last executing test programs:

12m18.873699246s ago: executing program 3 (id=1138):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x8000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x40080)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

12m17.879280786s ago: executing program 3 (id=1143):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
socket$tipc(0x1e, 0x5, 0x0)

12m16.858022588s ago: executing program 3 (id=1147):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)

12m15.874224427s ago: executing program 3 (id=1153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000002"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20050800)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
r3 = socket$inet(0x2, 0x1, 0x3)
getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000080)={@dev, @private, @multicast2}, &(0x7f00000002c0)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x400)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8)

12m13.528242675s ago: executing program 3 (id=1158):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noauto_da_alloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e22, 0x20, 0x3, 0x0, 0x0, 0x84}, {0xfffffffffffffffe, 0x400403, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x7fd, 0x0, 0x0, 0x10000000000}, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d2, 0x33}, 0x2, @in=@empty, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff202000400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='rxrpc_client\x00', r7}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="8f4ad5933879bafd2c29ca46efc2bff3045a5f3441a62b6712fee63916b67aeffa2f168cd390dc1fbc9aad07ffc73a558558f7f0c06ba4de52c360b10000f4a6", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
inotify_init()
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'sit0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000940)="$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")

12m13.270353946s ago: executing program 3 (id=1161):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006100), r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f00000061c0)={&(0x7f0000006140)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040110}, 0xc0)

12m13.244421528s ago: executing program 32 (id=1161):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006100), r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f00000061c0)={&(0x7f0000006140)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040110}, 0xc0)

4.8489467s ago: executing program 0 (id=5785):
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x80003fd, 0x80000000, 0x3, 0xd202, 0xf, "10120dfe0ef7f0200000ff490a0080002a00"})
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0xa)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

4.271464627s ago: executing program 0 (id=5791):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

4.181695594s ago: executing program 0 (id=5793):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x1, 0x50d, &(0x7f0000000200)="$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")

4.165452285s ago: executing program 0 (id=5794):
syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00')
umount2(0x0, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r2}, 0x20)
unshare(0x64000600)

3.85324737s ago: executing program 0 (id=5807):
pivot_root(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00')
umount2(0x0, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20)
unshare(0x64000600)

3.512111228s ago: executing program 5 (id=5812):
r0 = socket(0xa, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x2017be09})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x40000000})

3.409782006s ago: executing program 5 (id=5813):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)}], 0x1, &(0x7f0000002180)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x5, 0xfd9}}, @init={0x18, 0x84, 0x0, {0x4, 0x6a3}}], 0x38, 0x40010}], 0x1, 0x240000c0)

3.386206148s ago: executing program 5 (id=5814):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa})
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)

2.905119936s ago: executing program 0 (id=5821):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x1, 0x50d, &(0x7f0000000200)="$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")

2.377647709s ago: executing program 1 (id=5825):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a"], 0x3c}}, 0x0)

2.255817338s ago: executing program 1 (id=5829):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

1.670123356s ago: executing program 2 (id=5834):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

1.525790457s ago: executing program 2 (id=5835):
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2017be09})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000})

1.476824111s ago: executing program 2 (id=5836):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = accept(r2, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x80)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000200))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
sigaltstack(0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) (async)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
accept(r2, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x80) (async)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000200)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async)
sigaltstack(0x0, 0x0) (async)

1.333260012s ago: executing program 2 (id=5837):
syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00')
umount2(0x0, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20)
unshare(0x64000600)

1.249657289s ago: executing program 1 (id=5838):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x3, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={<r5=>r4, 0x3}, &(0x7f0000000180)=0x8)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="000000000000000000000900ff0000000000000000002fe7006b3cd7"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14947e, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r2, 0x25, 0x0, @void}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0)
fallocate(r0, 0x20, 0x0, 0x8000)

656.746377ms ago: executing program 4 (id=5843):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=t'])

616.69196ms ago: executing program 4 (id=5844):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x7}, 0x18)
socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x5c}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000)
write(r0, &(0x7f0000000280)="18a653c9fbbcc9b68f1f7dd154d1635153434c12cfa370e959ca0f3f77219d7e3e6037b99f95a8e767ba0d50bc1e65c1dcba952357d24ee42e9027d3f659d4edf54273aa6fb90ebeb8fa265792a0556fe9220545691ef14cd29a5917c766a404ca1ae70d12eac50c71ddbe86ce9b6c00d2b42e9c9d977387f36faa2ffdb6750166b0525fe803ed05b0f24d18efb210ed02a5ebe63c57da95f6a7e013c8a659d61c7acdda56ff5a93665af70d415891ede360be3ad8", 0xb5)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6)
sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r7, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004)

425.886496ms ago: executing program 4 (id=5845):
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2017be09})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000})

425.550456ms ago: executing program 4 (id=5846):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, 0x50, 0xffffffffffffffff, 0x8000000)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8)
syz_io_uring_complete(r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10)
r3 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x114, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xaf, 0xa8, @random="f5ebb66302a488ba8d94404a14c40519ddb5db2b3fe70bf45f29ed8a748dc7e61a1c7d8afbf6cadca62ff400c2b23a141e221ebb109eb8bfa638aafd73d921ffb83e54446edd9a9f4a2e11848cc5a86403ebd57faea81cf60a558444b6f3b1e762b9395448591e08e901271572133a1ab192fd397d9be54ce08f96c6e7af89d0c460aa98a8350c1a3a9d047a3da2e4af73ce8c90385a97cc20d9b2c0d8b66442683ce930723a983bf0c80e"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x20004810)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0x4, 0x10, 0x403, 0x119}, 0x1)

332.725553ms ago: executing program 2 (id=5847):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, 0x50, 0xffffffffffffffff, 0x8000000)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x0, 0x0})
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)
syz_io_uring_complete(r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10)
r4 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x114, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xaf, 0xa8, @random="f5ebb66302a488ba8d94404a14c40519ddb5db2b3fe70bf45f29ed8a748dc7e61a1c7d8afbf6cadca62ff400c2b23a141e221ebb109eb8bfa638aafd73d921ffb83e54446edd9a9f4a2e11848cc5a86403ebd57faea81cf60a558444b6f3b1e762b9395448591e08e901271572133a1ab192fd397d9be54ce08f96c6e7af89d0c460aa98a8350c1a3a9d047a3da2e4af73ce8c90385a97cc20d9b2c0d8b66442683ce930723a983bf0c80e"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x20004810)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000340)={0x0, 0x4, 0x10, 0x403, 0x119}, 0x1)

310.574905ms ago: executing program 4 (id=5848):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, &(0x7f00000003c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
r6 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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")
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x7, <r7=>r6, 'id0\x00'})
io_uring_enter(r7, 0x6141, 0xb76d, 0x4, &(0x7f0000000180)={[0x7]}, 0x8)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
mount_setattr(r8, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9)
sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0103000000000000000001000000080001001400000008000300", @ANYRES32=0x0, @ANYBLOB="0002000000b6515083"], 0x30}}, 0x44)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f00000003c0)={<r12=>0x0, 0xd5, 0x28, 0x80, 0xc0a6, 0x3ff, 0x800, 0x5, {0x0, @in6={{0xa, 0x4e22, 0xffff948f, @mcast1, 0x400}}, 0x2d, 0x543d, 0x1c0, 0xfffffffa, 0x2}}, &(0x7f0000000480)=0xb0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f00000004c0)={r12, 0x0, 0x40}, &(0x7f0000000500)=0xc)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={<r13=>0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x8, 0x7}, &(0x7f0000000300)=0x90)
getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000340)={r13, 0x8000}, &(0x7f0000000380)=0x8)
r14 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r14, 0x0, 0xd, &(0x7f0000000040)=0x72d9, 0x4)
setsockopt$inet_int(r14, 0x0, 0x3, 0x0, 0x0)

233.718561ms ago: executing program 1 (id=5849):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x8808)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x14886, 0x0)
fcntl$notify(r2, 0x402, 0x29)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r3, 0x1)
recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x10000)
mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)

109.925631ms ago: executing program 2 (id=5850):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x18)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0)

109.259711ms ago: executing program 5 (id=5851):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

62.003305ms ago: executing program 1 (id=5852):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0)

61.761915ms ago: executing program 5 (id=5853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=t'])

61.517455ms ago: executing program 1 (id=5854):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x3, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={<r5=>r4, 0x3}, &(0x7f0000000180)=0x8)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="000000000000000000000900ff0000000000000000002fe7006b3cd7"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14947e, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r2, 0x25, 0x0, @void}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0)
fallocate(r0, 0x20, 0x0, 0x8000)

653.549µs ago: executing program 5 (id=5855):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000025ba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000780050015000000000005000100060000000500050002000000050004000000000212000300686173683a6e65742c706f72740000000900020073797a3200000000"], 0x58}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='rpcgss_update_slack\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007004200000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000002c0)=0x9a3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

0s ago: executing program 4 (id=5856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, 0x0, &(0x7f0000000080)}, 0x20)

kernel console output (not intermixed with test programs):

