last executing test programs:

6.048641089s ago: executing program 1 (id=3755):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000190081084e81f783db4cb9040a07290006007c09e8fc55a10a0015000600142603600e12080002008100040104000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
getcwd(&(0x7f0000000340)=""/107, 0x6b)
syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
r4 = socket(0x28, 0x5, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r7 = getpid()
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
bind$vsock_stream(r4, 0x0, 0x0)
listen(r4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x3a, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94)

3.416745642s ago: executing program 3 (id=3770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2, 0x184)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendfile(r1, r2, &(0x7f0000000080)=0x2, 0x80000000)
capset(0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
copy_file_range(r1, &(0x7f0000000000)=0x401, r1, 0x0, 0x7, 0x0)
mq_timedsend(r1, &(0x7f0000000000)="d5dbebdf3673589f4217a4ae8752e5db5d01bfad955f2f40ad03285afc04729c8218599ef7afb648aa1efc57d37eeeb25e82769a7b2546e68da4d9a0da9b22637ef15486941ecda87486b9f253a765ec3841af7475b8742985f88ddcbc701a1a259703bcea12252410604ac12e3f30063f7a41c040153c3836c8586a6b30d2c29875e80677eda28b", 0x88, 0x0, &(0x7f00000000c0)={0x0, 0x3938700})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r4, &(0x7f0000002640)=""/4103, 0x1007, 0xd34)
bind$unix(r5, &(0x7f0000000240)=@file={0x1, './file0/file0/file0\x00'}, 0x6e)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000002580)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x4, 0x2, 0xb7fe, 0x2]}, &(0x7f0000002600)=0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet(r4, &(0x7f00000024c0)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000006c0)="2302ce511a357134b0f0b339214df4dab63e81d16cade14529fde510bce6bf314153c85c476346cfadf0553ac68af43185551f1ea720cf66b0853c657483adf95b1d3d3e3cf1d38a76d2f0dd94a1fbc3f0030750231071e110f63521024fe9a9eeb39f1391e7e7b0c4100356fd78d6d6bf1439", 0x73}, {&(0x7f0000000740)="9e3dc87bc31a152d05bd16a7be7fe2ba19f0e8e8518ab7c2db1a19b4029f4559b3769fe4948cc7fada3dd1be5c3d7ab6dc3c3e6c634081d164d0dc70c88f1eee8b84bbc81a29c2097cb7e30eb1e8d6587deb12e27b3c9ce3c148135581a2bc6bcfd71ab48ae8c80178078527921da9d944a293a7d40003f9f8e846049d7591fae96fca9bfc6d2e871ffb3e9c8cd1ee8449a0cb85eff50dee04f9f6b52b2797291e783dda0627b9ea9a7221c588969ff7e68c30444f51e7766b1a9965807fe01a156c2fd55d0405257bf0a9ab050df0c236c02510e4896279d573510e9504a5a2415af4fde6e9f23276c0329e76518c8833c4", 0xf2}, {0x0}, {0x0}, {&(0x7f0000000980)="10a5945aac6547268d867fcab596557a7b41f2c0a031b3472cdf7fbb7a8a97307d58809f82933458fa259920e7323944526262aeaa21929a5d76132290ff8fb6475ebc692783168fae2e41089c77bc82eeae309e2c1c20e067f746c3f2479ac24a6ed88b6ffdc3cd683ae60ff1ba89aa2ded989237125b02158be9fd58250b6e50f3f4da9f02fe0ed6d4e566067eec874cca4173def25220d9c9a4ef60ea51d95ce12e357715ad37239c0552bc6e9e8bda8bccb5822144f083d66d2648ec29dad69954a7c81824", 0xc7}, {&(0x7f0000000a80)="a1b3a58fefd36352d0793d2385d41c120e5a9d6e5ce65edb336f968f7b452d055affa418136865a43eb9ab11cdd2735a7a0dd06ba279b0f0347fc7c9629b399126d0d6b818084cff9ba149b15f3ddcb9ae17f4d40e92558269abaa3ba4d40cb5761eb36016c775cdaa6716edadcebe7ba47a3bfd9f6819af6767d425123b46638403e5c6c0b5c62be81fe2fdf6679d4433e6aaddd1b07fd59823d0a2dc537fdd48d34b260b0e322d0aac8e86a5200a41bfd379881c96d1150cc5f24c1bb3f790fb19265ee72dc44597caf7d393ef10a27f8898129baada565462d0ce56411679ab79a8133e0990e524434f57", 0xec}], 0x6}}, {{&(0x7f0000000c00)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0}}, {{&(0x7f0000000e00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000e40)}, {0x0}, {&(0x7f0000001000)="bc830f56c2f88678d2d6eacbdeec1e4651933a105532b174cb79aa02270930b8a204a3c17ce029f4326cab6f0de8a9a0b08a08ac54caed7ed7d95fb8a264f708aa99413c644c8359316b957e38b7a000aed192e52267742b623f842a9447987f2962729d87074f5c03fd026f1793f95ec151fe2c57418bc43510982e9010e42be7ac6406d8df1badcfc9f1b3c59449a5a570b95b8398a2a641ec77f0d5de5c2f0196a81eeb51ee5817df0ab6908f85c632a8c2133eb853d8cb", 0xb9}, {&(0x7f00000010c0)="c86b1925841695ebd75b222dd6bc665550c4c9e6f5dcffa97ffba61eb11f90a51bea79bbb03cc54c9c999bb7074d1e4d1de3bb7cbd32b0510a22e007015199f742e901ec53a436a07ba10323204b826a0017e8accad6678a445395a263f0738f71f9d23da7ed2d160939e18e22d910fddc93e48b2d43966006f2e0b0466bc1a64013fd0893de4f2b0798f9890106622385f46ead8ac0985b23977bf89cf796b52e85d66f", 0xa4}, {&(0x7f0000001180)="5f1c6d283a494bb0792bc168ef639cd1f084e5e710eb72b6559f5e388fe6f0b5195c9cbc28852c6e279d20510ddae2fe8c56ad1fd5abb94c5c9a4fdd19b66efc57998b2c979552816278085d48f74bbde04f386ecb1b135ad271bc85437785fd9e7cee70adf6c9581146699bc3b9056240ee2c1895562f827d3e2fa8eac634ede8a37320f198db18a3b18ef2d2ede515fc176bbbaf3ef71b4234a1a9c0a6b00d8910de345b30eb215d332d5babd42fe0e1558c0c5d6412f8", 0xb8}, {&(0x7f0000001280)="bbfa46aa45234c1857f8b5198a3620c462c9dd875a1b6c37695141d057fe46802217f95d0b84febf6198386c0f26be4792ce40dbad2a3199175a53a9104ecf87c374a24ccb2703bde93d14cde1f4b3f34ed8825c7a0af4075e4ed1aed9197c96e1c43d48ffe81aee9c09e44a1b9301e4e4118c9528", 0x75}, {&(0x7f0000001300)="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", 0xff0}, {&(0x7f0000002300)="d19705ed8128ee223b4c8783a6c03302b403589cc281dee2ff002f66b1306ff8041c127d0052b849643324732b979b45c22c23217e600d598927ae3dbe0d21821bd7e02eb38dcf38272d81b2420581bfbfc8ab8b896bc1da4cbfb4b69be8a0744ca0067983e1d153e383e402d194df3b74e641df0dd6cf0ed485fb1b5129e6dcdd220a9860fcd6a00d3096efad94864fcf2d1c797d49b5ab754b8c", 0x9b}, {&(0x7f0000003680)="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", 0x1000}], 0x9, &(0x7f0000002480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}}], 0x3, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0)
ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000000)=0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, &(0x7f0000000400)=""/154}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00120000000000626f6e60000000000c00028008000300000000ff"], 0x3c}}, 0x0)

3.272101194s ago: executing program 4 (id=3772):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3.219046568s ago: executing program 2 (id=3773):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3.175562892s ago: executing program 1 (id=3774):
mount(0x0, 0x0, 0x0, 0x2080000, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRESOCT, @ANYRES8=r0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073118b00000000008510000002000c64e1e7ffeea421b4e6d9d00085000000b00000009500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x4, 0x56}]})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_trace_dev_match', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0xf, 0x5}}, './file0/file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00c10900000000020000000000000000000000020000000000000000"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1a1d01)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x1, &(0x7f0000000340)="04ab276524f412429521613b84ddb319fd1a14e3586cb5b625dfb57b9ea054dafaf361b62f37b0707e1da0dc61ad"})
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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")
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r7, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r7, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

2.943501111s ago: executing program 2 (id=3775):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000940), 0x1, 0x79d, &(0x7f0000000980)="$eJzs3d9rW2UfAPDvSdt16/a+7QsvvNt7VRB0MJbaWTcFLypeiOBgoNduJc3KbNqUJh1rKcwhgjeCDi8Evdm1P+adt/641X9Bb2TIxtRuOFGQyEmTJmuTNtv6Y7OfD5zteXKe9DnfnPP8SM5DEsCuNZj+k4k4FBHvJhH9tceTiOipprojRmNfWu7O0mIu3ZKoVF75JamWub20mIum56T21zIHoze+fiviSGZtvaX5hcmxQiE/GxEzETFUnpoZKs0vHD03NTaRn8hPHx8eGTl24ukTvZsX62/fLRy48d6LT3w2+seb/7v6zjdJjMaB2r7mODbLYAzWXpOeGF2174XNrmyHJTt9ANyXtGl2LbfyOBT90VVNdabzkgDAw+RiRFQAgF0mMf4DwC5T/xzg9tJiLt0qF3f284jtdvP5iNi7HH/9/ubynu7aPbu91fugfbeTu+53JBExsAn1D0bER1+89km6xRbdhwRo5Y1LEXFmYLDe/zf6n2TNmoVlnS/IeLKDMoOr8vo/2D5fpvOfZxrzv0b7y6zMf6LF/Ke3Rdu9H4MRe5rza9t/5vomVNNWOv97rqextu1OU/w1A1213L+qc76e5Oy5Qj7t2/4dEYejpzfND69Tx+Fbf92664GuRrJ5/vfr5dc/TutP/2+UyFzvXtXljo+Vxx407rqblyL+390q/mTl/Cdt5r+nOqzjpWff/rDdvjT+NN76dnf8W7+qrHIl4vFoHX9dst76xOND1cthqH5RtPD5jx/0tau/+fynW1p//b3AdkjPf9/68Q8kzes1SxHd1+6tjm+v9H/Vbt/G8be+/vckr1bT9c7jwli5PDscsSd5ee3jxxrPrefr5dP4Dz/Wuv2vd/2n7wnPdBh/942fP73/+LdWGv/4PZ3/e09cvTPZ1a7+zs7/SET8ufKJRSf9X6cH+OCvIAAAAAAAAAAAAAAAAAAAAAAAAABsLBMRByLJZFfSmUw2u/wb3v+NvkyhWCofOVucmx6P6m9lD0RPpv5Vl/1N34c6XPs+/Hr+2Kr8UxHxn4h4v3dfNZ/NFQvjOx08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTsb/P7/6mfenf66ACALbN3wxK38ttyIADAttl4/AcA/mmM/wCw+xj/AWD3Mf4DwO5j/AcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCLnTp5Mt0qvy8t5tL8+Pn5ucni+aPj+dJkdmoul80VZ2eyE8XiRCGfzRWnmp76fau/VygWZ0Zieu7CUDlfKg+V5hdOTxXnpsunz02NTeRP53u2LTIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FxpfmFyrFDIz0o8KolK//Kpe1iOZ+sT147+cHC9Mpddxpuf2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR8HcAAAD//2khMfk=")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x7}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendfile(r6, r7, &(0x7f0000000480)=0x2, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x7, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x40004}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}]}, 0x5c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095", @ANYRES64=r9], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x811}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3b}, @map_val={0x18, 0x3, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xd7, &(0x7f00000004c0)=""/215, 0x41100, 0x2, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r12, r12, r12, r12, r11, r12], 0x0, 0x10, 0xd0ad}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='iocost_iocg_forgive_debt\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0)

2.919549803s ago: executing program 4 (id=3776):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.58439686s ago: executing program 3 (id=3777):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.368423818s ago: executing program 4 (id=3778):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.176694643s ago: executing program 3 (id=3780):
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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")
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x9704, 0x0, 0x9, 0x0, 0x4, 0x3, 0x80000, 0x6, 0x2, 0xf1b, 0x0, 0x0, 0x2000000000000, 0x2, 0x4, 0x1, 0x0, 0x4000000, 0x3, 0xfff, 0x0, 0x8000000000001, 0x4})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf254c0000000800030001000000eb9094ad225c344bcbef74207e790bfc089597f9ce9bb33c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0})
io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)
dup3(r7, r5, 0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001fc0)=@newtaction={0xec8, 0x30, 0x871a15abc695fa3d, 0x70bd29, 0x0, {}, [{0xeb4, 0x1, [@m_pedit={0xeb0, 0x801, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{}, 0x93, 0xfc, [{0xffffffff, 0x2faa45a4, 0x0, 0x3ff}, {0x80, 0x5, 0x7, 0x3, 0x4fd, 0x1}, {0x3, 0x1, 0x4, 0x3, 0x10000, 0x3}, {0x80000001, 0x0, 0x3, 0x6, 0x3, 0x5}]}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x2000, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0xfffffff4}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x404, 0x0, 0x8000000}, {0x9929, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x3ffffd, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x1, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0xfffffffd, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x3, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x0, 0xb}, {0x0, 0x101, 0x0, 0x9, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0xfffffffe, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x8000000, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0)
linkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x400)

