last executing test programs:

3m36.772823159s ago: executing program 3 (id=4):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

3m36.654840627s ago: executing program 3 (id=12):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
close(0x4)

3m36.55970532s ago: executing program 3 (id=14):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
perf_event_open(0x0, r0, 0x9, r1, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x206000, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000bc0))

3m36.138066003s ago: executing program 3 (id=23):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9})
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1004001, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)

3m27.862095282s ago: executing program 3 (id=128):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0x12)
sendfile(r3, r2, 0x0, 0x4)

3m27.84923673s ago: executing program 32 (id=128):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0x12)
sendfile(r3, r2, 0x0, 0x4)

3m15.080349513s ago: executing program 2 (id=241):
ioperm(0x0, 0x3, 0x6)
syslog(0x3, 0xfffffffffffffffe, 0x13)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

3m14.546660156s ago: executing program 2 (id=248):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0)

3m12.776326935s ago: executing program 2 (id=255):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="40c469738961ea3c63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m12.248229509s ago: executing program 2 (id=260):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
r1 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000000d})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

3m12.065418956s ago: executing program 2 (id=264):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="89f7ee0c7cdad9b4b47380c988cafb141949ac460295b2a668902c6e60b7796316c6c94121c48b58c7271a4dd235ed15dad0344f29b2f8473204c1", 0x3b}], 0x1)

3m10.508034883s ago: executing program 2 (id=269):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4)

3m10.481618188s ago: executing program 33 (id=269):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4)

6.42693033s ago: executing program 4 (id=1014):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000240)="cda650bab43f3b030094000000000000f27e59896eed27b7f5d813888d", 0x1d, 0x24000080, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @remote}, 0x14)
sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0x5f, 0x40000, &(0x7f0000000080)={0x11, 0x6, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)

5.258665608s ago: executing program 1 (id=1005):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121a, &(0x7f0000002800)="$eJzs3M9rHGUYB/AnsW5ian6otbUF8UUvehmaHLzoJUgK0gWlbYRWEKZmokvG3ZBZAlvE6smrf4cIIngTxJtecvE/ELzl4rGCOJLdGHd1hQZsN4bP57IP+8x39p2BfeFd9p39Vz/7YGuzyjbzbkxPTcX0dkS6lyLFdPzp43jple9/ePb6zVtXV5vNtWspXVm9sfxySmnhuW/f/vCL57/rnn3r64VvZmJv6Z39X1Z+3ju/d3H/9xvvt6rUqlK70015ut3pdPPbZZE2WtVWltKbZZFXRWq1q2JnpL9Zdra3eylvb8zPbe8UVZXydi9tFb3U7aTuTi/l7+WtdsqyLM3PBcd35qha//xeXdcRdf1oNKKu6/qxmIuz8XjMx0IsxlI8EU/GU3Euno7zcSGeia9++rJ3kAAAAAAAAAAAAAAAAAAAAAD+O8fd/3+xf9SkRw0AAAAAAAAAAAAAAAAAAACny/Wbt66uNptr11KajSg/3V3fXR+8Dvqrm9GKMoq4HIvxW/R3/w8M6iuvN9cup76l+KS8e5i/u7v+yGh+uf84gbH55UE+jeZnYm44vxKLcW58fmVsfjZefGEon8Vi/PhudKKMjTjI/pX/aDml195o/i1/qX8cAAAAnAZZOjJ2/Z5l/9Yf5I/x+8DI+voge+nMRC+diKh6d7bysix2qt6dRhwWR+/874rGyRhGFfEAztyY7HX9Wtf1Cbm944upB/gRo9+U4WImIv7Zmr2/M09FxEm4dWOKSc9MPAzDU9ahC42JjggAAAAAAAAAAID78XD+DAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7ADBwIAAAAAgvytFxihAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BAAD//ykh0Dg=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x8c602, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x3450, &(0x7f0000000080))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8)
poll(0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x98}}, 0x4000081)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)

5.258340418s ago: executing program 6 (id=1006):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.257505848s ago: executing program 4 (id=1008):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.999944171s ago: executing program 5 (id=1009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x2, 0x1000000000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x8000b, 0x1, 0x2, 0x0, 0x1}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20)

3.998901151s ago: executing program 6 (id=1021):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000040)={[{@quota}, {@noblock_validity}, {@abort}, {@nojournal_checksum}, {@abort}, {@i_version}]}, 0x1, 0x797, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x13)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$eJzs3EFsVEUYAOD/bbe0QJGKiFJRi2hsNLZQUDiYGIwmHjQx4kGPTVsIUqhpayKEwJIYPBoSr8Z49OrBqxovhpOJVzyaGBJiuACe1rzdt+12+3Yp7bYr7fcl2515O+/NzM6bt/NmuhvApjWY/kki+iLiRkTsjIhCY4LB6tPd2xfH792+OB6lcvnEP0m6W9xJ45kke96eRYYKEYUvkoUX6syev3BmbGpqciaLj8yd/XRk9vyFV06fHTs1eWry3OixY0cOHzr62uirD16pnPzSet0ZuDS9b+87H197b7xY296bPdfXo10GYzCvKBUvtDuzDttRF06KrVK+sfaFYdnS8z9tru5K/98ZXdGy8YANpFwul3uav1wqN7qyZAvw0Eqi0yUAOqP2QZ/e/9YeeQOBLWsz/Oi4W8erN0Bpve9mj4hnKxtr8yDdDfe37TQYxfio9O+36SONF9dgHgIAoN7Px2sjwYbxX3/Enrp0j2RrKP0R8WhE7IqIxyJid0Q8HtW0T0TEkw3H74qIcov8BxviS8efhZurq2Fr6fjv9Wxta2H8F/WrYP1dWWxHRG3APHkwe0+Gorvn5OmpyUMt8vjlrT++avZaWv/a+C99pPnXxoJZOW4WGyboJsbmxlZc4Qa3rkQMFBvrnxQjkvmVgCQi9kbEwK/fLPu4/XXh0y99v28+0r043f3rX1HOXUdrw1JF+buIF6vtX4pF7b+QY9J6fXKkN6YmD46kZ8HB3Dyu/371/bztyXLq/+Nfjbu9ffSnE1nPWr20/bfVnf9RW79dqH9/EpHMr9fONjnQ5eZ5XP3zy6b3NCs9/7ckH1bCtfvSz8fm5mYORWxJ3l26fXRh31o8fY5Stf5DB/L7/65sn/SdeCoi0pP46Yh4Jqp3iINRvrw/Ip6LiAPNqx+/vfn8Jyuv/9pK6z+Re/1b1P4L6/VpIN06s2jL2FRSqqZe2DIf6Dqz/8a9gfz8l9f+RyqhoWxL/vUvWXSJWFqK/MAq3z4AAAB4KBQioq9uLqkvCoXh4eoc0O7YVpianp17OZn+7NxE9TsC/XVpq/PB3Ult/rO/Lj7aED+czRt/3bW1Eh8en56a6FCdgartlT6fFIbnrwXV/p/6uz1TzMD/ma/8wOZ1v/6/59o6FQRYdz7/YbOauVQXKTVJVPKfMrAxLefz31wgbEx5/b/F/3O7YYANoqw7w6b2IP1/cdrrO9teGGBdFeOD+XChoyUB1pvxP2xKy/qS/IoD5Z78l3pjaeLobX3ArlhZMbbm5NWRQDqy6kjuW1eyV+3XFJqmicKDHbBnyU9GrKxNT67+bTm1p+0nfzlbH2t3C/6wLv00L9D6ujHat3bXJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHb6LwAA///zLttP")
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x110)
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r2, 0xfffffffffffffffd, 0x58)

3.789467485s ago: executing program 5 (id=1010):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x713a, 0x65a})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x6644}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)

3.789134824s ago: executing program 4 (id=1011):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x9)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

3.710770491s ago: executing program 4 (id=1013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000380)=r7)
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

3.64509093s ago: executing program 5 (id=1015):
preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x100, 0x400005)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x1, 0x0, 0x0, 0x3, 0x82, 0xf6, 0x90040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
setitimer(0x0, 0x0, 0x0)
mkdir(0x0, 0x111)
close(0xffffffffffffffff)
r3 = inotify_init1(0x800)
gettid()
fcntl$setsig(r3, 0xa, 0xe)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

3.534688181s ago: executing program 4 (id=1016):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000002740), 0x0, 0x4050000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.027607643s ago: executing program 0 (id=1017):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x62000000)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
sync()
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

3.027090983s ago: executing program 5 (id=1018):
creat(0x0, 0x70)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0xc01)
ftruncate(r3, 0x100)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes128, 0x0, '\x00', @c})
socket$inet6(0xa, 0x2, 0x3a)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0xd, 0x6, 0x5, 0x2, 0x47b0, 0x4, {0x0, @in6={{0xa, 0x4e23, 0x81, @remote, 0x6}}, 0x7, 0x0, 0xf, 0xff, 0x8}}, &(0x7f0000000100)=0xb0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6}}, 0x1c}}, 0x0)

2.238932037s ago: executing program 6 (id=1019):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCXONC(r1, 0x560b, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x546df31d, 0x6, &(0x7f0000000000))
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c00018008000140e79a01020c00148008000140"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4)

1.96877091s ago: executing program 4 (id=1020):
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000)

1.897156038s ago: executing program 1 (id=1022):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8f}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2fd9e5fb6e622145}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4)

1.636284383s ago: executing program 1 (id=1023):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)

630.207049ms ago: executing program 0 (id=1024):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

629.509499ms ago: executing program 1 (id=1025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x5e000000, 0x7, 0x2, 0x7f}}}}]}, 0x58}}, 0x0)

617.343507ms ago: executing program 5 (id=1026):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x9)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

353.647492ms ago: executing program 6 (id=1027):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x713a, 0x65a})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x6644}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)

353.299331ms ago: executing program 5 (id=1028):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_enter(r3, 0x3514, 0xfdd5, 0x8, 0x0, 0x0)

315.265015ms ago: executing program 0 (id=1029):
preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x100, 0x400005)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x1, 0x0, 0x0, 0x3, 0x82, 0xf6, 0x90040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
setitimer(0x0, 0x0, 0x0)
mkdir(0x0, 0x111)
close(0xffffffffffffffff)
r3 = inotify_init1(0x800)
gettid()
fcntl$setsig(r3, 0xa, 0xe)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

244.260852ms ago: executing program 0 (id=1030):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
ioprio_set$uid(0x3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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")

234.780721ms ago: executing program 6 (id=1031):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
r1 = creat(0x0, 0x70)
fcntl$setlease(r1, 0x400, 0x1)
acct(&(0x7f0000000040)='./file0\x00')
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x7}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x8010)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340), &(0x7f0000000080)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

159.263028ms ago: executing program 6 (id=1032):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121a, &(0x7f0000002800)="$eJzs3M9rHGUYB/AnsW5ian6otbUF8UUvehmaHLzoJUgK0gWlbYRWEKZmokvG3ZBZAlvE6smrf4cIIngTxJtecvE/ELzl4rGCOJLdGHd1hQZsN4bP57IP+8x39p2BfeFd9p39Vz/7YGuzyjbzbkxPTcX0dkS6lyLFdPzp43jple9/ePb6zVtXV5vNtWspXVm9sfxySmnhuW/f/vCL57/rnn3r64VvZmJv6Z39X1Z+3ju/d3H/9xvvt6rUqlK70015ut3pdPPbZZE2WtVWltKbZZFXRWq1q2JnpL9Zdra3eylvb8zPbe8UVZXydi9tFb3U7aTuTi/l7+WtdsqyLM3PBcd35qha//xeXdcRdf1oNKKu6/qxmIuz8XjMx0IsxlI8EU/GU3Euno7zcSGeia9++rJ3kAAAAAAAAAAAAAAAAAAAAAD+O8fd/3+xf9SkRw0AAAAAAAAAAAAAAAAAAACny/Wbt66uNptr11KajSg/3V3fXR+8Dvqrm9GKMoq4HIvxW/R3/w8M6iuvN9cup76l+KS8e5i/u7v+yGh+uf84gbH55UE+jeZnYm44vxKLcW58fmVsfjZefGEon8Vi/PhudKKMjTjI/pX/aDml195o/i1/qX8cAAAAnAZZOjJ2/Z5l/9Yf5I/x+8DI+voge+nMRC+diKh6d7bysix2qt6dRhwWR+/874rGyRhGFfEAztyY7HX9Wtf1Cbm944upB/gRo9+U4WImIv7Zmr2/M09FxEm4dWOKSc9MPAzDU9ahC42JjggAAAAAAAAAAID78XD+DAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7ADBwIAAAAAgvytFxihAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BAAD//ykh0Dg=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x8c602, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x3450, &(0x7f0000000080))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8)
poll(0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x98}}, 0x4000081)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)

158.400128ms ago: executing program 1 (id=1042):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x713a, 0x65a})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x6644}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)

55.31593ms ago: executing program 0 (id=1033):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x3ff, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0xa, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda57, 0x7ffffffe, 0x80, 0x2f0cb955, 0x10000007, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x6, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x61e5, 0xffffffff, 0xfff, 0xff, 0x5, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf4, 0xfffffffc, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x5, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x6, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x0, 0x400, 0x100000, 0x2, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x8000, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4000004, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x4000009, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

384.56µs ago: executing program 0 (id=1034):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0002}]})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
socket$packet(0x11, 0x3, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[], 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
dup(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