device_t tclass=chr_file permissive=1
[  903.870945][T23409] loop4: detected capacity change from 0 to 1024
[  903.880429][T23409] EXT4-fs: Ignoring removed bh option
[  903.900051][T23409] EXT4-fs: inline encryption not supported
[  903.911430][T23409] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  903.943281][T23409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  904.881056][T23409] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.4886: lblock 2 mapped to illegal pblock 2 (length 1)
[  904.896013][T23409] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4886: lblock 0 mapped to illegal pblock 48 (length 1)
[  904.911457][T23409] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4886: Failed to acquire dquot type 0
[  904.924188][T23409] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  904.934683][T23409] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4886: mark_inode_dirty error
[  904.946687][T23409] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  904.957956][T23409] EXT4-fs (loop4): 1 orphan inode deleted
[  904.964228][T23409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  904.978403][  T295] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  904.998453][  T295] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0
[  905.242654][T23731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4892'.
[  905.385135][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  905.427006][T14446] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  905.440512][T14446] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  905.451523][T14446] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  905.510917][T23740] loop5: detected capacity change from 0 to 1024
[  905.533580][T23745] netlink: 592 bytes leftover after parsing attributes in process `syz.2.4897'.
[  905.543598][T23740] EXT4-fs: Ignoring removed bh option
[  905.549405][T23740] EXT4-fs: inline encryption not supported
[  905.573766][T23740] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  905.587211][T23740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  905.598573][T23740] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.4896: lblock 2 mapped to illegal pblock 2 (length 1)
[  905.609948][T23747] loop4: detected capacity change from 0 to 8192
[  905.614447][T23751] netlink: 592 bytes leftover after parsing attributes in process `syz.2.4899'.
[  905.620383][T23740] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.4896: lblock 0 mapped to illegal pblock 48 (length 1)
[  905.643778][T23740] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4896: Failed to acquire dquot type 0
[  905.668908][T23747]  loop4: p2 p3 p4[EZD]
[  905.671445][T23753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  905.677733][T23747] loop4: p3 start 360447 is beyond EOD, truncated
[  905.688444][T23747] loop4: p4 size 264072 extends beyond EOD, truncated
[  905.695858][T23753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  905.715216][T23740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  905.726429][T23740] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4896: mark_inode_dirty error
[  905.766521][T23740] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  905.791690][T23740] EXT4-fs (loop5): 1 orphan inode deleted
[  905.798692][T23740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  905.818564][  T295] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  905.849378][  T295] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0
[  905.901781][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4901'.
[  905.913747][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  905.929462][T20284] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  905.955677][T20284] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  905.966099][T20284] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  906.303973][T23772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4905'.
[  906.621839][T23788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4908'.
[  907.063867][T23802] loop5: detected capacity change from 0 to 8192
[  907.095962][T23802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  907.103743][T23802] IPv6: NLM_F_CREATE should be set when creating new route
[  907.437417][T23811] loop5: detected capacity change from 0 to 512
[  907.465587][T23811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  907.547629][T23817] loop2: detected capacity change from 0 to 512
[  907.628553][T23817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  907.639062][T23817] EXT4-fs (loop2): orphan cleanup on readonly fs
[  907.646980][T23817] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4916: Failed to acquire dquot type 1
[  907.659746][T23817] EXT4-fs (loop2): 1 truncate cleaned up
[  907.667339][T23817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  908.074609][T23821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4918'.
[  908.598088][T23811] EXT4-fs (loop5): orphan cleanup on readonly fs
[  908.696327][T23811] __quota_error: 82 callbacks suppressed
[  908.696348][T23811] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  908.712251][T23811] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  908.722354][T23811] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4914: Failed to acquire dquot type 1
[  909.088019][T23811] EXT4-fs (loop5): 1 truncate cleaned up
[  909.125411][T23811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  909.205181][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  909.421644][T23936] loop2: detected capacity change from 0 to 1024
[  909.439727][T23936] EXT4-fs: Ignoring removed bh option
[  909.675115][T23936] EXT4-fs: inline encryption not supported
[  909.714685][T23936] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  909.842458][   T29] audit: type=1400 audit(1756345993.226:3166): avc:  denied  { allowed } for  pid=23938 comm="syz.0.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  909.874188][T23936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  909.883893][   T29] audit: type=1400 audit(1756345993.254:3167): avc:  denied  { create } for  pid=23938 comm="syz.0.4923" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  909.906933][   T29] audit: type=1400 audit(1756345993.254:3168): avc:  denied  { map } for  pid=23938 comm="syz.0.4923" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  909.932659][   T29] audit: type=1400 audit(1756345993.254:3169): avc:  denied  { read write } for  pid=23938 comm="syz.0.4923" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  909.965951][T23936] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.4922: lblock 2 mapped to illegal pblock 2 (length 1)
[  909.986843][T23936] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  909.995136][T23936] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4922: lblock 0 mapped to illegal pblock 48 (length 1)
[  910.020894][T23936] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  910.030137][T23936] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4922: Failed to acquire dquot type 0
[  910.042330][T23936] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  910.053987][T23936] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.4922: mark_inode_dirty error
[  910.073225][T23936] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  910.094701][T23936] EXT4-fs (loop2): 1 orphan inode deleted
[  910.101256][T23936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  910.126139][   T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  910.334228][   T51] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  910.343172][   T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0
[  910.483363][   T29] audit: type=1326 audit(1756345993.722:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.2.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59244aebe9 code=0x7ffc0000
[  910.596785][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  910.665040][T13597] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  910.778633][T13597] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  910.856338][T13597] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  910.892066][T23952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4927'.
[  911.115542][T23954] 9pnet: Could not find request transport: t
[  911.991469][T23959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4926'.
[  912.548928][T23970] loop2: detected capacity change from 0 to 164
[  912.577539][T23968] netlink: '': attribute type 13 has an invalid length.
[  912.584816][T23968] netlink: '': attribute type 14 has an invalid length.
[  912.724488][T23973] netlink: '': attribute type 13 has an invalid length.
[  912.732737][T23973] netlink: '': attribute type 14 has an invalid length.
[  913.913833][T24000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4941'.
[  914.108014][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  914.108028][   T29] audit: type=1400 audit(1756345997.211:3175): avc:  denied  { bind } for  pid=24001 comm="syz.2.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  914.141916][   T29] audit: type=1400 audit(1756345997.249:3176): avc:  denied  { setopt } for  pid=24001 comm="syz.2.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  914.242262][T24005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4943'.
[  914.281053][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  914.298943][T24009] netlink: 'syz.0.4944': attribute type 13 has an invalid length.
[  914.306988][T24009] netlink: 'syz.0.4944': attribute type 14 has an invalid length.
[  914.321863][T24011] loop5: detected capacity change from 0 to 164
[  914.955798][T24136] loop5: detected capacity change from 0 to 512
[  914.989877][T24136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  915.007337][T24136] EXT4-fs (loop5): orphan cleanup on readonly fs
[  915.021627][T24136] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  915.031617][T24136] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  915.041728][T24136] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4952: Failed to acquire dquot type 1
[  915.076441][T24136] EXT4-fs (loop5): 1 truncate cleaned up
[  915.110017][T24136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  915.731942][T24143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4954'.
[  915.966668][T24253] loop2: detected capacity change from 0 to 512
[  915.985675][   T29] audit: type=1400 audit(1756345998.932:3177): avc:  denied  { sqpoll } for  pid=24249 comm="syz.1.4958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  916.033492][T24253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  916.043341][T24254] netlink: 'syz.4.4957': attribute type 13 has an invalid length.
[  916.052435][T24254] netlink: 'syz.4.4957': attribute type 14 has an invalid length.
[  916.302757][T24253] EXT4-fs (loop2): orphan cleanup on readonly fs
[  916.338345][T24253] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  916.348169][T24253] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  916.358630][T24253] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4955: Failed to acquire dquot type 1
[  916.427165][T24464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4960'.
[  916.477971][   T29] audit: type=1400 audit(1756345999.428:3178): avc:  denied  { create } for  pid=24465 comm="syz.1.4963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  916.556379][T24253] EXT4-fs (loop2): 1 truncate cleaned up
[  916.567009][   T29] audit: type=1400 audit(1756345999.465:3179): avc:  denied  { ioctl } for  pid=24465 comm="syz.1.4963" path="socket:[62117]" dev="sockfs" ino=62117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  916.596247][T24454] loop4: detected capacity change from 0 to 8192
[  916.617720][T24253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  916.638994][T24454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  916.764708][   T29] audit: type=1400 audit(1756345999.690:3180): avc:  denied  { read write } for  pid=24569 comm="syz.1.4964" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  916.819698][T24570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.837680][T24570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.916060][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  917.180582][T24580] loop4: detected capacity change from 0 to 512
[  917.204905][T24580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  917.370536][T24580] EXT4-fs (loop4): orphan cleanup on readonly fs
[  917.378261][T24580] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4968: Failed to acquire dquot type 1
[  917.392821][T24580] EXT4-fs (loop4): 1 truncate cleaned up
[  917.627395][T24580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  917.948576][T24793] netlink: 'syz.5.4973': attribute type 13 has an invalid length.
[  917.956775][T24793] netlink: 'syz.5.4973': attribute type 14 has an invalid length.
[  918.012912][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  918.023001][T24797] 9pnet: Could not find request transport: t
[  918.054226][T24859] loop4: detected capacity change from 0 to 512
[  918.109709][T24859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  918.166854][T24859] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  918.365661][T25019] netlink: 592 bytes leftover after parsing attributes in process `syz.5.4982'.
[  919.038862][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  919.083888][T25230] loop4: detected capacity change from 0 to 512
[  919.091958][T25230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  919.102699][T25230] EXT4-fs (loop4): orphan cleanup on readonly fs
[  919.109514][T25230] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4986: Failed to acquire dquot type 1
[  919.110472][T25233] netlink: 'syz.1.4987': attribute type 13 has an invalid length.
[  919.129435][T25233] netlink: 'syz.1.4987': attribute type 14 has an invalid length.
[  919.139329][T25230] EXT4-fs (loop4): 1 truncate cleaned up
[  919.145929][T25230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  919.169279][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  919.195316][T25235] 9pnet: Could not find request transport: t
[  919.409784][T25351] netlink: 592 bytes leftover after parsing attributes in process `syz.0.4994'.
[  919.556500][   T29] kauditd_printk_skb: 50 callbacks suppressed
[  919.556517][   T29] audit: type=1400 audit(1756346002.318:3227): avc:  denied  { create } for  pid=25462 comm="syz.1.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  919.583789][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  919.595558][T25358] loop5: detected capacity change from 0 to 8192
[  919.604851][   T29] audit: type=1400 audit(1756346002.318:3228): avc:  denied  { setopt } for  pid=25462 comm="syz.1.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  919.625492][   T29] audit: type=1400 audit(1756346002.318:3229): avc:  denied  { ioctl } for  pid=25462 comm="syz.1.4999" path="socket:[62257]" dev="sockfs" ino=62257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  919.651407][   T29] audit: type=1400 audit(1756346002.356:3230): avc:  denied  { mount } for  pid=25357 comm="syz.5.4997" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  919.727203][T25569] 9pnet: Could not find request transport: t
[  919.742793][T25574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  919.751821][   T29] audit: type=1400 audit(1756346002.487:3231): avc:  denied  { read write } for  pid=25573 comm="syz.5.5003" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  919.776105][   T29] audit: type=1400 audit(1756346002.487:3232): avc:  denied  { open } for  pid=25573 comm="syz.5.5003" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  919.801470][   T29] audit: type=1400 audit(1756346002.487:3233): avc:  denied  { ioctl } for  pid=25573 comm="syz.5.5003" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  919.802203][T25575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5000'.