2.165699424s ago: executing program 1 (id=3781):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.013232366s ago: executing program 2 (id=3782):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.012446416s ago: executing program 4 (id=3783):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1.864913999s ago: executing program 1 (id=3784):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1.791383555s ago: executing program 2 (id=3786):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1.247561359s ago: executing program 3 (id=3788):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1.131797968s ago: executing program 0 (id=3789):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x400402, 0x0)
ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000002c0))
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000f060500000000000000000002000000050001000700050000000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
symlink(&(0x7f0000001500)='./file1\x00', &(0x7f00000014c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000004c0), 0x1, 0x554, &(0x7f0000001540)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffff000076000104000000000000000000000000000000000800010000800000"], 0x20}}, 0x0)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c0018000aac0f00000000001400010000000000000000000000ffffac14142d50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefcfdffffffffffffffb36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e600aa826cb3398ee6ff78530f9e1b0910c48a730320073629aa5784d43e1f2c10a5e2a7fb6129bd1e9225ea87865cfe277ab0bbb628398bc872d9306989465ff5118f94223adf91fcea6746e992c8aadab326e4dd51d37f57f9b888981920c7edc95c1dc25c65f2401396adb4fef4f9dd511bf43edea913ee1805923dfd056989b49f1fe321d6a9b3dd0c481c00391e884be88118b62e79c6f3bf0708b6061c1587beb4c9d155bc19"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt(r4, 0x0, 0x31, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@nodelalloc}, {@norecovery}, {@delalloc}, {@nojournal_checksum}, {@data_err_abort}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@bh}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x58a, &(0x7f0000000bc0)="$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")
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.027918456s ago: executing program 4 (id=3790):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

986.52884ms ago: executing program 3 (id=3791):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

967.535672ms ago: executing program 0 (id=3792):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

943.413693ms ago: executing program 1 (id=3793):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

864.17846ms ago: executing program 2 (id=3794):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
gettid()
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

733.53869ms ago: executing program 4 (id=3795):
prctl$PR_SET_UNALIGN(0x6, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

705.953663ms ago: executing program 3 (id=3796):
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$eJzs3EtPE10YwPGnV9oSaBdv3jevieFEN7qZQHWtNAYSYxMJUuMlMRlgqk3HlnQaTI3xsnJr/BAuCEt2JMoXYONON27csTFxIQtjTedCoQwgbWkR/r+EzMOc88ycc1qa5zS0G3fePC7mLS2vVyUYUxIQEdkUSUlQPAH3GLTjqGz3Ui4Ofv909tbdezcy2ezEtFKTmZlLaaXU8Mj7J8/ibrfVAVlPPdj4lv66/u/6/xu/Zh4VLFWwVKlcVbqaLX+p6rOmoeYLVlFTaso0dMtQhZJlVJz2stOeN8sLCzWll+aHEgsVw7KUXqqpolFT1bKqVmoq9FAvlJSmaWooIThIbml6Ws+0mTzX5cHgiFQqGT0kIvFdLbmlvgwIAAD0VWv9HxTVzfp/+dxadfD2yrBb/69G/er/y5+da+2o/2Mi4lv/e/f3rf/1w9X/uyui06Wj+h/Hw0h016lAM2w0VjJ6wv37tb26vzxqB9T/AAAAAAAAAAAAAAAAAAAAAAD8DTbr9WS9Xk96R+9nQERiIuL97pMaEpGrfRgyuqiDxx8nQPODe+FhEfP1Ym4x5xzdDmsiYooho5KUn/bzwdWIvU8eqYaUfDBfOPkD7suDSCYvBTt/TJIRaeaH3HjyenZiTDma+Y1jRBLb89OSlH9a7+/kp33zo3Lh/LZ8TZLycU7KYsq8fe9m/vMxpa7dzLbkx+1+AAAAAACcBJraktq5/3X275q2V7uTv7W/bn1/INTcX4/67s/Dcibc37kDAAAAAHBaWLWnRd00jco+QVwO7tN+ED6iK3sz/NMs738Zjm6m+wTezXc0xdyTnVw54rcsgUMsyx5BUNrJGmnMRnW6Yt7bRnv1kanx3j+CdvDf23c/ureYV1ZiB8y0/SC0/xMg0rMXIAAAAAA90yz6vTPj/R0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnUC++Ha3fcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOi98BAAD//xPfAEw=")
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x9704, 0x0, 0x9, 0x0, 0x4, 0x3, 0x80000, 0x6, 0x2, 0xf1b, 0x0, 0x0, 0x2000000000000, 0x2, 0x4, 0x1, 0x0, 0x4000000, 0x3, 0xfff, 0x0, 0x8000000000001, 0x4})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf254c0000000800030001000000eb9094ad225c344bcbef74207e790bfc089597f9ce9bb33c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0})
io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)
dup3(r7, r5, 0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001fc0)=@newtaction={0xec8, 0x30, 0x871a15abc695fa3d, 0x70bd29, 0x0, {}, [{0xeb4, 0x1, [@m_pedit={0xeb0, 0x801, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{}, 0x93, 0xfc, [{0xffffffff, 0x2faa45a4, 0x0, 0x3ff}, {0x80, 0x5, 0x7, 0x3, 0x4fd, 0x1}, {0x3, 0x1, 0x4, 0x3, 0x10000, 0x3}, {0x80000001, 0x0, 0x3, 0x6, 0x3, 0x5}]}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x2000, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0xfffffff4}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x404, 0x0, 0x8000000}, {0x9929, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x3ffffd, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x1, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0xfffffffd, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x3, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x0, 0xb}, {0x0, 0x101, 0x0, 0x9, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0xfffffffe, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x8000000, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0)
linkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x400)

644.149898ms ago: executing program 0 (id=3797):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

484.79146ms ago: executing program 0 (id=3798):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

283.640757ms ago: executing program 0 (id=3799):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x4007, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x4, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0})
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r7 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

57.785395ms ago: executing program 1 (id=3800):
r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f00000001c0)="f14a18f6", 0x4)
sendfile(r3, r1, 0x0, 0x40001)
sendfile(r3, r2, 0x0, 0x7ffff000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8005, 0x1, 0x80, <r4=>0x0}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r4, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90)
r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
truncate(&(0x7f0000000000)='./bus\x00', 0x6)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r7, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x5, 0x2, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$P9_RREADLINK(r1, &(0x7f0000000340)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x18)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r12)
sendmsg$TIPC_CMD_SHOW_PORTS(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r13, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
fsetxattr$security_capability(r7, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x1000000, [{0x5, 0xfff}]}, 0xc, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendfile(r6, r5, 0x0, 0x3ffff)

56.636585ms ago: executing program 0 (id=3810):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x4007, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x4, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0})
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r7 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

0s ago: executing program 2 (id=3801):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x25df00f429a5df65)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