0s ago: executing program 1 (id=1035):
unshare(0x24020400)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r0 = gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r1, 0x400, 0x1)
r2 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

kernel console output (not intermixed with test programs):

ntered forwarding state
[   54.371261][ T4091] netlink: 52 bytes leftover after parsing attributes in process `syz.4.176'.
[   54.389730][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.396889][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.595128][ T4114] loop4: detected capacity change from 0 to 128
[   54.615956][ T4114] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   54.637455][   T28] kauditd_printk_skb: 22 callbacks suppressed
[   54.637472][   T28] audit: type=1400 audit(1772804091.733:283): avc:  denied  { remount } for  pid=4113 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   54.665321][   T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   55.320186][ T4126] loop5: detected capacity change from 0 to 128
[   55.345292][ T4129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'.
[   55.387131][   T28] audit: type=1400 audit(1772804092.483:284): avc:  denied  { mounton } for  pid=4130 comm="syz.4.190" path="/proc/136/cgroup" dev="proc" ino=7503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   55.412962][ T4132] loop4: detected capacity change from 0 to 512
[   55.420447][ T4126] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   55.436765][ T4126] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   55.469689][ T4132] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   55.481969][   T28] audit: type=1400 audit(1772804092.573:285): avc:  denied  { mounton } for  pid=4130 comm="syz.4.190" path="/proc/136/cgroup" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   55.511874][ T4137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[   55.564223][   T28] audit: type=1400 audit(1772804092.623:286): avc:  denied  { create } for  pid=4125 comm="syz.5.188" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   55.614331][ T4132] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[   55.624670][   T28] audit: type=1400 audit(1772804092.633:287): avc:  denied  { write open } for  pid=4125 comm="syz.5.188" path="/3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   55.707952][   T28] audit: type=1400 audit(1772804092.643:288): avc:  denied  { remove_name } for  pid=4125 comm="syz.5.188" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.753197][   T28] audit: type=1400 audit(1772804092.643:289): avc:  denied  { rename } for  pid=4125 comm="syz.5.188" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   55.798032][   T28] audit: type=1400 audit(1772804092.643:290): avc:  denied  { bind } for  pid=4120 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   56.277029][ T3840] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   56.394112][   T28] audit: type=1400 audit(1772804093.483:291): avc:  denied  { create } for  pid=4147 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   56.479294][ T4155] syz_tun: entered allmulticast mode
[   56.497175][   T28] audit: type=1400 audit(1772804093.513:292): avc:  denied  { sys_admin } for  pid=4147 comm="syz.4.194" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   56.522814][ T4154] syz_tun: left allmulticast mode
[   56.540591][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   57.296018][    C1] net_ratelimit: 29930 callbacks suppressed
[   57.296040][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.314241][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.326549][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.338690][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   57.351194][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.363485][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.375597][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.388103][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   57.400567][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.412737][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   58.394595][ T4186] TCP: TCP_TX_DELAY enabled
[   59.527132][ T4141] IPVS: starting estimator thread 0...
[   59.697341][ T4208] IPVS: using max 2112 ests per chain, 105600 per kthread
[   60.162271][ T4213] syzkaller0: entered promiscuous mode
[   60.181336][ T4213] syzkaller0: entered allmulticast mode
[   60.224106][ T4220] tipc: Started in network mode
[   60.257757][ T4220] tipc: Node identity f66f0443cd22, cluster identity 4711
[   60.287134][ T4220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.336689][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   60.336767][   T28] audit: type=1400 audit(1772804097.433:301): avc:  denied  { connect } for  pid=4226 comm="syz.5.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   61.007596][ T4210] tipc: Resetting bearer <eth:syzkaller0>
[   61.060268][ T4210] tipc: Disabling bearer <eth:syzkaller0>
[   61.302376][   T28] audit: type=1400 audit(1772804098.393:302): avc:  denied  { create } for  pid=4269 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.335116][   T28] audit: type=1400 audit(1772804098.423:303): avc:  denied  { write } for  pid=4269 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   61.357593][   T28] audit: type=1400 audit(1772804098.423:304): avc:  denied  { nlmsg_write } for  pid=4271 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   61.379017][   T28] audit: type=1400 audit(1772804098.423:305): avc:  denied  { audit_write } for  pid=4271 comm="syz.1.227" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   61.418945][   T28] audit: type=1107 audit(1772804098.423:306): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   61.475850][   T28] audit: type=1400 audit(1772804098.453:307): avc:  denied  { firmware_load } for  pid=4271 comm="syz.1.227" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   61.580864][   T28] audit: type=1400 audit(1772804098.603:308): avc:  denied  { kexec_image_load } for  pid=4274 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   61.660705][   T28] audit: type=1400 audit(1772804098.623:309): avc:  denied  { unmount } for  pid=4274 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   61.781022][ T4292] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   62.004402][   T28] audit: type=1400 audit(1772804099.093:310): avc:  denied  { setopt } for  pid=4299 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   62.037234][ T4300] netlink: 'syz.0.236': attribute type 1 has an invalid length.
[   62.092418][ T4304] loop1: detected capacity change from 0 to 512
[   62.117157][ T4304] EXT4-fs: Mount option(s) incompatible with ext2
[   62.155296][ T4300] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.215320][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.239'.
[   62.247788][ T4305] bridge2: entered promiscuous mode
[   62.263393][ T4305] bond1: (slave bridge2): making interface the new active one
[   62.273189][ T4305] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   62.306023][    C1] net_ratelimit: 23580 callbacks suppressed
[   62.306046][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.324363][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   62.336853][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.349038][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.361185][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.373372][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   62.385911][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.398091][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.410361][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.411652][ T4312] netlink: 168 bytes leftover after parsing attributes in process `syz.1.240'.
[   62.422830][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   62.468563][ T4300] macvlan2: entered promiscuous mode
[   62.475782][ T4300] bond1: entered promiscuous mode
[   62.495103][ T4300] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   62.531870][ T4300] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   62.623925][ T4300] bond1: left promiscuous mode
[   62.960781][ T4337] loop2: detected capacity change from 0 to 128
[   63.265421][ T4351] netlink: 'syz.5.252': attribute type 1 has an invalid length.
[   63.322505][ T4355] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   63.330468][ T4355] FAT-fs (loop2): Filesystem has been set read-only
[   63.337189][ T4355] bio_check_eod: 21 callbacks suppressed
[   63.337218][ T4355] syz.2.248: attempt to access beyond end of device
[   63.337218][ T4355] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[   63.356752][ T4355] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   63.364686][ T4355] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   63.375061][ T4355] syz.2.248: attempt to access beyond end of device
[   63.375061][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.388982][ T4355] syz.2.248: attempt to access beyond end of device
[   63.388982][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.402822][ T4355] syz.2.248: attempt to access beyond end of device
[   63.402822][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.416707][ T4355] syz.2.248: attempt to access beyond end of device
[   63.416707][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.430531][ T4355] syz.2.248: attempt to access beyond end of device
[   63.430531][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.444569][ T4355] syz.2.248: attempt to access beyond end of device
[   63.444569][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.458489][ T4355] syz.2.248: attempt to access beyond end of device
[   63.458489][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.472380][ T4355] syz.2.248: attempt to access beyond end of device
[   63.472380][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   63.486299][ T4355] syz.2.248: attempt to access beyond end of device
[   63.486299][ T4355] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   64.621105][ T4360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.254'.
[   64.809731][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'.
[   64.868320][ T4374] loop5: detected capacity change from 0 to 512
[   64.987260][ T4374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.003463][ T4374] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.160514][ T3840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.272599][ T4396] loop2: detected capacity change from 0 to 256
[   65.311801][ T4402] uprobe: syz.0.262:4402 failed to unregister, leaking uprobe
[   65.400423][ T3323] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   65.420141][ T4398] uprobe: syz.0.262:4398 failed to unregister, leaking uprobe
[   65.448848][ T3323] FAT-fs (loop2): Filesystem has been set read-only
[   65.472859][ T3323] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   65.497793][ T4406] loop1: detected capacity change from 0 to 8192
[   65.560808][   T28] kauditd_printk_skb: 15 callbacks suppressed
[   65.560826][   T28] audit: type=1400 audit(1772804102.653:326): avc:  denied  { allowed } for  pid=4405 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   65.711655][   T28] audit: type=1400 audit(1772804102.783:327): avc:  denied  { create } for  pid=4420 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   65.747571][   T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.840576][ T4416] loop5: detected capacity change from 0 to 8192
[   65.859417][   T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.972824][ T4416]  loop5: p1 < > p2 p4 < p5 >
[   66.001111][ T4411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.259'.
[   66.019516][   T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.078386][ T4416] loop5: partition table partially beyond EOD, truncated
[   66.169349][ T4416] loop5: p1 start 134217728 is beyond EOD, truncated
[   66.212352][   T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.230211][ T4416] loop5: p2 size 591360 extends beyond EOD, truncated
[   66.332432][ T4416] loop5: p5 size 591360 extends beyond EOD, truncated
[   66.406474][ T3001]  loop5: p1 < > p2 p4 < p5 >
[   66.433898][ T3001] loop5: partition table partially beyond EOD, truncated
[   66.472046][ T3001] loop5: p1 start 134217728 is beyond EOD, truncated
[   66.521795][ T3001] loop5: p2 size 591360 extends beyond EOD, truncated
[   66.566301][ T3001] loop5: p5 size 591360 extends beyond EOD, truncated
[   67.316016][    C1] net_ratelimit: 21301 callbacks suppressed
[   67.316040][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   67.321672][   T50] bridge_slave_1: left allmulticast mode
[   67.323042][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.351910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.364237][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.377260][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   67.378380][   T50] bridge_slave_1: left promiscuous mode
[   67.390163][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.407571][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   67.419982][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.432124][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.444355][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.456334][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.505527][   T50] bridge_slave_0: left allmulticast mode
[   67.531664][   T50] bridge_slave_0: left promiscuous mode
[   67.566112][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.104118][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.132119][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.157657][   T50] bond0 (unregistering): Released all slaves
[   68.272089][   T50] hsr_slave_0: left promiscuous mode
[   68.299136][   T50] hsr_slave_1: left promiscuous mode
[   68.317686][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.351828][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.380463][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.399336][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.439250][   T50] veth1_macvtap: left promiscuous mode
[   68.456149][   T50] veth0_macvtap: left promiscuous mode
[   68.481120][   T50] veth1_vlan: left promiscuous mode
[   68.499649][   T50] veth0_vlan: left promiscuous mode
[   68.754422][   T28] audit: type=1326 audit(1772804105.843:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[   68.840107][   T50] team0 (unregistering): Port device team_slave_1 removed
[   68.876012][   T28] audit: type=1326 audit(1772804105.873:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[   68.876410][   T50] team0 (unregistering): Port device team_slave_0 removed
[   69.036459][   T28] audit: type=1326 audit(1772804105.873:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[   69.187570][   T28] audit: type=1326 audit(1772804105.873:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[   69.328690][ T4526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'.
[   69.418223][   T28] audit: type=1326 audit(1772804105.873:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[   69.497967][   T28] audit: type=1326 audit(1772804105.883:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[   69.554439][   T28] audit: type=1400 audit(1772804105.883:334): avc:  denied  { execute } for  pid=4504 comm="syz.5.281" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   69.594952][   T28] audit: type=1326 audit(1772804105.883:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[   69.624086][ T4526] ip6gre1: entered promiscuous mode
