692537][ T4132] syz.0.229 uses obsolete (PF_INET,SOCK_PACKET)
[   54.982220][ T4143] loop2: detected capacity change from 0 to 512
[   54.988989][ T4143] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.008630][ T4145] netlink: 96 bytes leftover after parsing attributes in process `syz.3.234'.
[   55.023134][ T4143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   55.080614][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.237'.
[   55.089853][ T4152] netdevsi: renamed from sit0 (while UP)
[   55.110809][ T4152] netdevsi: entered promiscuous mode
[   55.129292][ T4143] EXT4-fs (loop2): 1 truncate cleaned up
[   55.136625][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.257589][   T29] kauditd_printk_skb: 383 callbacks suppressed
[   55.257701][   T29] audit: type=1400 audit(1760894637.166:773): avc:  denied  { setopt } for  pid=4158 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   55.485095][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'.
[   55.522805][ T4170] bridge0: port 3(batadv1) entered blocking state
[   55.531046][ T4170] bridge0: port 3(batadv1) entered disabled state
[   55.583279][ T4170] batadv1: entered allmulticast mode
[   55.615493][ T4170] batadv1: entered promiscuous mode
[   55.621484][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.689053][   T29] audit: type=1400 audit(1760894637.596:774): avc:  denied  { setopt } for  pid=4176 comm="syz.2.245" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.732063][ T4180] netlink: 'syz.3.247': attribute type 1 has an invalid length.
[   55.753544][ T4178] syz.2.245 (4178) used greatest stack depth: 9872 bytes left
[   55.770183][   T29] audit: type=1400 audit(1760894637.686:775): avc:  denied  { bind } for  pid=4185 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   55.779537][ T4180] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.800418][ T4187] loop0: detected capacity change from 0 to 256
[   55.822699][   T29] audit: type=1400 audit(1760894637.716:776): avc:  denied  { setopt } for  pid=4185 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   55.843449][   T29] audit: type=1400 audit(1760894637.716:777): avc:  denied  { remount } for  pid=4184 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   55.917539][ T4190] loop0: detected capacity change from 0 to 164
[   55.933470][   T29] audit: type=1400 audit(1760894637.846:778): avc:  denied  { create } for  pid=4179 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   55.954424][   T29] audit: type=1400 audit(1760894637.846:779): avc:  denied  { write } for  pid=4179 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   55.967138][ T4180] bond1: (slave gretap1): making interface the new active one
[   55.989797][ T4180] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   56.004164][   T29] audit: type=1400 audit(1760894637.916:780): avc:  denied  { mount } for  pid=4189 comm="syz.0.251" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   56.030474][ T4190] bio_check_eod: 17 callbacks suppressed
[   56.030491][ T4190] syz.0.251: attempt to access beyond end of device
[   56.030491][ T4190] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   56.038951][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   56.057977][ T4190] syz.0.251: attempt to access beyond end of device
[   56.057977][ T4190] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[   56.060557][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   56.127822][ T4180] syz.3.247 (4180) used greatest stack depth: 9232 bytes left
[   56.171138][ T4192] loop4: detected capacity change from 0 to 512
[   56.172586][   T29] audit: type=1400 audit(1760894638.086:781): avc:  denied  { unmount } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   56.269370][ T4192] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.252: bg 0: block 5: invalid block bitmap
[   56.281974][ T4196] netlink: 'syz.0.255': attribute type 13 has an invalid length.
[   56.289869][ T4196] netlink: 'syz.0.255': attribute type 17 has an invalid length.
[   56.324322][ T4196] lo: left promiscuous mode
[   56.328968][ T4196] lo: left allmulticast mode
[   56.343684][ T4192] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[   56.353874][ T4196] tunl0: left promiscuous mode
[   56.358687][ T4196] tunl0: left allmulticast mode
[   56.384446][ T4192] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.252: invalid indirect mapped block 3 (level 2)
[   56.401696][ T4196] gre0: left promiscuous mode
[   56.406500][ T4196] gre0: left allmulticast mode
[   56.413482][ T4196] gretap0: left promiscuous mode
[   56.418477][ T4196] gretap0: left allmulticast mode
[   56.424314][ T4192] EXT4-fs (loop4): 1 orphan inode deleted
[   56.430202][ T4192] EXT4-fs (loop4): 1 truncate cleaned up
[   56.442996][ T4196] erspan0: left promiscuous mode
[   56.447452][ T4192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.448085][ T4196] erspan0: left allmulticast mode
[   56.488672][ T4196] ip_vti0: left promiscuous mode
[   56.493719][ T4196] ip_vti0: left allmulticast mode
[   56.510166][ T4196] ip6_vti0: left promiscuous mode
[   56.515254][ T4196] ip6_vti0: left allmulticast mode
[   56.522128][ T4196] sit0: left promiscuous mode
[   56.526994][ T4196] sit0: left allmulticast mode
[   56.533961][ T4196] ip6tnl0: left promiscuous mode
[   56.539299][ T4196] ip6tnl0: left allmulticast mode
[   56.546591][ T4196] ip6gre0: left promiscuous mode
[   56.551651][ T4196] ip6gre0: left allmulticast mode
[   56.558139][ T4196] syz_tun: left promiscuous mode
[   56.563157][ T4196] syz_tun: left allmulticast mode
[   56.633804][ T4196] ip6gretap0: left promiscuous mode
[   56.639119][ T4196] ip6gretap0: left allmulticast mode
[   56.646632][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.662978][ T4196] bridge0: left promiscuous mode
[   56.668044][ T4196] bridge0: left allmulticast mode
[   56.681794][ T4196] vcan0: left promiscuous mode
[   56.686643][ T4196] vcan0: left allmulticast mode
[   56.703994][ T4196] bond0: left promiscuous mode
[   56.708821][ T4196] bond_slave_0: left promiscuous mode
[   56.714576][ T4196] bond_slave_1: left promiscuous mode
[   56.720331][ T4196] bond0: left allmulticast mode
[   56.725222][ T4196] bond_slave_0: left allmulticast mode
[   56.730767][ T4196] bond_slave_1: left allmulticast mode
[   56.871111][ T4196] team0: left promiscuous mode
[   56.876077][ T4196] team_slave_0: left promiscuous mode
[   56.882041][ T4196] team_slave_1: left promiscuous mode
[   56.887752][ T4196] team0: left allmulticast mode
[   56.892728][ T4196] team_slave_0: left allmulticast mode
[   56.898271][ T4196] team_slave_1: left allmulticast mode
[   56.935955][ T4196] dummy0: left promiscuous mode
[   56.941014][ T4196] dummy0: left allmulticast mode
[   56.947396][ T4196] nlmon0: left promiscuous mode
[   56.952453][ T4196] nlmon0: left allmulticast mode
[   56.960222][ T4196] caif0: left promiscuous mode
[   56.965106][ T4196] caif0: left allmulticast mode
[   56.970097][ T4196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.000971][ T4211] vlan3: entered promiscuous mode
[   57.006231][ T4211] vlan3: entered allmulticast mode
[   57.011471][ T4211] hsr_slave_1: entered allmulticast mode
[   57.127707][   T29] audit: type=1326 audit(1760894638.776:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.4.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   57.320897][ T4217] Falling back ldisc for ptm0.
[   57.340042][ T4222] serio: Serial port ptm0
[   57.427848][ T4224] loop4: detected capacity change from 0 to 4096
[   57.455346][ T4224] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.510345][ T4224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.549387][ T4248] SELinux: security_context_str_to_sid () failed with errno=-22
[   57.614804][ T4256] netlink: 'syz.0.270': attribute type 1 has an invalid length.
[   57.684483][ T4256] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.808444][ T4256] veth3: entered promiscuous mode
[   57.842336][ T4256] bond1: (slave veth3): Enslaving as an active interface with a down link
[   57.851380][ T4274] bond1: entered allmulticast mode
[   57.930138][ T4289] xt_bpf: check failed: parse error
[   58.036822][ T4298] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   58.043510][ T4298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   58.051718][ T4298] vhci_hcd vhci_hcd.0: Device attached
[   58.102414][ T4298] netlink: 64 bytes leftover after parsing attributes in process `syz.0.278'.