col=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9382 comm=syz.2.2642
[  154.755122][ T9419] syzkaller0: entered promiscuous mode
[  154.760704][ T9419] syzkaller0: entered allmulticast mode
[  155.129336][ T9441] bridge_slave_0: left allmulticast mode
[  155.135039][ T9441] bridge_slave_0: left promiscuous mode
[  155.140997][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.152788][ T9441] bridge_slave_1: left allmulticast mode
[  155.158562][ T9441] bridge_slave_1: left promiscuous mode
[  155.164307][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.175415][ T9441] bond0: (slave bond_slave_0): Releasing backup interface
[  155.186460][ T9441] bond0: (slave bond_slave_1): Releasing backup interface
[  155.200104][ T9441] team0: Port device team_slave_0 removed
[  155.210017][ T9441] team0: Port device team_slave_1 removed
[  155.217833][ T9441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.225239][ T9441] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.235468][ T9441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.243023][ T9441] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.268849][   T23] lo speed is unknown, defaulting to 1000
[  156.524838][ T9484] �����: renamed from vlan1
[  156.651071][ T9498] netlink: 14 bytes leftover after parsing attributes in process `+}[@'.
[  156.660246][ T9498] hsr_slave_0: left promiscuous mode
[  156.684351][ T9498] hsr_slave_1: left promiscuous mode
[  157.346910][   T29] kauditd_printk_skb: 45104 callbacks suppressed
[  157.346930][   T29] audit: type=1400 audit(1847136643.042:478099): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  157.355158][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  157.374591][   T29] audit: type=1400 audit(1847136643.042:478100): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  157.381128][ T3031] audit: audit_lost=15668 audit_rate_limit=0 audit_backlog_limit=64
[  157.410325][ T3031] audit: backlog limit exceeded
[  157.419734][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  157.426276][ T3031] audit: audit_lost=15669 audit_rate_limit=0 audit_backlog_limit=64
[  157.434453][ T3031] audit: backlog limit exceeded
[  157.440914][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  157.447438][ T3031] audit: audit_lost=15670 audit_rate_limit=0 audit_backlog_limit=64
[  158.252975][ T9583] syzkaller0: entered promiscuous mode
[  158.258692][ T9583] syzkaller0: entered allmulticast mode
[  158.378582][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2723'.
[  158.678855][ T9599] bridge_slave_0: left allmulticast mode
[  158.684562][ T9599] bridge_slave_0: left promiscuous mode
[  158.690346][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.699707][ T9599] bridge_slave_1: left allmulticast mode
[  158.705379][ T9599] bridge_slave_1: left promiscuous mode
[  158.711188][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.727073][ T9599] bond0: (slave bond_slave_0): Releasing backup interface
[  158.738354][ T9599] bond0: (slave bond_slave_1): Releasing backup interface
[  158.763164][ T9599] team0: Port device team_slave_0 removed
[  158.783057][ T9599] team0: Port device team_slave_1 removed
[  158.793477][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.813641][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.998966][ T9658] lo speed is unknown, defaulting to 1000
[  160.104109][ T9665] bridge_slave_0: left allmulticast mode
[  160.109838][ T9665] bridge_slave_0: left promiscuous mode
[  160.115565][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.125366][ T9665] bridge_slave_1: left allmulticast mode
[  160.131055][ T9665] bridge_slave_1: left promiscuous mode
[  160.136917][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.146919][ T9665] $H�: (slave bond_slave_0): Releasing backup interface
[  160.162494][ T9665] bond_slave_0: left promiscuous mode
[  160.175664][ T9665] $H�: (slave bond_slave_1): Releasing backup interface
[  160.196662][ T9665] bond_slave_1: left promiscuous mode
[  160.208196][ T9665] team0: Port device team_slave_0 removed
[  160.215240][ T9665] team0: Port device team_slave_1 removed
[  160.221844][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.231034][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.437745][ T9678] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  160.517069][ T9684] lo speed is unknown, defaulting to 1000
[  160.695568][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'.
[  162.280566][ T9756] lo speed is unknown, defaulting to 1000
[  162.448749][   T29] kauditd_printk_skb: 37382 callbacks suppressed
[  162.448767][   T29] audit: type=1400 audit(1849758088.054:505219): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.476506][   T29] audit: type=1400 audit(1849758088.054:505220): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.497906][   T29] audit: type=1400 audit(1849758088.054:505221): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.519260][   T29] audit: type=1400 audit(1849758088.054:505222): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.540569][   T29] audit: type=1400 audit(1849758088.054:505223): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.561873][   T29] audit: type=1400 audit(1849758088.054:505224): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.583118][   T29] audit: type=1400 audit(1849758088.054:505225): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.604444][   T29] audit: type=1400 audit(1849758088.054:505226): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.625841][   T29] audit: type=1400 audit(1849758088.054:505227): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.647168][   T29] audit: type=1400 audit(1849758088.054:505228): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  162.770425][ T9767] lo speed is unknown, defaulting to 1000
[  163.061935][ T9779] bridge0: port 1(syz_tun) entered blocking state
[  163.068688][ T9779] bridge0: port 1(syz_tun) entered disabled state
[  163.095968][ T9779] syz_tun: entered allmulticast mode
[  163.111405][ T9779] syz_tun: entered promiscuous mode
[  163.139219][ T9779] bridge0: port 1(syz_tun) entered blocking state
[  163.145758][ T9779] bridge0: port 1(syz_tun) entered forwarding state
[  163.470755][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'.
[  163.493642][ T9798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2807'.
[  163.523923][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'.
[  165.514676][ T9840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  165.521235][ T9840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  165.528797][ T9840] vhci_hcd vhci_hcd.0: Device attached
[  165.568915][ T9841] vhci_hcd: cannot find the pending unlink 6
[  165.590451][ T9840] C: renamed from team_slave_0
[  165.611324][ T9840] netlink: 'syz.4.2825': attribute type 3 has an invalid length.
[  165.619083][ T9840] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2825'.
[  165.628236][ T9840] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  165.673266][ T9841] vhci_hcd: connection closed
[  165.678833][   T69] vhci_hcd: stop threads
[  165.687857][   T69] vhci_hcd: release socket
[  165.692384][   T69] vhci_hcd: disconnect device
[  165.723271][ T1037] vhci_hcd: vhci_device speed not set
[  165.815002][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'.
[  165.837828][ T9858] netlink: 'syz.0.2832': attribute type 1 has an invalid length.
[  167.231770][ T9895] lo speed is unknown, defaulting to 1000
[  167.340525][ T9896] lo speed is unknown, defaulting to 1000
[  167.603533][ T9909] bridge0: port 1(syz_tun) entered disabled state
[  167.610684][   T29] kauditd_printk_skb: 28425 callbacks suppressed
[  167.610700][   T29] audit: type=1400 audit(1850806669.072:526217): avc:  denied  { read write } for  pid=9906 comm="syz.4.2852" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  167.642753][   T29] audit: type=1400 audit(1850806669.082:526218): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664299][   T29] audit: type=1400 audit(1850806669.082:526219): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664334][   T29] audit: type=1400 audit(1850806669.082:526220): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664444][   T29] audit: type=1400 audit(1850806669.082:526221): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664469][   T29] audit: type=1400 audit(1850806669.082:526222): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664497][   T29] audit: type=1400 audit(1850806669.082:526223): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664573][   T29] audit: type=1400 audit(1850806669.082:526224): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664630][   T29] audit: type=1400 audit(1850806669.082:526225): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.664661][   T29] audit: type=1400 audit(1850806669.082:526226): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  167.936432][   T10] lo speed is unknown, defaulting to 1000
[  167.942452][   T10] s
z1: Port: 1 Link DOWN
[  167.994972][ T1912] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.035734][ T9919] syzkaller0: entered promiscuous mode
[  168.041277][ T9919] syzkaller0: entered allmulticast mode
[  168.064629][   T10] lo speed is unknown, defaulting to 1000
[  168.070550][ T1912] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.081786][ T1912] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.128990][ T1912] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.221388][ T9940] veth0_to_team: entered promiscuous mode
[  169.017830][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'.
[  169.909086][ T9973] lo speed is unknown, defaulting to 1000
[  170.076897][ T9984] lo speed is unknown, defaulting to 1000
[  170.792354][T10007] lo speed is unknown, defaulting to 1000
[  170.942164][T10016] netlink: 'syz.1.2891': attribute type 10 has an invalid length.
[  170.986417][T10016] team0: Port device dummy0 added
[  170.999056][T10016] netlink: 'syz.1.2891': attribute type 10 has an invalid length.
[  171.016047][T10016] team0: Port device dummy0 removed
[  171.022887][T10016] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  171.997553][T10048] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2904'.
[  172.026576][T10053] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  172.027810][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'.
[  172.034868][T10048] 0�: renamed from hsr0
[  172.078108][T10048] 0�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  172.080187][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2907'.
[  172.088442][T10048] 0�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.161762][T10048] 0�: entered allmulticast mode
[  172.166804][T10048] hsr_slave_0: entered allmulticast mode
[  172.172463][T10048] hsr_slave_1: entered allmulticast mode
[  172.223407][T10048] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[  172.241402][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'.
[  172.533853][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'.
[  172.723216][   T29] kauditd_printk_skb: 28555 callbacks suppressed
[  172.723233][   T29] audit: type=1400 audit(1854476690.081:554491): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  172.757976][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  172.764570][ T3031] audit: audit_lost=21668 audit_rate_limit=0 audit_backlog_limit=64
[  172.772565][ T3031] audit: backlog limit exceeded
[  172.778540][   T29] audit: type=1326 audit(1854476690.101:554492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.2.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fb41618eb69 code=0x7ffc0000
[  172.802309][   T29] audit: type=1326 audit(1854476690.101:554493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.2.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41618eb69 code=0x7ffc0000
[  172.822319][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  172.825978][   T29] audit: type=1326 audit(1854476690.101:554494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.2.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41618eb69 code=0x7ffc0000
[  172.832516][ T3031] audit: audit_lost=21669 audit_rate_limit=0 audit_backlog_limit=64
[  172.856300][   T29] audit: type=1400 audit(1854476690.101:554495): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  173.322089][T10106] serio: Serial port pts0
[  173.328344][T10107] netlink: 'syz.3.2929': attribute type 10 has an invalid length.
[  173.336241][T10107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2929'.
[  173.350711][T10107] team0: Port device geneve1 added
[  173.356498][  T290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.366462][  T290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.385788][  T290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.413557][  T290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.413639][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'.
[  175.537623][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2945'.
[  177.091810][T10184] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  177.783632][T10196] netlink: 'syz.2.2959': attribute type 10 has an invalid length.
[  177.803169][T10196] team0: Port device dummy0 added
[  177.809382][T10196] netlink: 'syz.2.2959': attribute type 10 has an invalid length.
[  177.821417][T10196] team0: Port device dummy0 removed
[  177.828491][T10196] dummy0: entered promiscuous mode
[  177.834344][T10196] $H�: (slave dummy0): Enslaving as an active interface with an up link
[  177.862043][   T29] kauditd_printk_skb: 25513 callbacks suppressed
[  177.862058][   T29] audit: type=1400 audit(1855000983.076:580008): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  177.877157][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  177.889748][   T29] audit: type=1400 audit(1855000983.076:580009): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  177.896238][ T3031] audit: audit_lost=21670 audit_rate_limit=0 audit_backlog_limit=64
[  177.917419][   T29] audit: type=1400 audit(1855000983.076:580010): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  177.925416][ T3031] audit: backlog limit exceeded
[  177.946687][   T29] audit: type=1400 audit(1855000983.076:580011): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  177.954349][ T3304] audit: audit_backlog=65 > audit_backlog_limit=64
[  177.972711][   T29] audit: type=1400 audit(1855000983.076:580012): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  177.979502][ T3304] audit: audit_lost=21671 audit_rate_limit=0 audit_backlog_limit=64
[  180.633386][T10253] lo speed is unknown, defaulting to 1000
[  182.976257][   T29] kauditd_printk_skb: 24681 callbacks suppressed
[  182.976274][   T29] audit: type=1400 audit(1857098140.096:602899): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  183.017649][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  183.019070][T10294] audit: audit_backlog=65 > audit_backlog_limit=64
[  183.024263][ T3031] audit: audit_lost=22270 audit_rate_limit=0 audit_backlog_limit=64
[  183.030796][T10294] audit: audit_lost=22271 audit_rate_limit=0 audit_backlog_limit=64
[  183.030816][T10294] audit: backlog limit exceeded
[  183.051912][ T3031] audit: backlog limit exceeded
[  183.057924][   T29] audit: type=1400 audit(1857098140.106:602900): avc:  denied  { read write } for  pid=10293 comm="syz.3.2995" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0
[  183.081704][   T29] audit: type=1400 audit(1857098140.106:602901): avc:  denied  { map_create } for  pid=10293 comm="syz.3.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  183.101175][   T29] audit: type=1400 audit(1857098140.106:602902): avc:  denied  { prog_load } for  pid=10293 comm="syz.3.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  183.327412][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'.
[  183.383049][T10313] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  184.968418][T10331] team0: Port device syz_tun removed
[  184.982182][T10331] dummy0: left allmulticast mode
[  184.999519][T10331] dummy0: left promiscuous mode
[  185.004637][T10331] bridge0: port 3(dummy0) entered disabled state
[  185.053676][T10331] bridge_slave_0: left allmulticast mode
[  185.059481][T10331] bridge_slave_0: left promiscuous mode
[  185.065140][T10331] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.188132][T10331] bridge_slave_1: left allmulticast mode
[  185.193880][T10331] bridge_slave_1: left promiscuous mode
[  185.199622][T10331] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.254799][T10331] bond0: (slave bond_slave_0): Releasing backup interface
[  185.269183][T10331] bond0: (slave bond_slave_1): Releasing backup interface
[  185.278910][T10331] team0: Port device C removed
[  185.287125][T10331] team0: Port device team_slave_1 removed
[  185.431636][T10345] lo speed is unknown, defaulting to 1000
[  186.412333][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'.
[  186.637112][T10371] lo speed is unknown, defaulting to 1000
[  186.743912][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'.
[  186.952351][T10391] syzkaller0: entered promiscuous mode
[  186.957950][T10391] syzkaller0: entered allmulticast mode
[  187.029829][T10398] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3036'.
[  187.073989][T10399] lo speed is unknown, defaulting to 1000
[  187.112969][T10406] netdevsim netdevsim2: Direct firmware load for @ failed with error -2
[  187.205766][T10406] ip6gre1: entered allmulticast mode
[  187.270758][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'.
[  188.087987][   T29] kauditd_printk_skb: 24698 callbacks suppressed