[   69.629765][ T4526] ip6gre1: entered allmulticast mode
[   69.648339][ T4536] netlink: 'syz.0.285': attribute type 6 has an invalid length.
[   69.663280][ T4536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.285'.
[   69.977469][ T4451] chnl_net:caif_netlink_parms(): no params data found
[   70.104330][ T4560] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.371092][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.388569][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.395831][ T4451] bridge_slave_0: entered allmulticast mode
[   70.403182][ T4451] bridge_slave_0: entered promiscuous mode
[   70.410283][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.417614][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.424900][ T4451] bridge_slave_1: entered allmulticast mode
[   70.431779][ T4451] bridge_slave_1: entered promiscuous mode
[   70.450849][ T4451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.511917][ T4451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.627493][ T4451] team0: Port device team_slave_0 added
[   70.663352][ T4451] team0: Port device team_slave_1 added
[   70.747126][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.773510][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.830379][ T4451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.854928][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.894735][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.000593][ T4451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.065924][ T4595] netlink: 24 bytes leftover after parsing attributes in process `syz.5.294'.
[   71.075967][ T4451] hsr_slave_0: entered promiscuous mode
[   71.092981][ T4451] hsr_slave_1: entered promiscuous mode
[   71.102907][ T4451] debugfs: 'hsr0' already exists in 'hsr'
[   71.116017][ T4451] Cannot create hsr debugfs directory
[   71.194323][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.294'.
[   71.411703][ T4610] loop1: detected capacity change from 0 to 128
[   71.418353][ T4611] loop5: detected capacity change from 0 to 512
[   71.455706][ T4611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.490311][ T4611] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.598376][   T28] kauditd_printk_skb: 19 callbacks suppressed
[   71.598394][   T28] audit: type=1400 audit(1772804108.693:355): avc:  denied  { ioctl } for  pid=4608 comm="syz.1.300" path="socket:[8728]" dev="sockfs" ino=8728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.629603][ T4624] bio_check_eod: 24438 callbacks suppressed
[   71.629672][ T4624] syz.1.300: attempt to access beyond end of device
[   71.629672][ T4624] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[   71.661143][ T4624] syz.1.300: attempt to access beyond end of device
[   71.661143][ T4624] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   71.675385][ T4624] syz.1.300: attempt to access beyond end of device
[   71.675385][ T4624] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[   71.767029][ T3840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.786181][ T4624] syz.1.300: attempt to access beyond end of device
[   71.786181][ T4624] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[   71.829300][   T28] audit: type=1400 audit(1772804108.923:356): avc:  denied  { getopt } for  pid=4590 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   71.859495][ T4624] syz.1.300: attempt to access beyond end of device
[   71.859495][ T4624] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[   71.918085][ T4624] syz.1.300: attempt to access beyond end of device
[   71.918085][ T4624] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[   71.949027][ T4624] syz.1.300: attempt to access beyond end of device
[   71.949027][ T4624] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[   71.968011][   T28] audit: type=1400 audit(1772804109.063:357): avc:  denied  { read } for  pid=4626 comm="syz.5.302" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   71.996977][ T4629] netlink: 'syz.4.303': attribute type 15 has an invalid length.
[   72.021473][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'.
[   72.076989][ T4624] syz.1.300: attempt to access beyond end of device
[   72.076989][ T4624] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[   72.100193][   T28] audit: type=1400 audit(1772804109.093:358): avc:  denied  { open } for  pid=4626 comm="syz.5.302" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   72.142180][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'.
[   72.149381][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.158147][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.165745][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.172957][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.191241][ T4624] syz.1.300: attempt to access beyond end of device
[   72.191241][ T4624] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[   72.223306][ T4624] syz.1.300: attempt to access beyond end of device
[   72.223306][ T4624] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[   72.286842][ T4451] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.307020][ T4451] 8021q: adding VLAN 0 to HW filter on device team0
[   72.325974][    C1] net_ratelimit: 24049 callbacks suppressed
[   72.325992][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.344069][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   72.356880][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   72.369390][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.381779][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.393972][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.406474][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.418936][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.431001][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.443119][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   72.476396][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'.
[   72.565025][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.572190][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.629421][ T1730] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.636567][ T1730] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.850811][ T4451] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.161375][ T4451] veth0_vlan: entered promiscuous mode
[   73.181067][ T4451] veth1_vlan: entered promiscuous mode
[   73.219126][ T4451] veth0_macvtap: entered promiscuous mode
[   73.235524][ T4451] veth1_macvtap: entered promiscuous mode
[   73.270626][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.302972][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.422780][ T4670] netlink: 'syz.0.310': attribute type 11 has an invalid length.
[   73.778508][   T28] audit: type=1400 audit(1772804110.873:359): avc:  denied  { mounton } for  pid=4683 comm="syz.4.312" path="/85/bus" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   73.985960][   T28] audit: type=1400 audit(1772804111.073:360): avc:  denied  { setopt } for  pid=4694 comm="syz.4.315" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   74.020768][ T4695] xt_hashlimit: size too large, truncated to 1048576
[   75.153777][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.161112][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.410331][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.479310][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.703484][ T4721] geneve2: entered promiscuous mode
[   77.134309][ T4759] netlink: 'syz.4.332': attribute type 11 has an invalid length.
[   77.160667][   T28] audit: type=1400 audit(1772804114.253:361): avc:  denied  { mount } for  pid=4760 comm="syz.1.333" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   77.336082][    C1] net_ratelimit: 22569 callbacks suppressed
[   77.336123][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.354362][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.366939][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.379195][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.391490][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.403627][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.415798][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   77.428327][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:50:19:b8:ab:b7, vlan:0)
[   77.441220][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.453589][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   78.294016][ T4793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.313640][ T4793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.351441][ T4793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.358830][ T4793] IPv6: NLM_F_CREATE should be set when creating new route
[   79.045567][ T4793] bridge0: port 3(veth0_to_bridge) entered disabled state
[   79.052991][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.060483][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.173679][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.184619][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.258037][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.276409][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.296001][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.315139][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.464608][ T4820] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   80.173007][   T28] audit: type=1107 audit(1772804117.263:362): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   80.202388][   T28] audit: type=1400 audit(1772804117.293:363): avc:  denied  { ioctl } for  pid=4829 comm="syz.1.366" path="socket:[6541]" dev="sockfs" ino=6541 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   80.230499][ T4830] loop1: detected capacity change from 0 to 1024
[   80.280949][ T4830] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[   80.343569][ T4830] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31507!=20869)
[   80.373559][ T4830] EXT4-fs error (device loop1): __ext4_fill_super:5563: inode #2: comm syz.1.366: iget: special inode unallocated
[   80.419635][ T4830] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   80.425945][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   80.441552][    C0] EXT4-fs (loop1): initial error at time 1772804117: __ext4_fill_super:5563: inode 2
[   80.451092][    C0] EXT4-fs (loop1): last error at time 1772804117: __ext4_fill_super:5563: inode 2
[   80.461970][ T4830] EXT4-fs (loop1): get root inode failed
[   80.472064][ T4830] EXT4-fs (loop1): mount failed
[   81.005527][   T28] audit: type=1400 audit(1772804118.093:364): avc:  denied  { getopt } for  pid=4848 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   81.108432][ T4853] loop6: detected capacity change from 0 to 512
[   81.132813][ T4853] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.156418][ T4853] EXT4-fs (loop6): 1 truncate cleaned up
[   81.168285][ T4853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.228254][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.476633][ T4864] netlink: 156 bytes leftover after parsing attributes in process `syz.6.364'.
[   82.390055][ T4873] netlink: 172 bytes leftover after parsing attributes in process `syz.0.367'.
[   82.476558][   T28] audit: type=1400 audit(1772804119.563:365): avc:  denied  { ioctl } for  pid=4865 comm="syz.0.367" path="socket:[9388]" dev="sockfs" ino=9388 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   83.585905][   T28] audit: type=1400 audit(1772804120.673:366): avc:  denied  { mount } for  pid=4888 comm="syz.0.374" name="/" dev="ramfs" ino=6631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   84.110382][ T4882] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.371'.
[   84.555796][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'.
[   84.575924][   T28] audit: type=1400 audit(1772804121.663:367): avc:  denied  { create } for  pid=4923 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   85.611462][   T28] audit: type=1400 audit(1772804121.703:368): avc:  denied  { write } for  pid=4923 comm="syz.1.379" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   85.779711][ T4946] loop1: detected capacity change from 0 to 512
[   85.791174][ T4946] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   85.816226][ T4946] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[   86.890183][ T4966] syz_tun: entered allmulticast mode
[   86.901618][   T28] audit: type=1400 audit(1772804123.983:369): avc:  denied  { append } for  pid=4965 comm="syz.1.389" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   90.836431][ T5040] loop1: detected capacity change from 0 to 128
[   90.843339][ T5040] vfat: Unknown parameter 'utf8?0'
[   90.969309][ T5048] xt_bpf: check failed: parse error
[   91.220647][ T5060] loop6: detected capacity change from 0 to 256
[   91.252668][ T5060] FAT-fs (loop6): Directory bread(block 64) failed
[   91.259308][ T5060] FAT-fs (loop6): Directory bread(block 65) failed
[   91.265987][ T5060] FAT-fs (loop6): Directory bread(block 66) failed
[   91.272581][ T5060] FAT-fs (loop6): Directory bread(block 67) failed
[   91.279312][ T5060] FAT-fs (loop6): Directory bread(block 68) failed
[   91.286026][ T5060] FAT-fs (loop6): Directory bread(block 69) failed
[   91.292930][ T5060] FAT-fs (loop6): Directory bread(block 70) failed
[   91.299626][ T5060] FAT-fs (loop6): Directory bread(block 71) failed
[   91.306527][ T5060] FAT-fs (loop6): Directory bread(block 72) failed
[   91.313177][ T5060] FAT-fs (loop6): Directory bread(block 73) failed
[   91.329010][   T28] audit: type=1400 audit(1772804128.303:370): avc:  denied  { setopt } for  pid=5058 comm="syz.5.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.452794][ T5059] tipc: Failed to remove unknown binding: 66,0,0/0:439668954/439668955
[   91.726920][   T28] audit: type=1400 audit(1772804128.523:371): avc:  denied  { bind } for  pid=5058 comm="syz.5.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.757428][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.413'.
[   94.766348][   T28] audit: type=1400 audit(1772804131.853:372): avc:  denied  { connect } for  pid=5084 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   95.247377][ T5105] syzkaller0: entered promiscuous mode
[   95.276802][ T5105] syzkaller0: entered allmulticast mode
[   95.578001][ T5115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.660010][ T5115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.835041][ T5122] syzkaller0: entered promiscuous mode
[   95.840935][ T5122] syzkaller0: entered allmulticast mode
[   95.911261][ T5126] IPv6: NLM_F_CREATE should be specified when creating new route
[   96.208998][ T5141] loop1: detected capacity change from 0 to 512
[   96.402479][ T5145] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   98.672946][   T28] audit: type=1400 audit(1772804135.763:373): avc:  denied  { connect } for  pid=5156 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   98.873953][   T28] audit: type=1400 audit(1772804135.963:374): avc:  denied  { listen } for  pid=5176 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.894893][   T28] audit: type=1400 audit(1772804135.983:375): avc:  denied  { accept } for  pid=5176 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.975696][   T28] audit: type=1400 audit(1772804136.063:376): avc:  denied  { create } for  pid=5179 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   99.078521][   T28] audit: type=1400 audit(1772804136.173:377): avc:  denied  { create } for  pid=5179 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   99.104300][ T5180] ieee802154 phy0 wpan0: encryption failed: -22