[   58.136079][ T4299] vhci_hcd: connection closed
[   58.141146][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.160602][ T1751] vhci_hcd: stop threads
[   58.164991][ T1751] vhci_hcd: release socket
[   58.170033][ T1751] vhci_hcd: disconnect device
[   58.670235][ T4244] syz.3.268 (4244) used greatest stack depth: 7240 bytes left
[   58.707418][ T3673] IPVS: starting estimator thread 0...
[   58.768921][ T4334] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.799088][ T4331] IPVS: using max 1968 ests per chain, 98400 per kthread
[   58.806288][ T4336] loop2: detected capacity change from 0 to 1024
[   58.820422][ T4334] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.831914][ T4336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.868366][ T4340] capability: warning: `syz.3.293' uses deprecated v2 capabilities in a way that may be insecure
[   58.873876][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.881568][ T4340] GUP no longer grows the stack in syz.3.293 (4340): 200000004000-20000000a000 (200000002000)
[   58.890223][ T4334] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.899975][ T4340] CPU: 1 UID: 0 PID: 4340 Comm: syz.3.293 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.900014][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   58.900033][ T4340] Call Trace:
[   58.900043][ T4340]  <TASK>
[   58.900056][ T4340]  __dump_stack+0x1d/0x30
[   58.900156][ T4340]  dump_stack_lvl+0xe8/0x140
[   58.900185][ T4340]  dump_stack+0x15/0x1b
[   58.900209][ T4340]  __get_user_pages+0x1968/0x1ed0
[   58.900253][ T4340]  get_user_pages_remote+0x1d5/0x6c0
[   58.900292][ T4340]  __access_remote_vm+0x15c/0x590
[   58.900373][ T4340]  access_remote_vm+0x32/0x40
[   58.900456][ T4340]  proc_pid_cmdline_read+0x32b/0x6c0
[   58.900500][ T4340]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[   58.900594][ T4340]  vfs_readv+0x3fb/0x690
[   58.900649][ T4340]  __x64_sys_preadv+0xfd/0x1c0
[   58.900688][ T4340]  x64_sys_call+0x282e/0x3000
[   58.900718][ T4340]  do_syscall_64+0xd2/0x200
[   58.900831][ T4340]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.900871][ T4340]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.900932][ T4340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.900964][ T4340] RIP: 0033:0x7f0a8e58efc9
[   58.900986][ T4340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.901011][ T4340] RSP: 002b:00007f0a8cfef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   58.901111][ T4340] RAX: ffffffffffffffda RBX: 00007f0a8e7e5fa0 RCX: 00007f0a8e58efc9
[   58.901129][ T4340] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006
[   58.901178][ T4340] RBP: 00007f0a8e611f91 R08: 0000000000000000 R09: 0000000000000000
[   58.901195][ T4340] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[   58.901211][ T4340] R13: 00007f0a8e7e6038 R14: 00007f0a8e7e5fa0 R15: 00007fffa3ea6848
[   58.901239][ T4340]  </TASK>
[   59.137411][ T4348] syz.2.297 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   59.147830][ T4349] loop3: detected capacity change from 0 to 1024
[   59.155129][ T4334] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.155823][ T4349] EXT4-fs: Ignoring removed bh option
[   59.180677][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.214633][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.232178][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.248743][  T555] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.263621][  T555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.288190][  T555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.317405][ T4357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.334619][ T4357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.336699][ T4359] netlink: 19 bytes leftover after parsing attributes in process `syz.1.301'.
[   59.348269][ T4357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.364733][ T4357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.389413][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[   59.404371][ T4362] team1: entered promiscuous mode
[   59.409776][ T4362] team1: entered allmulticast mode
[   59.415771][ T4362] 8021q: adding VLAN 0 to HW filter on device team1
[   59.441820][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'.
[   59.469402][ T4366] loop1: detected capacity change from 0 to 512
[   59.482834][ T4368] netlink: 64 bytes leftover after parsing attributes in process `syz.4.305'.
[   59.501464][ T4366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.519439][ T4366] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.583699][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.943435][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[   60.022087][ T4391] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.046247][ T4391] bond1: (slave bond2): Enslaving as an active interface with an up link
[   60.138474][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[   60.149908][ T4397] bond1 (unregistering): (slave bond2): Releasing backup interface
[   60.205104][ T4397] bond1 (unregistering): Released all slaves
[   60.490867][ T4402] loop3: detected capacity change from 0 to 4096
[   60.517640][   T29] kauditd_printk_skb: 65 callbacks suppressed
[   60.517661][   T29] audit: type=1400 audit(1760894642.426:848): avc:  denied  { write } for  pid=4400 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   60.554584][ T4402] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.609857][ T4402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.806819][   T29] audit: type=1326 audit(1760894642.696:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.830386][   T29] audit: type=1326 audit(1760894642.696:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.853840][   T29] audit: type=1326 audit(1760894642.696:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.877284][   T29] audit: type=1326 audit(1760894642.696:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.901316][   T29] audit: type=1326 audit(1760894642.696:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.925428][   T29] audit: type=1326 audit(1760894642.696:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.948963][   T29] audit: type=1326 audit(1760894642.696:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.972732][   T29] audit: type=1326 audit(1760894642.696:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   60.996479][   T29] audit: type=1326 audit(1760894642.696:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   61.035215][ T4417] loop4: detected capacity change from 0 to 4096
[   61.056532][ T4417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.085544][ T4424] netlink: 22 bytes leftover after parsing attributes in process `syz.2.326'.
[   61.088079][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.110552][ T4421] SELinux: ebitmap: truncated map
[   61.116722][ T4421] SELinux: failed to load policy
[   61.245082][ T4438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.285313][ T4438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.372062][ T4438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.377074][ T4448] loop2: detected capacity change from 0 to 512
[   61.409593][ T4448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   61.421562][ T4448] EXT4-fs (loop2): 1 truncate cleaned up
[   61.428087][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.449404][ T4438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.461979][ T4448] lo: Caught tx_queue_len zero misconfig
[   61.467831][ T4448] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.489826][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.504894][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.535146][ T1751] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.554472][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   61.573310][ T1751] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.582243][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.590706][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.604664][ T1751] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.614054][ T1466] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.870696][ T4478] netlink: 96 bytes leftover after parsing attributes in process `syz.0.348'.
[   62.133910][ T4497] netlink: 'syz.1.356': attribute type 1 has an invalid length.
[   62.173240][ T4497] 8021q: adding VLAN 0 to HW filter on device bond3
[   62.196118][ T4502] veth5: entered promiscuous mode
[   62.214714][ T4502] bond3: (slave veth5): Enslaving as an active interface with a down link
[   62.283907][ T4497] bond3: entered allmulticast mode
[   62.755998][ T4524] loop0: detected capacity change from 0 to 256
[   63.163226][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   63.204706][ T4538] __nla_validate_parse: 1 callbacks suppressed
[   63.204867][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'.
[   64.069854][ T4571] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.111419][ T4571] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.151945][ T4571] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.192371][ T4571] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.237505][ T1751] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.249556][ T1751] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.262219][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.274058][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.424861][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[   64.439732][ T4578] team1: entered promiscuous mode
[   64.444829][ T4578] team1: entered allmulticast mode
[   64.484810][ T4580] syzkaller0: entered allmulticast mode
[   64.491104][ T4580] syzkaller0: entered promiscuous mode
[   64.501157][ T4580] syzkaller0 (unregistering): left allmulticast mode
[   64.508402][ T4580] syzkaller0 (unregistering): left promiscuous mode
[   65.138849][ T4599] netem: change failed
[   65.198965][ T3720] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   65.199030][ T4558] Bluetooth: hci0: command 0x1003 tx timeout
[   65.460204][ T4612] veth2: entered promiscuous mode
[   65.465622][ T4612] veth2: entered allmulticast mode
[   65.497416][ T4616] loop4: detected capacity change from 0 to 128
[   65.518226][ T4616] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[   65.618199][   T29] kauditd_printk_skb: 130 callbacks suppressed
[   65.618218][   T29] audit: type=1326 audit(1760894647.526:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   65.650467][   T29] audit: type=1326 audit(1760894647.526:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   65.676351][   T29] audit: type=1326 audit(1760894647.526:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7e6a2d810 code=0x7ffc0000
[   65.700021][   T29] audit: type=1326 audit(1760894647.526:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   65.724515][   T29] audit: type=1326 audit(1760894647.526:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   65.748229][   T29] audit: type=1326 audit(1760894647.526:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   65.772278][   T29] audit: type=1326 audit(1760894647.526:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   65.796375][   T29] audit: type=1326 audit(1760894647.526:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e6a2efc9 code=0x7ffc0000
[   65.920736][ T3720] Bluetooth: hci1: command 0x1003 tx timeout
[   65.926955][ T3619] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   65.974529][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'.