[  188.088005][   T29] audit: type=1400 audit(1858671009.109:623536): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.124974][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  188.131569][ T3031] audit: audit_lost=23627 audit_rate_limit=0 audit_backlog_limit=64
[  188.139665][ T3031] audit: backlog limit exceeded
[  188.145701][   T29] audit: type=1400 audit(1858671009.138:623537): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.167122][   T29] audit: type=1400 audit(1858671009.138:623538): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.188477][   T29] audit: type=1400 audit(1858671009.138:623539): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.209790][   T29] audit: type=1400 audit(1858671009.138:623540): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.231092][   T29] audit: type=1400 audit(1858671009.138:623541): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.252399][   T29] audit: type=1400 audit(1858671009.138:623542): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.467522][T10445] lo speed is unknown, defaulting to 1000
[  189.321709][T10456] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  189.426291][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3056'.
[  190.316959][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'.
[  190.924946][T10484] lo speed is unknown, defaulting to 1000
[  191.427904][T10491] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3068'.
[  191.579189][T10495] netdevsim netdevsim0: Direct firmware load for @ failed with error -2
[  191.632711][T10496] ip6gre1: entered allmulticast mode
[  192.019745][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'.
[  192.121399][T10518] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3080'.
[  193.214933][   T29] kauditd_printk_skb: 21618 callbacks suppressed
[  193.214950][   T29] audit: type=1400 audit(1860243878.122:642134): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  193.233809][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  193.249311][ T3031] audit: audit_lost=24637 audit_rate_limit=0 audit_backlog_limit=64
[  193.257296][ T3031] audit: backlog limit exceeded
[  193.263683][T10544] audit: audit_backlog=65 > audit_backlog_limit=64
[  193.263813][   T29] audit: type=1400 audit(1860243878.122:642135): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  193.270248][T10544] audit: audit_lost=24638 audit_rate_limit=0 audit_backlog_limit=64
[  193.270268][T10544] audit: backlog limit exceeded
[  193.279530][T10544] audit: audit_backlog=65 > audit_backlog_limit=64
[  193.291523][   T29] audit: type=1400 audit(1860243878.122:642136): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  194.892991][T10570] netlink: 'syz.2.3092': attribute type 39 has an invalid length.
[  194.989678][T10577] �����: renamed from vlan1
[  196.427870][T10603] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  196.505428][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3108'.
[  197.806628][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3123'.
[  197.968830][T10669] netlink: 'syz.0.3126': attribute type 4 has an invalid length.
[  198.311492][ T3031] audit_log_start: 27288 callbacks suppressed
[  198.311510][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  198.314470][   T29] audit: type=1400 audit(1863389611.116:663222): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.317677][ T3031] audit: audit_lost=26707 audit_rate_limit=0 audit_backlog_limit=64
[  198.324246][   T29] audit: type=1400 audit(1863389611.126:663223): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.345476][ T3031] audit: backlog limit exceeded
[  198.347689][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  198.353507][   T29] audit: type=1400 audit(1863389611.126:663224): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.374749][ T3031] audit: audit_lost=26708 audit_rate_limit=0 audit_backlog_limit=64
[  198.379605][   T29] audit: type=1400 audit(1863389611.126:663225): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.386100][ T3031] audit: backlog limit exceeded
[  198.984897][T10698] Invalid option length (1265) for dns_resolver key
[  199.133920][T10705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3139'.
[  199.185147][T10708] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  199.349265][T10715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3143'.
[  199.517519][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'.
[  200.053247][T10740] lo speed is unknown, defaulting to 1000
[  200.200674][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3146'.
[  200.250327][T10766] syz_tun (unregistering): left allmulticast mode
[  200.256808][T10766] syz_tun (unregistering): left promiscuous mode
[  200.263233][T10766] bridge0: port 1(syz_tun) entered disabled state
[  200.491634][T10772] ip6gretap1: entered allmulticast mode
[  202.039336][T10802] netlink: 'syz.2.3156': attribute type 13 has an invalid length.
[  202.518155][T10814] Falling back ldisc for ttyS3.
[  202.840945][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'.
[  202.996313][T10825] hsr_slave_0: left promiscuous mode
[  203.012965][T10825] hsr_slave_1: left promiscuous mode
[  203.453756][   T29] kauditd_printk_skb: 20940 callbacks suppressed
[  203.453777][   T29] audit: type=1400 audit(1863913904.133:678631): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  203.462479][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  203.488195][ T3031] audit: audit_lost=28554 audit_rate_limit=0 audit_backlog_limit=64
[  203.496225][ T3031] audit: backlog limit exceeded
[  203.505564][T10851] audit: audit_backlog=65 > audit_backlog_limit=64
[  203.512192][T10851] audit: audit_lost=28555 audit_rate_limit=0 audit_backlog_limit=64
[  203.520249][T10851] audit: backlog limit exceeded
[  203.526769][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  203.533299][ T3031] audit: audit_lost=28556 audit_rate_limit=0 audit_backlog_limit=64
[  203.541421][ T3031] audit: backlog limit exceeded
[  203.845920][T10868] lo speed is unknown, defaulting to 1000
[  203.886172][T10877] netlink: 'syz.2.3178': attribute type 12 has an invalid length.
[  204.194228][T10916] syzkaller0: entered promiscuous mode
[  204.199785][T10916] syzkaller0: entered allmulticast mode
[  204.466453][T10927] lo speed is unknown, defaulting to 1000
[  204.607211][T10954] netlink: 'syz.1.3188': attribute type 13 has an invalid length.
[  205.010889][T10978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  205.017511][T10978] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  205.025356][T10978] vhci_hcd vhci_hcd.0: Device attached
[  205.059647][T10979] vhci_hcd: connection closed
[  205.063275][  T290] vhci_hcd: stop threads
[  205.072287][  T290] vhci_hcd: release socket
[  205.076781][  T290] vhci_hcd: disconnect device
[  205.460913][T10983] lo speed is unknown, defaulting to 1000
[  205.610665][T11001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3200'.
[  206.721573][T11036] lo speed is unknown, defaulting to 1000
[  206.730019][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'.
[  206.789168][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'.
[  208.129635][T11074] macsec0: entered promiscuous mode
[  208.134974][T11074] bridge0: entered promiscuous mode
[  208.140706][T11074] bridge0: port 1(macsec0) entered blocking state
[  208.147179][T11074] bridge0: port 1(macsec0) entered disabled state
[  208.159760][T11074] macsec0: entered allmulticast mode
[  208.165096][T11074] bridge0: entered allmulticast mode
[  208.196063][T11074] macsec0: left allmulticast mode
[  208.201177][T11074] bridge0: left allmulticast mode
[  208.257559][T11074] bridge0: left promiscuous mode
[  208.581247][   T29] kauditd_printk_skb: 24034 callbacks suppressed
[  208.581265][   T29] audit: type=1400 audit(1864962485.145:697353): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  208.617089][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  208.623689][ T3031] audit: audit_lost=30328 audit_rate_limit=0 audit_backlog_limit=64
[  208.631673][ T3031] audit: backlog limit exceeded
[  208.637849][   T29] audit: type=1400 audit(1864962485.174:697354): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  208.659192][   T29] audit: type=1400 audit(1864962485.174:697355): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  208.680486][   T29] audit: type=1400 audit(1864962485.174:697356): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  208.701965][   T29] audit: type=1400 audit(1864962485.174:697357): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  208.723389][   T29] audit: type=1400 audit(1864962485.174:697358): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  208.728002][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  209.601388][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3224'.
[  210.676756][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  210.686900][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'.
[  211.864850][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'.
[  213.698765][   T29] kauditd_printk_skb: 29090 callbacks suppressed
[  213.698782][   T29] audit: type=1400 audit(1868108218.154:726072): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  213.707382][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  213.733151][ T3031] audit: audit_lost=30455 audit_rate_limit=0 audit_backlog_limit=64
[  213.741360][ T3031] audit: backlog limit exceeded
[  213.751776][T11271] audit: audit_backlog=65 > audit_backlog_limit=64
[  213.758346][T11271] audit: audit_lost=30456 audit_rate_limit=0 audit_backlog_limit=64
[  213.766478][T11271] audit: backlog limit exceeded
[  213.783634][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  213.784729][   T29] audit: type=1400 audit(1868108218.163:726073): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  213.790352][ T3031] audit: audit_lost=30457 audit_rate_limit=0 audit_backlog_limit=64
[  214.250519][T11288] lo speed is unknown, defaulting to 1000
[  214.662145][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'.
[  214.748627][T11318] lo speed is unknown, defaulting to 1000
[  214.819761][T11329] netlink: 'syz.1.3289': attribute type 10 has an invalid length.
[  214.829074][T11329] geneve1: entered promiscuous mode
[  215.002526][T11329] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  215.011353][  T290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.094246][  T290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.125921][  T290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.160681][  T290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.509249][T11371] bond0: (slave dummy0): Releasing backup interface
[  215.516072][T11371] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  215.543476][T11371] bond0: (slave geneve1): Releasing backup interface
[  215.553980][   T69] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.577498][   T69] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.596190][   T69] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.613977][   T69] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.928908][T11386] lo speed is unknown, defaulting to 1000
[  215.970920][T11391] netlink: 'syz.0.3304': attribute type 1 has an invalid length.
[  215.999337][T11393] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  216.072828][T11392] lo speed is unknown, defaulting to 1000
[  216.197525][T11401] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  216.235355][T11399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  216.241945][T11399] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  216.249415][T11399] vhci_hcd vhci_hcd.0: Device attached
[  216.295275][T11409] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12)
[  216.301930][T11409] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  216.309583][T11409] vhci_hcd vhci_hcd.0: Device attached
[  216.368465][T11399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  216.375012][T11399] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  216.382742][T11399] vhci_hcd vhci_hcd.0: Device attached
[  216.433814][T11391] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.440600][   T10] vhci_hcd: vhci_device speed not set
[  216.465119][T11399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  216.473930][T11399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  216.482954][T11399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  216.491816][T11401] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9)
[  216.498386][T11401] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  216.506253][T11401] vhci_hcd vhci_hcd.0: Device attached
[  216.512080][   T10] usb 7-1: new full-speed USB device number 2 using vhci_hcd
[  216.541644][T11399] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(23)
[  216.548298][T11399] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  216.555960][T11399] vhci_hcd vhci_hcd.0: Device attached
[  216.581569][T11407] vhci_hcd: connection closed
[  216.581854][T11406] vhci_hcd: connection reset by peer
[  216.592284][T11412] vhci_hcd: connection closed
[  216.592759][  T290] vhci_hcd: stop threads
[  216.601761][  T290] vhci_hcd: release socket
[  216.606233][  T290] vhci_hcd: disconnect device
[  216.622770][T11410] vhci_hcd: connection closed
[  216.626535][T11448] vhci_hcd: connection closed
[  216.633948][T11456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11456 comm=syz.2.3308
[  216.669126][  T290] vhci_hcd: stop threads
[  216.673407][  T290] vhci_hcd: release socket
[  216.675001][T11456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11456 comm=syz.2.3308
[  216.677902][  T290] vhci_hcd: disconnect device
[  216.695063][  T290] vhci_hcd: stop threads
[  216.699577][  T290] vhci_hcd: release socket
[  216.704031][  T290] vhci_hcd: disconnect device
[  216.721281][T11456] vlan0: entered promiscuous mode
[  216.726386][T11456] erspan0: entered promiscuous mode
[  216.733856][  T290] vhci_hcd: stop threads
[  216.738173][  T290] vhci_hcd: release socket
[  216.742713][  T290] vhci_hcd: disconnect device
[  216.761118][  T290] vhci_hcd: stop threads
[  216.765441][  T290] vhci_hcd: release socket
[  216.769888][  T290] vhci_hcd: disconnect device
[  216.802440][T11496] lo speed is unknown, defaulting to 1000
[  218.745985][T11568] netlink: 'syz.0.3322': attribute type 27 has an invalid length.
[  218.753991][T11569] lo speed is unknown, defaulting to 1000
[  218.796456][   T29] kauditd_printk_skb: 25137 callbacks suppressed
[  218.796471][   T29] audit: type=1400 audit(1870205375.166:742186): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  218.798315][T11568] ip6gre1: left allmulticast mode
[  218.802882][   T29] audit: type=1400 audit(1870205375.166:742187): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  218.842024][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  218.856920][ T3031] audit: audit_lost=33466 audit_rate_limit=0 audit_backlog_limit=64
[  218.864931][ T3031] audit: backlog limit exceeded
[  218.867872][   T29] audit: type=1400 audit(1870205375.166:742188): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  218.891204][   T29] audit: type=1400 audit(1870205375.166:742189): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  218.902786][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  218.912589][   T29] audit: type=1400 audit(1870205375.166:742190): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  218.919189][ T3031] audit: audit_lost=33467 audit_rate_limit=0 audit_backlog_limit=64
[  219.848515][T11620] veth0_vlan: entered allmulticast mode
[  219.855860][T11620] veth0_vlan: left promiscuous mode
[  219.862024][T11620] veth0_vlan: entered promiscuous mode
[  219.937621][T11622] lo speed is unknown, defaulting to 1000
[  220.268311][T11662] netlink: 'syz.3.3338': attribute type 12 has an invalid length.
[  220.824429][T11681] netlink: 'syz.4.3345': attribute type 4 has an invalid length.
[  221.422520][T11698] veth0_to_team: entered promiscuous mode
[  221.428297][T11698] veth0_to_team: entered allmulticast mode
[  221.559586][T11705] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  221.697972][T11712] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  221.721574][   T10] usb 7-1: enqueue for inactive port 0
[  221.727580][   T10] usb 7-1: enqueue for inactive port 0
[  221.761224][T11719] lo speed is unknown, defaulting to 1000
[  221.825040][   T10] vhci_hcd: vhci_device speed not set
[  221.827657][T11727] netlink: 'syz.4.3359': attribute type 27 has an invalid length.
[  221.891007][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3362'.
[  222.425106][T11760] lo speed is unknown, defaulting to 1000
[  223.104066][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3372'.
[  223.897348][   T29] kauditd_printk_skb: 26830 callbacks suppressed
[  223.897366][   T29] audit: type=1400 audit(1873351108.172:767196): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.897504][   T29] audit: type=1400 audit(1873351108.182:767197): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.897627][   T29] audit: type=1400 audit(1873351108.182:767198): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.897695][   T29] audit: type=1400 audit(1873351108.182:767199): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.897859][   T29] audit: type=1400 audit(1873351108.182:767200): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.904334][   T29] audit: type=1400 audit(1873351108.182:767201): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.904371][   T29] audit: type=1400 audit(1873351108.182:767202): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.904405][   T29] audit: type=1400 audit(1873351108.182:767203): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.904498][   T29] audit: type=1400 audit(1873351108.182:767204): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  223.904528][   T29] audit: type=1400 audit(1873351108.182:767205): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  224.121200][T11828] lo speed is unknown, defaulting to 1000