[   99.142717][ T5185] netlink: 52 bytes leftover after parsing attributes in process `syz.6.440'.
[   99.150814][   T28] audit: type=1400 audit(1772804136.193:378): avc:  denied  { write } for  pid=5179 comm="syz.1.439" path="socket:[13532]" dev="sockfs" ino=13532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   99.184832][ T5187] process 'syz.1.441' launched '/dev/fd/5' with NULL argv: empty string added
[   99.187460][   T28] audit: type=1400 audit(1772804136.203:379): avc:  denied  { bind } for  pid=5179 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   99.259364][   T28] audit: type=1400 audit(1772804136.273:380): avc:  denied  { execute } for  pid=5186 comm="syz.1.441" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.282389][   T28] audit: type=1400 audit(1772804136.333:381): avc:  denied  { execute_no_trans } for  pid=5186 comm="syz.1.441" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.434518][ T5193] loop6: detected capacity change from 0 to 128
[  100.618751][ T5205] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  100.687611][ T5205] team0 (unregistering): Port device team_slave_0 removed
[  100.727224][ T5205] team0 (unregistering): Failed to send options change via netlink (err -105)
[  100.764999][ T5205] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  100.800080][ T5205] team0 (unregistering): Port device team_slave_1 removed
[  101.372103][ T5227] netlink: 'syz.5.455': attribute type 4 has an invalid length.
[  101.411387][ T5227] netlink: 'syz.5.455': attribute type 4 has an invalid length.
[  101.528002][   T28] audit: type=1400 audit(1772804138.623:382): avc:  denied  { getopt } for  pid=5231 comm="syz.6.457" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  101.836140][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'.
[  101.995024][ T5232] net_ratelimit: 7859 callbacks suppressed
[  101.995037][ T5232] Set syz1 is full, maxelem 65536 reached
[  102.686859][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'.
[  103.813507][ T5266] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  103.943212][ T5266] bond1: (slave lo): Enslaving as an active interface with an up link
[  104.001427][ T5266] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  104.382296][ T5278] syzkaller0: entered promiscuous mode
[  104.403978][ T5278] syzkaller0: entered allmulticast mode
[  104.617360][ T5288] syzkaller0: entered promiscuous mode
[  104.622955][ T5288] syzkaller0: entered allmulticast mode
[  104.848130][ T5249] loop6: detected capacity change from 0 to 8192
[  106.268061][ T5328] loop1: detected capacity change from 0 to 256
[  108.081865][ T5328] FAT-fs (loop1): Directory bread(block 64) failed
[  108.088512][ T5328] FAT-fs (loop1): Directory bread(block 65) failed
[  108.095068][ T5328] FAT-fs (loop1): Directory bread(block 66) failed
[  108.147253][ T5328] FAT-fs (loop1): Directory bread(block 67) failed
[  108.153866][ T5328] FAT-fs (loop1): Directory bread(block 68) failed
[  108.160463][ T5328] FAT-fs (loop1): Directory bread(block 69) failed
[  108.167117][ T5328] FAT-fs (loop1): Directory bread(block 70) failed
[  108.173730][ T5328] FAT-fs (loop1): Directory bread(block 71) failed
[  108.180393][ T5328] FAT-fs (loop1): Directory bread(block 72) failed
[  108.186977][ T5328] FAT-fs (loop1): Directory bread(block 73) failed
[  109.202520][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  109.202538][   T28] audit: type=1400 audit(1772804146.293:384): avc:  denied  { load_policy } for  pid=5337 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  109.279796][ T5340] loop1: detected capacity change from 0 to 512
[  109.318289][ T5338] SELinux:  policydb version 0 does not match my version range 15-35
[  109.356087][ T5338] SELinux: failed to load policy
[  109.407734][ T5340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.432903][ T5340] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.612114][ T5315] syz.4.478 (5315) used greatest stack depth: 6832 bytes left
[  109.640040][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'.
[  109.709716][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'.
[  110.410642][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.836646][ T5365] netlink: 124 bytes leftover after parsing attributes in process `syz.5.490'.
[  114.160770][ T5420] syzkaller0: entered promiscuous mode
[  114.173562][ T5420] syzkaller0: entered allmulticast mode
[  114.400721][ T5437] netlink: 124 bytes leftover after parsing attributes in process `syz.5.506'.
[  114.612529][ T5447] loop6: detected capacity change from 0 to 2048
[  115.517480][ T5449] loop1: detected capacity change from 0 to 256
[  115.538976][   T28] audit: type=1400 audit(1772804152.633:385): avc:  denied  { read } for  pid=5450 comm="syz.0.511" name="file0" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  115.849738][ T5447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.100720][ T5449] FAT-fs (loop1): Directory bread(block 64) failed
[  117.107387][ T5449] FAT-fs (loop1): Directory bread(block 65) failed
[  117.113953][ T5449] FAT-fs (loop1): Directory bread(block 66) failed
[  117.120691][ T5449] FAT-fs (loop1): Directory bread(block 67) failed
[  117.127329][ T5449] FAT-fs (loop1): Directory bread(block 68) failed
[  117.133981][ T5449] FAT-fs (loop1): Directory bread(block 69) failed
[  117.140561][ T5449] FAT-fs (loop1): Directory bread(block 70) failed
[  117.147134][ T5449] FAT-fs (loop1): Directory bread(block 71) failed
[  117.153760][ T5449] FAT-fs (loop1): Directory bread(block 72) failed
[  117.161610][ T5449] FAT-fs (loop1): Directory bread(block 73) failed
[  117.170860][   T28] audit: type=1400 audit(1772804153.613:386): avc:  denied  { read } for  pid=5445 comm="syz.6.510" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.227608][ T5447] syz.6.510 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  117.265899][   T28] audit: type=1400 audit(1772804153.613:387): avc:  denied  { open } for  pid=5445 comm="syz.6.510" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.317980][   T28] audit: type=1400 audit(1772804154.323:388): avc:  denied  { ioctl } for  pid=5445 comm="syz.6.510" path="socket:[14649]" dev="sockfs" ino=14649 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  117.426166][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'.
[  117.457408][   T28] audit: type=1400 audit(1772804154.323:389): avc:  denied  { ioctl } for  pid=5445 comm="syz.6.510" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.572176][ T5481] syzkaller0: entered promiscuous mode
[  117.577942][ T5481] syzkaller0: entered allmulticast mode
[  117.585501][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.517'.
[  117.604750][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.722214][ T5496] loop1: detected capacity change from 0 to 1024
[  117.750017][ T5496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.804220][ T5496] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.521: Allocating blocks 497-513 which overlap fs metadata
[  117.851894][ T5496] EXT4-fs (loop1): Remounting filesystem read-only
[  117.926092][ T5495] EXT4-fs (loop1): pa ffff888108272a10: logic 304, phys. 433, len 5
[  117.936197][ T5505] syzkaller0: entered promiscuous mode
[  117.941732][ T5505] syzkaller0: entered allmulticast mode
[  118.048873][ T5510] netlink: 124 bytes leftover after parsing attributes in process `syz.4.523'.
[  118.120494][ T5512] loop6: detected capacity change from 0 to 512
[  118.243513][ T5512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.370941][ T5512] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.603475][ T5521] SELinux:  policydb magic number 0x8 does not match expected magic number 0xf97cff8c
[  118.676835][ T5521] SELinux: failed to load policy
[  118.759806][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.957421][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.581922][ T5528] netlink: 124 bytes leftover after parsing attributes in process `syz.6.527'.
[  119.592949][ T5528] loop6: detected capacity change from 0 to 256
[  119.657249][ T5528] FAT-fs (loop6): Directory bread(block 64) failed
[  119.663848][ T5528] FAT-fs (loop6): Directory bread(block 65) failed
[  119.670483][ T5528] FAT-fs (loop6): Directory bread(block 66) failed
[  119.677244][ T5528] FAT-fs (loop6): Directory bread(block 67) failed
[  119.684019][ T5528] FAT-fs (loop6): Directory bread(block 68) failed
[  119.690646][ T5528] FAT-fs (loop6): Directory bread(block 69) failed
[  119.697398][ T5528] FAT-fs (loop6): Directory bread(block 70) failed
[  119.704004][ T5528] FAT-fs (loop6): Directory bread(block 71) failed
[  119.710867][ T5528] FAT-fs (loop6): Directory bread(block 72) failed
[  119.717494][ T5528] FAT-fs (loop6): Directory bread(block 73) failed
[  121.522472][ T5545] loop6: detected capacity change from 0 to 512
[  121.799355][ T5545] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ'
[  122.015462][ T5545] loop6: detected capacity change from 0 to 512
[  122.060884][ T5549] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  122.277937][ T5559] syzkaller0: entered promiscuous mode
[  122.283496][ T5559] syzkaller0: entered allmulticast mode
[  122.291193][ T5557] syzkaller0: entered promiscuous mode
[  122.296970][ T5557] syzkaller0: entered allmulticast mode
[  122.706132][ T5569] loop6: detected capacity change from 0 to 256
[  123.276194][ T5570] netlink: 124 bytes leftover after parsing attributes in process `syz.5.542'.
[  125.731341][ T5569] FAT-fs (loop6): Directory bread(block 64) failed
[  125.742307][ T5569] FAT-fs (loop6): Directory bread(block 65) failed
[  125.749209][ T5569] FAT-fs (loop6): Directory bread(block 66) failed
[  125.755995][ T5569] FAT-fs (loop6): Directory bread(block 67) failed
[  125.762732][ T5569] FAT-fs (loop6): Directory bread(block 68) failed
[  125.806680][ T5569] FAT-fs (loop6): Directory bread(block 69) failed
[  125.813291][ T5569] FAT-fs (loop6): Directory bread(block 70) failed
[  125.819951][ T5569] FAT-fs (loop6): Directory bread(block 71) failed
[  125.826581][ T5569] FAT-fs (loop6): Directory bread(block 72) failed
[  125.833109][ T5569] FAT-fs (loop6): Directory bread(block 73) failed
[  127.035119][ T5590] loop1: detected capacity change from 0 to 512
[  127.203793][ T5590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.253343][ T5590] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.450930][ T5590] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  127.496547][ T5609] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  128.198619][ T5621] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  128.263787][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.505570][   T28] audit: type=1400 audit(1772804165.583:390): avc:  denied  { write } for  pid=5631 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  128.901791][ T5646] loop1: detected capacity change from 0 to 2048
[  128.915979][ T5648] netlink: 124 bytes leftover after parsing attributes in process `syz.0.561'.
[  128.996838][ T5082]  loop1: p1 < > p4
[  129.066537][ T5082] loop1: p4 start 42180 is beyond EOD, truncated
[  130.174369][ T5646]  loop1: p1 < > p4
[  130.179475][ T5646] loop1: p4 start 42180 is beyond EOD, truncated
[  130.267046][   T28] audit: type=1400 audit(1772804167.353:391): avc:  denied  { ioctl } for  pid=5659 comm="syz.5.564" path="socket:[15082]" dev="sockfs" ino=15082 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  131.008364][ T5679] syzkaller0: entered promiscuous mode
[  131.014266][ T5679] syzkaller0: entered allmulticast mode
[  131.994412][ T5686] netlink: 68 bytes leftover after parsing attributes in process `syz.0.571'.
[  132.442660][   T28] audit: type=1400 audit(1772804169.413:392): avc:  denied  { read write } for  pid=5690 comm="syz.1.582" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  133.095971][ T5700] netlink: 124 bytes leftover after parsing attributes in process `syz.5.574'.
[  133.225838][   T28] audit: type=1400 audit(1772804169.413:393): avc:  denied  { open } for  pid=5690 comm="syz.1.582" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  133.407941][ T5692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  133.568908][ T5709] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[  133.616366][ T5709] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.635840][ T5714] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  133.660269][ T5716] bridge2: entered promiscuous mode
[  133.688208][ T5716] bond2: (slave bridge2): making interface the new active one
[  133.720652][ T5716] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  133.747474][ T5709] macvlan2: entered promiscuous mode
[  133.759970][ T5709] bond2: entered promiscuous mode
[  133.780120][ T5709] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  133.803812][ T5709] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  133.837553][ T5709] bond2: left promiscuous mode
[  135.172228][   T28] audit: type=1400 audit(1772804172.153:394): avc:  denied  { create } for  pid=5734 comm="syz.6.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  135.193751][ T5735] can0: slcan on ttyS3.
[  136.173225][   T28] audit: type=1400 audit(1772804172.263:395): avc:  denied  { ioctl } for  pid=5734 comm="syz.6.583" path="socket:[15174]" dev="sockfs" ino=15174 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  136.720684][   T28] audit: type=1400 audit(1772804173.803:396): avc:  denied  { setopt } for  pid=5744 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  136.740393][ T5735] can0 (unregistered): slcan off ttyS3.
[  136.875198][ T5750] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  137.341855][ T5789] mmap: syz.1.589 (5789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  137.666715][ T5801] loop6: detected capacity change from 0 to 256
[  137.855437][ T5801] FAT-fs (loop6): Directory bread(block 64) failed
[  137.862193][ T5801] FAT-fs (loop6): Directory bread(block 65) failed
[  137.869170][ T5801] FAT-fs (loop6): Directory bread(block 66) failed
[  137.875998][ T5801] FAT-fs (loop6): Directory bread(block 67) failed
[  137.882596][ T5801] FAT-fs (loop6): Directory bread(block 68) failed
[  137.889245][ T5801] FAT-fs (loop6): Directory bread(block 69) failed
[  137.896033][ T5801] FAT-fs (loop6): Directory bread(block 70) failed
[  137.902701][ T5801] FAT-fs (loop6): Directory bread(block 71) failed
[  137.909401][ T5801] FAT-fs (loop6): Directory bread(block 72) failed
[  137.916016][ T5801] FAT-fs (loop6): Directory bread(block 73) failed
[  139.473538][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'.
[  139.613340][ T5845] bridge_slave_0: invalid flags given to default FDB implementation
[  139.635787][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.603'.
[  139.915944][   T28] audit: type=1400 audit(1772804176.993:397): avc:  denied  { accept } for  pid=5830 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  140.133142][ T5863] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.716615][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'.
[  140.766854][   T28] audit: type=1400 audit(1772804177.853:398): avc:  denied  { block_suspend } for  pid=5867 comm="syz.5.608" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  140.786061][ T5874] macvtap1: entered promiscuous mode
[  140.816305][ T5874] bridge0: entered promiscuous mode
[  140.821680][ T5874] macvtap1: entered allmulticast mode
[  140.837581][ T5874] bridge0: entered allmulticast mode
[  140.962556][ T5881] loop6: detected capacity change from 0 to 256