[   65.995573][   T29] audit: type=1400 audit(1760894647.906:996): avc:  denied  { create } for  pid=4634 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   66.015258][   T29] audit: type=1400 audit(1760894647.906:997): avc:  denied  { sys_admin } for  pid=4634 comm="syz.1.411" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   66.060622][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'.
[   66.113267][ T4638] bridge_slave_0: left allmulticast mode
[   66.119771][ T4638] bridge_slave_0: left promiscuous mode
[   66.125957][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.155048][ T4638] bridge_slave_1: left allmulticast mode
[   66.162350][ T4638] bridge_slave_1: left promiscuous mode
[   66.168996][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.190401][ T4638] bond0: (slave bond_slave_0): Releasing backup interface
[   66.220877][ T4638] bond0: (slave bond_slave_1): Releasing backup interface
[   66.250819][ T4638] team0: Port device team_slave_0 removed
[   66.268152][ T4638] team0: Port device team_slave_1 removed
[   66.285480][ T4646] netlink: 'syz.1.412': attribute type 10 has an invalid length.
[   66.293671][ T4646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.412'.
[   66.304483][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.312146][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.345466][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.353172][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.382634][ T4638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   66.518181][ T4652] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.417'.
[   67.526595][ T4682] bridge: RTM_NEWNEIGH with invalid ether address
[   67.538131][ T4678] loop0: detected capacity change from 0 to 4096
[   67.609883][ T4678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.629571][ T4688] netlink: 7 bytes leftover after parsing attributes in process `syz.4.432'.
[   67.702409][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.876329][ T4706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'.
[   67.905324][ T4706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4706 comm=syz.2.440
[   67.984144][ T4671] loop1: detected capacity change from 0 to 512
[   68.014220][ T4671] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.423: corrupted inode contents
[   68.050132][ T4671] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   68.089576][ T4671] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.423: corrupted inode contents
[   68.117966][ T4671] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.423: mark_inode_dirty error
[   68.134211][ T4671] EXT4-fs (loop1): 1 orphan inode deleted
[   68.154640][ T4671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.283213][ T4729] loop2: detected capacity change from 0 to 8192
[   68.489748][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.591739][ T4736] loop2: detected capacity change from 0 to 512
[   68.598548][ T4736] EXT4-fs: Ignoring removed bh option
[   68.617136][ T4736] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.626378][ T4736] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   68.658363][ T4736] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   68.843327][ T4736] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   68.860712][ T4736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.934168][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'.
[   68.952802][ T4736] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.449: bg 0: block 353: padding at end of block bitmap is not set
[   69.039255][ T4687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[   69.138090][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.164533][ T4718] syz.4.443 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   69.176128][ T4718] CPU: 1 UID: 0 PID: 4718 Comm: syz.4.443 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.176164][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   69.176181][ T4718] Call Trace:
[   69.176189][ T4718]  <TASK>
[   69.176200][ T4718]  __dump_stack+0x1d/0x30
[   69.176228][ T4718]  dump_stack_lvl+0xe8/0x140
[   69.176267][ T4718]  dump_stack+0x15/0x1b
[   69.176291][ T4718]  dump_header+0x81/0x220
[   69.176333][ T4718]  oom_kill_process+0x342/0x400
[   69.176409][ T4718]  out_of_memory+0x979/0xb80
[   69.176451][ T4718]  try_charge_memcg+0x610/0xa10
[   69.176497][ T4718]  charge_memcg+0x51/0xc0
[   69.176577][ T4718]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   69.176611][ T4718]  __read_swap_cache_async+0x17b/0x2d0
[   69.176640][ T4718]  swap_cluster_readahead+0x262/0x3c0
[   69.176691][ T4718]  swapin_readahead+0xde/0x6f0
[   69.176796][ T4718]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[   69.176840][ T4718]  ? __lruvec_stat_mod_folio+0xd6/0x120
[   69.176893][ T4718]  ? __rcu_read_unlock+0x4f/0x70
[   69.176919][ T4718]  ? swap_cache_get_folio+0x277/0x280
[   69.176954][ T4718]  do_swap_page+0x2ae/0x2370
[   69.176981][ T4718]  ? css_rstat_updated+0xb7/0x240
[   69.177080][ T4718]  ? __pfx_default_wake_function+0x10/0x10
[   69.177141][ T4718]  handle_mm_fault+0x9a5/0x2be0
[   69.177226][ T4718]  ? vma_start_read+0x141/0x1f0
[   69.177279][ T4718]  do_user_addr_fault+0x630/0x1080
[   69.177308][ T4718]  ? fpregs_restore_userregs+0xe2/0x1d0
[   69.177349][ T4718]  ? switch_fpu_return+0xe/0x20
[   69.177470][ T4718]  ? fpregs_assert_state_consistent+0xb4/0xe0
[   69.177511][ T4718]  exc_page_fault+0x62/0xa0
[   69.177570][ T4718]  asm_exc_page_fault+0x26/0x30
[   69.177597][ T4718] RIP: 0033:0x7fa7e69058ec
[   69.177681][ T4718] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   69.177702][ T4718] RSP: 002b:00007ffd297ecef0 EFLAGS: 00010206
[   69.177718][ T4718] RAX: 0000000000000000 RBX: 00007fa7e6c85fa0 RCX: 0000000000000000
[   69.177730][ T4718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556eb75808
[   69.177746][ T4718] RBP: 00007fa7e6c87da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   69.177792][ T4718] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010d3a
[   69.177808][ T4718] R13: 00007fa7e6c86090 R14: ffffffffffffffff R15: 00007ffd297ed000
[   69.177834][ T4718]  </TASK>
[   69.177917][ T4718] memory: usage 307200kB, limit 307200kB, failcnt 329
[   69.424263][ T4718] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0
[   69.432384][ T4718] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[   69.439737][ T4718] Memory cgroup stats for /syz4:
[   69.450717][ T4718] cache 0
[   69.458984][ T4718] rss 4096
[   69.462035][ T4718] shmem 0
[   69.465095][ T4718] mapped_file 0
[   69.468669][ T4718] dirty 0
[   69.471942][ T4718] writeback 8192
[   69.475665][ T4718] workingset_refault_anon 25
[   69.480339][ T4718] workingset_refault_file 290
[   69.485032][ T4718] swap 307200
[   69.488334][ T4718] swapcached 12288
[   69.492196][ T4718] pgpgin 30226
[   69.495688][ T4718] pgpgout 30222
[   69.499327][ T4718] pgfault 30970
[   69.502970][ T4718] pgmajfault 17
[   69.506546][ T4718] inactive_anon 12288
[   69.510778][ T4718] active_anon 0
[   69.514806][ T4718] inactive_file 4096
[   69.518842][ T4718] active_file 0
[   69.522618][ T4718] unevictable 0
[   69.526685][ T4718] hierarchical_memory_limit 314572800
[   69.532363][ T4718] hierarchical_memsw_limit 9223372036854771712
[   69.538958][ T4718] total_cache 0
[   69.542505][ T4718] total_rss 4096
[   69.546168][ T4718] total_shmem 0
[   69.549858][ T4718] total_mapped_file 0
[   69.553955][ T4718] total_dirty 0
[   69.557517][ T4718] total_writeback 8192
[   69.561732][ T4718] total_workingset_refault_anon 25
[   69.566893][ T4718] total_workingset_refault_file 290
[   69.572166][ T4718] total_swap 307200
[   69.576025][ T4718] total_swapcached 12288
[   69.580326][ T4718] total_pgpgin 30226
[   69.584348][ T4718] total_pgpgout 30222
[   69.588625][ T4718] total_pgfault 30970
[   69.592846][ T4718] total_pgmajfault 17
[   69.596839][ T4718] total_inactive_anon 12288
[   69.602251][ T4718] total_active_anon 0
[   69.606301][ T4718] total_inactive_file 4096
[   69.611573][ T4718] total_active_file 0
[   69.615803][ T4718] total_unevictable 0
[   69.619969][ T4718] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.443,pid=4718,uid=0
[   69.634977][ T4718] Memory cgroup out of memory: Killed process 4718 (syz.4.443) total-vm:96004kB, anon-rss:1264kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   69.658690][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   69.730891][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   69.896965][ T4766] loop2: detected capacity change from 0 to 128
[   69.940590][ T4766] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.969285][ T4766] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   70.194672][ T4770] loop4: detected capacity change from 0 to 1024
[   70.209202][ T4770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   70.240092][ T4770] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   70.253169][ T4770] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[   70.277685][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.288642][ T4770] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   70.299467][ T4770] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.461: inode #1: comm syz.4.461: iget: illegal inode #
[   70.313867][ T4770] EXT4-fs (loop4): Remounting filesystem read-only
[   70.320519][ T4770] EXT4-fs (loop4): no journal found
[   70.524504][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   70.609815][ T4788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'.