[  224.220342][T11853] netlink: 'syz.4.3381': attribute type 4 has an invalid length.
[  224.221425][T11853] netlink: 'syz.4.3381': attribute type 4 has an invalid length.
[  224.437765][ T3379] usb usb8-port1: attempt power cycle
[  224.907461][T11866] ALSA: seq fatal error: cannot create timer (-19)
[  225.809622][T11898] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  225.816186][T11898] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  225.823788][T11898] vhci_hcd vhci_hcd.0: Device attached
[  225.948770][T11898] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5)
[  225.955331][T11898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  225.962926][T11898] vhci_hcd vhci_hcd.0: Device attached
[  225.997592][T11898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  226.008233][   T23] vhci_hcd: vhci_device speed not set
[  226.027798][T11898] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9)
[  226.034448][T11898] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  226.042102][T11898] vhci_hcd vhci_hcd.0: Device attached
[  226.070070][   T23] usb 5-1: new full-speed USB device number 2 using vhci_hcd
[  226.077811][T11898] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11)
[  226.084431][T11898] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  226.092182][T11898] vhci_hcd vhci_hcd.0: Device attached
[  226.108629][T11898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  226.123855][T11905] lo speed is unknown, defaulting to 1000
[  226.194978][T11899] vhci_hcd: connection reset by peer
[  226.202110][T11906] vhci_hcd: connection closed
[  226.202245][T11902] vhci_hcd: connection closed
[  226.217485][T11908] vhci_hcd: connection closed
[  226.226515][   T31] vhci_hcd: stop threads
[  226.235619][   T31] vhci_hcd: release socket
[  226.240099][   T31] vhci_hcd: disconnect device
[  226.260198][   T31] vhci_hcd: stop threads
[  226.264496][   T31] vhci_hcd: release socket
[  226.269053][   T31] vhci_hcd: disconnect device
[  226.292890][   T31] vhci_hcd: stop threads
[  226.297258][   T31] vhci_hcd: release socket
[  226.301702][   T31] vhci_hcd: disconnect device
[  226.312324][   T31] vhci_hcd: stop threads
[  226.316675][   T31] vhci_hcd: release socket
[  226.321213][   T31] vhci_hcd: disconnect device
[  226.332671][ T3379] usb usb8-port1: unable to enumerate USB device
[  226.518897][T11942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=63993 sclass=netlink_audit_socket pid=11942 comm=syz.1.3401
[  226.581385][T11942] lo speed is unknown, defaulting to 1000
[  226.829848][T11970] lo speed is unknown, defaulting to 1000
[  227.079664][T11999] netlink: 'syz.2.3406': attribute type 4 has an invalid length.
[  227.187015][T12007] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  227.193581][T12007] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  227.201347][T12007] vhci_hcd vhci_hcd.0: Device attached
[  227.232640][T12009] vhci_hcd: connection closed
[  227.232998][   T69] vhci_hcd: stop threads
[  227.242272][   T69] vhci_hcd: release socket
[  227.246794][   T69] vhci_hcd: disconnect device
[  227.359321][T12014] netlink: 'syz.0.3410': attribute type 4 has an invalid length.
[  227.367089][T12014] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3410'.
[  227.924754][T12021] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0
[  228.061822][T12025] netlink: 'syz.2.3415': attribute type 12 has an invalid length.
[  229.031992][   T29] kauditd_printk_skb: 19952 callbacks suppressed
[  229.032037][   T29] audit: type=1400 audit(1873351113.188:784194): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  229.046483][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  229.066351][ T3031] audit: audit_lost=35064 audit_rate_limit=0 audit_backlog_limit=64
[  229.074391][ T3031] audit: backlog limit exceeded
[  229.084519][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  229.091087][ T3031] audit: audit_lost=35065 audit_rate_limit=0 audit_backlog_limit=64
[  229.099215][ T3031] audit: backlog limit exceeded
[  229.104935][ T3307] audit: audit_backlog=65 > audit_backlog_limit=64
[  229.111458][ T3307] audit: audit_lost=35066 audit_rate_limit=0 audit_backlog_limit=64
[  229.114334][ T3302] audit: audit_backlog=65 > audit_backlog_limit=64
[  229.159270][T12050] lo speed is unknown, defaulting to 1000
[  229.361012][ T1037] IPVS: starting estimator thread 0...
[  229.366895][T12069] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.463629][T12089] IPVS: using max 2400 ests per chain, 120000 per kthread
[  229.479283][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'.
[  229.499742][T12101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12101 comm=syz.2.3431
[  229.532921][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3430'.
[  229.545075][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3431'.
[  230.407846][T12118] lo speed is unknown, defaulting to 1000
[  231.222550][   T23] usb 5-1: enqueue for inactive port 0
[  231.248050][   T23] usb 5-1: enqueue for inactive port 0
[  231.339811][   T23] vhci_hcd: vhci_device speed not set
[  231.363527][T12157] veth0_to_team: entered allmulticast mode
[  231.476918][T12159] netlink: 'syz.3.3442': attribute type 13 has an invalid length.
[  231.530049][T12159] veth0_to_team: left promiscuous mode
[  231.535558][T12159] veth0_to_team: left allmulticast mode
[  231.592800][T12159] ip6gretap1: left allmulticast mode
[  231.603187][   T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.625227][   T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.659981][   T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.690090][   T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.844612][T12175] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  231.851322][T12175] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  231.858863][T12175] vhci_hcd vhci_hcd.0: Device attached
[  231.900164][T12182] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  231.941982][T12175] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11)
[  231.948671][T12175] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  231.956381][T12175] vhci_hcd vhci_hcd.0: Device attached
[  231.975150][T12175] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15)
[  231.981785][T12175] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  231.989464][T12175] vhci_hcd vhci_hcd.0: Device attached
[  232.024419][T12182] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  232.051891][ T3379] vhci_hcd: vhci_device speed not set
[  232.075007][T12175] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  232.114617][T12175] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  232.124319][ T3379] usb 1-1: new full-speed USB device number 2 using vhci_hcd
[  232.134080][T12183] vhci_hcd: connection closed
[  232.134366][   T69] vhci_hcd: stop threads
[  232.143390][   T69] vhci_hcd: release socket
[  232.147890][   T69] vhci_hcd: disconnect device
[  232.155279][T12186] vhci_hcd: connection closed
[  232.155831][T12176] vhci_hcd: connection closed
[  232.161923][T12177] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  232.172669][   T69] vhci_hcd: stop threads
[  232.177012][   T69] vhci_hcd: release socket
[  232.181482][   T69] vhci_hcd: disconnect device
[  232.207212][   T69] vhci_hcd: stop threads
[  232.211496][   T69] vhci_hcd: release socket
[  232.216088][   T69] vhci_hcd: disconnect device
[  233.742027][T12223] lo speed is unknown, defaulting to 1000
[  233.749545][T12227] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  234.166069][   T29] kauditd_printk_skb: 18024 callbacks suppressed
[  234.166087][   T29] audit: type=1400 audit(1874923982.201:798763): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166214][   T29] audit: type=1400 audit(1874923982.201:798764): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166241][   T29] audit: type=1400 audit(1874923982.201:798765): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166334][   T29] audit: type=1400 audit(1874923982.201:798766): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166424][   T29] audit: type=1400 audit(1874923982.201:798767): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166496][   T29] audit: type=1400 audit(1874923982.201:798768): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166523][   T29] audit: type=1400 audit(1874923982.201:798769): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166562][   T29] audit: type=1400 audit(1874923982.201:798770): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166614][   T29] audit: type=1400 audit(1874923982.201:798771): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.166649][   T29] audit: type=1400 audit(1874923982.201:798772): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  234.371682][T12251] lo speed is unknown, defaulting to 1000
[  236.290864][T12307] lo speed is unknown, defaulting to 1000
[  237.300104][ T3379] usb 1-1: enqueue for inactive port 0
[  237.305709][ T3379] usb 1-1: enqueue for inactive port 0
[  237.406157][ T3379] vhci_hcd: vhci_device speed not set
[  237.466772][T12341] vlan0: entered promiscuous mode
[  237.472029][T12341] vlan0: entered allmulticast mode
[  237.477225][T12341] hsr_slave_1: entered allmulticast mode
[  237.527021][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'.
[  237.874489][T12355] lo speed is unknown, defaulting to 1000
[  238.328040][T12388] lo speed is unknown, defaulting to 1000
[  239.304814][   T29] kauditd_printk_skb: 20190 callbacks suppressed
[  239.304895][   T29] audit: type=1400 audit(1874923987.207:810041): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  239.340472][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  239.347110][ T3031] audit: audit_lost=39193 audit_rate_limit=0 audit_backlog_limit=64
[  239.355186][ T3031] audit: backlog limit exceeded
[  239.360182][   T29] audit: type=1400 audit(1874923987.236:810042): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  239.381644][   T29] audit: type=1400 audit(1874923987.236:810043): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  239.403093][   T29] audit: type=1400 audit(1874923987.236:810044): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  239.424337][   T29] audit: type=1400 audit(1874923987.236:810045): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  239.427938][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  239.445622][   T29] audit: type=1400 audit(1874923987.236:810046): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  239.834104][T12429] lo speed is unknown, defaulting to 1000
[  240.484046][T12468] lo speed is unknown, defaulting to 1000
[  240.609911][T12478] bridge0: entered allmulticast mode
[  240.821180][T12497] lo speed is unknown, defaulting to 1000
[  240.847819][T12510] futex_wake_op: syz.2.3500 tries to shift op by -1; fix this program
[  241.250752][T12506] lo speed is unknown, defaulting to 1000
[  241.830215][T12567] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3505'.
[  242.863752][T12606] lo speed is unknown, defaulting to 1000
[  243.667169][T12653] netlink: 'syz.1.3528': attribute type 10 has an invalid length.
[  243.688494][T12653] team0: Port device dummy0 added
[  243.888120][T12673] lo speed is unknown, defaulting to 1000
[  244.220558][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3540'.
[  244.284097][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3540'.
[  244.418390][   T29] kauditd_printk_skb: 20155 callbacks suppressed
[  244.418405][   T29] audit: type=1400 audit(1875972568.222:827125): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  244.528791][T12723] gtp0: entered promiscuous mode
[  244.533831][T12723] gtp0: entered allmulticast mode
[  244.556122][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  244.562801][ T3031] audit: audit_lost=40220 audit_rate_limit=0 audit_backlog_limit=64
[  244.570836][ T3031] audit: backlog limit exceeded
[  244.593003][T12723] audit: audit_backlog=65 > audit_backlog_limit=64
[  244.599623][T12723] audit: audit_lost=40221 audit_rate_limit=0 audit_backlog_limit=64
[  244.606219][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  244.607715][T12723] audit: backlog limit exceeded
[  244.614225][ T3031] audit: audit_lost=40222 audit_rate_limit=0 audit_backlog_limit=64
[  244.620450][   T29] audit: type=1400 audit(1875972568.222:827126): avc:  denied  { read write } for  pid=12714 comm="syz.0.3541" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0
[  244.852337][T12769] netlink: 'syz.2.3547': attribute type 4 has an invalid length.
[  245.016067][T12775] netlink: 'syz.2.3549': attribute type 27 has an invalid length.
[  245.024859][T12775] $H�: left promiscuous mode
[  245.030685][T12775] dummy0: left promiscuous mode
[  245.037197][T12775] veth0_to_team: left promiscuous mode
[  245.042683][T12775] veth0_to_team: left allmulticast mode
[  245.049499][T12775] 0�: left allmulticast mode
[  245.054126][T12775] hsr_slave_0: left allmulticast mode
[  245.059568][T12775] hsr_slave_1: left allmulticast mode
[  245.073043][T12775] bridge1: left promiscuous mode
[  245.078330][T12775] veth3: left promiscuous mode
[  245.083459][T12775] ip6gre1: left allmulticast mode
[  245.111233][T12775] gtp0: left promiscuous mode
[  245.115971][T12775] gtp0: left allmulticast mode
[  245.166062][T12788] 8021q: adding VLAN 0 to HW filter on device $H�
[  245.190598][T12788] 8021q: adding VLAN 0 to HW filter on device team0
[  245.224138][T12788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.250768][T12789] lo speed is unknown, defaulting to 1000
[  246.028989][T12844] dvmrp1: tun_chr_ioctl cmd 1074025692
[  246.522235][T12860] netlink: 'syz.0.3566': attribute type 10 has an invalid length.
[  246.555719][T12860] team0: Port device dummy0 added
[  246.580075][T12860] netlink: 'syz.0.3566': attribute type 10 has an invalid length.
[  246.607693][T12860] team0: Port device dummy0 removed
[  246.629002][T12860] $H�: (slave dummy0): Enslaving as an active interface with an up link
[  246.660310][T12862] netlink: 'syz.0.3566': attribute type 10 has an invalid length.
[  247.051049][T12875] lo speed is unknown, defaulting to 1000
[  247.072401][T12874] futex_wake_op: syz.4.3569 tries to shift op by -1; fix this program
[  247.396062][T12910] syzkaller0: entered promiscuous mode
[  247.401594][T12910] syzkaller0: entered allmulticast mode
[  249.060924][T12956] netlink: 'syz.4.3587': attribute type 12 has an invalid length.
[  249.212062][T12962] futex_wake_op: syz.1.3590 tries to shift op by -1; fix this program
[  249.312033][T12960] Falling back ldisc for ttyS3.
[  249.343584][T12973] lo speed is unknown, defaulting to 1000
[  249.546323][   T29] kauditd_printk_skb: 26357 callbacks suppressed
[  249.546350][   T29] audit: type=1400 audit(1877545437.220:849340): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  249.549491][ T3031] audit: audit_backlog=65 > audit_backlog_limit=64
[  249.552761][   T29] audit: type=1400 audit(1877545437.220:849341): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  249.574100][ T3031] audit: audit_lost=41604 audit_rate_limit=0 audit_backlog_limit=64
[  249.580516][   T29] audit: type=1400 audit(1877545437.220:849342): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  249.601735][ T3031] audit: backlog limit exceeded
[  249.615658][T13014] audit: audit_backlog=65 > audit_backlog_limit=64
[  249.630955][   T29] audit: type=1400 audit(1877545437.220:849343): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  249.635823][T13014] audit: audit_lost=41605 audit_rate_limit=0 audit_backlog_limit=64
[  249.642362][   T29] audit: type=1400 audit(1877545437.220:849344): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  250.044014][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'.
[  250.059227][T13030] vlan2: entered allmulticast mode
[  250.070219][T13033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1128 sclass=netlink_route_socket pid=13033 comm=syz.4.3604
[  250.164956][T13028] bridge0: entered allmulticast mode
[  250.204175][T13051] bridge0: port 4(macsec2) entered blocking state
[  250.210808][T13051] bridge0: port 4(macsec2) entered disabled state
[  250.219778][T13051] macsec2: entered allmulticast mode
[  250.225102][T13051] bridge0: entered allmulticast mode
[  250.231894][T13051] macsec2: left allmulticast mode
[  250.237054][T13051] bridge0: left allmulticast mode
[  250.348039][T13064] Falling back ldisc for ttyS3.
[  250.393514][T13078] lo speed is unknown, defaulting to 1000
[  250.550300][T13103] vlan0: entered promiscuous mode
[  250.555440][T13103] hsr_slave_1: entered promiscuous mode
[  250.561092][T13103] vlan0: entered allmulticast mode
[  250.566316][T13103] hsr_slave_1: entered allmulticast mode
[  250.588566][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'.
[  251.377532][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'.
[  252.513105][T13177] lo speed is unknown, defaulting to 1000
[  253.023935][T13207] netlink: 'syz.2.3635': attribute type 1 has an invalid length.
[  253.074718][T13207] 9pnet_fd: Insufficient options for proto=fd
[  253.209321][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3636'.