[  141.023505][ T5881] FAT-fs (loop6): Directory bread(block 64) failed
[  141.030264][ T5881] FAT-fs (loop6): Directory bread(block 65) failed
[  141.036974][ T5881] FAT-fs (loop6): Directory bread(block 66) failed
[  141.043593][ T5881] FAT-fs (loop6): Directory bread(block 67) failed
[  141.050189][ T5881] FAT-fs (loop6): Directory bread(block 68) failed
[  141.056889][ T5881] FAT-fs (loop6): Directory bread(block 69) failed
[  141.063549][ T5881] FAT-fs (loop6): Directory bread(block 70) failed
[  141.070253][ T5881] FAT-fs (loop6): Directory bread(block 71) failed
[  141.076926][ T5881] FAT-fs (loop6): Directory bread(block 72) failed
[  141.083483][ T5881] FAT-fs (loop6): Directory bread(block 73) failed
[  141.135073][ T5880] netlink: 'syz.4.612': attribute type 1 has an invalid length.
[  141.191365][ T5888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.244198][ T5880] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.384553][ T5884] bond2: (slave gretap1): making interface the new active one
[  141.423315][ T5884] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  141.434222][ T5894] syzkaller0: entered promiscuous mode
[  141.450092][ T5894] syzkaller0: entered allmulticast mode
[  141.492879][ T5888] tipc: Resetting bearer <eth:syzkaller0>
[  141.574309][ T5887] tipc: Resetting bearer <eth:syzkaller0>
[  141.589453][ T5887] tipc: Disabling bearer <eth:syzkaller0>
[  141.602893][ T5900] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  142.505885][   T28] audit: type=1400 audit(1772804179.573:399): avc:  denied  { write } for  pid=5903 comm="syz.4.616" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  142.687058][ T5912] netlink: 'syz.5.618': attribute type 39 has an invalid length.
[  142.706354][   T28] audit: type=1400 audit(1772804179.793:400): avc:  denied  { connect } for  pid=5913 comm="syz.6.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  142.743209][ T5911] bridge_slave_0: left allmulticast mode
[  142.748965][ T5911] bridge_slave_0: left promiscuous mode
[  142.754776][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.793679][ T5911] bridge_slave_1: left allmulticast mode
[  142.809852][ T5911] bridge_slave_1: left promiscuous mode
[  142.845960][   T28] audit: type=1400 audit(1772804179.793:401): avc:  denied  { write } for  pid=5913 comm="syz.6.619" path="socket:[15347]" dev="sockfs" ino=15347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  142.861050][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.903280][ T5911] bond0: (slave bond_slave_0): Releasing backup interface
[  142.962959][ T5911] bond0: (slave bond_slave_1): Releasing backup interface
[  142.981399][ T5924] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  143.082033][ T5911] team0: Port device team_slave_0 removed
[  143.140234][ T5911] team0: Port device team_slave_1 removed
[  143.163568][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.192714][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.235800][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.275107][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.331790][ T5911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  143.469465][ T5912] hsr_slave_1 (unregistering): left promiscuous mode
[  143.509908][ T5928] syzkaller0: entered promiscuous mode
[  143.521133][ T5928] syzkaller0: entered allmulticast mode
[  143.733050][ T5946] syzkaller0: entered promiscuous mode
[  143.739611][ T5946] syzkaller0: entered allmulticast mode
[  144.146544][ T5964] loop1: detected capacity change from 0 to 256
[  144.247891][ T5964] FAT-fs (loop1): Directory bread(block 64) failed
[  144.254781][ T5964] FAT-fs (loop1): Directory bread(block 65) failed
[  144.261545][ T5964] FAT-fs (loop1): Directory bread(block 66) failed
[  144.268177][ T5964] FAT-fs (loop1): Directory bread(block 67) failed
[  144.274846][ T5964] FAT-fs (loop1): Directory bread(block 68) failed
[  144.281621][ T5964] FAT-fs (loop1): Directory bread(block 69) failed
[  144.288399][ T5964] FAT-fs (loop1): Directory bread(block 70) failed
[  144.295277][ T5964] FAT-fs (loop1): Directory bread(block 71) failed
[  144.302161][ T5964] FAT-fs (loop1): Directory bread(block 72) failed
[  144.308893][ T5964] FAT-fs (loop1): Directory bread(block 73) failed
[  145.205922][   T28] audit: type=1400 audit(1772804182.293:402): avc:  denied  { bind } for  pid=5973 comm="syz.6.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  146.189427][ T5982] netlink: 'syz.1.637': attribute type 4 has an invalid length.
[  147.475483][   T28] audit: type=1400 audit(1772804184.563:403): avc:  denied  { write } for  pid=5993 comm="syz.6.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  148.267526][ T5998] syzkaller0: entered promiscuous mode
[  148.273117][ T5998] syzkaller0: entered allmulticast mode
[  148.360576][ T6000] tipc: Started in network mode
[  148.365718][ T6000] tipc: Node identity a2455ac4e63a, cluster identity 4711
[  148.373138][ T6000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.380794][ T6000] syzkaller0: entered promiscuous mode
[  148.386509][ T6000] syzkaller0: entered allmulticast mode
[  148.395535][ T6000] tipc: Resetting bearer <eth:syzkaller0>
[  148.402827][ T5999] tipc: Resetting bearer <eth:syzkaller0>
[  148.410774][ T5999] tipc: Disabling bearer <eth:syzkaller0>
[  149.150360][ T6024] loop6: detected capacity change from 0 to 256
[  149.400405][ T6023] loop1: detected capacity change from 0 to 256
[  151.896171][ T6024] FAT-fs (loop6): Directory bread(block 64) failed
[  151.902780][ T6024] FAT-fs (loop6): Directory bread(block 65) failed
[  151.909440][ T6024] FAT-fs (loop6): Directory bread(block 66) failed
[  151.916026][ T6024] FAT-fs (loop6): Directory bread(block 67) failed
[  151.922576][ T6024] FAT-fs (loop6): Directory bread(block 68) failed
[  151.923991][ T6023] FAT-fs (loop1): Directory bread(block 64) failed
[  151.930237][ T6024] FAT-fs (loop6): Directory bread(block 69) failed
[  151.936935][ T6023] FAT-fs (loop1): Directory bread(block 65) failed
[  151.937091][ T6023] FAT-fs (loop1): Directory bread(block 66) failed
[  151.943500][ T6024] FAT-fs (loop6): Directory bread(block 70) failed
[  151.950096][ T6023] FAT-fs (loop1): Directory bread(block 67) failed
[  151.956713][ T6024] FAT-fs (loop6): Directory bread(block 71) failed
[  151.963367][ T6023] FAT-fs (loop1): Directory bread(block 68) failed
[  151.970036][ T6024] FAT-fs (loop6): Directory bread(block 72) failed
[  151.976488][ T6023] FAT-fs (loop1): Directory bread(block 69) failed
[  151.983001][ T6024] FAT-fs (loop6): Directory bread(block 73) failed
[  152.003464][ T6023] FAT-fs (loop1): Directory bread(block 70) failed
[  152.010012][ T6023] FAT-fs (loop1): Directory bread(block 71) failed
[  152.016616][ T6023] FAT-fs (loop1): Directory bread(block 72) failed
[  152.024011][ T6023] FAT-fs (loop1): Directory bread(block 73) failed
[  152.214524][   T28] audit: type=1400 audit(1772804189.303:404): avc:  denied  { mount } for  pid=6050 comm="syz.4.657" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  152.353255][ T6057] loop1: detected capacity change from 0 to 2048
[  152.402887][ T6057] Alternate GPT is invalid, using primary GPT.
[  152.411943][ T6057]  loop1: p2 p3 p7
[  152.431477][   T28] audit: type=1400 audit(1772804189.523:405): avc:  denied  { mounton } for  pid=6056 comm="syz.1.659" path="/dev/loop1p2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  152.610169][ T6063] netlink: 43 bytes leftover after parsing attributes in process `syz.0.660'.
[  152.656917][ T6066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.686213][ T6066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.860021][ T6073] netlink: 'syz.5.663': attribute type 13 has an invalid length.
[  153.859519][ T6100] syz_tun: entered allmulticast mode
[  153.878442][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.667'.
[  153.956369][ T6100] syz_tun (unregistering): left allmulticast mode
[  154.000377][ T6104] syzkaller0: entered promiscuous mode
[  154.026349][ T6104] syzkaller0: entered allmulticast mode
[  154.339628][ T6116] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.681439][ T6119] loop6: detected capacity change from 0 to 256
[  154.782752][ T6119] FAT-fs (loop6): Directory bread(block 64) failed
[  154.790043][ T6119] FAT-fs (loop6): Directory bread(block 65) failed
[  154.796691][ T6119] FAT-fs (loop6): Directory bread(block 66) failed
[  154.803237][ T6119] FAT-fs (loop6): Directory bread(block 67) failed
[  154.809955][ T6119] FAT-fs (loop6): Directory bread(block 68) failed
[  154.816565][ T6119] FAT-fs (loop6): Directory bread(block 69) failed
[  154.823165][ T6119] FAT-fs (loop6): Directory bread(block 70) failed
[  154.829789][ T6119] FAT-fs (loop6): Directory bread(block 71) failed
[  154.836439][ T6119] FAT-fs (loop6): Directory bread(block 72) failed
[  154.843214][ T6119] FAT-fs (loop6): Directory bread(block 73) failed
[  155.175306][ T4087] IPVS: starting estimator thread 0...
[  155.305959][ T6141] IPVS: using max 2304 ests per chain, 115200 per kthread
[  155.787816][   T28] audit: type=1400 audit(1772804192.883:406): avc:  denied  { create } for  pid=6137 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  155.854745][   T28] audit: type=1400 audit(1772804192.903:407): avc:  denied  { write } for  pid=6137 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  156.334232][   T28] audit: type=1400 audit(1772804193.423:408): avc:  denied  { shutdown } for  pid=6149 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  156.443909][   T28] audit: type=1400 audit(1772804193.463:409): avc:  denied  { read } for  pid=6149 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  157.259917][ T6172] netlink: 'syz.4.682': attribute type 4 has an invalid length.
[  157.648419][ T6183] loop6: detected capacity change from 0 to 256
[  157.655357][ T6183] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ'
[  158.696742][   T28] audit: type=1400 audit(1772804195.743:410): avc:  denied  { ioctl } for  pid=6197 comm="syz.1.689" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  159.396022][ T6208] lo: entered allmulticast mode
[  159.735100][ T6227] syzkaller0: entered promiscuous mode
[  159.740761][ T6227] syzkaller0: entered allmulticast mode
[  159.758885][   T28] audit: type=1400 audit(1772804196.853:411): avc:  denied  { remount } for  pid=6224 comm="syz.5.696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  159.908710][ T6231] loop6: detected capacity change from 0 to 1024
[  160.087137][ T6231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.318063][ T6247] loop1: detected capacity change from 0 to 256
[  162.423766][ T6247] FAT-fs (loop1): Directory bread(block 64) failed
[  162.430762][ T6247] FAT-fs (loop1): Directory bread(block 65) failed
[  162.456501][   T28] audit: type=1400 audit(1772804199.553:412): avc:  denied  { execute } for  pid=6248 comm="syz.5.700" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  162.483052][ T6247] FAT-fs (loop1): Directory bread(block 66) failed
[  162.489778][ T6247] FAT-fs (loop1): Directory bread(block 67) failed
[  162.496395][ T6247] FAT-fs (loop1): Directory bread(block 68) failed
[  162.502960][ T6247] FAT-fs (loop1): Directory bread(block 69) failed
[  162.509583][ T6247] FAT-fs (loop1): Directory bread(block 70) failed
[  162.516137][ T6247] FAT-fs (loop1): Directory bread(block 71) failed
[  162.522807][ T6247] FAT-fs (loop1): Directory bread(block 72) failed
[  162.529500][ T6247] FAT-fs (loop1): Directory bread(block 73) failed
[  166.210642][ T6262] netlink: 80 bytes leftover after parsing attributes in process `syz.0.702'.
[  166.390088][   T28] audit: type=1400 audit(1772804203.323:413): avc:  denied  { read write } for  pid=6230 comm="syz.6.697" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  166.559354][  T120] bio_check_eod: 59 callbacks suppressed
[  166.559371][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.559371][  T120] loop1: rw=1, sector=1192, nr_sectors = 576 limit=256
[  166.626672][   T28] audit: type=1400 audit(1772804203.323:414): avc:  denied  { open } for  pid=6230 comm="syz.6.697" path="/70/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  166.676598][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.718082][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.718082][  T120] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256
[  166.805378][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.805378][  T120] loop1: rw=1, sector=1960, nr_sectors = 2056 limit=256
[  166.872200][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.872200][  T120] loop1: rw=1, sector=4016, nr_sectors = 2248 limit=256
[  166.922403][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.922403][  T120] loop1: rw=1, sector=6264, nr_sectors = 2144 limit=256
[  166.944832][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.944832][  T120] loop1: rw=1, sector=8408, nr_sectors = 2256 limit=256
[  166.965948][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.965948][  T120] loop1: rw=1, sector=10664, nr_sectors = 2128 limit=256
[  166.987593][  T120] kworker/u8:5: attempt to access beyond end of device
[  166.987593][  T120] loop1: rw=1, sector=12792, nr_sectors = 2104 limit=256
[  167.034884][  T120] kworker/u8:5: attempt to access beyond end of device
[  167.034884][  T120] loop1: rw=1, sector=14896, nr_sectors = 8272 limit=256
[  167.054371][  T120] kworker/u8:5: attempt to access beyond end of device
[  167.054371][  T120] loop1: rw=1, sector=23168, nr_sectors = 1064 limit=256
[  167.152289][ T6275] netlink: 68 bytes leftover after parsing attributes in process `syz.5.706'.
[  167.302801][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.706'.
[  167.334897][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.706'.
[  167.733236][ T6291] loop1: detected capacity change from 0 to 512
[  167.742059][ T6291] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  167.777395][ T6291] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  167.797969][ T6291] EXT4-fs (loop1): 1 truncate cleaned up
[  167.810345][ T6291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.847048][   T28] audit: type=1400 audit(1772804204.943:415): avc:  denied  { ioctl } for  pid=6290 comm="syz.1.712" path="socket:[18077]" dev="sockfs" ino=18077 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  167.904898][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.184696][ T6314] loop6: detected capacity change from 0 to 256
[  168.246701][ T6314] FAT-fs (loop6): Directory bread(block 64) failed
[  168.253432][ T6314] FAT-fs (loop6): Directory bread(block 65) failed
[  168.260259][ T6314] FAT-fs (loop6): Directory bread(block 66) failed
[  168.266906][ T6314] FAT-fs (loop6): Directory bread(block 67) failed
[  168.273726][ T6314] FAT-fs (loop6): Directory bread(block 68) failed
[  168.280441][ T6314] FAT-fs (loop6): Directory bread(block 69) failed
[  168.287032][ T6314] FAT-fs (loop6): Directory bread(block 70) failed
[  168.293704][ T6314] FAT-fs (loop6): Directory bread(block 71) failed
[  168.300520][ T6314] FAT-fs (loop6): Directory bread(block 72) failed
[  168.307141][ T6314] FAT-fs (loop6): Directory bread(block 73) failed
[  170.247120][ T6326] loop1: detected capacity change from 0 to 1024
[  170.260456][ T6326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.427290][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.494428][ T6347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.501355][ T6347] syzkaller0: entered promiscuous mode
[  170.507230][ T6347] syzkaller0: entered allmulticast mode