[   70.647905][   T29] kauditd_printk_skb: 189 callbacks suppressed
[   70.647924][   T29] audit: type=1400 audit(1760894652.556:1187): avc:  denied  { block_suspend } for  pid=4789 comm="syz.2.468" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   70.718560][   T29] audit: type=1400 audit(1760894652.626:1188): avc:  denied  { execute } for  pid=4792 comm="syz.4.469" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   70.740463][   T29] audit: type=1400 audit(1760894652.626:1189): avc:  denied  { execute_no_trans } for  pid=4792 comm="syz.4.469" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   70.744680][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'.
[   70.844244][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[   70.957846][   T29] audit: type=1400 audit(1760894652.656:1190): avc:  denied  { create } for  pid=4795 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   70.979064][   T29] audit: type=1400 audit(1760894652.656:1191): avc:  denied  { write } for  pid=4795 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   71.000412][   T29] audit: type=1400 audit(1760894652.716:1192): avc:  denied  { create } for  pid=4797 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.020492][   T29] audit: type=1400 audit(1760894652.716:1193): avc:  denied  { bind } for  pid=4797 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.040740][   T29] audit: type=1400 audit(1760894652.786:1194): avc:  denied  { listen } for  pid=4797 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.061434][   T29] audit: type=1400 audit(1760894652.786:1195): avc:  denied  { write } for  pid=4797 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.082346][   T29] audit: type=1400 audit(1760894652.786:1196): avc:  denied  { accept } for  pid=4797 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.197542][ T4811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.476'.
[   71.666973][ T4830] loop0: detected capacity change from 0 to 512
[   71.674218][ T4830] EXT4-fs: Ignoring removed nobh option
[   71.706519][ T4830] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.485: corrupted inode contents
[   71.738567][ T4836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'.
[   71.739646][ T4830] EXT4-fs (loop0): Remounting filesystem read-only
[   71.766784][ T4830] EXT4-fs (loop0): 1 truncate cleaned up
[   71.784646][ T4830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.820488][ T4830] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.833332][ T4830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.997210][ T4844] veth4: entered promiscuous mode
[   72.002542][ T4844] veth4: entered allmulticast mode
[   72.082256][ T4846] bridge: RTM_NEWNEIGH with invalid ether address
[   72.130916][ T4851] netlink: 60 bytes leftover after parsing attributes in process `syz.4.492'.
[   72.262733][ T4857] loop0: detected capacity change from 0 to 1024
[   72.278563][ T4850] pim6reg1: entered promiscuous mode
[   72.284229][ T4850] pim6reg1: entered allmulticast mode
[   72.293867][ T4857] EXT4-fs: Ignoring removed oldalloc option
[   72.300132][ T4857] EXT4-fs: Ignoring removed bh option
[   72.371208][ T4857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.684260][ T4867] loop3: detected capacity change from 0 to 2048
[   72.722064][ T4867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.906683][ T4832] syz.1.486 (4832) used greatest stack depth: 6184 bytes left
[   72.961724][ T4875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.981437][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.015923][ T4875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.074041][ T4875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.145740][ T4875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.232041][ T4889] tipc: Started in network mode
[   73.237189][ T4889] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   73.246653][ T4889] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.293455][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.339826][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.356345][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.398612][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.454388][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.684331][ T4935] wg2: entered promiscuous mode
[   74.689499][ T4935] wg2: entered allmulticast mode
[   74.933517][ T4956] loop2: detected capacity change from 0 to 1024
[   74.949844][ T4956] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   75.117369][ T4962] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.293310][ T4970] loop1: detected capacity change from 0 to 512
[   75.304677][ T4971] __nla_validate_parse: 7 callbacks suppressed
[   75.304755][ T4971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[   75.321163][ T4971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[   75.352002][ T4971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[   75.362862][ T4971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[   75.407685][ T4970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.439776][ T4971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[   75.449243][ T4971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[   75.451410][ T4970] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.558820][ T4989] netlink: 'syz.0.544': attribute type 1 has an invalid length.
[   75.600819][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.617842][ T4989] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.626000][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'.
[   75.640696][ T4993] bond2 (unregistering): Released all slaves
[   75.669327][ T4992] netlink: 'syz.2.545': attribute type 30 has an invalid length.
[   75.808082][   T29] kauditd_printk_skb: 63 callbacks suppressed
[   75.808099][   T29] audit: type=1400 audit(1760894657.716:1258): avc:  denied  { create } for  pid=5000 comm="syz.0.549" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   75.856465][   T29] audit: type=1400 audit(1760894657.766:1259): avc:  denied  { rename } for  pid=5000 comm="syz.0.549" name="file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   75.919930][   T29] audit: type=1400 audit(1760894657.836:1260): avc:  denied  { mounton } for  pid=5000 comm="syz.0.549" path="/122/file7" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   75.982636][ T5004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.550'.
[   76.032597][   T29] audit: type=1400 audit(1760894657.936:1261): avc:  denied  { unlink } for  pid=3315 comm="syz-executor" name="file7" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   76.169996][ T5017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.554'.
[   76.182083][ T5017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.554'.
[   76.202456][ T5018] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.301736][ T5023] loop1: detected capacity change from 0 to 512
[   76.311320][ T5026] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.357461][ T5033] tipc: Started in network mode
[   76.362444][ T5033] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   76.385586][ T5033] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   76.399067][ T5023] EXT4-fs (loop1): orphan cleanup on readonly fs
[   76.417879][ T5026] vlan2: entered allmulticast mode
[   76.423380][ T5026] bond1: entered allmulticast mode
[   76.429904][ T5023] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.556: corrupted inode contents
[   76.471872][ T5023] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   76.498605][ T5023] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.556: corrupted inode contents
[   76.545446][   T29] audit: type=1326 audit(1760894658.426:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   76.546051][ T5038] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.570545][   T29] audit: type=1326 audit(1760894658.426:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   76.606812][   T29] audit: type=1326 audit(1760894658.426:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   76.609252][ T5023] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.556: mark_inode_dirty error
[   76.635362][   T29] audit: type=1326 audit(1760894658.426:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   76.676577][   T29] audit: type=1326 audit(1760894658.426:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   76.707342][   T29] audit: type=1326 audit(1760894658.436:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8e58efc9 code=0x7ffc0000
[   76.757895][ T5023] EXT4-fs (loop1): 1 orphan inode deleted
[   76.764844][ T5023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   76.781975][ T5038] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.797625][ T5042] loop3: detected capacity change from 0 to 256
[   76.800206][ T5042] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   76.800673][ T5042] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   76.858428][ T5038] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.902694][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.930684][ T5038] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.947180][ T3319] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   76.955459][ T3319] FAT-fs (loop3): Filesystem has been set read-only
[   76.973775][ T3319] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   77.054074][  T555] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.073271][  T555] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.087309][  T555] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.106741][  T555] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.155297][  T555] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.200630][  T555] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.266158][ T5056] netlink: 'syz.1.572': attribute type 30 has an invalid length.