[  919.836896][T25574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  919.857501][   T29] audit: type=1400 audit(1756346002.580:3234): avc:  denied  { map_create } for  pid=25573 comm="syz.5.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  919.877502][   T29] audit: type=1400 audit(1756346002.580:3235): avc:  denied  { bpf } for  pid=25573 comm="syz.5.5003" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  919.899389][   T29] audit: type=1400 audit(1756346002.580:3236): avc:  denied  { map_read map_write } for  pid=25573 comm="syz.5.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  920.300190][T25685] veth0_to_team: left promiscuous mode
[  920.599337][T25690] loop4: detected capacity change from 0 to 512
[  920.649348][T25690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  920.662731][T25690] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  920.792399][T25803] loop2: detected capacity change from 0 to 512
[  920.863363][T25803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  920.925606][T25803] EXT4-fs (loop2): orphan cleanup on readonly fs
[  921.018954][T25804] loop5: detected capacity change from 0 to 512
[  921.501810][T25803] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5010: Failed to acquire dquot type 1
[  921.519540][T25803] EXT4-fs (loop2): 1 truncate cleaned up
[  921.526938][T25803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  921.618692][T25804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  921.915506][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.938750][T25804] EXT4-fs (loop5): orphan cleanup on readonly fs
[  921.966975][T25804] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5011: Failed to acquire dquot type 1
[  922.027537][T25804] EXT4-fs (loop5): 1 truncate cleaned up
[  922.071712][T25804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  922.271567][T26125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  922.291637][T26125] netem: change failed
[  922.349255][T26128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5020'.
[  922.472324][T26131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.505838][T26131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.647501][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  922.811338][T26135] loop2: detected capacity change from 0 to 8192
[  922.827677][T26135] netem: change failed
[  922.919133][    T9] IPVS: starting estimator thread 0...
[  923.201332][T26141] IPVS: using max 3072 ests per chain, 153600 per kthread
[  923.524847][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5026'.
[  923.738007][T26364] loop2: detected capacity change from 0 to 164
[  923.786486][T26358] loop4: detected capacity change from 0 to 8192
[  923.828407][T26358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  923.999504][T26473] loop2: detected capacity change from 0 to 512
[  924.007780][T26473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  924.019246][T26473] EXT4-fs (loop2): orphan cleanup on readonly fs
[  924.028417][T26473] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5033: Failed to acquire dquot type 1
[  924.041683][T26473] EXT4-fs (loop2): 1 truncate cleaned up
[  924.048949][T26473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  924.070923][T26506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  924.131634][T26506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  924.502147][T26693] loop4: detected capacity change from 0 to 8192
[  924.612703][T26785] netem: change failed
[  924.785435][T26789] netlink: 'syz.1.5042': attribute type 12 has an invalid length.
[  924.793982][T26789] netlink: 'syz.1.5042': attribute type 29 has an invalid length.
[  924.802195][T26789] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5042'.
[  924.833480][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.890051][T26795] loop2: detected capacity change from 0 to 164
[  924.937971][T26799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5043'.
[  925.038013][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.107008][T26902] loop4: detected capacity change from 0 to 8192
[  925.871364][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  925.871380][   T29] audit: type=1400 audit(1756346008.211:3349): avc:  denied  { name_bind } for  pid=27218 comm="syz.0.5053" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  925.900690][   T29] audit: type=1400 audit(1756346008.211:3350): avc:  denied  { node_bind } for  pid=27218 comm="syz.0.5053" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  926.148821][   T29] audit: type=1400 audit(1756346008.473:3351): avc:  denied  { allowed } for  pid=27334 comm="syz.2.5059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  926.169011][   T29] audit: type=1400 audit(1756346008.473:3352): avc:  denied  { create } for  pid=27334 comm="syz.2.5059" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  926.191080][   T29] audit: type=1400 audit(1756346008.473:3353): avc:  denied  { map } for  pid=27334 comm="syz.2.5059" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  926.215860][   T29] audit: type=1400 audit(1756346008.473:3354): avc:  denied  { read write } for  pid=27334 comm="syz.2.5059" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  926.536725][T27353] loop2: detected capacity change from 0 to 512
[  926.610639][T27353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  926.750440][T27353] System zones: 1-12
[  926.756601][T27353] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.5060: corrupted in-inode xattr: e_value size too large
[  926.775597][T27353] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5060: couldn't read orphan inode 15 (err -117)
[  927.104121][T27353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  927.123822][T27449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  927.151606][T27449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  927.248975][   T29] audit: type=1400 audit(1756346009.390:3355): avc:  denied  { read write } for  pid=27448 comm="syz.0.5062" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  927.273605][   T29] audit: type=1400 audit(1756346009.390:3356): avc:  denied  { open } for  pid=27448 comm="syz.0.5062" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  927.297984][   T29] audit: type=1400 audit(1756346009.390:3357): avc:  denied  { ioctl } for  pid=27448 comm="syz.0.5062" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  927.324011][   T29] audit: type=1400 audit(1756346009.427:3358): avc:  denied  { mount } for  pid=27352 comm="syz.2.5060" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  927.974296][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  928.000935][T27566] netlink: 'syz.2.5068': attribute type 13 has an invalid length.
[  928.009463][T27566] netlink: 'syz.2.5068': attribute type 14 has an invalid length.
[  928.564044][T27679] loop2: detected capacity change from 0 to 512
[  928.602119][T27679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  928.644970][T27679] EXT4-fs (loop2): orphan cleanup on readonly fs
[  928.653231][T27679] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5070: Failed to acquire dquot type 1
[  928.697756][T27679] EXT4-fs (loop2): 1 truncate cleaned up
[  928.712369][T27679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  928.767829][T27797] loop5: detected capacity change from 0 to 512
[  928.824199][T27797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  928.858683][T27797] EXT4-fs (loop5): orphan cleanup on readonly fs
[  929.169160][T27797] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5074: Failed to acquire dquot type 1
[  929.195447][T27797] EXT4-fs (loop5): 1 truncate cleaned up
[  929.247129][T27797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  930.715437][T28423] loop4: detected capacity change from 0 to 512
[  930.723164][T28423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  930.738507][T28423] EXT4-fs (loop4): orphan cleanup on readonly fs
[  930.745781][T28423] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5085: Failed to acquire dquot type 1
[  930.759006][T28423] EXT4-fs (loop4): 1 truncate cleaned up
[  930.765297][T28423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  931.203205][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.245410][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  931.245428][   T29] audit: type=1400 audit(1756346013.244:3389): avc:  denied  { read } for  pid=28531 comm="syz.2.5090" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  931.275996][   T29] audit: type=1400 audit(1756346013.244:3390): avc:  denied  { open } for  pid=28531 comm="syz.2.5090" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  931.302462][   T29] audit: type=1400 audit(1756346013.291:3391): avc:  denied  { ioctl } for  pid=28531 comm="syz.2.5090" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  931.333013][T28532] netem: change failed
[  931.349904][   T29] audit: type=1400 audit(1756346013.337:3392): avc:  denied  { write } for  pid=28531 comm="syz.2.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  931.359601][T28634] loop2: detected capacity change from 0 to 512
[  931.371177][   T29] audit: type=1400 audit(1756346013.337:3393): avc:  denied  { nlmsg_write } for  pid=28531 comm="syz.2.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  931.402025][T28634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  931.410072][T28634] System zones: 1-12
[  931.433344][T28634] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.5091: corrupted in-inode xattr: e_value size too large
[  931.455405][T28634] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5091: couldn't read orphan inode 15 (err -117)
[  931.474437][T28634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  931.510004][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.526982][   T29] audit: type=1400 audit(1756346013.506:3394): avc:  denied  { write } for  pid=28638 comm="syz.2.5093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  931.550140][T28639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5093'.
[  931.560320][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.606944][T28743] loop2: detected capacity change from 0 to 512
[  931.627969][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.629041][T28743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  931.650466][T28743] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  931.666285][   T29] audit: type=1400 audit(1756346013.637:3395): avc:  denied  { add_name } for  pid=28742 comm="syz.2.5095" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  931.688477][   T29] audit: type=1400 audit(1756346013.637:3396): avc:  denied  { create } for  pid=28742 comm="syz.2.5095" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  931.690223][T28751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5094'.
[  931.773084][   T29] audit: type=1400 audit(1756346013.730:3397): avc:  denied  { create } for  pid=28742 comm="syz.2.5095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  931.815724][   T29] audit: type=1400 audit(1756346013.768:3398): avc:  denied  { append } for  pid=28742 comm="syz.2.5095" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  932.305430][T29067] netlink: 'syz.1.5101': attribute type 13 has an invalid length.
[  932.313732][T29067] netlink: 'syz.1.5101': attribute type 14 has an invalid length.
[  932.880291][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.081513][T29288] loop4: detected capacity change from 0 to 512
[  933.089026][T29288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  933.103873][T29288] EXT4-fs (loop4): orphan cleanup on readonly fs
[  933.113052][T29288] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5106: Failed to acquire dquot type 1
[  933.125619][T29288] EXT4-fs (loop4): 1 truncate cleaned up
[  933.131989][T29288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  933.187924][T29292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5108'.
[  933.653901][T29300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.737304][T29300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  934.353588][T29306] loop5: detected capacity change from 0 to 164
[  934.568580][T29311] loop2: detected capacity change from 0 to 512
[  934.601220][T29311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  934.629796][T29311] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  934.961950][T29425] 9pnet: Could not find request transport: t
[  935.797393][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.944044][T29650] netlink: 'syz.2.5127': attribute type 13 has an invalid length.
[  935.953468][T29650] netlink: 'syz.2.5127': attribute type 14 has an invalid length.
[  936.235952][T29660] 9pnet: Could not find request transport: t
[  936.245682][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  936.285151][T29763] loop2: detected capacity change from 0 to 512
[  936.318891][T29763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  936.430315][T29771] netlink: 'syz.0.5136': attribute type 13 has an invalid length.
[  936.438731][T29771] netlink: 'syz.0.5136': attribute type 14 has an invalid length.
[  936.489053][T29768] loop4: detected capacity change from 0 to 8192
[  936.491055][T29763] EXT4-fs (loop2): orphan cleanup on readonly fs
[  937.034269][T29763] __quota_error: 58 callbacks suppressed
[  937.034292][T29763] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  937.050165][T29763] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  937.060122][T29763] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5130: Failed to acquire dquot type 1
[  937.157783][T29763] EXT4-fs (loop2): 1 truncate cleaned up
[  937.205385][T29763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  937.388089][   T29] audit: type=1400 audit(1756346018.997:3455): avc:  denied  { unmount } for  pid=14446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  937.552506][   T29] audit: type=1400 audit(1756346019.146:3456): avc:  denied  { read } for  pid=30142 comm="syz.0.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  937.646970][T30301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5143'.
[  937.734752][T30303] 9pnet: Could not find request transport: t
[  937.849026][T30309] loop5: detected capacity change from 0 to 164
[  937.871602][   T29] audit: type=1400 audit(1756346019.446:3457): avc:  denied  { bind } for  pid=30310 comm="syz.1.5149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  937.954321][   T29] audit: type=1400 audit(1756346019.446:3458): avc:  denied  { setopt } for  pid=30310 comm="syz.1.5149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  938.370697][   T29] audit: type=1400 audit(1756346019.904:3459): avc:  denied  { name_bind } for  pid=30719 comm="syz.4.5153" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  938.417406][T30722] netem: change failed
[  938.432897][   T29] audit: type=1400 audit(1756346019.904:3460): avc:  denied  { node_bind } for  pid=30719 comm="syz.4.5153" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  938.454639][   T29] audit: type=1400 audit(1756346019.960:3461): avc:  denied  { write } for  pid=30721 comm="syz.1.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  938.475904][   T29] audit: type=1400 audit(1756346019.960:3462): avc:  denied  { nlmsg_write } for  pid=30721 comm="syz.1.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  938.589235][T30728] netem: change failed
[  938.658367][T30832] loop4: detected capacity change from 0 to 164
[  938.905274][T30944] loop5: detected capacity change from 0 to 8192
[  939.066925][T31150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  939.102294][T31150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  939.701488][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.959311][T31279] netlink: 'syz.1.5176': attribute type 13 has an invalid length.
[  939.967483][T31279] netlink: 'syz.1.5176': attribute type 14 has an invalid length.