[  170.515343][ T6347] tipc: Resetting bearer <eth:syzkaller0>
[  170.629798][ T6346] tipc: Resetting bearer <eth:syzkaller0>
[  173.036379][   T28] audit: type=1326 audit(1772804210.123:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.106368][ T6346] tipc: Disabling bearer <eth:syzkaller0>
[  173.156074][   T28] audit: type=1326 audit(1772804210.123:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.185739][   T28] audit: type=1326 audit(1772804210.123:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.384957][ T4087] tipc: Node number set to 994903107
[  173.396846][   T28] audit: type=1326 audit(1772804210.123:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.420896][   T28] audit: type=1326 audit(1772804210.123:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.446165][ T6354] tipc: Failed to remove unknown binding: 66,0,0/0:936058059/936058060
[  173.454442][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.724'.
[  173.463689][ T6354] tipc: Failed to remove unknown binding: 66,0,0/0:936058059/936058060
[  173.464307][   T28] audit: type=1326 audit(1772804210.123:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.509052][   T28] audit: type=1326 audit(1772804210.243:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.533697][ T6356] bridge1: port 1(veth3) entered blocking state
[  173.548806][ T6356] bridge1: port 1(veth3) entered disabled state
[  173.562567][ T6356] veth3: entered allmulticast mode
[  173.670403][   T28] audit: type=1326 audit(1772804210.243:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  173.694881][ T6356] veth3: entered promiscuous mode
[  173.705424][ T6358] bridge1: port 2(veth0_to_bond) entered blocking state
[  173.728093][ T6358] bridge1: port 2(veth0_to_bond) entered disabled state
[  173.762731][ T6358] veth0_to_bond: entered allmulticast mode
[  173.788147][ T6358] veth0_to_bond: entered promiscuous mode
[  173.893112][ T6365] vlan2: entered allmulticast mode
[  173.900883][ T6365] ip6gretap0: entered allmulticast mode
[  173.936995][ T6365] bridge1: port 3(vlan2) entered blocking state
[  173.966136][ T6365] bridge1: port 3(vlan2) entered disabled state
[  173.991685][ T6365] vlan2: entered promiscuous mode
[  174.011394][ T6365] ip6gretap0: entered promiscuous mode
[  174.304651][   T28] audit: type=1400 audit(1772804211.393:424): avc:  denied  { create } for  pid=6373 comm="syz.6.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  174.709201][   T28] audit: type=1400 audit(1772804211.803:425): avc:  denied  { write } for  pid=6378 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  175.000357][ T6387] loop1: detected capacity change from 0 to 256
[  175.911479][ T6388] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  175.969669][ T6387] FAT-fs (loop1): Directory bread(block 64) failed
[  175.976704][ T6387] FAT-fs (loop1): Directory bread(block 65) failed
[  175.983652][ T6387] FAT-fs (loop1): Directory bread(block 66) failed
[  175.990399][ T6387] FAT-fs (loop1): Directory bread(block 67) failed
[  175.997674][ T6387] FAT-fs (loop1): Directory bread(block 68) failed
[  176.004498][ T6387] FAT-fs (loop1): Directory bread(block 69) failed
[  176.011328][ T6387] FAT-fs (loop1): Directory bread(block 70) failed
[  176.018063][ T6387] FAT-fs (loop1): Directory bread(block 71) failed
[  176.024692][ T6387] FAT-fs (loop1): Directory bread(block 72) failed
[  176.031511][ T6387] FAT-fs (loop1): Directory bread(block 73) failed
[  176.915011][ T6398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6398 comm=syz.4.739
[  177.443361][   T55] bio_check_eod: 437 callbacks suppressed
[  177.443377][   T55] kworker/u8:4: attempt to access beyond end of device
[  177.443377][   T55] loop1: rw=1, sector=1192, nr_sectors = 576 limit=256
[  177.524430][   T55] kworker/u8:4: attempt to access beyond end of device
[  177.524430][   T55] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256
[  177.687134][   T55] kworker/u8:4: attempt to access beyond end of device
[  177.687134][   T55] loop1: rw=1, sector=1960, nr_sectors = 4136 limit=256
[  177.941628][   T55] kworker/u8:4: attempt to access beyond end of device
[  177.941628][   T55] loop1: rw=1, sector=6096, nr_sectors = 4112 limit=256
[  177.985500][ T6427] loop6: detected capacity change from 0 to 4096
[  178.017046][ T6427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.048280][   T55] kworker/u8:4: attempt to access beyond end of device
[  178.048280][   T55] loop1: rw=1, sector=10208, nr_sectors = 6856 limit=256
[  178.062591][   T28] kauditd_printk_skb: 154 callbacks suppressed
[  178.062620][   T28] audit: type=1326 audit(1772804215.143:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.115726][   T28] audit: type=1326 audit(1772804215.143:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.140635][   T28] audit: type=1326 audit(1772804215.143:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.164318][   T28] audit: type=1326 audit(1772804215.143:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.223137][   T55] kworker/u8:4: attempt to access beyond end of device
[  178.223137][   T55] loop1: rw=1, sector=17064, nr_sectors = 8896 limit=256
[  178.241499][   T55] kworker/u8:4: attempt to access beyond end of device
[  178.241499][   T55] loop1: rw=1, sector=25992, nr_sectors = 96 limit=256
[  178.247000][   T28] audit: type=1326 audit(1772804215.143:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.261315][   T55] kworker/u8:4: attempt to access beyond end of device
[  178.261315][   T55] loop1: rw=1, sector=26120, nr_sectors = 1120 limit=256
[  178.360486][   T28] audit: type=1326 audit(1772804215.163:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.370167][   T55] kworker/u8:4: attempt to access beyond end of device
[  178.370167][   T55] loop1: rw=1, sector=27272, nr_sectors = 384 limit=256
[  178.429191][   T55] kworker/u8:4: attempt to access beyond end of device
[  178.429191][   T55] loop1: rw=1, sector=27688, nr_sectors = 1472 limit=256
[  178.465394][   T28] audit: type=1326 audit(1772804215.163:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.496176][ T6416] delete_channel: no stack
[  178.524997][   T28] audit: type=1326 audit(1772804215.163:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.568807][   T28] audit: type=1326 audit(1772804215.163:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.633942][   T28] audit: type=1326 audit(1772804215.163:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe8d3a6cfce code=0x7ffc0000
[  178.804569][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.157877][ T6462] loop1: detected capacity change from 0 to 4096
[  179.214043][ T6462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.734596][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.500259][ T6483] loop1: detected capacity change from 0 to 256
[  181.794265][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.756'.
[  182.769765][ T6489] bridge1: port 1(veth3) entered blocking state
[  182.783769][ T6489] bridge1: port 1(veth3) entered disabled state
[  182.820730][ T6489] veth3: entered allmulticast mode
[  183.229449][ T6493] loop6: detected capacity change from 0 to 1024
[  183.236899][   T28] kauditd_printk_skb: 33 callbacks suppressed
[  183.236916][   T28] audit: type=1326 audit(1772804220.323:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.266892][ T6489] veth3: entered promiscuous mode
[  183.283249][ T6493] EXT4-fs: Ignoring removed nobh option
[  183.290421][ T6483] FAT-fs (loop1): Directory bread(block 64) failed
[  183.297070][ T6483] FAT-fs (loop1): Directory bread(block 65) failed
[  183.298058][ T6493] EXT4-fs: Ignoring removed nomblk_io_submit option
[  183.303630][ T6483] FAT-fs (loop1): Directory bread(block 66) failed
[  183.303654][ T6483] FAT-fs (loop1): Directory bread(block 67) failed
[  183.303682][ T6483] FAT-fs (loop1): Directory bread(block 68) failed
[  183.303704][ T6483] FAT-fs (loop1): Directory bread(block 69) failed
[  183.303731][ T6483] FAT-fs (loop1): Directory bread(block 70) failed
[  183.303778][ T6483] FAT-fs (loop1): Directory bread(block 71) failed
[  183.303807][ T6483] FAT-fs (loop1): Directory bread(block 72) failed
[  183.303828][ T6483] FAT-fs (loop1): Directory bread(block 73) failed
[  183.379019][ T6496] vlan0: entered allmulticast mode
[  183.390161][ T6496] ip6gretap0: entered allmulticast mode
[  183.400583][   T28] audit: type=1326 audit(1772804220.323:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.406447][ T6496] bridge1: port 2(vlan0) entered blocking state
[  183.424964][   T28] audit: type=1326 audit(1772804220.333:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.491599][ T6496] bridge1: port 2(vlan0) entered disabled state
[  183.494364][   T28] audit: type=1326 audit(1772804220.333:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.512506][ T6496] vlan0: entered promiscuous mode
[  183.551869][   T28] audit: type=1326 audit(1772804220.333:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.620385][   T28] audit: type=1326 audit(1772804220.363:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.644187][ T6493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.657640][ T6496] ip6gretap0: entered promiscuous mode
[  183.682893][   T28] audit: type=1326 audit(1772804220.363:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.766799][   T28] audit: type=1326 audit(1772804220.363:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  183.799077][ T6512] loop1: detected capacity change from 0 to 256
[  183.961922][ T6512] FAT-fs (loop1): Directory bread(block 64) failed
[  183.968770][ T6512] FAT-fs (loop1): Directory bread(block 65) failed
[  183.975509][ T6512] FAT-fs (loop1): Directory bread(block 66) failed
[  183.982346][ T6512] FAT-fs (loop1): Directory bread(block 67) failed
[  183.989148][ T6512] FAT-fs (loop1): Directory bread(block 68) failed
[  183.995889][ T6512] FAT-fs (loop1): Directory bread(block 69) failed
[  184.002760][ T6512] FAT-fs (loop1): Directory bread(block 70) failed
[  184.009940][ T6512] FAT-fs (loop1): Directory bread(block 71) failed
[  184.016713][ T6512] FAT-fs (loop1): Directory bread(block 72) failed
[  184.023291][ T6512] FAT-fs (loop1): Directory bread(block 73) failed
[  184.148397][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.549144][   T28] audit: type=1326 audit(1772804220.363:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  184.729091][ T6522] netlink: 68 bytes leftover after parsing attributes in process `syz.0.763'.
[  184.739106][   T28] audit: type=1326 audit(1772804220.373:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d3aac799 code=0x7ffc0000
[  184.946662][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.762'.
[  184.956878][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.762'.
[  184.967097][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.763'.
[  184.976150][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.763'.
[  185.674420][ T6542] tipc: Failed to remove unknown binding: 66,0,0/994903107:1891021533/1891021534
[  186.019068][ T6550] syzkaller0: entered promiscuous mode
[  186.059046][ T6550] syzkaller0: entered allmulticast mode
[  186.104132][ T6551] loop6: detected capacity change from 0 to 4096
[  186.249533][ T6551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.488733][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.829347][ T6558] loop6: detected capacity change from 0 to 1024
[  187.382620][ T6558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  187.438436][ T6558] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.646808][ T6558] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.775: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.676246][ T6558] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  187.705875][ T6558] EXT4-fs (loop6): This should not happen!! Data will be lost
[  187.705875][ T6558] 
[  187.726113][ T6561] EXT4-fs error (device loop6): ext4_ext_remove_space:2954: inode #15: comm syz.6.775: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  187.883333][ T6558] netlink: 48 bytes leftover after parsing attributes in process `syz.6.775'.
[  187.892492][ T6561] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem
[  187.939083][ T6562] IPv6: NLM_F_REPLACE set, but no existing node found!
[  188.198215][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  188.256637][   T28] kauditd_printk_skb: 86 callbacks suppressed
[  188.256701][   T28] audit: type=1326 audit(1772804225.353:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  188.345146][   T28] audit: type=1326 audit(1772804225.393:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  188.383191][ T6578] tipc: Failed to remove unknown binding: 66,0,0/0:1955544024/1955544025
[  188.442121][   T28] audit: type=1326 audit(1772804225.403:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  188.566718][   T28] audit: type=1326 audit(1772804225.403:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff18189c502 code=0x7ffc0000
[  188.590297][   T28] audit: type=1326 audit(1772804225.403:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff18189c502 code=0x7ffc0000
[  188.613812][   T28] audit: type=1326 audit(1772804225.403:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  188.638793][   T28] audit: type=1326 audit(1772804225.403:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18189c799 code=0x7ffc0000
[  188.693169][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'.
[  188.713795][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'.
[  188.910179][ T6603] netlink: 68 bytes leftover after parsing attributes in process `syz.6.783'.
[  189.010598][ T6605] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  189.056041][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.6.783'.
[  189.178220][ T6605] SELinux: failed to load policy
[  189.245007][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.6.783'.
[  189.542231][   T28] audit: type=1400 audit(1772804226.633:726): avc:  denied  { create } for  pid=6649 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  190.604968][ T6690] syzkaller0: entered promiscuous mode
[  190.616054][ T6690] syzkaller0: entered allmulticast mode
[  191.572900][   T28] audit: type=1400 audit(1772804228.663:727): avc:  denied  { read } for  pid=6720 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  191.632107][ T6726] loop6: detected capacity change from 0 to 8192
[  191.661687][ T6730] loop1: detected capacity change from 0 to 1024
[  191.679644][ T6726]  loop6: p1 < > p2 p4 < p5 >
[  191.688472][ T6730] EXT4-fs: Ignoring removed bh option
[  191.697001][ T6726] loop6: partition table partially beyond EOD, truncated
[  191.715096][ T6730] EXT4-fs: Ignoring removed bh option
[  191.721409][ T6726] loop6: p1 start 134217728 is beyond EOD, truncated
[  191.735933][ T6726] loop6: p2 size 591360 extends beyond EOD, truncated
[  191.749605][ T6730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.763362][ T6726] loop6: p5 size 591360 extends beyond EOD, truncated
[  191.803460][ T6730] ext4: Unknown parameter ''
[  191.827340][   T28] audit: type=1400 audit(1772804228.923:728): avc:  denied  { create } for  pid=6720 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  193.095500][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.146082][ T6811] netlink: 'syz.0.804': attribute type 1 has an invalid length.
[  193.619409][ T6826] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  193.663880][ T6820] loop1: detected capacity change from 0 to 4096