[   77.276465][  T555] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.350650][  T555] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.529066][  T555] batadv1: left allmulticast mode
[   77.534781][  T555] batadv1: left promiscuous mode
[   77.540204][  T555] bridge0: port 3(batadv1) entered disabled state
[   77.548310][  T555] bridge_slave_1: left allmulticast mode
[   77.554916][  T555] bridge_slave_1: left promiscuous mode
[   77.561455][  T555] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.570976][  T555] bridge_slave_0: left allmulticast mode
[   77.576868][  T555] bridge_slave_0: left promiscuous mode
[   77.583335][  T555] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.675019][  T555] bond1 (unregistering): (slave gretap1): Releasing active interface
[   77.723732][  T555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.735360][  T555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.746454][  T555] bond0 (unregistering): Released all slaves
[   77.758482][  T555] bond1 (unregistering): Released all slaves
[   77.771095][  T555] bond2 (unregistering): Released all slaves
[   77.822982][  T555] tipc: Left network mode
[   77.844530][  T555] hsr_slave_0: left promiscuous mode
[   77.855588][  T555] hsr_slave_1: left promiscuous mode
[   77.872909][  T555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.880574][  T555] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.935434][  T555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.943239][  T555] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.015228][  T555] veth1_macvtap: left promiscuous mode
[   78.029208][  T555] veth0_macvtap: left promiscuous mode
[   78.036932][  T555] veth1_vlan: left promiscuous mode
[   78.046947][  T555] veth0_vlan: left promiscuous mode
[   78.176813][  T555] team0 (unregistering): Port device team_slave_1 removed
[   78.191737][  T555] team0 (unregistering): Port device team_slave_0 removed
[   78.282295][ T5057] chnl_net:caif_netlink_parms(): no params data found
[   78.373284][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.380891][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.401217][ T5057] bridge_slave_0: entered allmulticast mode
[   78.410964][ T5057] bridge_slave_0: entered promiscuous mode
[   78.419189][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.426304][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.459515][ T5057] bridge_slave_1: entered allmulticast mode
[   78.480624][ T5057] bridge_slave_1: entered promiscuous mode
[   78.556517][ T5057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.582131][ T5057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.601837][ T5125] loop2: detected capacity change from 0 to 2048
[   78.629730][ T5057] team0: Port device team_slave_0 added
[   78.651103][ T5057] team0: Port device team_slave_1 added
[   78.690594][ T5125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.706301][ T5125] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.721466][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.728536][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.755959][ T5057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.777771][ T5132] loop4: detected capacity change from 0 to 512
[   78.793457][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.800574][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.826890][ T5057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.846738][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.869907][ T5132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.918993][ T5132] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   79.000532][ T5057] hsr_slave_0: entered promiscuous mode
[   79.017153][ T5057] hsr_slave_1: entered promiscuous mode
[   79.041345][ T5132] team0 (unregistering): Port device team_slave_0 removed
[   79.073622][ T5132] team0 (unregistering): Port device team_slave_1 removed
[   79.197727][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.310106][ T5057] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   79.330298][ T5057] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   79.347674][ T5057] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   79.358039][ T5165] loop4: detected capacity change from 0 to 512
[   79.382463][ T5057] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   79.485875][ T5165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.519689][ T5165] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.558065][ T5057] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.632828][ T5057] 8021q: adding VLAN 0 to HW filter on device team0
[   79.664712][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.696280][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.703570][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.728094][ T1936] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.735320][ T1936] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.784092][ T5057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.794778][ T5057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.905046][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.914064][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.923660][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.932784][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.067485][ T5204] netem: change failed
[   80.485563][ T5215] netem: change failed
[   80.552036][ T5057] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.817808][ T5240] pim6reg1: entered promiscuous mode
[   80.823678][ T5240] pim6reg1: entered allmulticast mode
[   80.947992][ T5057] veth0_vlan: entered promiscuous mode
[   80.977523][ T5245] loop0: detected capacity change from 0 to 1024
[   80.985887][ T5245] EXT4-fs: Ignoring removed orlov option
[   81.000031][ T5057] veth1_vlan: entered promiscuous mode
[   81.027518][ T5245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.056874][ T5057] veth0_macvtap: entered promiscuous mode
[   81.066974][   T29] kauditd_printk_skb: 319 callbacks suppressed
[   81.066992][   T29] audit: type=1400 audit(1760894662.976:1587): avc:  denied  { create } for  pid=5244 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   81.095875][ T5246] __nla_validate_parse: 6 callbacks suppressed
[   81.095978][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'.
[   81.118584][ T5057] veth1_macvtap: entered promiscuous mode
[   81.193093][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.224447][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.271580][   T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.309167][   T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.318023][ T1936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.327342][   T29] audit: type=1400 audit(1760894663.236:1588): avc:  denied  { ioctl } for  pid=5260 comm="syz.2.606" path="socket:[12930]" dev="sockfs" ino=12930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.416808][ T1936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.439717][   T29] audit: type=1400 audit(1760894663.316:1589): avc:  denied  { mounton } for  pid=5057 comm="syz-executor" path="/root/syzkaller.8uVjVK/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   81.466253][   T29] audit: type=1400 audit(1760894663.316:1590): avc:  denied  { mount } for  pid=5057 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   81.490710][   T29] audit: type=1400 audit(1760894663.316:1591): avc:  denied  { mount } for  pid=5057 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   81.514224][   T29] audit: type=1400 audit(1760894663.326:1592): avc:  denied  { mounton } for  pid=5057 comm="syz-executor" path="/root/syzkaller.8uVjVK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   81.542271][   T29] audit: type=1400 audit(1760894663.326:1593): avc:  denied  { mounton } for  pid=5057 comm="syz-executor" path="/root/syzkaller.8uVjVK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   81.570787][   T29] audit: type=1400 audit(1760894663.346:1594): avc:  denied  { mounton } for  pid=5057 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   81.594319][   T29] audit: type=1400 audit(1760894663.346:1595): avc:  denied  { mount } for  pid=5057 comm="syz-executor" name="/" dev="gadgetfs" ino=3966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   81.658812][   T29] audit: type=1400 audit(1760894663.566:1596): avc:  denied  { read } for  pid=5268 comm="syz.5.571" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   81.839203][ T5275] netlink: 'syz.5.609': attribute type 30 has an invalid length.
[   82.015715][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.498647][ T5296] loop4: detected capacity change from 0 to 512
[   82.540917][ T5296] EXT4-fs (loop4): orphan cleanup on readonly fs
[   82.550124][ T5296] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.616: corrupted inode contents
[   82.589250][ T5296] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[   82.662181][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'.
[   82.736929][ T5296] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.616: corrupted inode contents
[   82.759345][ T5296] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.616: mark_inode_dirty error
[   82.799141][ T5296] EXT4-fs (loop4): 1 orphan inode deleted
[   82.805490][ T5296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   82.956501][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.433581][ T5310] xt_CT: You must specify a L4 protocol and not use inversions on it
[   83.964190][ T5322] loop2: detected capacity change from 0 to 1024
[   83.971543][ T5322] EXT4-fs: Ignoring removed nobh option
[   84.006402][ T5322] EXT4-fs: Ignoring removed orlov option
[   84.028038][ T5322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.123486][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'.
[   84.192725][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.487983][ T5350] loop2: detected capacity change from 0 to 512
[   84.555358][ T5350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.569985][ T5350] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   84.612685][ T5350] team0 (unregistering): Port device team_slave_0 removed
[   84.621669][ T5350] team0 (unregistering): Port device team_slave_1 removed
[   84.722976][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.791818][ T5363] bridge: RTM_NEWNEIGH with invalid ether address
[   85.661138][ T5385] pim6reg: entered allmulticast mode
[   85.668260][ T5385] pim6reg: left allmulticast mode
[   85.964148][ T5391] loop5: detected capacity change from 0 to 512
[   85.991062][ T5391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.004110][ T5391] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.051170][ T5391] team0 (unregistering): Port device team_slave_0 removed
[   86.082569][ T5391] team0 (unregistering): Port device team_slave_1 removed
[   86.190740][ T5057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.612050][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[   86.628645][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[   86.787806][ T5433] netlink: 'syz.0.664': attribute type 1 has an invalid length.