[  940.844824][T31715] netem: change failed
[  940.878569][T31719] 9pnet: Could not find request transport: t
[  940.943727][T31708] cgroup: fork rejected by pids controller in /syz4
[  941.005882][T31896] loop2: detected capacity change from 0 to 512
[  941.015682][T31896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  941.164331][T31896] EXT4-fs (loop2): orphan cleanup on readonly fs
[  941.400390][T31896] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5188: Failed to acquire dquot type 1
[  941.486280][T31896] EXT4-fs (loop2): 1 truncate cleaned up
[  941.538322][T31896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  941.631196][T32146] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5194'.
[  942.343579][T32460] 9pnet: Could not find request transport: t
[  942.646945][T32681] netem: change failed
[  943.448873][  T330] 9pnet: Could not find request transport: t
[  943.567815][   T29] kauditd_printk_skb: 47 callbacks suppressed
[  943.567833][   T29] audit: type=1400 audit(1756346024.777:3508): avc:  denied  { allowed } for  pid=32585 comm="syz.0.5210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  943.648681][   T29] audit: type=1400 audit(1756346024.805:3509): avc:  denied  { create } for  pid=32585 comm="syz.0.5210" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  943.670821][   T29] audit: type=1400 audit(1756346024.805:3510): avc:  denied  { map } for  pid=32585 comm="syz.0.5210" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  943.695577][   T29] audit: type=1400 audit(1756346024.805:3511): avc:  denied  { read execute } for  pid=32585 comm="syz.0.5210" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  943.751004][  T430] loop5: detected capacity change from 0 to 512
[  943.761743][  T430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  943.920341][  T430] EXT4-fs (loop5): orphan cleanup on readonly fs
[  943.927614][  T430] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  943.937785][  T430] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  943.948118][  T430] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5217: Failed to acquire dquot type 1
[  943.961476][  T430] EXT4-fs (loop5): 1 truncate cleaned up
[  943.968376][  T430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  945.300615][   T29] audit: type=1400 audit(1756346026.377:3512): avc:  denied  { create } for  pid=761 comm="syz.1.5224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  945.320996][   T29] audit: type=1400 audit(1756346026.386:3513): avc:  denied  { setopt } for  pid=761 comm="syz.1.5224" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  945.341672][   T29] audit: type=1400 audit(1756346026.386:3514): avc:  denied  { write } for  pid=761 comm="syz.1.5224" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  945.464281][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  945.579273][  T772] loop4: detected capacity change from 0 to 164
[  945.655175][  T878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5230'.
[  945.728317][  T884] loop5: detected capacity change from 0 to 512
[  945.738476][  T884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  945.791739][  T884] EXT4-fs (loop5): orphan cleanup on readonly fs
[  945.827327][  T884] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  945.837098][  T884] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5226: Failed to acquire dquot type 1
[  945.850789][  T884] EXT4-fs (loop5): 1 truncate cleaned up
[  945.851143][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  945.930070][  T884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  946.004418][  T990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5232'.
[  946.144836][  T994] loop2: detected capacity change from 0 to 164
[  946.907886][ T1538] loop4: detected capacity change from 0 to 512
[  946.927324][ T1538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  946.942016][ T1538] EXT4-fs (loop4): orphan cleanup on readonly fs
[  946.961856][ T1538] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5245: Failed to acquire dquot type 1
[  946.993963][ T1538] EXT4-fs (loop4): 1 truncate cleaned up
[  947.010752][ T1538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  947.739479][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  948.062923][ T1977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5258'.
[  948.203765][ T2173] 9pnet: Could not find request transport: t
[  949.056025][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  949.056042][   T29] audit: type=1400 audit(1756346029.903:3515): avc:  denied  { read } for  pid=2502 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  949.085293][   T29] audit: type=1400 audit(1756346029.903:3516): avc:  denied  { open } for  pid=2502 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  949.120333][   T29] audit: type=1400 audit(1756346029.960:3517): avc:  denied  { mounton } for  pid=2502 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  949.167631][ T2506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5269'.
[  949.257791][ T4678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.279540][ T2518] loop4: detected capacity change from 0 to 164
[  949.402548][   T29] audit: type=1400 audit(1756346030.212:3518): avc:  denied  { write } for  pid=2601 comm="syz.0.5273" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  949.433455][ T2502] chnl_net:caif_netlink_parms(): no params data found
[  949.483255][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.526508][ T4678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.569703][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.584233][ T2502] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.637933][   T29] audit: type=1400 audit(1756346030.446:3519): avc:  denied  { read write } for  pid=2739 comm="syz.4.5278" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  949.662752][   T29] audit: type=1400 audit(1756346030.446:3520): avc:  denied  { open } for  pid=2739 comm="syz.4.5278" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  949.676331][ T2502] bridge_slave_0: entered allmulticast mode
[  949.686816][   T29] audit: type=1400 audit(1756346030.446:3521): avc:  denied  { ioctl } for  pid=2739 comm="syz.4.5278" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  949.693464][ T2502] bridge_slave_0: entered promiscuous mode
[  949.725714][ T2740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  949.726074][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.734424][ T2740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  949.741865][ T2502] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.770312][   T29] audit: type=1400 audit(1756346030.568:3522): avc:  denied  { map_create } for  pid=2739 comm="syz.4.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  949.790933][   T29] audit: type=1400 audit(1756346030.568:3523): avc:  denied  { bpf } for  pid=2739 comm="syz.4.5278" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  949.792235][ T2502] bridge_slave_1: entered allmulticast mode
[  949.812287][   T29] audit: type=1400 audit(1756346030.568:3524): avc:  denied  { map_read map_write } for  pid=2739 comm="syz.4.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  949.944740][ T2502] bridge_slave_1: entered promiscuous mode
[  950.737466][ T2502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  950.749683][ T2502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  950.819425][ T4678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.833052][ T2748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5280'.
[  950.872312][ T4678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.885925][ T2502] team0: Port device team_slave_0 added
[  950.906132][ T2502] team0: Port device team_slave_1 added
[  950.918902][ T2755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  950.934498][ T2502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  950.942651][ T2502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  950.943624][ T2755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  950.970026][ T2502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  950.999973][ T2502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.007152][ T2502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.034212][ T2502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  951.368977][ T4678] bridge_slave_1: left allmulticast mode
[  951.375300][ T4678] bridge_slave_1: left promiscuous mode
[  951.381357][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.410939][ T4678] bridge_slave_0: left allmulticast mode
[  951.416747][ T4678] bridge_slave_0: left promiscuous mode
[  951.422790][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state
[  951.556683][ T4678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  951.568069][ T4678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  951.578023][ T4678] bond0 (unregistering): Released all slaves
[  951.586909][ T2764] netem: change failed
[  951.611004][ T2502] hsr_slave_0: entered promiscuous mode
[  951.617495][ T2502] hsr_slave_1: entered promiscuous mode
[  951.623348][ T2502] debugfs: 'hsr0' already exists in 'hsr'
[  951.629261][ T2502] Cannot create hsr debugfs directory
[  951.640825][ T4678] tipc: Left network mode
[  951.647612][ T4678] hsr_slave_0: left promiscuous mode
[  951.653826][ T4678] hsr_slave_1: left promiscuous mode
[  951.659573][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  951.667189][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  951.720487][ T4678] veth1_macvtap: left promiscuous mode
[  951.729683][ T4678] veth0_macvtap: left promiscuous mode
[  951.735812][ T4678] veth1_vlan: left promiscuous mode
[  951.741644][ T4678] veth0_vlan: left promiscuous mode
[  951.783703][ T2983] loop4: detected capacity change from 0 to 512
[  951.793639][ T2983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  951.803898][ T2983] System zones: 1-12
[  951.808306][ T2984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5291'.
[  951.817912][ T2983] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5290: corrupted in-inode xattr: e_value size too large
[  951.833862][ T2983] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5290: couldn't read orphan inode 15 (err -117)
[  951.846912][ T2983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  951.847057][ T4678] team0 (unregistering): Port device team_slave_1 removed
[  951.873115][ T4678] team0 (unregistering): Port device team_slave_0 removed
[  952.024390][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  952.057829][ T3107] netlink: 'syz.0.5294': attribute type 13 has an invalid length.
[  952.066192][ T3107] netlink: 'syz.0.5294': attribute type 14 has an invalid length.
[  952.194001][ T3227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  952.207001][ T3227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  952.351167][ T4678] IPVS: stop unused estimator thread 0...
[  952.417319][ T2502] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  952.428104][ T2502] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  952.437603][ T2502] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  952.477225][ T2502] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  952.518166][ T3447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5301'.
[  952.520954][ T2502] 8021q: adding VLAN 0 to HW filter on device bond0
[  952.540453][ T2502] 8021q: adding VLAN 0 to HW filter on device team0
[  952.553586][T16376] bridge0: port 1(bridge_slave_0) entered blocking state
[  952.560793][T16376] bridge0: port 1(bridge_slave_0) entered forwarding state
[  952.570941][T16376] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.570963][T16376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  952.611852][ T3451] loop4: detected capacity change from 0 to 512
[  952.619878][ T3451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  952.634655][ T3451] EXT4-fs (loop4): orphan cleanup on readonly fs
[  952.647408][ T3451] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5302: Failed to acquire dquot type 1
[  952.661743][ T3451] EXT4-fs (loop4): 1 truncate cleaned up
[  952.671476][ T3451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  952.680857][ T2502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  952.701498][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  953.190708][ T2502] veth0_vlan: entered promiscuous mode
[  953.197485][ T3474] loop2: detected capacity change from 0 to 512
[  953.216597][ T3474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  953.226948][ T2502] veth1_vlan: entered promiscuous mode
[  953.237711][ T3474] EXT4-fs (loop2): orphan cleanup on readonly fs
[  953.246920][ T3474] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5307: Failed to acquire dquot type 1
[  953.248241][ T2502] veth0_macvtap: entered promiscuous mode
[  953.263081][ T3474] EXT4-fs (loop2): 1 truncate cleaned up
[  953.266601][ T2502] veth1_macvtap: entered promiscuous mode
[  953.279039][ T3474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  953.296728][ T2502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  953.309010][ T2502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  953.324530][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  953.341463][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  953.355268][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  953.383322][ T4497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  953.399111][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  953.773859][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  953.859648][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.000490][ T3705] loop5: detected capacity change from 0 to 164
[  954.173691][ T3812] loop5: detected capacity change from 0 to 164
[  954.253891][ T3915] loop4: detected capacity change from 0 to 512
[  954.263522][ T3915] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  954.274406][ T3915] EXT4-fs (loop4): orphan cleanup on readonly fs
[  954.282652][ T3915] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5321: Failed to acquire dquot type 1
[  954.294804][ T3915] EXT4-fs (loop4): 1 truncate cleaned up
[  954.301951][ T3915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  954.372275][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.376521][ T3918] loop5: detected capacity change from 0 to 512
[  954.400310][ T3918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  954.410577][ T3918] EXT4-fs (loop5): orphan cleanup on readonly fs
[  954.425536][   T29] kauditd_printk_skb: 51 callbacks suppressed
[  954.425554][   T29] audit: type=1400 audit(1756346034.926:3570): avc:  denied  { write } for  pid=3922 comm="syz.4.5322" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  954.439498][ T3925] loop2: detected capacity change from 0 to 512
[  954.461625][ T3918] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  954.472815][ T3918] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  954.482879][ T3918] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5323: Failed to acquire dquot type 1
[  954.495435][ T3918] EXT4-fs (loop5): 1 truncate cleaned up
[  954.503889][ T3918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  954.524569][ T3927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5326'.
[  954.565182][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.611472][ T3925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  954.629312][ T3925] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  954.635047][ T3941] loop5: detected capacity change from 0 to 164