[  253.218266][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3636'.
[  253.697644][T13274] loop3: detected capacity change from 0 to 128
[  253.711824][T13279] loop1: detected capacity change from 0 to 1024
[  253.724695][T13267] rdma_rxe: rxe_newlink: failed to add lo
[  253.731511][T13267] 9pnet: Could not find request transport: #�/m�C�X;!�i�R@ɲ�*��(\YB��a�sA�*��m6��s�v��j�J�s��{d�tN/�y���$n����+�z����$Lޒ6-Ӂ����vE
[  253.731511][T13267] 0xffffffffffffffff
[  253.732623][T13279] EXT4-fs: Ignoring removed orlov option
[  253.776237][T13274] netlink: 'syz.3.3641': attribute type 10 has an invalid length.
[  253.786598][T13274] netlink: 'syz.3.3641': attribute type 4 has an invalid length.
[  253.794383][T13274] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3641'.
[  253.839214][T13279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.878979][T13279] SELinux:  policydb version -957581230 does not match my version range 15-35
[  253.892118][T13279] SELinux: failed to load policy
[  253.901373][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3643'.
[  253.910437][T13293] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3643'.
[  253.933467][T13279] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  254.067868][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'.
[  254.203137][T13301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3642: bg 0: block 88: padding at end of block bitmap is not set
[  254.328379][T13320] loop4: detected capacity change from 0 to 1024
[  254.359714][T13320] EXT4-fs: Ignoring removed nobh option
[  254.384435][T13320] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  254.447092][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.457845][T13320] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3645: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  254.554032][T13320] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3645: couldn't read orphan inode 11 (err -117)
[  254.590256][T13320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.629962][T13330] pim6reg: entered allmulticast mode
[  254.661674][T13330] pim6reg: left allmulticast mode
[  254.707374][   T29] kauditd_printk_skb: 13469 callbacks suppressed
[  254.707393][   T29] audit: type=1400 audit(1878594018.268:862285): avc:  denied  { create } for  pid=13305 comm="syz.4.3645" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  254.800379][T13320] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3645: Invalid block bitmap block 0 in block_group 0
[  254.833479][   T29] audit: type=1400 audit(1878594018.336:862286): avc:  denied  { write } for  pid=13328 comm="syz.1.3646" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  254.862737][T13320] Quota error (device loop4): write_blk: dquota write failed
[  254.870307][T13320] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  254.901419][T13320] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3645: Failed to acquire dquot type 0
[  254.949861][T13341] loop2: detected capacity change from 0 to 512
[  254.961480][   T29] audit: type=1400 audit(1878594018.520:862287): avc:  denied  { create } for  pid=13340 comm="syz.3.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  254.981445][   T29] audit: type=1400 audit(1878594018.520:862288): avc:  denied  { connect } for  pid=13340 comm="syz.3.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  255.018342][T13341] EXT4-fs: Ignoring removed orlov option
[  255.024496][T13341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  255.069703][T13341] EXT4-fs (loop2): orphan cleanup on readonly fs
[  255.100206][T13320] syz.4.3645 (13320) used greatest stack depth: 10128 bytes left
[  255.119186][T13341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3647: bg 0: block 248: padding at end of block bitmap is not set
[  255.225381][T13341] Quota error (device loop2): write_blk: dquota write failed
[  255.232835][T13341] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  255.242960][T13341] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3647: Failed to acquire dquot type 1
[  255.327146][T13341] EXT4-fs (loop2): 1 truncate cleaned up
[  255.348432][T13341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  255.403119][T13341] EXT4-fs: Ignoring removed orlov option
[  255.408969][T13341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  255.451339][T13341] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  255.689452][T13341] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.3647: Abort forced by user
[  255.725258][T13350] Illegal XDP return value 97 on prog  (id 34) dev N/A, expect packet loss!
[  255.745193][T13341] EXT4-fs (loop2): Remounting filesystem read-only
[  255.751767][T13341] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  255.771983][T13352] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  255.781503][T13341] ext4 filesystem being remounted at /656/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  255.791986][   T29] audit: type=1400 audit(1878594019.305:862289): avc:  denied  { mac_admin } for  pid=13349 comm="syz.1.3649" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  255.813421][   T29] audit: type=1400 audit(1878594019.315:862290): avc:  denied  { relabelto } for  pid=13349 comm="syz.1.3649" name="723" dev="tmpfs" ino=3759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  255.841226][T13341] syz.2.3647 (13341) used greatest stack depth: 9280 bytes left
[  255.880542][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.943280][T13359] loop2: detected capacity change from 0 to 1024
[  255.993658][T13359] EXT4-fs: Ignoring removed nobh option
[  255.999444][T13359] EXT4-fs: Ignoring removed bh option
[  256.015856][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.028090][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.028885][T13347] syz.3.3648 (13347) used greatest stack depth: 8744 bytes left
[  256.046491][T13359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.062000][T13361] loop1: detected capacity change from 0 to 512
[  256.075509][T13361] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  256.119020][T13361] EXT4-fs (loop1): orphan cleanup on readonly fs
[  256.158264][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.177996][T13361] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3651: Block bitmap for bg 0 marked uninitialized
[  256.213757][T13378] loop2: detected capacity change from 0 to 1024
[  256.221326][T13361] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  256.236708][T13378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.249136][T13361] EXT4-fs (loop1): 1 orphan inode deleted
[  256.261961][T13361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  256.264164][T13378] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3653: Allocating blocks 385-513 which overlap fs metadata
[  256.296462][T13361] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  256.306214][T13361] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  256.369366][T13361] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.406420][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.415038][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.462914][T13342] syz.3.3648 (13342) used greatest stack depth: 7528 bytes left
[  257.091237][T13377] EXT4-fs (loop2): pa ffff888106a76070: logic 16, phys. 129, len 24
[  257.099413][T13377] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  257.141681][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.155757][T13392] process 'syz.3.3655' launched '/dev/fd/11' with NULL argv: empty string added
[  257.492918][T13416] lo speed is unknown, defaulting to 1000
[  257.879374][T13414] loop3: detected capacity change from 0 to 256
[  257.936888][T13414] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  257.951337][T13414] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  257.951337][T13414]    program syz.3.3659 not setting count and/or reply_len properly
[  258.131347][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.174864][T13451] loop0: detected capacity change from 0 to 1024
[  258.176876][T13456] loop4: detected capacity change from 0 to 512
[  258.200505][T13451] EXT4-fs: Ignoring removed nobh option
[  258.209529][T13456] EXT4-fs: Ignoring removed orlov option
[  258.223192][T13463] loop2: detected capacity change from 0 to 1024
[  258.230195][T13456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  258.253900][T13463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  258.266852][T13451] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  258.278563][T13456] EXT4-fs (loop4): orphan cleanup on readonly fs
[  258.285420][T13463] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  258.285878][T13456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3662: bg 0: block 248: padding at end of block bitmap is not set
[  258.316630][T13456] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3662: Failed to acquire dquot type 1
[  258.328411][T13451] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.3661: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  258.348851][T13463] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3664: Invalid block bitmap block 0 in block_group 0
[  258.362861][T13456] EXT4-fs (loop4): 1 truncate cleaned up
[  258.370425][T13456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  258.383153][T13463] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3664: Failed to acquire dquot type 0
[  258.395898][T13451] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3661: couldn't read orphan inode 11 (err -117)
[  258.416761][T13456] EXT4-fs: Ignoring removed orlov option
[  258.422942][T13463] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.3664: Freeing blocks not in datazone - block = 0, count = 4096
[  258.438523][T13456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  258.456390][T13456] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  258.466667][T13451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.479617][T13463] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3664: Invalid inode bitmap blk 0 in block_group 0
[  258.493582][T13456] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.3662: Abort forced by user
[  258.504017][  T290] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[  258.516614][T13456] EXT4-fs (loop4): Remounting filesystem read-only
[  258.523212][T13456] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  258.526628][T13451] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3661: Invalid block bitmap block 0 in block_group 0
[  258.545926][T13463] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  258.554577][T13456] ext4 filesystem being remounted at /806/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  258.563317][T13451] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3661: Failed to acquire dquot type 0
[  258.576959][T13463] EXT4-fs (loop2): 1 orphan inode deleted
[  258.583185][T13463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.613447][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.655938][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.687478][T13488] bridge0: entered allmulticast mode
[  258.694339][T13488] SELinux:  Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped).
[  258.707257][T13489] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3665'.
[  258.716536][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3665'.
[  258.854716][T13482] loop4: detected capacity change from 0 to 164
[  259.374339][T13499] lo speed is unknown, defaulting to 1000
[  259.380271][T13499] lo speed is unknown, defaulting to 1000
[  259.386405][T13499] lo speed is unknown, defaulting to 1000
[  259.392822][T13499] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  259.400457][T13499] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  259.416276][T13499] lo speed is unknown, defaulting to 1000
[  259.422872][T13499] lo speed is unknown, defaulting to 1000
[  259.429392][T13499] lo speed is unknown, defaulting to 1000
[  259.435990][T13499] lo speed is unknown, defaulting to 1000
[  259.442654][T13499] lo speed is unknown, defaulting to 1000
[  259.594515][T13504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  259.708572][T13508] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  259.782192][T13494] loop9: detected capacity change from 0 to 7
[  259.813415][T13494] Buffer I/O error on dev loop9, logical block 0, async page read
[  259.822007][T13508] bond_slave_1: entered promiscuous mode
[  259.830207][T13494] Buffer I/O error on dev loop9, logical block 0, async page read
[  259.838178][T13494]  loop9: unable to read partition table
[  259.854010][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'.
[  259.876652][T13494] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  259.876652][T13494] 
) failed (rc=-5)
[  259.891258][T12168] Buffer I/O error on dev loop9, logical block 0, async page read
[  259.901288][T13504] bond_slave_1 (unregistering): left promiscuous mode
[  259.925335][   T29] kauditd_printk_skb: 528 callbacks suppressed
[  259.925354][   T29] audit: type=1400 audit(1878594023.344:862812): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  259.960738][T12168] Buffer I/O error on dev loop9, logical block 0, async page read
[  259.973557][T12168] Buffer I/O error on dev loop9, logical block 0, async page read
[  259.981645][T12168] Buffer I/O error on dev loop9, logical block 0, async page read
[  259.990376][T12168] Buffer I/O error on dev loop9, logical block 0, async page read
[  259.998355][   T29] audit: type=1400 audit(1878594023.403:862813): avc:  denied  { relabelto } for  pid=13503 comm="syz.1.3668" name="file0" dev="tmpfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  260.067221][T13552] loop1: detected capacity change from 0 to 1024
[  260.076541][   T29] audit: type=1400 audit(1878594023.471:862814): avc:  denied  { unlink } for  pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  260.103875][   T29] audit: type=1326 audit(1878594023.471:862815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  260.127583][   T29] audit: type=1326 audit(1878594023.471:862816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  260.151385][   T29] audit: type=1326 audit(1878594023.481:862817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  260.157545][T13556] loop4: detected capacity change from 0 to 512
[  260.175008][   T29] audit: type=1326 audit(1878594023.481:862818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  260.205066][   T29] audit: type=1326 audit(1878594023.481:862819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  260.228760][   T29] audit: type=1326 audit(1878594023.481:862820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  260.252375][   T29] audit: type=1326 audit(1878594023.481:862821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  260.261323][T13556] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  260.292775][T13552] ext4: Unknown parameter 'uid<00000000000000000000'
[  260.301034][T13556] EXT4-fs (loop4): mount failed
[  260.372568][    C1] hrtimer: interrupt took 33643 ns
[  260.382955][T13556] loop4: detected capacity change from 0 to 1024
[  260.417073][T13577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=13577 comm=syz.2.3672
[  260.445201][T13556] EXT4-fs: Ignoring removed nobh option
[  260.450816][T13556] EXT4-fs: Ignoring removed bh option
[  260.579055][T13556] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled
[  260.612228][T13556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.641598][T13556] lo: entered promiscuous mode
[  260.646541][T13556] tunl0: entered promiscuous mode
[  260.651724][T13556] gre0: entered promiscuous mode
[  260.656821][T13556] gretap0: entered promiscuous mode
[  260.662270][T13556] erspan0: entered promiscuous mode
[  260.667647][T13556] ip_vti0: entered promiscuous mode
[  260.672974][T13556] ip6_vti0: entered promiscuous mode
[  260.678497][T13556] sit0: entered promiscuous mode
[  260.683646][T13556] ip6tnl0: entered promiscuous mode
[  260.689022][T13556] ip6gre0: entered promiscuous mode
[  260.694402][T13556] syz_tun: entered promiscuous mode
[  260.699811][T13556] ip6gretap0: entered promiscuous mode
[  260.705497][T13556] vcan0: entered promiscuous mode
[  260.710694][T13556] bond0: entered promiscuous mode
[  260.715837][T13556] team0: entered promiscuous mode
[  260.759251][T13592] netlink: 'syz.2.3674': attribute type 4 has an invalid length.
[  260.768750][T13590] loop1: detected capacity change from 0 to 1024
[  260.785994][T13590] EXT4-fs: Ignoring removed nobh option
[  260.812206][T13596] netlink: 'syz.2.3674': attribute type 4 has an invalid length.
[  260.839851][ T1037] kernel write not supported for file /1859/attr/exec (pid: 1037 comm: kworker/1:2)
[  260.870289][T13590] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  260.908772][T13556] dummy0: entered promiscuous mode
[  260.914130][T13556] nlmon0: entered promiscuous mode
[  260.919326][T13556] caif0: entered promiscuous mode
[  260.924455][T13556] vxcan0: entered promiscuous mode
[  260.929623][T13556] vxcan1: entered promiscuous mode
[  260.934870][T13556] veth0: entered promiscuous mode
[  260.940062][T13556] veth1: entered promiscuous mode
[  260.945211][T13556] wg0: entered promiscuous mode
[  260.950191][T13556] wg1: entered promiscuous mode
[  260.955272][T13556] wg2: entered promiscuous mode
[  260.960242][T13556] veth0_to_bridge: entered promiscuous mode
[  260.966259][T13556] bridge_slave_0: entered promiscuous mode
[  260.972218][T13556] veth1_to_bridge: entered promiscuous mode