[   86.804420][ T5433] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.819805][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'.
[   86.833476][ T5433] bond2 (unregistering): Released all slaves
[   86.948171][ T5440] loop5: detected capacity change from 0 to 2048
[   86.974836][ T5440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.004079][   T29] kauditd_printk_skb: 260 callbacks suppressed
[   87.004161][   T29] audit: type=1400 audit(1760894668.916:1857): avc:  denied  { mounton } for  pid=5439 comm="syz.5.668" path="/14/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   87.051459][   T29] audit: type=1400 audit(1760894668.966:1858): avc:  denied  { remove_name } for  pid=5057 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.052046][ T5057] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   87.076981][   T29] audit: type=1400 audit(1760894668.966:1859): avc:  denied  { rmdir } for  pid=5057 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.117365][   T29] audit: type=1400 audit(1760894669.026:1860): avc:  denied  { unlink } for  pid=5057 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.141860][   T29] audit: type=1400 audit(1760894669.026:1861): avc:  denied  { unlink } for  pid=5057 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   87.143600][ T5057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.166208][   T29] audit: type=1400 audit(1760894669.036:1862): avc:  denied  { unmount } for  pid=5057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   87.166239][   T29] audit: type=1400 audit(1760894669.056:1863): avc:  denied  { unlink } for  pid=5057 comm="syz-executor" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   87.294405][   T29] audit: type=1400 audit(1760894669.206:1864): avc:  denied  { read write } for  pid=5450 comm="syz.5.669" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   87.347893][   T29] audit: type=1400 audit(1760894669.206:1865): avc:  denied  { open } for  pid=5450 comm="syz.5.669" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   87.441377][   T29] audit: type=1326 audit(1760894669.356:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   87.470010][ T5457] capability: warning: `syz.2.675' uses 32-bit capabilities (legacy support in use)
[   87.490594][ T5457] pimreg: entered allmulticast mode
[   87.597795][ T5467] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.679'.
[   88.253206][ T5480] sch_fq: defrate 4294967295 ignored.
[   88.509836][ T5490] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.581346][ T5490] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.641912][ T5490] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.730311][ T5490] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.802052][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.816777][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.847127][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.879417][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.503049][ T5512] netlink: 'syz.1.697': attribute type 21 has an invalid length.
[   89.525558][ T5512] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[   89.533499][ T5512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.697'.
[   89.580141][ T5512] xt_nat: multiple ranges no longer supported
[   89.722212][ T5522] dummy0: left allmulticast mode
[   89.747604][ T5522] bridge0: port 3(dummy0) entered disabled state
[   89.773059][ T5522] bridge_slave_0: left allmulticast mode
[   89.778805][ T5522] bridge_slave_0: left promiscuous mode
[   89.784644][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.833749][ T5522] bridge_slave_1: left allmulticast mode
[   89.839694][ T5522] bridge_slave_1: left promiscuous mode
[   89.845676][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.873254][ T5529] netlink: 'syz.4.702': attribute type 10 has an invalid length.
[   89.881182][ T5529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'.
[   89.893529][ T5522] bond0: (slave bond_slave_0): Releasing backup interface
[   89.932224][ T5522] bond0: (slave bond_slave_1): Releasing backup interface
[   89.965381][ T5522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   90.002836][ T5529] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   90.565254][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'.
[   90.602970][ T5565] loop1: detected capacity change from 0 to 2048
[   90.606914][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'.
[   90.643842][ T5565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.729427][ T3313] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   90.822615][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.876794][ T5579] netem: change failed
[   91.653577][ T5621] loop2: detected capacity change from 0 to 2048
[   91.728009][ T5621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.829553][ T5630] syzkaller1: entered promiscuous mode
[   91.835154][ T5630] syzkaller1: entered allmulticast mode
[   91.869012][ T3314] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   91.912221][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.417905][ T5585] syz.1.710 (5585) used greatest stack depth: 5080 bytes left
[   92.498224][ T5666] loop2: detected capacity change from 0 to 1024
[   92.506209][ T5666] EXT4-fs: Ignoring removed orlov option
[   92.593174][ T5666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.612626][   T29] kauditd_printk_skb: 356 callbacks suppressed
[   92.612645][   T29] audit: type=1400 audit(1760894674.526:2223): avc:  denied  { setattr } for  pid=5665 comm="syz.2.729" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   92.989665][   T29] audit: type=1400 audit(1760894674.668:2224): avc:  denied  { rename } for  pid=5665 comm="syz.2.729" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   93.107389][ T5685] syzkaller0: entered allmulticast mode
[   93.114968][ T5685] syzkaller0: entered promiscuous mode
[   93.124508][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.146443][ T5685] syzkaller0 (unregistering): left allmulticast mode
[   93.153802][ T5685] syzkaller0 (unregistering): left promiscuous mode
[   93.339970][   T29] audit: type=1326 audit(1760894675.238:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.363825][   T29] audit: type=1326 audit(1760894675.238:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.387339][   T29] audit: type=1326 audit(1760894675.248:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.411048][   T29] audit: type=1326 audit(1760894675.248:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.435121][   T29] audit: type=1326 audit(1760894675.248:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.475684][   T29] audit: type=1326 audit(1760894675.369:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.499314][   T29] audit: type=1326 audit(1760894675.369:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.523738][   T29] audit: type=1326 audit(1760894675.369:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.5.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[   93.557561][ T5693] loop2: detected capacity change from 0 to 512
[   93.618657][ T5693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   94.035934][ T5693] EXT4-fs (loop2): 1 truncate cleaned up
[   94.042332][ T5693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.060216][ T5715] loop4: detected capacity change from 0 to 512
[   94.074287][ T5715] EXT4-fs: Ignoring removed bh option
[   94.110943][ T5715] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   94.120458][ T5715] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   94.150694][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.176651][ T5715] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   94.207461][ T5715] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   94.403435][ T5715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.427929][ T5715] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.747: bg 0: block 353: padding at end of block bitmap is not set
[   94.492357][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.720427][ T5723] netlink: 'syz.0.750': attribute type 10 has an invalid length.
[   94.735568][ T5723] team0: Port device dummy0 added
[   94.772844][ T5723] netlink: 'syz.0.750': attribute type 10 has an invalid length.
[   94.802074][ T5723] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   94.836343][ T5723] team0: Failed to send options change via netlink (err -105)
[   94.860200][ T5723] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   94.871205][ T5723] team0: Port device dummy0 removed
[   94.889805][ T5723] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.298253][ T5742] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.340869][ T5742] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.403533][ T5742] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.450519][ T5742] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.507560][ T1751] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.519747][ T1751] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.531267][ T1751] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.543838][ T1751] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.049094][ T5774] syzkaller0: entered allmulticast mode
[   96.071057][ T5774] syzkaller0: entered promiscuous mode
[   96.087086][ T5774] syzkaller0 (unregistering): left allmulticast mode
[   96.094203][ T5774] syzkaller0 (unregistering): left promiscuous mode
[   96.415254][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[   96.424709][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[   96.448756][ T5786] netlink: 'syz.2.774': attribute type 13 has an invalid length.
[   96.467917][ T5788] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.519283][ T5788] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.569658][ T5788] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.614288][ T5794] loop2: detected capacity change from 0 to 512
[   96.622454][ T5788] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.660937][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.674035][ T5794] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.710110][ T1751] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.725688][ T5794] EXT4-fs (loop2): shut down requested (0)
[   96.735567][ T5794] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=16
[   96.736552][ T1751] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.744714][ T5794] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=16
[   96.761904][ T5794] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=16
[   96.786414][ T1751] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.795281][  T555] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.804766][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.838805][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'.
[   97.006059][ T5822] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.045242][ T5825] netlink: 'syz.4.790': attribute type 13 has an invalid length.