[  954.656936][   T29] audit: type=1400 audit(1756346035.142:3571): avc:  denied  { add_name } for  pid=3923 comm="syz.2.5325" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  954.678463][   T29] audit: type=1400 audit(1756346035.142:3572): avc:  denied  { create } for  pid=3923 comm="syz.2.5325" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  954.700207][   T29] audit: type=1400 audit(1756346035.142:3573): avc:  denied  { append } for  pid=3923 comm="syz.2.5325" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  954.723758][   T29] audit: type=1400 audit(1756346035.142:3574): avc:  denied  { open } for  pid=3923 comm="syz.2.5325" path="/401/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  954.747357][   T29] audit: type=1400 audit(1756346035.142:3575): avc:  denied  { create } for  pid=3923 comm="syz.2.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  954.768149][   T29] audit: type=1400 audit(1756346035.142:3576): avc:  denied  { ioctl } for  pid=3923 comm="syz.2.5325" path="socket:[66541]" dev="sockfs" ino=66541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  954.794037][   T29] audit: type=1400 audit(1756346035.142:3577): avc:  denied  { create } for  pid=3923 comm="syz.2.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  955.027563][ T4155] loop4: detected capacity change from 0 to 512
[  955.041079][ T4155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  955.066712][ T4155] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  955.210726][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  955.228579][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.237877][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  955.475170][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  955.653810][ T4267] loop5: detected capacity change from 0 to 164
[  955.681375][ T4269] loop2: detected capacity change from 0 to 512
[  955.688816][ T4269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  955.699255][ T4269] EXT4-fs (loop2): orphan cleanup on readonly fs
[  955.706456][ T4269] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5337: Failed to acquire dquot type 1
[  955.719874][ T4269] EXT4-fs (loop2): 1 truncate cleaned up
[  955.726590][ T4269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  955.751806][ T4273] loop5: detected capacity change from 0 to 512
[  955.759979][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  955.771333][ T4273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  955.788114][ T4273] EXT4-fs (loop5): orphan cleanup on readonly fs
[  955.795728][ T4273] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5339: Failed to acquire dquot type 1
[  955.810159][ T4273] EXT4-fs (loop5): 1 truncate cleaned up
[  955.818024][ T4273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  955.852277][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  955.894817][ T4280] loop5: detected capacity change from 0 to 164
[  956.110691][ T4289] loop5: detected capacity change from 0 to 164
[  956.146407][ T4288] rock: directory entry would overflow storage
[  956.152917][ T4288] rock: sig=0x4f50, size=4, remaining=3
[  956.158775][ T4288] iso9660: Corrupted directory entry in block 5 of inode 1792
[  956.804265][ T4477] loop2: detected capacity change from 0 to 164
[  956.894631][ T4502] loop4: detected capacity change from 0 to 164
[  956.989236][ T4508] loop5: detected capacity change from 0 to 512
[  956.998437][ T4508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  957.009955][ T4511] sctp: [Deprecated]: syz.1.5352 (pid 4511) Use of int in max_burst socket option.
[  957.009955][ T4511] Use struct sctp_assoc_value instead
[  957.027374][ T4508] EXT4-fs (loop5): orphan cleanup on readonly fs
[  957.034646][ T4508] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5351: Failed to acquire dquot type 1
[  957.048290][ T4508] EXT4-fs (loop5): 1 truncate cleaned up
[  957.056056][ T4508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  957.080078][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.092874][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.101922][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.229602][ T4722] loop5: detected capacity change from 0 to 512
[  957.270652][ T4722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  957.285582][ T4722] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  957.343565][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.354155][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.738770][ T4838] 9pnet: Could not find request transport: t
[  957.966421][ T4848] loop4: detected capacity change from 0 to 164
[  958.201634][ T4951] loop4: detected capacity change from 0 to 512
[  958.215637][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.272142][ T4951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  958.326129][ T4951] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  958.834673][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.500525][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  959.509381][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  959.749577][ T5074] 9pnet: Could not find request transport: t
[  959.784042][ T5081] netlink: 65536 bytes leftover after parsing attributes in process `'.
[  959.905706][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  959.918297][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  959.942211][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  959.942227][   T29] audit: type=1400 audit(1756346040.081:3625): avc:  denied  { allowed } for  pid=5091 comm="syz.5.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  960.002497][   T29] audit: type=1400 audit(1756346040.118:3626): avc:  denied  { create } for  pid=5091 comm="syz.5.5377" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  960.024760][   T29] audit: type=1400 audit(1756346040.118:3627): avc:  denied  { map } for  pid=5091 comm="syz.5.5377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  960.050044][   T29] audit: type=1400 audit(1756346040.118:3628): avc:  denied  { read write } for  pid=5091 comm="syz.5.5377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  960.130543][ T5096] loop2: detected capacity change from 0 to 512
[  960.139678][ T5096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  960.148939][ T5096] System zones: 1-12
[  960.153303][ T5096] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.5380: corrupted in-inode xattr: e_value size too large
[  960.168646][ T5096] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5380: couldn't read orphan inode 15 (err -117)
[  960.182737][ T5096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  960.304737][ T5102] loop4: detected capacity change from 0 to 8192
[  960.323143][   T29] audit: type=1400 audit(1756346040.436:3629): avc:  denied  { mount } for  pid=5101 comm="syz.4.5382" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  960.547544][ T5107] loop4: detected capacity change from 0 to 128
[  960.712332][ T5107] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  960.768217][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.769638][   T29] audit: type=1400 audit(1756346040.511:3630): avc:  denied  { unmount } for  pid=14446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  960.797548][   T29] audit: type=1326 audit(1756346040.623:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  960.801709][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.821174][   T29] audit: type=1326 audit(1756346040.623:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  960.853569][   T29] audit: type=1326 audit(1756346040.623:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  960.878116][   T29] audit: type=1326 audit(1756346040.623:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  960.920805][ T5107] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  960.931535][ T5114] 9pnet: Could not find request transport: t
[  960.973076][T14446] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  961.157412][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.337247][ T5120] loop4: detected capacity change from 0 to 8192
[  961.809066][ T5123] loop4: detected capacity change from 0 to 8192
[  962.108203][ T5130] loop2: detected capacity change from 0 to 128
[  962.176439][ T5130] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  962.267151][ T5130] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  962.559435][T13597] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  962.843893][ T5145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5393'.
[  962.858989][ T5147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5398'.
[  962.887454][ T5148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5397'.
[  962.922126][ T5150] loop5: detected capacity change from 0 to 512
[  962.941365][ T5150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  962.953654][ T5150] System zones: 1-12
[  962.958739][ T5150] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.5399: corrupted in-inode xattr: e_value size too large
[  962.978064][ T5150] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5399: couldn't read orphan inode 15 (err -117)
[  962.995830][ T5150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  963.680266][ T5363] loop4: detected capacity change from 0 to 164
[  963.689806][ T5365] loop2: detected capacity change from 0 to 128
[  963.689847][ T5367] FAULT_INJECTION: forcing a failure.
[  963.689847][ T5367] name failslab, interval 1, probability 0, space 0, times 1
[  963.709110][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.1.5403 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  963.709139][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  963.709151][ T5367] Call Trace:
[  963.709159][ T5367]  <TASK>
[  963.709167][ T5367]  __dump_stack+0x1d/0x30
[  963.709245][ T5367]  dump_stack_lvl+0xe8/0x140
[  963.709265][ T5367]  dump_stack+0x15/0x1b
[  963.709283][ T5367]  should_fail_ex+0x265/0x280
[  963.709305][ T5367]  should_failslab+0x8c/0xb0
[  963.709341][ T5367]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  963.709378][ T5367]  ? sidtab_sid2str_get+0xa0/0x130
[  963.709403][ T5367]  kmemdup_noprof+0x2b/0x70
[  963.709482][ T5367]  sidtab_sid2str_get+0xa0/0x130
[  963.709506][ T5367]  security_sid_to_context_core+0x1eb/0x2e0
[  963.709527][ T5367]  security_sid_to_context+0x27/0x40
[  963.709545][ T5367]  avc_audit_post_callback+0x10f/0x520
[  963.709594][ T5367]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  963.709664][ T5367]  common_lsm_audit+0x1b8/0x230
[  963.709766][ T5367]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  963.709808][ T5367]  slow_avc_audit+0x104/0x140
[  963.709834][ T5367]  audit_inode_permission+0x111/0x150
[  963.709858][ T5367]  selinux_inode_permission+0x69b/0x740
[  963.709900][ T5367]  security_inode_permission+0x6d/0xb0
[  963.709964][ T5367]  inode_permission+0x106/0x310
[  963.709996][ T5367]  do_faccessat+0x471/0x800
[  963.710017][ T5367]  __x64_sys_faccessat+0x41/0x50
[  963.710061][ T5367]  x64_sys_call+0x950/0x2ff0
[  963.710086][ T5367]  do_syscall_64+0xd2/0x200
[  963.710112][ T5367]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  963.710199][ T5367]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  963.710229][ T5367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.710267][ T5367] RIP: 0033:0x7f6a1f26ebe9
[  963.710283][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  963.710302][ T5367] RSP: 002b:00007f6a1dcd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d
[  963.710347][ T5367] RAX: ffffffffffffffda RBX: 00007f6a1f495fa0 RCX: 00007f6a1f26ebe9
[  963.710370][ T5367] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000003
[  963.710384][ T5367] RBP: 00007f6a1dcd7090 R08: 0000000000000000 R09: 0000000000000000
[  963.710396][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  963.710407][ T5367] R13: 00007f6a1f496038 R14: 00007f6a1f495fa0 R15: 00007ffd80f70088
[  963.710425][ T5367]  </TASK>
[  963.763256][ T5365] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  963.769434][ T5363] RRIP_
[  963.776529][ T5365] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  963.779866][ T5363] 1991A
[  964.034684][T13597] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  964.055604][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  964.092549][ T5405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5409'.
[  964.164020][ T5488] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.331956][ T5600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5416'.
[  964.350710][ T5488] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.512279][ T5488] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.597684][ T5488] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.796430][ T4678] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  964.846716][ T4678] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  964.942096][ T4678] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  965.019835][ T4678] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  965.134145][ T5809] loop2: detected capacity change from 0 to 512
[  965.147468][ T5809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  965.160863][ T5809] System zones: 1-12
[  965.168166][ T5809] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.5419: corrupted in-inode xattr: e_value size too large
[  965.241317][ T5809] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5419: couldn't read orphan inode 15 (err -117)
[  965.255140][ T5821] 9pnet: Could not find request transport: t
[  965.274158][ T5809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  965.305705][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  965.305799][   T29] audit: type=1400 audit(1756346045.104:3809): avc:  denied  { write } for  pid=5824 comm="syz.0.5426" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  965.319389][ T5825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5425'.
[  965.392920][ T5830] 9pnet: Could not find request transport: t
[  965.448999][ T5838] loop4: detected capacity change from 0 to 164
[  965.483911][ T5844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  965.491714][ T5845] syzkaller0: entered promiscuous mode
[  965.497699][ T5845] syzkaller0: entered allmulticast mode
[  965.563255][   T29] audit: type=1400 audit(1756346045.272:3810): avc:  denied  { relabelfrom } for  pid=5843 comm="syz.5.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  965.584451][   T29] audit: type=1400 audit(1756346045.272:3811): avc:  denied  { relabelto } for  pid=5843 comm="syz.5.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  965.605449][   T29] audit: type=1400 audit(1756346045.272:3812): avc:  denied  { ioctl } for  pid=5843 comm="syz.5.5433" path="socket:[67933]" dev="sockfs" ino=67933 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  966.454829][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.557080][ T5846] tipc: Resetting bearer <eth:syzkaller0>
[  966.568813][ T5846] tipc: Disabling bearer <eth:syzkaller0>
[  966.581552][   T29] audit: type=1400 audit(1756346046.292:3813): avc:  denied  { write } for  pid=5957 comm="syz.2.5436" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  966.639681][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5441'.
[  966.711640][ T6081] loop4: detected capacity change from 0 to 512
[  966.725064][ T6081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  966.737847][ T6081] System zones: 1-12
[  966.743915][ T6081] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5445: corrupted in-inode xattr: e_value size too large
[  966.760297][ T6081] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5445: couldn't read orphan inode 15 (err -117)
[  966.774559][ T6081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  966.938339][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.951290][   T29] audit: type=1400 audit(1756346046.647:3814): avc:  denied  { create } for  pid=6194 comm="syz.2.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  967.000509][ T6202] loop4: detected capacity change from 0 to 164
[  967.055025][   T29] audit: type=1400 audit(1756346046.722:3815): avc:  denied  { ioctl } for  pid=6207 comm="syz.2.5454" path="pid:[4026532633]" dev="nsfs" ino=4026532633 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  967.821571][   T29] audit: type=1400 audit(1756346047.451:3816): avc:  denied  { create } for  pid=6209 comm="syz.2.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  967.884959][ T3390] kernel write not supported for file /80/attr/exec (pid: 3390 comm: kworker/1:3)