[  260.978342][T13556] bridge_slave_1: entered promiscuous mode
[  260.984324][T13556] veth0_to_bond: entered promiscuous mode
[  260.990326][T13556] bond_slave_0: entered promiscuous mode
[  260.996225][T13556] veth1_to_bond: entered promiscuous mode
[  261.002082][T13556] bond_slave_1: entered promiscuous mode
[  261.008125][T13556] veth0_to_team: entered promiscuous mode
[  261.013976][T13556] C: entered promiscuous mode
[  261.018848][T13556] veth1_to_team: entered promiscuous mode
[  261.024755][T13556] team_slave_1: entered promiscuous mode
[  261.030499][T13556] veth0_to_batadv: entered promiscuous mode
[  261.036550][T13556] batadv_slave_0: entered promiscuous mode
[  261.042490][T13556] veth1_to_batadv: entered promiscuous mode
[  261.048715][T13556] batadv_slave_1: entered promiscuous mode
[  261.054640][T13556] xfrm0: entered promiscuous mode
[  261.059811][T13556] veth0_to_hsr: entered promiscuous mode
[  261.060277][T13590] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.3673: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  261.065679][T13556] hsr_slave_0: entered promiscuous mode
[  261.089882][T13556] veth1_to_hsr: entered promiscuous mode
[  261.095735][T13556] veth1_virt_wifi: entered promiscuous mode
[  261.101771][T13556] veth0_virt_wifi: entered promiscuous mode
[  261.107895][T13556] �����: entered promiscuous mode
[  261.113331][T13556] macvlan0: entered promiscuous mode
[  261.118814][T13556] macvlan1: entered promiscuous mode
[  261.124373][T13556] ipvlan0: entered promiscuous mode
[  261.129717][T13556] ipvlan1: entered promiscuous mode
[  261.135209][T13556] macvtap0: entered promiscuous mode
[  261.140695][T13556] macsec0: entered promiscuous mode
[  261.146108][T13556] geneve0: entered promiscuous mode
[  261.151623][T13556] geneve1: entered promiscuous mode
[  261.157035][T13556] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  261.157443][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.164454][T13556] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  261.180971][T13556] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  261.188460][T13556] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[  261.195966][T13556] syztnl1: entered promiscuous mode
[  261.196256][T13590] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3673: couldn't read orphan inode 11 (err -117)
[  261.201341][T13556] vlan2: entered promiscuous mode
[  261.218460][T13556] bond1: entered promiscuous mode
[  261.223804][T13556] veth2: entered promiscuous mode
[  261.228973][T13556] veth3: entered promiscuous mode
[  261.234110][T13556] rose0: entered promiscuous mode
[  261.239305][T13556] veth4: entered promiscuous mode
[  261.244472][T13556] veth5: entered promiscuous mode
[  261.249690][T13556] batadv0: entered promiscuous mode
[  261.265471][T13590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.278154][T13556] vlan0: left allmulticast mode
[  261.283133][T13556] hsr_slave_1: left allmulticast mode
[  261.301115][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.331197][T13607] team0 (unregistering): Port device team_slave_0 removed
[  261.364639][T13590] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3673: Invalid block bitmap block 0 in block_group 0
[  261.378672][T13607] team0 (unregistering): Port device team_slave_1 removed
[  261.426276][T13590] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3673: Failed to acquire dquot type 0
[  261.471101][T13647] loop2: detected capacity change from 0 to 764
[  261.618017][T13654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3678'.
[  261.691224][T13659] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  261.854805][T13669] loop0: detected capacity change from 0 to 2048
[  261.869692][T13669] EXT4-fs: Ignoring removed mblk_io_submit option
[  261.999920][T13669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.321835][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.375722][T13692] loop0: detected capacity change from 0 to 128
[  262.409504][T13692] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  262.460977][T13692] ext4 filesystem being mounted at /787/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  262.583708][T13709] loop2: detected capacity change from 0 to 2364
[  263.330105][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.444566][T13729] loop0: detected capacity change from 0 to 512
[  263.475543][T13729] EXT4-fs: Ignoring removed orlov option
[  263.514431][T13729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  263.521326][T13746] vhci_hcd: invalid port number 255
[  263.628659][T13729] EXT4-fs (loop0): orphan cleanup on readonly fs
[  263.653866][T13746] loop3: detected capacity change from 0 to 512
[  263.661791][T13729] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3684: bg 0: block 248: padding at end of block bitmap is not set
[  263.688233][T13746] EXT4-fs: Ignoring removed nobh option
[  263.721758][T13746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  263.743107][T13729] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3684: Failed to acquire dquot type 1
[  263.781414][T13729] EXT4-fs (loop0): 1 truncate cleaned up
[  263.796735][T13729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.809467][T13746] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3686: corrupted inode contents
[  263.836892][T13761] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  263.842085][T13729] EXT4-fs: Ignoring removed orlov option
[  263.844915][T13761] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  263.850222][T13729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  263.873319][T13746] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.3686: mark_inode_dirty error
[  263.894327][T13746] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3686: corrupted inode contents
[  263.906731][T13729] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  263.929908][T13746] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3686: mark_inode_dirty error
[  263.947676][T13729] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.3684: Abort forced by user
[  263.965493][T13729] EXT4-fs (loop0): Remounting filesystem read-only
[  263.972077][T13729] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  263.982850][T13766] loop4: detected capacity change from 0 to 1024
[  263.995616][T13746] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3686: Failed to acquire dquot type 0
[  263.996248][T13766] EXT4-fs: Ignoring removed orlov option
[  264.011358][T13729] ext4 filesystem being remounted at /788/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.044608][T13746] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3686: corrupted inode contents
[  264.072185][T13746] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.3686: mark_inode_dirty error
[  264.086946][T13766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.100921][T13746] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3686: corrupted inode contents
[  264.120466][T13750] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  264.120466][T13750]    program syz.2.3687 not setting count and/or reply_len properly
[  264.145895][T13766] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm }\)\: bg 0: block 88: padding at end of block bitmap is not set
[  264.169071][T13746] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3686: mark_inode_dirty error
[  264.189729][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.223201][T13746] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3686: corrupted inode contents
[  264.261571][T13766] syzkaller0: entered promiscuous mode
[  264.267091][T13766] syzkaller0: entered allmulticast mode
[  264.273221][T13746] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  264.274261][T13774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3690'.
[  264.290872][T13774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3690'.
[  264.293683][T13746] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3686: corrupted inode contents
[  264.331212][T13746] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.3686: mark_inode_dirty error
[  264.358362][T13746] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  264.404092][T13746] EXT4-fs (loop3): 1 truncate cleaned up
[  264.407848][T13787] loop0: detected capacity change from 0 to 736
[  264.418743][T13746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.443967][T13746] ext4 filesystem being mounted at /688/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.469819][T13787] netlink: 'syz.0.3692': attribute type 27 has an invalid length.
[  264.486311][T13787] veth0_vlan: left allmulticast mode
[  264.494181][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.505685][T13787] vlan0: left promiscuous mode
[  264.510780][T13787] vlan0: left allmulticast mode
[  264.515861][T13787] hsr_slave_1: left allmulticast mode
[  264.525672][T13797] ip6_vti0: entered allmulticast mode
[  264.574091][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3693'.
[  264.583147][T13803] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3693'.
[  264.608379][T13786] ip6_vti0: left allmulticast mode
[  264.621093][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.742942][T13824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3695'.
[  264.754922][T13824] 
: renamed from bond0
[  264.812048][T13829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3693'.
[  264.815424][T13791] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  264.835978][T13827] netlink: 108 bytes leftover after parsing attributes in process `wޣ�'.
[  264.895906][T13836] dummy0: entered promiscuous mode
[  264.900929][T13827] 9pnet: Could not find request transport: f
[  264.902209][T13836] bond0: entered promiscuous mode
[  264.924964][T13836] debugfs: 'hsr0' already exists in 'hsr'
[  264.930749][T13836] Cannot create hsr debugfs directory
[  264.958047][T13836] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  264.968096][T13836] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  265.013347][T13850] loop0: detected capacity change from 0 to 2048
[  265.020569][T13836] hsr0: entered allmulticast mode
[  265.039337][T13836] dummy0: entered allmulticast mode
[  265.044711][T13836] bond0: entered allmulticast mode
[  265.052793][T13850] EXT4-fs (loop0): #clusters per group too big: 151011328
[  265.072882][   T29] kauditd_printk_skb: 457 callbacks suppressed
[  265.072897][   T29] audit: type=1326 audit(1878594028.391:863272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74580eb69 code=0x7ffc0000
[  265.127078][   T29] audit: type=1326 audit(1878594028.450:863273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74580eb69 code=0x7ffc0000
[  265.181909][   T29] audit: type=1400 audit(1878594028.499:863274): avc:  denied  { write } for  pid=13849 comm="syz.0.3697" path="socket:[34183]" dev="sockfs" ino=34183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  265.237586][T13865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3697'.
[  265.247323][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'.
[  265.274928][   T29] audit: type=1400 audit(1878594028.529:863275): avc:  denied  { setcheckreqprot } for  pid=13859 comm="syz.2.3698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  265.295929][   T29] audit: type=1400 audit(1878594028.539:863276): avc:  denied  { connect } for  pid=13859 comm="syz.2.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  265.315810][   T29] audit: type=1400 audit(1878594028.539:863277): avc:  denied  { write } for  pid=13859 comm="syz.2.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  265.338361][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3697'.
[  265.435692][   T29] audit: type=1400 audit(1878594028.745:863278): avc:  denied  { append } for  pid=13887 comm="syz.2.3700" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  265.472480][   T29] audit: type=1400 audit(1878594028.775:863279): avc:  denied  { bind } for  pid=13887 comm="syz.2.3700" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  265.493102][   T29] audit: type=1400 audit(1878594028.775:863280): avc:  denied  { ioctl } for  pid=13887 comm="syz.2.3700" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  265.540584][T13914] loop0: detected capacity change from 0 to 128
[  265.604728][   T29] audit: type=1400 audit(1879118316.904:863281): avc:  denied  { create } for  pid=13910 comm="syz.0.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  265.896899][T13955] loop4: detected capacity change from 0 to 128
[  265.903521][T13954] pim6reg: entered allmulticast mode
[  265.910069][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.961933][T13969] loop1: detected capacity change from 0 to 512
[  265.963798][T13967] siw: device registration error -23
[  265.968898][T13969] EXT4-fs: Ignoring removed orlov option
[  265.980356][T13969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  265.995950][T13969] EXT4-fs (loop1): orphan cleanup on readonly fs
[  266.020717][T13979] netlink: 'syz.0.3706': attribute type 21 has an invalid length.
[  266.045323][T13969] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3702: bg 0: block 248: padding at end of block bitmap is not set
[  266.056068][T13987] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  266.067418][T13954] pim6reg: left allmulticast mode
[  266.074136][T13969] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3702: Failed to acquire dquot type 1
[  266.176958][T13969] EXT4-fs (loop1): 1 truncate cleaned up
[  266.220537][T13969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  266.268292][T13969] EXT4-fs: Ignoring removed orlov option
[  266.276333][T13969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  266.287354][T13969] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  266.303670][T13969] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.3702: Abort forced by user
[  266.315068][T13969] EXT4-fs (loop1): Remounting filesystem read-only
[  266.321671][T13969] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  266.330636][T13969] ext4 filesystem being remounted at /729/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  266.386268][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.474923][T14025] loop1: detected capacity change from 0 to 1024
[  266.484740][T14025] netlink: 'syz.1.3710': attribute type 1 has an invalid length.
[  266.549785][T14025] loop1: detected capacity change from 0 to 1024
[  266.943311][T14070] loop0: detected capacity change from 0 to 1024
[  266.950975][T14070] EXT4-fs: Ignoring removed nobh option
[  266.958257][T14070] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  266.971557][T14070] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.3714: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  266.992145][T14070] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3714: couldn't read orphan inode 11 (err -117)
[  267.005133][T14070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.036856][T14070] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3714: Invalid block bitmap block 0 in block_group 0
[  267.050871][T14070] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3714: Failed to acquire dquot type 0
[  268.167629][T14127] loop3: detected capacity change from 0 to 2048
[  268.191516][T14127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  268.277989][T14127] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  268.294845][T14127] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1922 with error 28
[  268.294883][T14127] EXT4-fs (loop3): This should not happen!! Data will be lost
[  268.294883][T14127] 
[  268.294901][T14127] EXT4-fs (loop3): Total free blocks count 0
[  268.294918][T14127] EXT4-fs (loop3): Free/Dirty block details
[  268.294932][T14127] EXT4-fs (loop3): free_blocks=2415919104
[  268.294947][T14127] EXT4-fs (loop3): dirty_blocks=1936
[  268.295030][T14127] EXT4-fs (loop3): Block reservation details
[  268.295043][T14127] EXT4-fs (loop3): i_reserved_data_blocks=121
[  268.448653][ T1912] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  268.536283][T14148] loop3: detected capacity change from 0 to 764
[  268.631874][T14154] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  268.817721][T14174] netlink: 'syz.2.3727': attribute type 3 has an invalid length.
[  268.886156][T14143] netlink: 'syz.4.3726': attribute type 3 has an invalid length.
[  269.167774][T14205] loop4: detected capacity change from 0 to 512
[  269.182882][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.195533][T14205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.213342][T14205] ext4 filesystem being mounted at /820/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.232982][T14205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.233631][T14212] loop0: detected capacity change from 0 to 1024
[  269.252293][T14212] EXT4-fs: Ignoring removed orlov option
[  269.282536][T14212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.303635][T14212] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm }\)\: bg 0: block 88: padding at end of block bitmap is not set
[  269.326145][T14198] loop4: detected capacity change from 0 to 1024
[  269.352170][T14198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.365181][T14198] ext4 filesystem being mounted at /820/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.377700][T14198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.389068][T14212] syzkaller0: entered promiscuous mode
[  269.394777][T14212] syzkaller0: entered allmulticast mode
[  269.437027][T14223] loop1: detected capacity change from 0 to 512
[  269.443854][T14223] msdos: Unknown parameter '!selinu�'