[   97.127521][ T5822] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.220684][ T5822] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.300228][ T5822] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.347860][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.356480][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.411865][  T555] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.429171][  T555] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.455524][  T555] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.472680][  T555] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.738395][   T29] kauditd_printk_skb: 490 callbacks suppressed
[   97.738413][   T29] audit: type=1400 audit(1760894679.651:2723): avc:  denied  { watch } for  pid=5869 comm="syz.2.806" path="/159/file0" dev="tmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   97.940496][   T29] audit: type=1400 audit(1760894679.851:2724): avc:  denied  { name_bind } for  pid=5877 comm="syz.1.809" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   98.151878][ T5886] SELinux: ebitmap: truncated map
[   98.157711][   T29] audit: type=1400 audit(1760894680.061:2725): avc:  denied  { load_policy } for  pid=5885 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   98.196626][ T5886] SELinux: failed to load policy
[   98.253013][   T29] audit: type=1400 audit(1760894680.161:2726): avc:  denied  { kexec_image_load } for  pid=5892 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   98.303862][   T29] audit: type=1326 audit(1760894680.211:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   98.327635][   T29] audit: type=1326 audit(1760894680.211:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   98.351185][   T29] audit: type=1326 audit(1760894680.211:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   98.375056][   T29] audit: type=1326 audit(1760894680.211:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   98.399711][   T29] audit: type=1326 audit(1760894680.211:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   98.516536][   T29] audit: type=1326 audit(1760894680.291:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812548efc9 code=0x7ffc0000
[   98.567816][ T5898] loop2: detected capacity change from 0 to 4096
[   98.614804][ T5898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.666561][ T5903] syzkaller0: entered promiscuous mode
[   98.672241][ T5903] syzkaller0: entered allmulticast mode
[   98.821263][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.057066][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'.
[   99.354570][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[   99.366631][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  100.340701][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'.
[  100.713104][ T6002] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  100.725485][ T6002] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  100.800434][ T6007] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.857'.
[  101.352760][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'.
[  101.362147][ T6026] bridge_slave_1: left allmulticast mode
[  101.367823][ T6026] bridge_slave_1: left promiscuous mode
[  101.373569][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.387562][ T6026] bridge_slave_0: left allmulticast mode
[  101.393268][ T6026] bridge_slave_0: left promiscuous mode
[  101.399091][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.461918][ T6034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6034 comm=syz.4.869
[  101.602526][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'.
[  102.450996][ T6092] netlink: 60 bytes leftover after parsing attributes in process `syz.4.889'.
[  102.467805][ T6105] ip6t_srh: unknown srh match flags  4000
[  102.965019][   T29] kauditd_printk_skb: 341 callbacks suppressed
[  102.965036][   T29] audit: type=1400 audit(1760894684.882:3074): avc:  denied  { bind } for  pid=6176 comm="syz.5.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  103.040338][ T6184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.903'.
[  103.073746][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.084684][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.340249][   T29] audit: type=1400 audit(1760894685.252:3075): avc:  denied  { read } for  pid=6194 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.502106][   T29] audit: type=1400 audit(1760894685.412:3076): avc:  denied  { bind } for  pid=6267 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  103.523110][   T29] audit: type=1400 audit(1760894685.412:3077): avc:  denied  { name_bind } for  pid=6267 comm="syz.0.913" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  103.545039][   T29] audit: type=1400 audit(1760894685.412:3078): avc:  denied  { node_bind } for  pid=6267 comm="syz.0.913" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  104.089784][ T6296] loop2: detected capacity change from 0 to 512
[  104.107567][ T6296] EXT4-fs: test_dummy_encryption option not supported
[  104.112838][   T29] audit: type=1400 audit(1760894686.023:3079): avc:  denied  { mounton } for  pid=6295 comm="syz.2.924" path="/bus" dev="ramfs" ino=15620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  104.175181][ T6233] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  104.185488][ T6298] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.212358][ T6233] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  104.224301][ T6233] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  104.235305][ T6302] netlink: 180 bytes leftover after parsing attributes in process `syz.1.927'.
[  104.341878][   T29] audit: type=1400 audit(1760894686.253:3080): avc:  denied  { ioctl } for  pid=6308 comm="syz.1.930" path="socket:[16863]" dev="sockfs" ino=16863 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  104.381808][   T29] audit: type=1400 audit(1760894686.283:3081): avc:  denied  { connect } for  pid=6311 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  104.402145][   T29] audit: type=1400 audit(1760894686.293:3082): avc:  denied  { ioctl } for  pid=6316 comm="syz.0.933" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  104.522395][   T29] audit: type=1400 audit(1760894686.433:3083): avc:  denied  { getopt } for  pid=6329 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  105.276958][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.287914][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.305535][ T6355] netlink: 'syz.4.947': attribute type 39 has an invalid length.
[  105.835265][ T6298] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.845313][ T6298] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  105.980118][ T6298] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.990233][ T6298] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  106.034678][ T6298] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.045158][ T6298] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  106.143480][ T6226] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  106.152811][ T6226] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  106.249688][ T6226] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  106.258488][ T6226] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  106.292952][ T6226] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  106.301933][ T6226] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  106.316728][ T6391] loop2: detected capacity change from 0 to 1024
[  106.335076][ T6391] EXT4-fs: Mount option(s) incompatible with ext2
[  106.345049][ T6226] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  106.353572][ T6226] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  106.388771][ T6391] loop2: detected capacity change from 0 to 128
[  106.451055][ T6391] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  106.459073][ T6391] FAT-fs (loop2): Filesystem has been set read-only
[  106.466730][ T6391] syz.2.961: attempt to access beyond end of device
[  106.466730][ T6391] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  106.751259][ T6417] veth2: entered promiscuous mode
[  106.756586][ T6417] veth2: entered allmulticast mode
[  106.854069][ T6422] loop5: detected capacity change from 0 to 128
[  106.923181][ T6422] FAT-fs (loop5): bogus number of reserved sectors
[  106.929846][ T6422] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  106.939340][ T6422] FAT-fs (loop5): Can't find a valid FAT filesystem
[  107.221539][ T6438] loop5: detected capacity change from 0 to 1024
[  107.258754][ T6438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.325292][ T5057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.425994][ T6446] SELinux: failed to load policy
[  107.921277][ T6476] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.012046][   T29] kauditd_printk_skb: 149 callbacks suppressed
[  108.012065][   T29] audit: type=1326 audit(1760894689.925:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb6f808efc9 code=0x7ffc0000
[  108.049976][ T6485] : renamed from veth0_to_bond
[  108.055341][   T29] audit: type=1326 audit(1760894689.965:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f808efc9 code=0x7ffc0000
[  108.079173][   T29] audit: type=1326 audit(1760894689.965:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f808efc9 code=0x7ffc0000
[  108.110082][ T6476] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.204460][ T6476] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.289123][ T6476] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.353298][ T6495] loop5: detected capacity change from 0 to 164
[  108.365032][ T6495] Unable to read rock-ridge attributes
[  108.380517][   T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.384536][   T29] audit: type=1400 audit(1760894690.295:3236): avc:  denied  { mount } for  pid=6494 comm="syz.5.1002" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  108.453761][ T6233] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.470322][   T29] audit: type=1326 audit(1760894690.345:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  108.494787][   T29] audit: type=1326 audit(1760894690.345:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  108.519399][   T29] audit: type=1326 audit(1760894690.345:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  108.543479][   T29] audit: type=1326 audit(1760894690.345:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  108.543619][   T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.567681][   T29] audit: type=1326 audit(1760894690.345:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  108.599993][   T29] audit: type=1326 audit(1760894690.345:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  108.600862][   T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.097227][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'.
[  109.146950][ T6551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.236317][ T6565] team_slave_1: Caught tx_queue_len zero misconfig
[  109.343071][ T6583] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1021'.
[  109.567002][ T6614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'.
[  110.479937][ T6728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6728 comm=syz.1.1047
[  110.969207][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1052'.
[  111.121561][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'.
[  111.140809][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'.
[  111.247302][ T6763] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1062'.
[  111.343697][ T6775] gretap0: refused to change device tx_queue_len
[  111.352171][ T6775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  111.499942][ T6797] loop2: detected capacity change from 0 to 128
[  111.539407][ T6802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6802 comm=syz.5.1076
[  111.623990][ T6811] loop2: detected capacity change from 0 to 128
[  111.636906][ T6811] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  111.644824][ T6811] FAT-fs (loop2): Filesystem has been set read-only
[  111.704156][ T6817] loop2: detected capacity change from 0 to 512
[  111.724728][ T6817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.737584][ T6817] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.792882][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.855830][ T6827] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1086'.