[  968.016933][   T29] audit: type=1400 audit(1756346047.648:3817): avc:  denied  { shutdown } for  pid=6318 comm="syz.1.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  968.039069][   T29] audit: type=1400 audit(1756346047.648:3818): avc:  denied  { read } for  pid=6318 comm="syz.1.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  968.249038][ T6332] netlink: 'syz.0.5461': attribute type 12 has an invalid length.
[  968.257172][ T6332] netlink: 'syz.0.5461': attribute type 29 has an invalid length.
[  968.265432][ T6332] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5461'.
[  968.589745][ T6438] 9pnet: Could not find request transport: t
[  968.699817][ T6443] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5464'.
[  968.759572][ T6447] wireguard0: entered promiscuous mode
[  968.765430][ T6447] wireguard0: entered allmulticast mode
[  968.805195][ T6452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5467'.
[  968.931819][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5468'.
[  968.982084][ T6462] loop4: detected capacity change from 0 to 164
[  969.470026][ T6572] 9pnet: Could not find request transport: t
[  969.857767][ T6692] loop4: detected capacity change from 0 to 512
[  969.879014][ T6692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  969.889440][ T6692] System zones: 1-12
[  969.895358][ T6692] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5482: corrupted in-inode xattr: e_value size too large
[  969.992757][ T6692] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5482: couldn't read orphan inode 15 (err -117)
[  970.009891][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5479'.
[  970.017149][ T6692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  970.326525][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.461322][ T6815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5486'.
[  970.746663][ T6919] netlink: 'syz.5.5488': attribute type 29 has an invalid length.
[  970.830138][ T6919] netlink: 'syz.5.5488': attribute type 29 has an invalid length.
[  970.842367][ T6919] netlink: 596 bytes leftover after parsing attributes in process `syz.5.5488'.
[  970.953177][ T7023] loop5: detected capacity change from 0 to 128
[  970.960205][   T29] kauditd_printk_skb: 127 callbacks suppressed
[  970.960223][   T29] audit: type=1400 audit(1756346050.389:3946): avc:  denied  { write } for  pid=6918 comm="syz.5.5488" lport=59355 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  971.179145][ T7027] loop5: detected capacity change from 0 to 1764
[  971.506508][   T29] audit: type=1400 audit(1756346050.903:3947): avc:  denied  { create } for  pid=7048 comm="syz.4.5499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  971.511067][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5496'.
[  971.980835][ T7170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5504'.
[  972.033994][ T7176] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5508'.
[  972.219896][ T7184] FAULT_INJECTION: forcing a failure.
[  972.219896][ T7184] name failslab, interval 1, probability 0, space 0, times 0
[  972.233258][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.5.5503 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  972.233361][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  972.233372][ T7184] Call Trace:
[  972.233379][ T7184]  <TASK>
[  972.233387][ T7184]  __dump_stack+0x1d/0x30
[  972.233408][ T7184]  dump_stack_lvl+0xe8/0x140
[  972.233425][ T7184]  dump_stack+0x15/0x1b
[  972.233441][ T7184]  should_fail_ex+0x265/0x280
[  972.233474][ T7184]  should_failslab+0x8c/0xb0
[  972.233504][ T7184]  kmem_cache_alloc_node_noprof+0x57/0x320
[  972.233542][ T7184]  ? dup_task_struct+0x70/0x6a0
[  972.233575][ T7184]  dup_task_struct+0x70/0x6a0
[  972.233599][ T7184]  ? path_openat+0x1bf8/0x2170
[  972.233638][ T7184]  copy_process+0x399/0x2000
[  972.233705][ T7184]  ? copy_clone_args_from_user+0x3ce/0x490
[  972.233745][ T7184]  kernel_clone+0x16c/0x5c0
[  972.233775][ T7184]  __se_sys_clone3+0x1c2/0x200
[  972.233889][ T7184]  __x64_sys_clone3+0x31/0x40
[  972.233919][ T7184]  x64_sys_call+0x1fc9/0x2ff0
[  972.233988][ T7184]  do_syscall_64+0xd2/0x200
[  972.234020][ T7184]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  972.234047][ T7184]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  972.234074][ T7184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.234141][ T7184] RIP: 0033:0x7f328886ebe9
[  972.234160][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  972.234182][ T7184] RSP: 002b:00007f328728cf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  972.234206][ T7184] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f328886ebe9
[  972.234218][ T7184] RDX: 00007f328728cf20 RSI: 0000000000000058 RDI: 00007f328728cf20
[  972.234230][ T7184] RBP: 00007f328728d090 R08: 0000000000000000 R09: 0000000000000058
[  972.234242][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  972.234326][ T7184] R13: 00007f3288a96218 R14: 00007f3288a96180 R15: 00007fff54978e58
[  972.234343][ T7184]  </TASK>
[  972.728546][ T7288] loop2: detected capacity change from 0 to 164
[  972.920836][ T7290] 9pnet: Could not find request transport: t
[  973.087334][ T7308] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5520'.
[  973.101286][   T29] audit: type=1326 audit(1756346052.400:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.125793][   T29] audit: type=1326 audit(1756346052.400:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.150058][   T29] audit: type=1326 audit(1756346052.400:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.258922][ T7317] netlink: 'syz.4.5524': attribute type 1 has an invalid length.
[  973.287481][   T29] audit: type=1326 audit(1756346052.400:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.311725][   T29] audit: type=1326 audit(1756346052.400:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.335759][   T29] audit: type=1326 audit(1756346052.400:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.359633][   T29] audit: type=1326 audit(1756346052.400:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.384250][   T29] audit: type=1326 audit(1756346052.400:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8baebe9 code=0x7ffc0000
[  973.393175][ T7329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5525'.
[  973.434266][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5529'.
[  974.128838][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  974.137697][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  974.145690][ T7655] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5535'.
[  974.201617][ T7658] SELinux: syz.4.5536 (7658) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  974.238600][ T7660] IPv6: Can't replace route, no match found
[  974.468603][ T7773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5541'.
[  975.281367][ T7788] loop2: detected capacity change from 0 to 512
[  975.293507][ T7788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  975.341282][ T7788] EXT4-fs (loop2): orphan cleanup on readonly fs
[  975.349655][ T7788] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5546: Failed to acquire dquot type 1
[  975.363170][ T7788] EXT4-fs (loop2): 1 truncate cleaned up
[  975.415892][ T7791] netlink: 'syz.1.5547': attribute type 12 has an invalid length.
[  975.424513][ T7791] netlink: 'syz.1.5547': attribute type 29 has an invalid length.
[  975.432959][ T7791] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5547'.
[  975.465339][ T7788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  975.625750][ T7802] IPv6: Can't replace route, no match found
[  975.819473][ T7806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  975.828379][ T7806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.112971][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  976.154321][ T7810] loop2: detected capacity change from 0 to 128
[  976.164615][ T7810] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  976.177886][ T7810] ext4 filesystem being mounted at /431/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  976.212121][ T7810] syz.2.5555 uses obsolete (PF_INET,SOCK_PACKET)
[  976.300451][T13597] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  976.393092][   T29] kauditd_printk_skb: 104 callbacks suppressed
[  976.393112][   T29] audit: type=1400 audit(1756346055.477:4058): avc:  denied  { prog_run } for  pid=7818 comm="syz.0.5558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  976.606621][ T7827] 9pnet: Could not find request transport: t
[  976.656413][ T7833] netlink: 'syz.5.5564': attribute type 12 has an invalid length.
[  976.664840][ T7833] netlink: 'syz.5.5564': attribute type 29 has an invalid length.
[  976.672957][ T7833] __nla_validate_parse: 2 callbacks suppressed
[  976.672975][ T7833] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5564'.
[  976.732413][   T29] audit: type=1400 audit(1756346055.505:4059): avc:  denied  { create } for  pid=7818 comm="syz.0.5558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  976.752624][   T29] audit: type=1400 audit(1756346055.524:4060): avc:  denied  { block_suspend } for  pid=7815 comm="syz.2.5557" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  976.774724][   T29] audit: type=1400 audit(1756346055.552:4061): avc:  denied  { read } for  pid=7821 comm="syz.0.5559" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  976.798545][   T29] audit: type=1400 audit(1756346055.552:4062): avc:  denied  { open } for  pid=7821 comm="syz.0.5559" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  976.823280][   T29] audit: type=1400 audit(1756346055.552:4063): avc:  denied  { ioctl } for  pid=7821 comm="syz.0.5559" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  976.850301][   T29] audit: type=1400 audit(1756346055.552:4064): avc:  denied  { create } for  pid=7821 comm="syz.0.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  976.871620][   T29] audit: type=1400 audit(1756346055.552:4065): avc:  denied  { write } for  pid=7821 comm="syz.0.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  976.892702][   T29] audit: type=1400 audit(1756346055.552:4066): avc:  denied  { nlmsg_write } for  pid=7821 comm="syz.0.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  976.913959][   T29] audit: type=1400 audit(1756346055.561:4067): avc:  denied  { allowed } for  pid=7823 comm="syz.1.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  977.610433][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5569'.
[  977.867990][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5571'.
[  978.370852][ T7857] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5573'.
[  978.518259][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5575'.
[  978.651459][ T7863] 9pnet: Could not find request transport: t
[  978.724019][ T7868] netlink: 'syz.5.5577': attribute type 10 has an invalid length.
[  978.736270][ T7868] team0: Port device dummy0 added
[  978.750596][ T7868] netlink: 'syz.5.5577': attribute type 10 has an invalid length.
[  978.753484][ T7868] team0: Port device dummy0 removed
[  978.755907][ T7868] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  978.919658][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5581'.
[  978.950594][ T7878] loop5: detected capacity change from 0 to 512
[  978.958124][ T7878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  978.967892][ T7878] EXT4-fs (loop5): orphan cleanup on readonly fs
[  978.974951][ T7878] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5580: Failed to acquire dquot type 1
[  978.988002][ T7878] EXT4-fs (loop5): 1 truncate cleaned up
[  978.994492][ T7878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  979.254566][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5585'.
[  979.265265][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  979.273279][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.439735][ T7892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5587'.
[  979.499814][ T7896] 9pnet: Could not find request transport: t
[  979.516112][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5588'.
[  979.598023][ T7902] FAULT_INJECTION: forcing a failure.
[  979.598023][ T7902] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  979.611705][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.0.5591 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  979.611739][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  979.611752][ T7902] Call Trace:
[  979.611760][ T7902]  <TASK>
[  979.611769][ T7902]  __dump_stack+0x1d/0x30
[  979.611794][ T7902]  dump_stack_lvl+0xe8/0x140
[  979.611849][ T7902]  dump_stack+0x15/0x1b
[  979.611894][ T7902]  should_fail_ex+0x265/0x280
[  979.611957][ T7902]  should_fail+0xb/0x20
[  979.611968][ T7902]  should_fail_usercopy+0x1a/0x20
[  979.611982][ T7902]  strncpy_from_user+0x25/0x230
[  979.612076][ T7902]  ? kmem_cache_alloc_noprof+0x186/0x310
[  979.612154][ T7902]  ? getname_flags+0x80/0x3b0
[  979.612172][ T7902]  getname_flags+0xae/0x3b0
[  979.612191][ T7902]  user_path_at+0x28/0x130
[  979.612284][ T7902]  do_sys_truncate+0x5c/0x130
[  979.612307][ T7902]  __x64_sys_truncate+0x31/0x40
[  979.612356][ T7902]  x64_sys_call+0x1a2f/0x2ff0
[  979.612379][ T7902]  do_syscall_64+0xd2/0x200
[  979.612470][ T7902]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  979.612484][ T7902]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  979.612504][ T7902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  979.612518][ T7902] RIP: 0033:0x7fc2eebeebe9
[  979.612529][ T7902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  979.612541][ T7902] RSP: 002b:00007fc2ed64f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  979.612555][ T7902] RAX: ffffffffffffffda RBX: 00007fc2eee15fa0 RCX: 00007fc2eebeebe9
[  979.612564][ T7902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  979.612572][ T7902] RBP: 00007fc2ed64f090 R08: 0000000000000000 R09: 0000000000000000
[  979.612583][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  979.612590][ T7902] R13: 00007fc2eee16038 R14: 00007fc2eee15fa0 R15: 00007fffcdd8efa8
[  979.612603][ T7902]  </TASK>
[  979.823233][T20284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  979.880916][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5593'.
[  979.898265][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  979.907388][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  979.917266][ T7914] hsr_slave_0: left promiscuous mode
[  979.924100][ T7914] hsr_slave_1: left promiscuous mode
[  980.252899][ T8143] hsr_slave_0: left promiscuous mode
[  980.259152][ T8143] hsr_slave_1: left promiscuous mode
[  980.355024][ T8148] loop4: detected capacity change from 0 to 164
[  980.469431][ T8158] loop2: detected capacity change from 0 to 164
[  980.613442][ T8177] capability: warning: `syz.0.5625' uses 32-bit capabilities (legacy support in use)
[  980.637506][ T8180] loop4: detected capacity change from 0 to 1024
[  980.645098][ T8180] EXT4-fs: Ignoring removed bh option
[  980.651746][ T8180] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  980.678518][ T8180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  980.822530][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  980.885750][ T8296] program syz.4.5631 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  981.803738][ T8649] loop4: detected capacity change from 0 to 164
[  982.074760][ T8769] loop2: detected capacity change from 0 to 512
[  982.174244][ T8769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  982.206397][   T29] kauditd_printk_skb: 311 callbacks suppressed