[  269.529308][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.626977][T14280] loop1: detected capacity change from 0 to 128
[  269.703885][T14276] debugfs: 'hsr0' already exists in 'hsr'
[  269.709823][T14276] Cannot create hsr debugfs directory
[  269.726588][T14276] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  269.736678][T14276] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  269.757343][T14276] hsr0: entered allmulticast mode
[  269.770531][T14276] dummy0: entered allmulticast mode
[  269.775792][T14276] bond0: entered allmulticast mode
[  269.797211][T14298] __nla_validate_parse: 10 callbacks suppressed
[  269.797233][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'.
[  269.812689][T14298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3739'.
[  269.821764][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'.
[  269.831782][T14298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3739'.
[  269.840775][T14298] netlink: 'syz.0.3739': attribute type 6 has an invalid length.
[  269.852731][T14293] loop3: detected capacity change from 0 to 2048
[  270.310775][T14326] loop0: detected capacity change from 0 to 1024
[  270.393600][T14326] EXT4-fs: Ignoring removed nobh option
[  270.566045][T14326] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  270.632460][T14337] loop4: detected capacity change from 0 to 512
[  270.646973][T14326] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.3740: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  270.676767][T14326] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3740: couldn't read orphan inode 11 (err -117)
[  270.693813][T14337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.738536][T14326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.963471][T14326] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3740: Invalid block bitmap block 0 in block_group 0
[  271.063588][T14326] __quota_error: 353 callbacks suppressed
[  271.063606][T14326] Quota error (device loop0): write_blk: dquota write failed
[  271.076913][T14326] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  271.121105][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.154658][   T29] audit: type=1326 audit(1880691186.350:863631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  271.182779][T14380] vhci_hcd: invalid port number 255
[  271.203633][T14381] loop4: detected capacity change from 0 to 764
[  271.222693][T14380] loop1: detected capacity change from 0 to 512
[  271.238730][   T29] audit: type=1326 audit(1880691186.369:863632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe1171d4d0 code=0x7ffc0000
[  271.262695][   T29] audit: type=1326 audit(1880691186.369:863633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  271.286463][   T29] audit: type=1326 audit(1880691186.369:863634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  271.310153][   T29] audit: type=1326 audit(1880691186.369:863635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  271.330063][T14380] EXT4-fs: Ignoring removed nobh option
[  271.334011][   T29] audit: type=1326 audit(1880691186.369:863636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  271.363105][   T29] audit: type=1326 audit(1880691186.398:863637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  271.372233][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3745'.
[  271.386832][   T29] audit: type=1326 audit(1880691186.398:863638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1171eb69 code=0x7ffc0000
[  271.420911][T14326] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3740: Failed to acquire dquot type 0
[  271.433008][T14389] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  271.488578][T14380] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.3746: corrupted inode contents
[  271.527612][T14380] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.3746: mark_inode_dirty error
[  271.576110][T14380] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.3746: corrupted inode contents
[  271.605660][T14380] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3746: mark_inode_dirty error
[  271.632482][T14380] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3746: Failed to acquire dquot type 0
[  271.672389][T14380] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3746: corrupted inode contents
[  271.685696][T14259] syz.3.3734 (14259) used greatest stack depth: 6408 bytes left
[  271.701602][T14380] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.3746: mark_inode_dirty error
[  271.715964][T14380] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3746: corrupted inode contents
[  271.748451][T14380] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3746: mark_inode_dirty error
[  271.763927][T14405] loop3: detected capacity change from 0 to 1024
[  271.766648][T14380] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3746: corrupted inode contents
[  271.770813][T14405] EXT4-fs: Ignoring removed orlov option
[  271.801123][T14380] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  271.814086][T14405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.828400][T14380] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3746: corrupted inode contents
[  271.865131][T14380] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.3746: mark_inode_dirty error
[  271.892458][T14405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm }\)\: bg 0: block 88: padding at end of block bitmap is not set
[  271.907589][T14380] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  271.946820][T14380] EXT4-fs (loop1): 1 truncate cleaned up
[  271.953110][T14380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.977227][T14405] syzkaller0: entered promiscuous mode
[  271.978253][T14380] ext4 filesystem being mounted at /739/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.982928][T14405] syzkaller0: entered allmulticast mode
[  272.085856][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.180455][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.202657][T14446] netlink: 108 bytes leftover after parsing attributes in process `wޣ�'.
[  272.262985][T14446] 9pnet: Could not find request transport: f
[  272.691312][T14454] loop1: detected capacity change from 0 to 256
[  272.731000][T14454] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  272.761461][T14454] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  272.761461][T14454]    program syz.1.3751 not setting count and/or reply_len properly
[  272.858882][T14513] loop3: detected capacity change from 0 to 128
[  272.879135][T14513] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  272.887157][T14513] FAT-fs (loop3): Filesystem has been set read-only
[  272.907306][T14520] netlink: 'syz.1.3755': attribute type 21 has an invalid length.
[  272.915293][T14520] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3755'.
[  272.916018][T14513] +}[@: attempt to access beyond end of device
[  272.916018][T14513] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  272.944377][T14513] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  272.952271][T14513] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  272.965926][T14513] +}[@: attempt to access beyond end of device
[  272.965926][T14513] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  272.980633][T14513] +}[@: attempt to access beyond end of device
[  272.980633][T14513] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  272.995765][T14521] syz.3.3754: attempt to access beyond end of device
[  272.995765][T14521] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[  273.009148][T14521] Buffer I/O error on dev loop3, logical block 2065, async page read
[  273.018545][T14521] syz.3.3754: attempt to access beyond end of device
[  273.018545][T14521] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128
[  273.031895][T14521] Buffer I/O error on dev loop3, logical block 2066, async page read
[  273.042436][T14521] syz.3.3754: attempt to access beyond end of device
[  273.042436][T14521] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128
[  273.055731][T14521] Buffer I/O error on dev loop3, logical block 2067, async page read
[  273.065182][T14521] syz.3.3754: attempt to access beyond end of device
[  273.065182][T14521] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128
[  273.078554][T14521] Buffer I/O error on dev loop3, logical block 2068, async page read
[  273.092325][T14521] syz.3.3754: attempt to access beyond end of device
[  273.092325][T14521] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128
[  273.105650][T14521] Buffer I/O error on dev loop3, logical block 2069, async page read
[  273.115171][T14521] syz.3.3754: attempt to access beyond end of device
[  273.115171][T14521] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128
[  273.128496][T14521] Buffer I/O error on dev loop3, logical block 2070, async page read
[  273.153456][T14521] syz.3.3754: attempt to access beyond end of device
[  273.153456][T14521] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128
[  273.166905][T14521] Buffer I/O error on dev loop3, logical block 2071, async page read
[  273.178455][T14521] Buffer I/O error on dev loop3, logical block 2072, async page read
[  273.186784][T14513] Buffer I/O error on dev loop3, logical block 2065, async page read
[  273.186790][T14540] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  273.186843][T14540] SELinux: failed to load policy
[  273.196280][T14513] Buffer I/O error on dev loop3, logical block 2066, async page read
[  273.410674][T14551] netlink: 'syz.4.3756': attribute type 10 has an invalid length.
[  273.426909][T14551] hsr_slave_0: left promiscuous mode
[  273.432988][T14551] hsr_slave_0: entered promiscuous mode
[  273.469903][T14554] rdma_rxe: rxe_newlink: failed to add lo
[  273.538463][T14551] team0: Port device hsr_slave_0 added
[  274.435740][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.448875][T14575] loop4: detected capacity change from 0 to 128
[  274.477722][T14582] loop0: detected capacity change from 0 to 764
[  274.552505][T14590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3761'.
[  274.575348][T14592] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  274.727700][T14606] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3765'.
[  274.772284][T14606] 0�X���: renamed from caif0
[  274.790091][T14612] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  274.806134][T14606] 0�X���: entered allmulticast mode
[  274.811430][T14606] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  275.226708][T14632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14632 comm=syz.2.3766
[  275.354337][T14634] $H�: (slave dummy0): Releasing backup interface
[  275.438110][T14658] loop0: detected capacity change from 0 to 128
[  275.445103][T14658] msdos: Unknown parameter '0177777777777777777777700000000000000000000004184467440737095516150xffffffffffffffff����'
[  275.517823][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3769'.
[  275.563046][T14634] tipc: Started in network mode
[  275.568044][T14634] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  275.575291][T14634] tipc: Enabled bearer <eth:team0>, priority 0
[  276.006068][T14709] loop0: detected capacity change from 0 to 512
[  276.055703][T14709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.080359][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3770'.
[  276.092280][T14690] hub 9-0:1.0: USB hub found
[  276.097275][T14690] hub 9-0:1.0: 8 ports detected
[  276.108943][T14690] loop1: detected capacity change from 0 to 512
[  276.175430][T14690] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.3774: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  276.220274][T14690] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.3774: Bad quota inode: 3, type: 0
[  276.236910][   T29] kauditd_printk_skb: 1084 callbacks suppressed
[  276.236929][   T29] audit: type=1326 audit(1881215479.295:864721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd720805b27 code=0x7ffc0000
[  276.266913][   T29] audit: type=1326 audit(1881215479.295:864722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7207aad69 code=0x7ffc0000
[  276.290665][   T29] audit: type=1326 audit(1881215479.295:864723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72080eb69 code=0x7ffc0000
[  276.342297][   T29] audit: type=1326 audit(1881215479.373:864724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd720805b27 code=0x7ffc0000
[  276.365996][   T29] audit: type=1326 audit(1881215479.373:864725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7207aad69 code=0x7ffc0000
[  276.389665][   T29] audit: type=1326 audit(1881215479.373:864726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72080eb69 code=0x7ffc0000
[  276.413424][   T29] audit: type=1326 audit(1881215479.373:864727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72080eb69 code=0x7ffc0000
[  276.437186][   T29] audit: type=1326 audit(1881215479.373:864728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72080eb69 code=0x7ffc0000
[  276.447316][T14690] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  276.460917][   T29] audit: type=1326 audit(1881215479.382:864729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd72080eb69 code=0x7ffc0000
[  276.481321][T14715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3775'.
[  276.499169][   T29] audit: type=1326 audit(1881215479.382:864730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72080eb69 code=0x7ffc0000
[  276.553607][T14690] EXT4-fs (loop1): mount failed
[  276.626617][ T3358] tipc: Node number set to 11578026
[  276.640262][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.762965][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'.
[  276.791887][T14774] loop3: detected capacity change from 0 to 128
[  276.800837][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3775'.
[  277.801335][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'.
[  277.819278][T14812] loop0: detected capacity change from 0 to 1024
[  277.842462][T14812] netlink: 'syz.0.3789': attribute type 1 has an invalid length.
[  277.850276][T14812] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3789'.
[  277.878171][T14812] loop0: detected capacity change from 0 to 1024
[  278.220866][T14849] loop3: detected capacity change from 0 to 128
[  278.870866][T14874] loop1: detected capacity change from 0 to 512
[  278.880522][T14874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.966367][T14881] ==================================================================
[  278.974490][T14881] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  278.982445][T14881] 
[  278.984783][T14881] write to 0xffff888100699844 of 4 bytes by task 14874 on cpu 0:
[  278.992500][T14881]  xas_set_mark+0x12b/0x140
[  278.997012][T14881]  __folio_start_writeback+0x1dd/0x440
[  279.002490][T14881]  ext4_bio_write_folio+0x5ad/0x9f0
[  279.007696][T14881]  mpage_process_page_bufs+0x4a1/0x620
[  279.013160][T14881]  mpage_prepare_extent_to_map+0x786/0xc00
[  279.018965][T14881]  ext4_do_writepages+0x708/0x2750
[  279.024113][T14881]  ext4_writepages+0x176/0x300
[  279.028879][T14881]  do_writepages+0x1c3/0x310
[  279.033475][T14881]  file_write_and_wait_range+0x156/0x2c0
[  279.039149][T14881]  generic_buffers_fsync_noflush+0x45/0x120
[  279.045048][T14881]  ext4_sync_file+0x1ab/0x690
[  279.049740][T14881]  vfs_fsync_range+0x10a/0x130
[  279.054516][T14881]  ext4_buffered_write_iter+0x34f/0x3c0
[  279.060159][T14881]  ext4_file_write_iter+0x383/0xf00
[  279.065458][T14881]  iter_file_splice_write+0x5ef/0x970
[  279.070829][T14881]  direct_splice_actor+0x156/0x2a0
[  279.075945][T14881]  splice_direct_to_actor+0x312/0x680
[  279.081413][T14881]  do_splice_direct+0xda/0x150
[  279.086180][T14881]  do_sendfile+0x380/0x650
[  279.090607][T14881]  __x64_sys_sendfile64+0x105/0x150
[  279.095838][T14881]  x64_sys_call+0x2bb0/0x2ff0
[  279.100519][T14881]  do_syscall_64+0xd2/0x200
[  279.105027][T14881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.110923][T14881] 
[  279.113240][T14881] read to 0xffff888100699844 of 4 bytes by task 14881 on cpu 1:
[  279.120866][T14881]  __writeback_single_inode+0x1f9/0x7c0
[  279.126463][T14881]  writeback_single_inode+0x167/0x3e0
[  279.131866][T14881]  sync_inode_metadata+0x5b/0x90
[  279.136896][T14881]  generic_buffers_fsync_noflush+0xd9/0x120
[  279.142789][T14881]  ext4_sync_file+0x1ab/0x690
[  279.147506][T14881]  vfs_fsync_range+0x10a/0x130
[  279.152280][T14881]  ext4_buffered_write_iter+0x34f/0x3c0
[  279.157838][T14881]  ext4_file_write_iter+0x383/0xf00
[  279.163045][T14881]  iter_file_splice_write+0x5ef/0x970
[  279.168419][T14881]  direct_splice_actor+0x156/0x2a0
[  279.173529][T14881]  splice_direct_to_actor+0x312/0x680
[  279.178900][T14881]  do_splice_direct+0xda/0x150
[  279.183659][T14881]  do_sendfile+0x380/0x650
[  279.188082][T14881]  __x64_sys_sendfile64+0x105/0x150
[  279.193316][T14881]  x64_sys_call+0x2bb0/0x2ff0
[  279.197996][T14881]  do_syscall_64+0xd2/0x200
[  279.202542][T14881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.208451][T14881] 
[  279.210905][T14881] value changed: 0x0a000021 -> 0x04000021
[  279.216622][T14881] 
[  279.218959][T14881] Reported by Kernel Concurrency Sanitizer on:
[  279.225125][T14881] CPU: 1 UID: 0 PID: 14881 Comm: syz.1.3800 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[  279.237276][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  279.247355][T14881] ==================================================================
[  279.365880][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.