[  193.760135][ T6820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.059265][ T6834] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  194.164647][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.735911][ T3397] tipc: Node number set to 1149196996
[  198.506772][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  198.506798][   T28] audit: type=1400 audit(1772804235.603:733): avc:  denied  { bind } for  pid=6978 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  198.973220][ T6989] IPv6: NLM_F_CREATE should be specified when creating new route
[  199.160088][ T6994] loop6: detected capacity change from 0 to 256
[  199.170040][ T6997] netlink: 'syz.1.834': attribute type 12 has an invalid length.
[  199.272534][ T6997] netlink: 172 bytes leftover after parsing attributes in process `syz.1.834'.
[  199.765347][ T6998] loop1: detected capacity change from 0 to 4096
[  199.838096][ T6998] EXT4-fs: Ignoring removed bh option
[  200.657937][ T6998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.885577][ T7012] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  200.898656][ T7012] team0 (unregistering): Port device team_slave_0 removed
[  202.013144][ T7012] team0 (unregistering): Port device team_slave_1 removed
[  202.024475][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.251485][ T7031] netlink: 52 bytes leftover after parsing attributes in process `syz.1.840'.
[  203.546457][ T7044] loop1: detected capacity change from 0 to 1024
[  203.619639][ T7044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  203.739783][ T7044] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.858249][ T7044] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.843: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.907683][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'.
[  203.928754][ T7044] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  204.020709][ T7044] EXT4-fs (loop1): This should not happen!! Data will be lost
[  204.020709][ T7044] 
[  204.062720][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.843'.
[  204.094556][ T7051] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.843: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  204.114617][ T7044] IPv6: NLM_F_REPLACE set, but no existing node found!
[  204.123382][ T7051] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem
[  204.166693][ T7072] ieee802154 phy0 wpan0: encryption failed: -22
[  204.189621][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  205.075536][ T7092] loop1: detected capacity change from 0 to 128
[  207.595540][ T7118] loop6: detected capacity change from 0 to 256
[  207.730924][ T7121] netlink: 2 bytes leftover after parsing attributes in process `syz.0.860'.
[  208.399532][ T7118] FAT-fs (loop6): Directory bread(block 64) failed
[  208.406248][ T7118] FAT-fs (loop6): Directory bread(block 65) failed
[  208.412933][ T7118] FAT-fs (loop6): Directory bread(block 66) failed
[  208.419592][ T7118] FAT-fs (loop6): Directory bread(block 67) failed
[  208.426264][ T7118] FAT-fs (loop6): Directory bread(block 68) failed
[  208.432886][ T7118] FAT-fs (loop6): Directory bread(block 69) failed
[  208.439545][ T7118] FAT-fs (loop6): Directory bread(block 70) failed
[  208.446266][ T7118] FAT-fs (loop6): Directory bread(block 71) failed
[  208.452870][ T7118] FAT-fs (loop6): Directory bread(block 72) failed
[  208.459515][ T7118] FAT-fs (loop6): Directory bread(block 73) failed
[  209.427329][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'.
[  209.529985][ T7110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.118812][ T7130] veth0: entered promiscuous mode
[  211.620882][ T7139] loop6: detected capacity change from 0 to 256
[  213.675271][ T7139] FAT-fs (loop6): Directory bread(block 64) failed
[  213.681967][ T7139] FAT-fs (loop6): Directory bread(block 65) failed
[  213.688806][ T7139] FAT-fs (loop6): Directory bread(block 66) failed
[  213.695421][ T7139] FAT-fs (loop6): Directory bread(block 67) failed
[  213.702013][ T7139] FAT-fs (loop6): Directory bread(block 68) failed
[  213.708701][ T7139] FAT-fs (loop6): Directory bread(block 69) failed
[  213.715308][ T7139] FAT-fs (loop6): Directory bread(block 70) failed
[  213.721963][ T7139] FAT-fs (loop6): Directory bread(block 71) failed
[  213.728573][ T7139] FAT-fs (loop6): Directory bread(block 72) failed
[  213.735151][ T7139] FAT-fs (loop6): Directory bread(block 73) failed
[  213.878708][ T7147] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  213.913671][ T7127] veth0: left promiscuous mode
[  214.439349][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.873'.
[  214.715642][ T7142] Set syz1 is full, maxelem 65536 reached
[  214.781286][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.876'.
[  216.083900][ T7184] netlink: 'syz.0.881': attribute type 12 has an invalid length.
[  216.094965][ T7178] syzkaller0: entered promiscuous mode
[  216.101319][ T7178] syzkaller0: entered allmulticast mode
[  216.111837][ T7184] netlink: 172 bytes leftover after parsing attributes in process `syz.0.881'.
[  216.301865][ T7190] tipc: Enabled bearer <udp:syz2>, priority 10
[  216.333264][ T7190] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  218.009786][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'.
[  218.534359][ T7209] loop1: detected capacity change from 0 to 256
[  218.581078][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.888'.
[  219.086196][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'.
[  220.012082][ T7237] tipc: Enabled bearer <udp:syz2>, priority 10
[  220.035027][ T7237] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  220.145913][ T7247] netlink: 256 bytes leftover after parsing attributes in process `syz.1.894'.
[  220.200190][ T7232] netlink: 2 bytes leftover after parsing attributes in process `syz.5.893'.
[  220.975301][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'.
[  220.999512][ T7261] loop1: detected capacity change from 0 to 512
[  221.050463][ T7261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.101788][ T7261] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.286793][ T7259] SELinux: failed to load policy
[  221.319392][ T3509] tipc: Node number set to 1813142139
[  221.326417][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.351018][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'.
[  222.788874][ T7254] Set syz1 is full, maxelem 65536 reached
[  223.385728][ T7295] loop6: detected capacity change from 0 to 256
[  223.839744][ T7312] GUP no longer grows the stack in syz.4.911 (7312): 200000006000-200000009000 (200000004000)
[  223.850227][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.4.911 Not tainted syzkaller #0 PREEMPT(full) 
[  223.850258][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  223.850278][ T7312] Call Trace:
[  223.850290][ T7312]  <TASK>
[  223.850298][ T7312]  __dump_stack+0x1d/0x30
[  223.850330][ T7312]  dump_stack_lvl+0x95/0xd0
[  223.850373][ T7312]  dump_stack+0x15/0x1b
[  223.850401][ T7312]  fixup_user_fault+0x4fb/0x550
[  223.850435][ T7312]  fault_in_user_writeable+0x5c/0xc0
[  223.850524][ T7312]  futex_lock_pi+0x60b/0x7e0
[  223.850558][ T7312]  ? __pfx_futex_wake_mark+0x10/0x10
[  223.850597][ T7312]  do_futex+0x21f/0x380
[  223.850702][ T7312]  __se_sys_futex+0x2f6/0x370
[  223.850773][ T7312]  ? xfd_validate_state+0x45/0xf0
[  223.850837][ T7312]  __x64_sys_futex+0x78/0x90
[  223.850875][ T7312]  x64_sys_call+0x24ab/0x3020
[  223.850977][ T7312]  do_syscall_64+0x12c/0x370
[  223.850999][ T7312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.851088][ T7312] RIP: 0033:0x7fe8d3aac799
[  223.851107][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.851140][ T7312] RSP: 002b:00007fe8d24c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  223.851166][ T7312] RAX: ffffffffffffffda RBX: 00007fe8d3d26180 RCX: 00007fe8d3aac799
[  223.851184][ T7312] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000
[  223.851200][ T7312] RBP: 00007fe8d3b42bd9 R08: 0000000000000000 R09: 0000000000000082
[  223.851215][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.851242][ T7312] R13: 00007fe8d3d26218 R14: 00007fe8d3d26180 R15: 00007ffe3aba0518
[  223.851267][ T7312]  </TASK>
[  224.607102][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'.
[  224.691071][ T7327] loop6: detected capacity change from 0 to 512
[  224.717325][ T7327] EXT4-fs: Ignoring removed orlov option
[  224.730318][ T7327] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  224.752288][ T7327] EXT4-fs (loop6): 1 orphan inode deleted
[  224.765937][ T7327] EXT4-fs (loop6): 1 truncate cleaned up
[  224.772086][ T7327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.824322][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.153873][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'.
[  226.288248][ T7334] Set syz1 is full, maxelem 65536 reached
[  226.360298][ T7355] loop6: detected capacity change from 0 to 128
[  226.428732][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'.
[  226.453966][ T7355] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  226.468037][ T7355] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.047579][ T7369] loop1: detected capacity change from 0 to 8192
[  227.092977][ T7369] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  227.236259][   T28] audit: type=1400 audit(1772804264.323:734): avc:  denied  { mounton } for  pid=7367 comm="syz.1.923" path="/175/file2/bus" dev="loop1" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  227.327423][ T4451] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.346186][ T7369] loop1: detected capacity change from 8192 to 0
[  227.369420][ T7368] Buffer I/O error on dev loop1, logical block 33, lost sync page write
[  227.549637][ T7368] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  227.563726][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'.
[  227.679567][ T7368] Buffer I/O error on dev loop1, logical block 65, lost sync page write
[  228.065400][ T7368] Buffer I/O error on dev loop1, logical block 85, lost async page write
[  228.366715][ T7368] Buffer I/O error on dev loop1, logical block 97, lost async page write
[  228.375662][ T7368] Buffer I/O error on dev loop1, logical block 98, lost async page write
[  229.047033][ T7368] Buffer I/O error on dev loop1, logical block 99, lost async page write
[  229.055737][ T7368] Buffer I/O error on dev loop1, logical block 100, lost async page write
[  229.074981][ T7368] Buffer I/O error on dev loop1, logical block 101, lost async page write
[  229.094496][ T7368] Buffer I/O error on dev loop1, logical block 102, lost async page write
[  229.125192][ T7388] loop6: detected capacity change from 0 to 1024
[  229.145392][ T3319] FAT-fs (loop1): Directory bread(block 65) failed
[  229.204206][ T7388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  229.213215][ T7388] System zones: 0-1, 3-36
[  229.225900][  T833] FAT-fs (loop1): unable to read inode block for updating (i_pos 1052)
[  229.234621][ T3319] FAT-fs (loop1): unable to read inode block for updating (i_pos 1052)
[  229.243104][ T3319] FAT-fs (loop1): unable to read inode block for updating (i_pos 1052)
[  229.356991][ T3319] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[  229.402262][ T7388] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.931: bad orphan inode 134217728
[  229.437537][ T3319] syz_tun (unregistering): left allmulticast mode
[  229.467788][ T7388] loop6: lost filesystem error report for type 5 error -117
[  229.515238][ T7388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.005908][  T833] veth0_to_bridge: left allmulticast mode
[  230.011835][  T833] veth0_to_bridge: left promiscuous mode
[  230.036915][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.073396][  T833] bridge0: port 3(veth0_to_bridge) entered disabled state
[  230.126980][  T833] bridge_slave_1: left allmulticast mode
[  230.177210][  T833] bridge_slave_1: left promiscuous mode
[  230.183190][  T833] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.240906][  T833] bridge_slave_0: left allmulticast mode
[  230.261029][  T833] bridge_slave_0: left promiscuous mode
[  230.277420][  T833] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.360282][  T833] bridge0 (unregistering): left allmulticast mode
[  230.392707][  T833] bridge0 (unregistering): left promiscuous mode
[  230.567813][  T833] bond2 (unregistering): (slave bridge2): Releasing active interface
[  230.628832][  T833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.642005][  T833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.657436][  T833] bond0 (unregistering): Released all slaves
[  230.674212][  T833] bond1 (unregistering): (slave lo): Releasing backup interface
[  230.691063][  T833] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  230.713627][  T833] bond1 (unregistering): Released all slaves
[  230.744719][  T833] bond2 (unregistering): Released all slaves
[  230.877486][  T833] tipc: Disabling bearer <udp:syz2>
[  230.905227][  T833] tipc: Disabling bearer <eth:veth0_macvtap>
[  230.937231][  T833] tipc: Left network mode
[  230.973816][  T833] hsr_slave_0: left promiscuous mode
[  231.004428][  T833] hsr_slave_1: left promiscuous mode
[  231.019358][  T833] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.197576][  T833] team0 (unregistering): Port device team_slave_1 removed
[  231.208827][  T833] team0 (unregistering): Port device team_slave_0 removed
[  231.408999][ T7423] chnl_net:caif_netlink_parms(): no params data found
[  231.675743][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.684662][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.693298][ T7423] bridge_slave_0: entered allmulticast mode
[  231.702066][ T7423] bridge_slave_0: entered promiscuous mode
[  231.710733][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.718926][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.727457][ T7423] bridge_slave_1: entered allmulticast mode
[  231.735965][ T7423] bridge_slave_1: entered promiscuous mode
[  231.759363][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.773649][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.808096][ T7423] team0: Port device team_slave_0 added
[  231.816214][ T7423] team0: Port device team_slave_1 added
[  231.851306][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.858716][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.895870][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.907705][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.914981][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.941229][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.991457][ T7423] hsr_slave_0: entered promiscuous mode
[  231.999697][ T7423] hsr_slave_1: entered promiscuous mode
[  232.008144][ T7423] debugfs: 'hsr0' already exists in 'hsr'
[  232.013967][ T7423] Cannot create hsr debugfs directory
[  232.127563][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.142051][ T7423] 8021q: adding VLAN 0 to HW filter on device team0
[  232.157314][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.164554][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.177629][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.184848][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.270090][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.382633][ T7423] veth0_vlan: entered promiscuous mode
[  232.391033][ T7423] veth1_vlan: entered promiscuous mode
[  232.407343][ T7423] veth0_macvtap: entered promiscuous mode
[  232.415113][ T7423] veth1_macvtap: entered promiscuous mode