[  982.206414][   T29] audit: type=1400 audit(1756346060.903:4377): avc:  denied  { write } for  pid=8773 comm="syz.1.5665" name="rt_acct" dev="proc" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  982.236633][   T29] audit: type=1400 audit(1756346060.912:4378): avc:  denied  { connect } for  pid=8773 comm="syz.1.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  982.257248][   T29] audit: type=1400 audit(1756346060.912:4379): avc:  denied  { write } for  pid=8773 comm="syz.1.5665" path="socket:[70011]" dev="sockfs" ino=70011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  982.285744][ T8772] syzkaller0: entered promiscuous mode
[  982.299409][ T8769] EXT4-fs (loop2): orphan cleanup on readonly fs
[  982.306467][ T8769] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  982.316129][ T8769] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  982.325830][ T8769] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5654: Failed to acquire dquot type 1
[  982.338570][ T8769] EXT4-fs (loop2): 1 truncate cleaned up
[  982.345535][ T8769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  982.470731][   T29] audit: type=1400 audit(1756346061.146:4380): avc:  denied  { read } for  pid=8878 comm="syz.1.5667" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  982.495058][   T29] audit: type=1400 audit(1756346061.146:4381): avc:  denied  { open } for  pid=8878 comm="syz.1.5667" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  982.519096][   T29] audit: type=1400 audit(1756346061.146:4382): avc:  denied  { ioctl } for  pid=8878 comm="syz.1.5667" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  982.609010][ T8880] 9pnet: Could not find request transport: t
[  982.670144][ T8986] loop5: detected capacity change from 0 to 164
[  982.723106][ T8988] __nla_validate_parse: 15 callbacks suppressed
[  982.723126][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5670'.
[  982.952714][ T9005] program syz.1.5678 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  983.036450][ T9009] 9pnet: Could not find request transport: t
[  983.065295][   T29] audit: type=1400 audit(1756346061.716:4383): avc:  denied  { ioctl } for  pid=9039 comm="syz.1.5681" path="socket:[70921]" dev="sockfs" ino=70921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  983.094500][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5679'.
[  983.094621][ T9055] netlink: 'syz.1.5681': attribute type 12 has an invalid length.
[  983.112401][ T9055] netlink: 'syz.1.5681': attribute type 29 has an invalid length.
[  983.120649][ T9055] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5681'.
[  983.299999][ T9117] netlink: 'syz.1.5683': attribute type 1 has an invalid length.
[  983.308479][ T9117] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5683'.
[  983.395700][ T9233] program syz.1.5690 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  983.432268][   T29] audit: type=1400 audit(1756346062.053:4384): avc:  denied  { read write } for  pid=9235 comm="syz.4.5692" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  983.458258][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  983.467741][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  983.578030][ T9242] netlink: 'syz.5.5694': attribute type 12 has an invalid length.
[  983.586257][ T9242] netlink: 'syz.5.5694': attribute type 29 has an invalid length.
[  983.594783][ T9242] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5694'.
[  984.929722][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  984.966424][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  985.039825][ T9580] loop5: detected capacity change from 0 to 128
[  985.082548][ T9580] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  985.129017][ T9580] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  985.202084][ T9580] netlink: 'syz.5.5709': attribute type 16 has an invalid length.
[  985.272968][ T9583] EXT4-fs error (device loop5): make_indexed_dir:2269: inode #2: block 20: comm syz.5.5709: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0
[  985.324770][ T9583] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.5709: dx entry: limit 0 != root limit 125
[  985.336811][ T9583] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5709: Corrupt directory, running e2fsck is recommended
[  985.356513][ T9583] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 4: comm syz.5.5709: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=1024 fake=0
[  985.665397][T13597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  985.704853][ T9593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9593 comm=syz.2.5714
[  985.717749][ T9593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9593 comm=syz.2.5714
[  985.911690][T20284] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  985.995332][ T9812] FAULT_INJECTION: forcing a failure.
[  985.995332][ T9812] name failslab, interval 1, probability 0, space 0, times 0
[  986.008590][ T9812] CPU: 0 UID: 0 PID: 9812 Comm: syz.5.5721 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  986.008617][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  986.008631][ T9812] Call Trace:
[  986.008639][ T9812]  <TASK>
[  986.008649][ T9812]  __dump_stack+0x1d/0x30
[  986.008674][ T9812]  dump_stack_lvl+0xe8/0x140
[  986.008696][ T9812]  dump_stack+0x15/0x1b
[  986.008783][ T9812]  should_fail_ex+0x265/0x280
[  986.008804][ T9812]  should_failslab+0x8c/0xb0
[  986.008900][ T9812]  kmem_cache_alloc_noprof+0x50/0x310
[  986.008927][ T9812]  ? audit_log_start+0x365/0x6c0
[  986.009022][ T9812]  audit_log_start+0x365/0x6c0
[  986.009054][ T9812]  audit_seccomp+0x48/0x100
[  986.009083][ T9812]  ? __seccomp_filter+0x68c/0x10d0
[  986.009112][ T9812]  __seccomp_filter+0x69d/0x10d0
[  986.009136][ T9812]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  986.009160][ T9812]  ? vfs_write+0x7e8/0x960
[  986.009207][ T9812]  ? __rcu_read_unlock+0x4f/0x70
[  986.009228][ T9812]  ? __fget_files+0x184/0x1c0
[  986.009252][ T9812]  __secure_computing+0x82/0x150
[  986.009272][ T9812]  syscall_trace_enter+0xcf/0x1e0
[  986.009305][ T9812]  do_syscall_64+0xac/0x200
[  986.009403][ T9812]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  986.009430][ T9812]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  986.009488][ T9812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.009512][ T9812] RIP: 0033:0x7f328886ebe9
[  986.009530][ T9812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  986.009552][ T9812] RSP: 002b:00007f32872cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  986.009600][ T9812] RAX: ffffffffffffffda RBX: 00007f3288a95fa0 RCX: 00007f328886ebe9
[  986.009613][ T9812] RDX: 0000200000000080 RSI: 000000000000000e RDI: 0000000000000023
[  986.009626][ T9812] RBP: 00007f32872cf090 R08: 0000000000000000 R09: 0000000000000000
[  986.009638][ T9812] R10: 0000000000000068 R11: 0000000000000246 R12: 0000000000000001
[  986.009651][ T9812] R13: 00007f3288a96038 R14: 00007f3288a95fa0 R15: 00007fff54978e58
[  986.009669][ T9812]  </TASK>
[  986.263462][ T9819] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5724'.
[  986.489364][ T9831] FAULT_INJECTION: forcing a failure.
[  986.489364][ T9831] name failslab, interval 1, probability 0, space 0, times 0
[  986.502718][ T9831] CPU: 0 UID: 0 PID: 9831 Comm: syz.4.5729 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  986.502748][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  986.502786][ T9831] Call Trace:
[  986.502794][ T9831]  <TASK>
[  986.502801][ T9831]  __dump_stack+0x1d/0x30
[  986.502824][ T9831]  dump_stack_lvl+0xe8/0x140
[  986.502915][ T9831]  dump_stack+0x15/0x1b
[  986.502931][ T9831]  should_fail_ex+0x265/0x280
[  986.502950][ T9831]  should_failslab+0x8c/0xb0
[  986.502971][ T9831]  kmem_cache_alloc_noprof+0x50/0x310
[  986.502999][ T9831]  ? audit_log_start+0x365/0x6c0
[  986.503053][ T9831]  audit_log_start+0x365/0x6c0
[  986.503119][ T9831]  audit_seccomp+0x48/0x100
[  986.503141][ T9831]  ? __seccomp_filter+0x68c/0x10d0
[  986.503181][ T9831]  __seccomp_filter+0x69d/0x10d0
[  986.503235][ T9831]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  986.503261][ T9831]  ? vfs_write+0x7e8/0x960
[  986.503386][ T9831]  ? __rcu_read_unlock+0x4f/0x70
[  986.503407][ T9831]  ? __fget_files+0x184/0x1c0
[  986.503437][ T9831]  __secure_computing+0x82/0x150
[  986.503593][ T9831]  syscall_trace_enter+0xcf/0x1e0
[  986.503615][ T9831]  do_syscall_64+0xac/0x200
[  986.503643][ T9831]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  986.503815][ T9831]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  986.503916][ T9831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.503940][ T9831] RIP: 0033:0x7f33e8baebe9
[  986.503957][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  986.503977][ T9831] RSP: 002b:00007f33e760f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e
[  986.504000][ T9831] RAX: ffffffffffffffda RBX: 00007f33e8dd5fa0 RCX: 00007f33e8baebe9
[  986.504014][ T9831] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000005003
[  986.504029][ T9831] RBP: 00007f33e760f090 R08: 0000000000000000 R09: 0000000000000000
[  986.504092][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  986.504104][ T9831] R13: 00007f33e8dd6038 R14: 00007f33e8dd5fa0 R15: 00007ffc232f3638
[  986.504160][ T9831]  </TASK>
[  986.875498][ T9847] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5736'.
[  986.942341][ T9851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5734'.
[  986.959406][ T9835] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.021143][ T9858] FAULT_INJECTION: forcing a failure.
[  987.021143][ T9858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  987.035062][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.4.5741 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  987.035102][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  987.035123][ T9858] Call Trace:
[  987.035146][ T9858]  <TASK>
[  987.035154][ T9858]  __dump_stack+0x1d/0x30
[  987.035176][ T9858]  dump_stack_lvl+0xe8/0x140
[  987.035195][ T9858]  dump_stack+0x15/0x1b
[  987.035213][ T9858]  should_fail_ex+0x265/0x280
[  987.035240][ T9858]  should_fail+0xb/0x20
[  987.035310][ T9858]  should_fail_usercopy+0x1a/0x20
[  987.035343][ T9858]  _copy_to_user+0x20/0xa0
[  987.035379][ T9858]  simple_read_from_buffer+0xb5/0x130
[  987.035403][ T9858]  proc_fail_nth_read+0x10e/0x150
[  987.035474][ T9858]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  987.035501][ T9858]  vfs_read+0x1a8/0x770
[  987.035580][ T9858]  ? __rcu_read_unlock+0x4f/0x70
[  987.035602][ T9858]  ? __fget_files+0x184/0x1c0
[  987.035631][ T9858]  ksys_read+0xda/0x1a0
[  987.035652][ T9858]  __x64_sys_read+0x40/0x50
[  987.035734][ T9858]  x64_sys_call+0x27bc/0x2ff0
[  987.035898][ T9858]  do_syscall_64+0xd2/0x200
[  987.035924][ T9858]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  987.035950][ T9858]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  987.036009][ T9858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.036033][ T9858] RIP: 0033:0x7f33e8bad5fc
[  987.036048][ T9858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  987.036065][ T9858] RSP: 002b:00007f33e760f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  987.036154][ T9858] RAX: ffffffffffffffda RBX: 00007f33e8dd5fa0 RCX: 00007f33e8bad5fc
[  987.036166][ T9858] RDX: 000000000000000f RSI: 00007f33e760f0a0 RDI: 0000000000000003
[  987.036180][ T9858] RBP: 00007f33e760f090 R08: 0000000000000000 R09: 0000000000000000
[  987.036194][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  987.036251][ T9858] R13: 00007f33e8dd6038 R14: 00007f33e8dd5fa0 R15: 00007ffc232f3638
[  987.036267][ T9858]  </TASK>
[  987.278725][ T9862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9862 comm=syz.4.5742
[  987.305335][ T9835] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.371437][ T9835] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.396679][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5743'.
[  987.425097][ T9835] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.494220][ T4678] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  987.510028][ T4678] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  987.527964][ T4678] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  987.536900][ T4678] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  987.564776][ T9873] loop4: detected capacity change from 0 to 164
[  987.583542][   T29] kauditd_printk_skb: 279 callbacks suppressed
[  987.583571][   T29] audit: type=1400 audit(1756346065.944:4660): avc:  denied  { mount } for  pid=9872 comm="syz.4.5747" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  987.629529][   T29] audit: type=1400 audit(1756346065.982:4661): avc:  denied  { unmount } for  pid=14446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  987.797285][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  987.798736][   T29] audit: type=1400 audit(1756346066.141:4662): avc:  denied  { read write } for  pid=9984 comm="syz.0.5753" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  987.830892][   T29] audit: type=1400 audit(1756346066.141:4663): avc:  denied  { open } for  pid=9984 comm="syz.0.5753" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  987.838001][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  987.854877][   T29] audit: type=1400 audit(1756346066.141:4664): avc:  denied  { ioctl } for  pid=9984 comm="syz.0.5753" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  987.994575][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.5.5754
[  988.016764][   T29] audit: type=1400 audit(1756346066.328:4665): avc:  denied  { map_create } for  pid=9984 comm="syz.0.5753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  988.037286][   T29] audit: type=1400 audit(1756346066.328:4666): avc:  denied  { bpf } for  pid=9984 comm="syz.0.5753" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  988.059569][   T29] audit: type=1400 audit(1756346066.328:4667): avc:  denied  { prog_load } for  pid=9984 comm="syz.0.5753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  988.079320][   T29] audit: type=1400 audit(1756346066.328:4668): avc:  denied  { perfmon } for  pid=9984 comm="syz.0.5753" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  988.100862][   T29] audit: type=1400 audit(1756346066.328:4669): avc:  denied  { ioctl } for  pid=9986 comm="syz.5.5754" path="socket:[70514]" dev="sockfs" ino=70514 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  988.314304][T10101] netlink: '+=[': attribute type 13 has an invalid length.
[  988.495392][T10101] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.502881][T10101] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.292476][T10101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.187874][   T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  991.206028][   T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  991.217367][   T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  991.243108][   T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  991.263955][T10118] loop4: detected capacity change from 0 to 164
[  991.433791][T10226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10226 comm=syz.1.5768
[  991.501530][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5770'.
[  991.540279][T10334] loop4: detected capacity change from 0 to 512
[  991.548134][T10334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  991.559076][T10334] EXT4-fs (loop4): orphan cleanup on readonly fs
[  991.568368][T10334] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5772: Failed to acquire dquot type 1
[  991.582437][T10334] EXT4-fs (loop4): 1 truncate cleaned up
[  991.588933][T10334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  991.616666][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.681704][T10339] loop4: detected capacity change from 0 to 8192
[  991.740892][T10343] 9pnet: Could not find request transport: t
[  992.291915][T10572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10572 comm=syz.5.5787