[  112.492202][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'.
[  112.542487][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'.
[  112.810589][ T6889] tipc: Started in network mode
[  112.815727][ T6889] tipc: Node identity ac14140f, cluster identity 4711
[  112.822915][ T6889] tipc: New replicast peer: 255.255.255.255
[  112.829439][ T6889] tipc: Enabled bearer <udp:syz2>, priority 10
[  112.879276][ T6900] loop5: detected capacity change from 0 to 128
[  112.891744][ T6900] syz.5.1114: attempt to access beyond end of device
[  112.891744][ T6900] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128
[  112.906411][ T6900] syz.5.1114: attempt to access beyond end of device
[  112.906411][ T6900] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128
[  112.920675][ T6900] Buffer I/O error on dev loop5, logical block 79, lost async page write
[  112.938788][ T6905] netlink: 'syz.1.1119': attribute type 4 has an invalid length.
[  112.970893][ T6905] netlink: 'syz.1.1119': attribute type 4 has an invalid length.
[  112.980292][ T6900] syz.5.1114: attempt to access beyond end of device
[  112.980292][ T6900] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128
[  112.994712][ T6900] Buffer I/O error on dev loop5, logical block 80, lost async page write
[  113.050549][ T6899] syz.5.1114: attempt to access beyond end of device
[  113.050549][ T6899] loop5: rw=524288, sector=154, nr_sectors = 8 limit=128
[  113.065011][ T6899] syz.5.1114: attempt to access beyond end of device
[  113.065011][ T6899] loop5: rw=0, sector=154, nr_sectors = 8 limit=128
[  113.078714][ T6899] syz.5.1114: attempt to access beyond end of device
[  113.078714][ T6899] loop5: rw=0, sector=154, nr_sectors = 8 limit=128
[  113.092416][ T6899] syz.5.1114: attempt to access beyond end of device
[  113.092416][ T6899] loop5: rw=0, sector=154, nr_sectors = 8 limit=128
[  113.108296][ T6899] syz.5.1114: attempt to access beyond end of device
[  113.108296][ T6899] loop5: rw=0, sector=154, nr_sectors = 8 limit=128
[  113.124261][ T6899] syz.5.1114: attempt to access beyond end of device
[  113.124261][ T6899] loop5: rw=0, sector=154, nr_sectors = 8 limit=128
[  113.138370][ T6899] syz.5.1114: attempt to access beyond end of device
[  113.138370][ T6899] loop5: rw=0, sector=154, nr_sectors = 8 limit=128
[  113.462026][   T29] kauditd_printk_skb: 962 callbacks suppressed
[  113.462043][   T29] audit: type=1400 audit(1760894695.387:4205): avc:  denied  { write } for  pid=6928 comm="syz.5.1128" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  113.675704][ T6951] loop5: detected capacity change from 0 to 512
[  113.682850][ T6951] EXT4-fs: Ignoring removed nobh option
[  113.690075][ T6951] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8
[  113.901167][ T6956] loop9: detected capacity change from 0 to 7
[  113.907902][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.928687][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.936807][ T6956]  loop9: unable to read partition table
[  113.943452][ T3672] tipc: Node number set to 2886997007
[  113.971865][ T6956] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  113.971865][ T6956] 
) failed (rc=-5)
[  114.088241][   T29] audit: type=1326 audit(1760894696.007:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  114.123523][ T6966] loop5: detected capacity change from 0 to 512
[  114.168303][   T29] audit: type=1326 audit(1760894696.047:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  114.186955][ T6966] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  114.192119][   T29] audit: type=1326 audit(1760894696.047:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  114.223902][   T29] audit: type=1326 audit(1760894696.047:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  114.248038][   T29] audit: type=1326 audit(1760894696.047:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efe640eefc9 code=0x7ffc0000
[  114.272100][   T29] audit: type=1326 audit(1760894696.047:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efe640ef003 code=0x7ffc0000
[  114.296022][   T29] audit: type=1326 audit(1760894696.047:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efe640eda7f code=0x7ffc0000
[  114.319653][   T29] audit: type=1326 audit(1760894696.047:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efe640ef057 code=0x7ffc0000
[  114.344294][   T29] audit: type=1326 audit(1760894696.047:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe640ed810 code=0x7ffc0000
[  114.522744][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.542412][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.564550][ T6981] __nla_validate_parse: 2 callbacks suppressed
[  114.564571][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1148'.
[  114.800924][ T6997] lo: Caught tx_queue_len zero misconfig
[  114.883200][ T6999] netlink: 'syz.2.1154': attribute type 4 has an invalid length.
[  114.931470][ T6999] netlink: 'syz.2.1154': attribute type 4 has an invalid length.
[  114.955698][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'.
[  115.536991][ T7011] infiniband syz2: set down
[  115.541766][ T7011] infiniband syz2: added bond0
[  115.604986][ T7011] RDS/IB: syz2: added
[  116.403438][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'.
[  116.667180][ T7030] loop5: detected capacity change from 0 to 512
[  116.689841][ T7030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.709919][ T7030] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.722199][ T7042] netlink: 'syz.4.1167': attribute type 4 has an invalid length.
[  116.743802][ T7042] netlink: 'syz.4.1167': attribute type 4 has an invalid length.
[  116.841234][ T5057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.894403][ T7054] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1170'.
[  116.909931][ T7054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.931829][ T7054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.944505][ T7054] bond0 (unregistering): Released all slaves
[  117.068294][ T7072] netlink: 'syz.5.1173': attribute type 39 has an invalid length.
[  117.323105][ T7093] IPv6: Can't replace route, no match found
[  117.636416][ T7126] loop2: detected capacity change from 0 to 1024
[  117.646676][ T7126] EXT4-fs: Ignoring removed orlov option
[  117.677189][ T7126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  117.694777][ T7126] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.738344][ T1824] ==================================================================
[  117.746726][ T1824] BUG: KCSAN: data-race in alloc_pid / copy_process
[  117.753616][ T1824] 
[  117.755946][ T1824] read-write to 0xffffffff8685feb8 of 4 bytes by task 1466 on cpu 0:
[  117.764369][ T1824]  alloc_pid+0x539/0x720
[  117.768651][ T1824]  copy_process+0xe25/0x2000
[  117.773274][ T1824]  kernel_clone+0x16c/0x5c0
[  117.778107][ T1824]  user_mode_thread+0x7d/0xb0
[  117.782802][ T1824]  call_usermodehelper_exec_work+0x7a/0x160
[  117.788743][ T1824]  process_scheduled_works+0x4ce/0x9d0
[  117.794439][ T1824]  worker_thread+0x582/0x770
[  117.799311][ T1824]  kthread+0x489/0x510
[  117.803395][ T1824]  ret_from_fork+0x122/0x1b0
[  117.808086][ T1824]  ret_from_fork_asm+0x1a/0x30
[  117.812862][ T1824] 
[  117.815192][ T1824] read to 0xffffffff8685feb8 of 4 bytes by task 1824 on cpu 1:
[  117.822804][ T1824]  copy_process+0x17fc/0x2000
[  117.827510][ T1824]  kernel_clone+0x16c/0x5c0
[  117.832029][ T1824]  user_mode_thread+0x7d/0xb0
[  117.836745][ T1824]  call_usermodehelper_exec_work+0x7a/0x160
[  117.842687][ T1824]  process_scheduled_works+0x4ce/0x9d0
[  117.848173][ T1824]  worker_thread+0x582/0x770
[  117.852860][ T1824]  kthread+0x489/0x510
[  117.856946][ T1824]  ret_from_fork+0x122/0x1b0
[  117.861560][ T1824]  ret_from_fork_asm+0x1a/0x30
[  117.866412][ T1824] 
[  117.868738][ T1824] value changed: 0x80000117 -> 0x80000118
[  117.874611][ T1824] 
[  117.876949][ T1824] Reported by Kernel Concurrency Sanitizer on:
[  117.883196][ T1824] CPU: 1 UID: 0 PID: 1824 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  117.893373][ T1824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  117.903782][ T1824] Workqueue: events_unbound call_usermodehelper_exec_work
[  117.911071][ T1824] ==================================================================
[  118.035021][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.