[  232.427995][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.441670][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.465080][   T28] audit: type=1400 audit(1772804269.553:735): avc:  denied  { mounton } for  pid=7423 comm="syz-executor" path="/root/syzkaller.xJSVlo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  232.493684][   T28] audit: type=1400 audit(1772804269.593:736): avc:  denied  { mount } for  pid=7423 comm="syz-executor" name="/" dev="gadgetfs" ino=5123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  232.587005][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'.
[  233.756972][ T7550] loop1: detected capacity change from 0 to 128
[  234.847442][ T7550] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  235.454518][ T7550] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.536765][ T7563] netlink: 256 bytes leftover after parsing attributes in process `syz.6.949'.
[  236.207933][ T7423] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  237.877417][ T7585] syzkaller0: entered promiscuous mode
[  237.888231][ T7585] syzkaller0: entered allmulticast mode
[  238.504119][ T7587] loop6: detected capacity change from 0 to 1024
[  238.588626][ T7587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  238.603711][ T7587] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.622017][ T7587] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.955: lblock 3 mapped to illegal pblock 3 (length 1)
[  238.637626][ T7587] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  238.651053][ T7587] EXT4-fs (loop6): This should not happen!! Data will be lost
[  238.651053][ T7587] 
[  238.664296][ T7587] EXT4-fs error (device loop6): ext4_ext_remove_space:2954: inode #15: comm syz.6.955: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  238.684684][ T7587] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem
[  238.729826][ T7587] IPv6: NLM_F_REPLACE set, but no existing node found!
[  238.766995][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  238.837693][ T7602] batadv_slave_0: Caught tx_queue_len zero misconfig
[  241.205870][   T28] audit: type=1400 audit(1772804277.993:737): avc:  denied  { connect } for  pid=7620 comm="syz.6.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  241.360303][ T7627] loop1: detected capacity change from 0 to 512
[  241.540259][ T7627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.613388][ T7627] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.625894][   T28] audit: type=1400 audit(1772804278.713:738): avc:  denied  { lock } for  pid=7634 comm="syz.4.967" path="socket:[25650]" dev="sockfs" ino=25650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  242.386623][ T7423] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.885684][ T7672] loop6: detected capacity change from 0 to 512
[  244.953841][ T7672] EXT4-fs: Ignoring removed mblk_io_submit option
[  244.993509][ T7672] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  245.038814][ T7672] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.978: attempt to clear invalid blocks 2 len 1
[  245.065558][ T7672] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  245.075929][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  245.093300][    C1] EXT4-fs (loop6): initial error at time 1772804282: ext4_clear_blocks:876: inode 13
[  245.103870][    C1] EXT4-fs (loop6): last error at time 1772804282: ext4_clear_blocks:876: inode 13
[  245.147183][ T7672] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  245.165765][ T7672] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.978: invalid indirect mapped block 1819239214 (level 0)
[  245.206129][ T7672] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  245.209222][ T7672] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.978: invalid indirect mapped block 1819239214 (level 1)
[  245.234289][ T7672] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  245.238773][ T7672] EXT4-fs (loop6): 1 truncate cleaned up
[  245.258987][ T7672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.283565][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.979'.
[  245.310575][ T7672] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work
[  245.355859][   T28] audit: type=1400 audit(1772804282.443:739): avc:  denied  { quotaon } for  pid=7671 comm="syz.6.978" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  245.861709][   T28] audit: type=1400 audit(1772804282.953:740): avc:  denied  { listen } for  pid=7713 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  245.900919][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  245.937223][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  245.965639][   T28] audit: type=1400 audit(1772804282.983:741): avc:  denied  { setopt } for  pid=7713 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  246.336810][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.501870][ T7730] loop6: detected capacity change from 0 to 128
[  248.652581][ T7743] loop6: detected capacity change from 0 to 2048
[  248.817557][ T7743] Alternate GPT is invalid, using primary GPT.
[  248.825042][ T7743]  loop6: p2 p3 p7
[  249.890706][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.6.995'.
[  250.266048][   T28] audit: type=1400 audit(1772804287.353:742): avc:  denied  { write } for  pid=7773 comm="syz.4.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  251.536745][ T7816] loop1: detected capacity change from 0 to 128
[  252.357724][ T7827] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  252.370945][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'.
[  252.380014][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'.
[  253.359826][ T7820] loop1: detected capacity change from 0 to 8192
[  253.649908][ T7840] loop6: detected capacity change from 0 to 2048
[  253.681918][ T7840] EXT4-fs: Ignoring removed i_version option
[  253.724537][ T7844] netlink: 'syz.5.1010': attribute type 1 has an invalid length.
[  253.752606][ T7844] 8021q: adding VLAN 0 to HW filter on device bond1
[  253.779063][ T7844] bond1: (slave gretap1): making interface the new active one
[  253.787833][ T7844] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  253.836614][ T7840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.414163][ T7855] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  255.449759][ T6648] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 494 with error 28
[  255.536647][ T6648] EXT4-fs (loop6): This should not happen!! Data will be lost
[  255.536647][ T6648] 
[  255.645003][ T6648] EXT4-fs (loop6): Total free blocks count 0
[  255.699782][ T6648] EXT4-fs (loop6): Free/Dirty block details
[  255.741355][ T6648] EXT4-fs (loop6): free_blocks=2415919504
[  255.749623][ T6648] EXT4-fs (loop6): dirty_blocks=496
[  255.758216][ T6648] EXT4-fs (loop6): Block reservation details
[  255.767606][ T6648] EXT4-fs (loop6): i_reserved_data_blocks=31
[  255.784671][ T4451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.987311][ T7865] IPv6: NLM_F_REPLACE set, but no existing node found!
[  256.831993][ T7885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  257.027222][ T7893] netlink: 'syz.1.1025': attribute type 13 has an invalid length.
[  257.152631][ T7899] netlink: 'syz.6.1027': attribute type 1 has an invalid length.
[  257.166825][ T7899] 8021q: adding VLAN 0 to HW filter on device bond1
[  257.186348][ T7899] bond1: (slave gretap1): making interface the new active one
[  257.194626][ T7899] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  257.230614][ T7908] syz_tun: entered allmulticast mode
[  257.237616][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1031'.
[  257.248711][ T7908] syz_tun (unregistering): left allmulticast mode
[  257.324371][ T7910] netlink: 'syz.1.1042': attribute type 1 has an invalid length.
[  257.350264][ T7912] loop6: detected capacity change from 0 to 8192
[  257.544373][ T6648] ==================================================================
[  257.552501][ T6648] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put
[  257.560840][ T6648] 
[  257.563188][ T6648] write to 0xffff88813c12d4a8 of 2 bytes by task 7912 on cpu 1:
[  257.570834][ T6648]  fat16_ent_put+0x28/0x60
[  257.575288][ T6648]  fat_alloc_clusters+0x57b/0xc50
[  257.580345][ T6648]  fat_get_block+0x258/0x5e0
[  257.585075][ T6648]  __block_write_begin_int+0x400/0xf90
[  257.590556][ T6648]  cont_write_begin+0x5fe/0x970
[  257.596215][ T6648]  fat_write_begin+0x4f/0xe0
[  257.600848][ T6648]  generic_perform_write+0x183/0x490
[  257.606146][ T6648]  __generic_file_write_iter+0x9e/0x120
[  257.611713][ T6648]  generic_file_write_iter+0x8d/0x310
[  257.617099][ T6648]  vfs_write+0x5a6/0x9f0
[  257.621357][ T6648]  ksys_write+0xdc/0x1a0
[  257.625601][ T6648]  __x64_sys_write+0x40/0x50
[  257.630193][ T6648]  x64_sys_call+0x27e1/0x3020
[  257.634900][ T6648]  do_syscall_64+0x12c/0x370
[  257.639510][ T6648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.645423][ T6648] 
[  257.647829][ T6648] read to 0xffff88813c12d400 of 512 bytes by task 6648 on cpu 0:
[  257.655558][ T6648]  copy_folio_from_iter_atomic+0x75f/0x1170
[  257.661482][ T6648]  generic_perform_write+0x2c1/0x490
[  257.666784][ T6648]  shmem_file_write_iter+0xc5/0xf0
[  257.671924][ T6648]  lo_rw_aio+0x67d/0x730
[  257.676214][ T6648]  loop_process_work+0x56c/0xac0
[  257.681168][ T6648]  loop_workfn+0x31/0x40
[  257.685537][ T6648]  process_scheduled_works+0x4de/0x9e0
[  257.691187][ T6648]  worker_thread+0x581/0x770
[  257.695810][ T6648]  kthread+0x22a/0x280
[  257.699904][ T6648]  ret_from_fork+0x150/0x360
[  257.704512][ T6648]  ret_from_fork_asm+0x1a/0x30
[  257.709294][ T6648] 
[  257.711620][ T6648] Reported by Kernel Concurrency Sanitizer on:
[  257.717796][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  257.727375][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  257.737454][ T6648] Workqueue: loop6 loop_workfn
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  257.742419][ T6648] ==================================================================
[  257.986610][ T6798] vlan0: left promiscuous mode
[  257.991468][ T6798] ip6gretap0: left promiscuous mode
[  258.019337][ T6798] bridge1: port 2(vlan0) entered disabled state
[  258.026584][ T6798] veth3: left allmulticast mode
[  258.031517][ T6798] veth3: left promiscuous mode
[  258.045918][ T6798] bridge1: port 1(veth3) entered disabled state
[  258.144290][ T6798] bond1 (unregistering): (slave gretap1): Releasing active interface
[  258.307513][ T6798] bond0 (unregistering): Released all slaves
[  258.315225][ T6798] bond1 (unregistering): Released all slaves
[  258.380411][ T6798] hsr_slave_0: left promiscuous mode
[  258.388310][ T6798] veth1_macvtap: left promiscuous mode
[  258.393800][ T6798] veth0_macvtap: left promiscuous mode
[  258.399356][ T6798] veth1_vlan: left promiscuous mode
[  258.404584][ T6798] veth0_vlan: left promiscuous mode
[  258.778278][ T6798] IPVS: stop unused estimator thread 0...
[  258.841003][ T6798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.888936][ T6798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.948935][ T6798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.998782][ T6798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.079195][ T6798] bridge_slave_1: left allmulticast mode
[  259.084891][ T6798] bridge_slave_1: left promiscuous mode
[  259.090851][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.098734][ T6798] bridge_slave_0: left allmulticast mode
[  259.104380][ T6798] bridge_slave_0: left promiscuous mode
[  259.110197][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.118824][ T6798] bridge_slave_1: left allmulticast mode
[  259.124465][ T6798] bridge_slave_1: left promiscuous mode
[  259.130205][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.138102][ T6798] bridge_slave_0: left allmulticast mode
[  259.143746][ T6798] bridge_slave_0: left promiscuous mode
[  259.149422][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.157414][ T6798] vlan2: left promiscuous mode
[  259.162243][ T6798] ip6gretap0: left promiscuous mode
[  259.167756][ T6798] bridge1: port 3(vlan2) entered disabled state
[  259.174794][ T6798] veth0_to_bond: left allmulticast mode
[  259.180463][ T6798] veth0_to_bond: left promiscuous mode
[  259.186050][ T6798] bridge1: port 2(veth0_to_bond) entered disabled state
[  259.193624][ T6798] veth3: left allmulticast mode
[  259.198551][ T6798] veth3: left promiscuous mode
[  259.203432][ T6798] bridge1: port 1(veth3) entered disabled state
[  259.211068][ T6798] bridge_slave_1: left allmulticast mode
[  259.216787][ T6798] bridge_slave_1: left promiscuous mode
[  259.222432][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.230445][ T6798] bridge_slave_0: left allmulticast mode
[  259.236328][ T6798] bridge_slave_0: left promiscuous mode
[  259.241940][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.324733][ T6798] bond2 (unregistering): (slave gretap1): Releasing active interface
[  259.438408][ T6798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.448339][ T6798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.457790][ T6798] bond0 (unregistering): Released all slaves
[  259.466394][ T6798] bond1 (unregistering): (slave veth3): Releasing active interface
[  259.475338][ T6798] bond1 (unregistering): Released all slaves
[  259.484160][ T6798] bond2 (unregistering): Released all slaves
[  259.504645][ T6798] bond1 (unregistering): (slave gretap1): Releasing active interface
[  259.607745][ T6798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.617066][ T6798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.626055][ T6798] bond0 (unregistering): Released all slaves
[  259.633567][ T6798] bond1 (unregistering): Released all slaves
[  259.708603][ T6798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.718446][ T6798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.728139][ T6798] bond0 (unregistering): Released all slaves
[  259.773542][ T6798] tipc: Disabling bearer <udp:syz2>
[  259.778881][ T6798] tipc: Disabling bearer <eth:veth0_macvtap>
[  259.784998][ T6798] tipc: Left network mode
[  259.789884][ T6798] tipc: Disabling bearer <eth:veth0_macvtap>
[  259.796071][ T6798] tipc: Left network mode
[  259.803089][ T6798] IPVS: stopping backup sync thread 6834 ...
[  259.813662][ T6798] hsr_slave_0: left promiscuous mode
[  259.819613][ T6798] hsr_slave_1: left promiscuous mode
[  259.827437][ T6798] hsr_slave_0: left promiscuous mode
[  259.833097][ T6798] hsr_slave_1: left promiscuous mode
[  259.839207][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.847065][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.857060][ T6798] hsr_slave_0: left promiscuous mode
[  259.862850][ T6798] hsr_slave_1: left promiscuous mode
[  259.868828][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.877885][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.885541][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.893989][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.906176][ T6798] veth1_macvtap: left promiscuous mode
[  259.911883][ T6798] veth0_macvtap: left promiscuous mode
[  259.917730][ T6798] veth1_vlan: left promiscuous mode
[  259.922998][ T6798] veth0_vlan: left promiscuous mode
[  259.928879][ T6798] veth1_macvtap: left promiscuous mode
[  259.934510][ T6798] veth0_macvtap: left promiscuous mode
[  259.940374][ T6798] veth1_vlan: left promiscuous mode
[  259.945642][ T6798] veth0_vlan: left promiscuous mode
[  260.142818][ T6798] team0 (unregistering): Port device team_slave_1 removed
[  260.152678][ T6798] team0 (unregistering): Port device team_slave_0 removed
[  260.802408][ T6798] IPVS: stop unused estimator thread 0...