[  992.605105][T10578] 9pnet: Could not find request transport: t
[  992.641081][T10581] netlink: 65536 bytes leftover after parsing attributes in process `'.
[  992.833519][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5797'.
[  992.937776][T10808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5796'.
[  992.956585][   T29] kauditd_printk_skb: 129 callbacks suppressed
[  992.956603][   T29] audit: type=1400 audit(1756346070.967:4797): avc:  denied  { write } for  pid=10832 comm="syz.5.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  993.074548][T10920] loop4: detected capacity change from 0 to 164
[  993.115799][T10922] netlink: 65536 bytes leftover after parsing attributes in process `'.
[  993.397429][T11130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5811'.
[  994.049002][T11146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11146 comm=syz.1.5820
[  994.406560][T11256] netlink: 65536 bytes leftover after parsing attributes in process `'.
[  994.484644][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5825'.
[  994.632608][T11264] loop4: detected capacity change from 0 to 512
[  994.680972][T11264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  994.705951][T11264] EXT4-fs (loop4): orphan cleanup on readonly fs
[  994.714937][T11264] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[  994.724599][T11264] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  994.734665][T11264] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5827: Failed to acquire dquot type 1
[  994.750731][T11264] EXT4-fs (loop4): 1 truncate cleaned up
[  994.816576][T11264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  994.863556][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  995.130794][T11277] 9pnet: Could not find request transport: t
[  995.213236][   T29] audit: type=1400 audit(1756346073.063:4798): avc:  denied  { mounton } for  pid=11279 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  995.447089][   T29] audit: type=1326 audit(1756346073.297:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11287 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59244aebe9 code=0x7ffc0000
[  995.583418][   T29] audit: type=1326 audit(1756346073.325:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11287 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59244aebe9 code=0x7ffc0000
[  995.607478][   T29] audit: type=1326 audit(1756346073.325:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11287 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59244aebe9 code=0x7ffc0000
[  995.632397][   T29] audit: type=1326 audit(1756346073.325:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11287 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59244aebe9 code=0x7ffc0000
[  995.656582][   T29] audit: type=1326 audit(1756346073.325:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11287 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f59244aebe9 code=0x7ffc0000
[  995.680853][   T29] audit: type=1400 audit(1756346073.325:4804): avc:  denied  { accept } for  pid=11287 comm="syz.2.5836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  995.719188][ T4497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.778412][ T4497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.802928][T11279] chnl_net:caif_netlink_parms(): no params data found
[  995.852812][ T4497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.872612][T11279] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.880040][T11279] bridge0: port 1(bridge_slave_0) entered disabled state
[  995.904133][T11279] bridge_slave_0: entered allmulticast mode
[  995.919248][T11279] bridge_slave_0: entered promiscuous mode
[  995.930773][ T4497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.960177][T11279] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.967696][T11279] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.977740][T11279] bridge_slave_1: entered allmulticast mode
[  995.985581][T11279] bridge_slave_1: entered promiscuous mode
[  996.044053][T11318] loop4: detected capacity change from 0 to 1024
[  996.054109][T11279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  996.067059][T11318] EXT4-fs: Ignoring removed orlov option
[  996.099185][ T4497] bridge_slave_1: left allmulticast mode
[  996.105474][ T4497] bridge_slave_1: left promiscuous mode
[  996.111498][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.122068][T11318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  996.138127][ T4497] bridge_slave_0: left allmulticast mode
[  996.144284][ T4497] bridge_slave_0: left promiscuous mode
[  996.150651][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.221340][T14446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  996.244390][T11322] 9pnet: Could not find request transport: t
[  996.263141][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  996.274429][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  996.284953][ T4497] bond0 (unregistering): Released all slaves
[  996.296058][T11279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  996.320630][T11279] team0: Port device team_slave_0 added
[  996.327983][T11279] team0: Port device team_slave_1 added
[  996.346149][ T4497] tipc: Left network mode
[  996.359266][T11279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  996.367043][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  996.393749][T11279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  996.407624][ T4497] hsr_slave_0: left promiscuous mode
[  996.414114][ T4497] hsr_slave_1: left promiscuous mode
[  996.422989][ T4497] veth1_macvtap: left promiscuous mode
[  996.428662][ T4497] veth0_macvtap: left promiscuous mode
[  996.434711][ T4497] veth1_vlan: left promiscuous mode
[  996.441140][ T4497] veth0_vlan: left promiscuous mode
[  996.511785][ T4497] team0 (unregistering): Port device team_slave_1 removed
[  996.522628][ T4497] team0 (unregistering): Port device team_slave_0 removed
[  996.523025][T11429] SELinux: failed to load policy
[  996.567594][T11279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  996.574863][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  996.601903][T11279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.663166][T11431] SELinux: failed to load policy
[  996.671926][T11279] hsr_slave_0: entered promiscuous mode
[  996.681274][T11279] hsr_slave_1: entered promiscuous mode
[  996.687253][T11433] loop4: detected capacity change from 0 to 1024
[  996.694671][T11433] EXT4-fs: Ignoring removed nobh option
[  996.701176][T11433] EXT4-fs: Ignoring removed nobh option
[  996.707902][T11433] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  996.719652][T11433] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: comm syz.4.5848: inode #4294967295: comm syz.4.5848: iget: illegal inode #
[  996.735494][T11433] EXT4-fs (loop4): no journal found
[  996.741125][T11433] EXT4-fs (loop4): can't get journal size
[  996.748609][T11433] EXT4-fs (loop4): failed to initialize system zone (-22)
[  996.758080][T11433] EXT4-fs (loop4): mount failed
[  996.813945][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5848'.
[  996.848297][T11448] 9pnet: Could not find request transport: t
[  996.891758][ T3397] ==================================================================
[  996.900218][ T3397] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  996.907339][ T3397] 
[  996.910100][ T3397] read-write to 0xffff888237c29d64 of 4 bytes by task 16625 on cpu 0:
[  996.919016][ T3397]  wq_worker_running+0x95/0x120
[  996.923940][ T3397]  schedule_timeout+0xb7/0x170
[  996.928698][ T3397]  msleep+0x50/0x90
[  996.932701][ T3397]  nsim_fib_event_work+0x1ebc/0x21a0
[  996.938100][ T3397]  process_scheduled_works+0x4ce/0x9d0
[  996.943650][ T3397]  worker_thread+0x582/0x770
[  996.948667][ T3397]  kthread+0x486/0x510
[  996.952903][ T3397]  ret_from_fork+0xda/0x150
[  996.958067][ T3397]  ret_from_fork_asm+0x1a/0x30
[  996.963094][ T3397] 
[  996.965526][ T3397] read to 0xffff888237c29d64 of 4 bytes by task 3397 on cpu 1:
[  996.973509][ T3397]  kick_pool+0x49/0x2d0
[  996.977887][ T3397]  __queue_work+0x8cb/0xb50
[  996.982572][ T3397]  queue_work_on+0xd1/0x160
[  996.987715][ T3397]  wg_queue_enqueue_per_peer_tx+0x119/0x270
[  996.994429][ T3397]  wg_packet_encrypt_worker+0x9e1/0xb80
[  997.001129][ T3397]  process_scheduled_works+0x4ce/0x9d0
[  997.006897][ T3397]  worker_thread+0x582/0x770
[  997.011616][ T3397]  kthread+0x486/0x510
[  997.015767][ T3397]  ret_from_fork+0xda/0x150
[  997.020541][ T3397]  ret_from_fork_asm+0x1a/0x30
[  997.025565][ T3397] 
[  997.027877][ T3397] value changed: 0x00000000 -> 0x00000001
[  997.033583][ T3397] 
[  997.036068][ T3397] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  997.042515][ T3397] CPU: 1 UID: 0 PID: 3397 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  997.052939][ T3397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  997.063606][ T3397] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  997.070998][ T3397] ==================================================================
[  997.116066][T11457] loop5: detected capacity change from 0 to 512
[  997.420606][ T4497] IPVS: stop unused estimator thread 0...
[  997.504271][T11457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  997.524356][T11457] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  997.570642][T11457] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.825695][ T4497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.900007][ T4497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.942888][ T4497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.984708][ T4497] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.070120][ T4497] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.100877][ T4497] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.165164][ T4497] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.218900][ T4497] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.294799][ T4497] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.347145][ T4497] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.389468][ T4497] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.453659][ T4497] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.711623][ T4497] bridge_slave_1: left allmulticast mode
[  998.717577][ T4497] bridge_slave_1: left promiscuous mode
[  998.723587][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.731913][ T4497] bridge_slave_0: left allmulticast mode
[  998.738159][ T4497] bridge_slave_0: left promiscuous mode
[  998.744383][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.753280][ T4497] bridge_slave_1: left allmulticast mode
[  998.759362][ T4497] bridge_slave_1: left promiscuous mode
[  998.765565][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.774003][ T4497] bridge_slave_0: left allmulticast mode
[  998.779941][ T4497] bridge_slave_0: left promiscuous mode
[  998.785764][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.794684][ T4497] bridge_slave_1: left allmulticast mode
[  998.800454][ T4497] bridge_slave_1: left promiscuous mode
[  998.806370][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.814264][ T4497] bridge_slave_0: left allmulticast mode
[  998.819990][ T4497] bridge_slave_0: left promiscuous mode
[  998.825879][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.834373][ T4497] bridge_slave_1: left allmulticast mode
[  998.840122][ T4497] bridge_slave_1: left promiscuous mode
[  998.845986][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.853797][ T4497] bridge_slave_0: left allmulticast mode
[  998.859728][ T4497] bridge_slave_0: left promiscuous mode
[  998.865658][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.978571][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  998.988793][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  998.998430][ T4497] bond0 (unregistering): Released all slaves
[  999.042935][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  999.053117][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  999.062594][ T4497] bond0 (unregistering): Released all slaves
[  999.117593][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  999.127757][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  999.137841][ T4497] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  999.146930][ T4497] bond0 (unregistering): Released all slaves
[  999.192759][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  999.202011][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  999.211298][ T4497] bond0 (unregistering): Released all slaves
[  999.259062][ T4497] tipc: Left network mode
[  999.266903][ T4497] hsr_slave_0: left promiscuous mode
[  999.272520][ T4497] hsr_slave_1: left promiscuous mode
[  999.278520][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  999.286254][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  999.294091][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  999.301584][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  999.310724][ T4497] hsr_slave_0: left promiscuous mode
[  999.316468][ T4497] hsr_slave_1: left promiscuous mode
[  999.322460][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  999.330402][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  999.339474][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  999.346981][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  999.354509][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  999.362260][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  999.371268][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  999.385162][ T4497] veth1_macvtap: left promiscuous mode
[  999.390698][ T4497] veth0_macvtap: left promiscuous mode
[  999.396377][ T4497] veth1_vlan: left promiscuous mode
[  999.401615][ T4497] veth0_vlan: left promiscuous mode
[  999.407431][ T4497] veth1_macvtap: left promiscuous mode
[  999.413578][ T4497] veth0_macvtap: left promiscuous mode
[  999.419286][ T4497] veth1_vlan: left promiscuous mode
[  999.424670][ T4497] veth0_vlan: left promiscuous mode
[  999.430559][ T4497] veth1_macvtap: left promiscuous mode
[  999.436181][ T4497] veth0_macvtap: left promiscuous mode
[  999.441949][ T4497] veth1_vlan: left promiscuous mode
[  999.447439][ T4497] veth0_vlan: left promiscuous mode
[  999.557905][ T4497] team0 (unregistering): Port device team_slave_1 removed
[  999.567904][ T4497] team0 (unregistering): Port device team_slave_0 removed
[  999.612119][ T4497] team0 (unregistering): Port device team_slave_1 removed
[  999.622045][ T4497] team0 (unregistering): Port device team_slave_0 removed
[  999.669110][ T4497] team0 (unregistering): Port device team_slave_1 removed
[  999.679405][ T4497] team0 (unregistering): Port device team_slave_0 removed
[  999.724429][ T4497] team0 (unregistering): Port device team_slave_1 removed
[  999.734094][ T4497] team0 (unregistering): Port device team_slave_0 removed
[ 1000.702762][ T4497] IPVS: stop unused estimator thread 0...
[ 1000.751648][ T4497] bridge_slave_1: left allmulticast mode
[ 1000.757443][ T4497] bridge_slave_1: left promiscuous mode
[ 1000.763244][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1000.771136][ T4497] bridge_slave_0: left allmulticast mode
[ 1000.776899][ T4497] bridge_slave_0: left promiscuous mode
[ 1000.782790][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.859819][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1000.869875][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1000.879356][ T4497] bond0 (unregistering): Released all slaves
[ 1000.925394][ T4497] hsr_slave_0: left promiscuous mode
[ 1000.931240][ T4497] hsr_slave_1: left promiscuous mode
[ 1000.937085][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1000.944732][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1000.971922][ T4497] team0 (unregistering): Port device team_slave_1 removed
[ 1000.981812][ T4497] team0 (unregistering): Port device team_slave_0 removed