last executing test programs:

8.795124049s ago: executing program 0 (id=240):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11)
ioctl$TCSETSW2(r2, 0x5437, 0x0) (fail_nth: 18)

4.425485147s ago: executing program 0 (id=241):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x130, 0x0, 0x2f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1003000000000000}}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = inotify_init1(0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f00000000c0)='./file0\x00')
r5 = syz_clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r2, 0x8, r5)
fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')

4.367467812s ago: executing program 0 (id=292):
r0 = socket$pppoe(0x18, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
io_uring_setup(0x4d91, &(0x7f00000002c0)={0x0, 0xc9ed, 0x2, 0x0, 0xbb})
r1 = syz_io_uring_setup(0x279, 0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2000080001, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(r4, &(0x7f0000000180)='1', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00')
read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5)
preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000280)=""/31, 0x1f}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="4c00018014000200697036677265746170300000000000000800030003000000080003000200000014000200626f6e645f736c6176655f3100000000080003000200000008000100", @ANYRES64=0x0, @ANYBLOB="3c000180080003000300000008000300000000001400020064756d6d79300000000000000000000014000200697036746e6c300000000000000000000c00018008000100", @ANYRES32, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
read$msr(r5, &(0x7f0000000080)=""/202, 0xca)
perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$can_bcm(r5, &(0x7f0000000840)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f00000005c0)}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x181, &(0x7f0000000740)=""/246, 0xf6}, 0x10000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)

4.365266152s ago: executing program 0 (id=295):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2719, &(0x7f000001b480)=""/102400, &(0x7f0000000180)=0x19000)

4.313324417s ago: executing program 0 (id=296):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
r2 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x77359400}})
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000280)=@phonet={0x23, 0x0, 0x0, 0x42}, 0x80, 0x0}, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x3)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000240))
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"})
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, &(0x7f0000003b40))
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0xd00, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x8)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r9 = syz_open_pts(r0, 0x0)
dup3(r9, r0, 0x0)

3.909388829s ago: executing program 3 (id=303):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x4, 0x4, 0x9}, 0x48)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0) (rerun: 32)
write$P9_RFSYNC(r3, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r4 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r4, r2, 0x0, 0x0, 0x0}, 0x30) (async)
syz_read_part_table(0x105a, &(0x7f0000003000)="$eJzsz71twzAUBOCTwEBKlQGyQuoAGURbZAhlk9SeyhO4tSs/Qxb8M4Ht4vuKA0HySLzwVF9pyZD22WdM6mPd/Tvnb7evqur7JNv1oF2LNVxWc73d3mv5Ge8vHmr3PaVbCkvk/z2Zc6yq5dtp84ARAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODlnQIAAP//fIQVpg==") (async)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="91", 0x1}], 0x82, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)

3.880364452s ago: executing program 3 (id=307):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000100)=0x1d2191ed, 0x4)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
utimes(0x0, 0x0)
sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)

3.451669927s ago: executing program 0 (id=314):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_pts(0xffffffffffffffff, 0x840)
socket(0x840000000002, 0x3, 0xff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
gettid()
fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00')
sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fe8000000000000000000000000000bbe000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xd8}}, 0x0)

2.553445331s ago: executing program 1 (id=326):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11)
ioctl$TCSETSW2(r1, 0x5437, 0x0)

1.662324864s ago: executing program 1 (id=332):
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
vmsplice(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f00000001c0)="55c1ac6a33bcabcbf05b5674529841f58350038a", 0x14}], 0x1, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f80080002400000000008000140"], 0x58}}, 0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56542, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x80}}, 0x0)

1.604111509s ago: executing program 1 (id=333):
socket$pppoe(0x18, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
io_uring_setup(0x4d91, &(0x7f00000002c0)={0x0, 0xc9ed, 0x2, 0x0, 0xbb})
r0 = syz_io_uring_setup(0x279, 0x0, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2000080001, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(r3, &(0x7f0000000180)='1', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00')
read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5)
preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000280)=""/31, 0x1f}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="4c00018014000200697036677265746170300000000000000800030003000000080003000200000014000200626f6e645f736c6176655f3100000000080003000200000008000100", @ANYRES64=0x0, @ANYBLOB="3c000180080003000300000008000300000000001400020064756d6d79300000000000000000000014000200697036746e6c300000000000000000000c00018008000100", @ANYRES32, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
read$msr(r4, &(0x7f0000000080)=""/202, 0xca)
perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$can_bcm(r4, &(0x7f0000000840)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f00000005c0)}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x181, &(0x7f0000000740)=""/246, 0xf6}, 0x10000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)

1.570803851s ago: executing program 1 (id=335):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e)

1.46532063s ago: executing program 1 (id=336):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
rt_tgsigqueueinfo(0x0, 0x0, 0x68, 0x0)

1.46267744s ago: executing program 1 (id=337):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
write$binfmt_aout(r0, 0x0, 0x920)
ptrace(0x10, 0x1)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, 0x0)
ptrace$cont(0x9, 0x0, 0x0, 0x0)

867.152909ms ago: executing program 3 (id=338):
syz_io_uring_submit(0x0, 0x0, 0x0)
getpgid(0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
readv(r0, &(0x7f00000000c0), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x0)

852.05324ms ago: executing program 3 (id=339):
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x7fe2, 0x1}, 0x48)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x9000000c})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1008002, &(0x7f0000000840), 0x1, 0x5e0, &(0x7f0000001200)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309})
ioctl$TUNGETSNDBUF(r3, 0x400454dc, &(0x7f0000001700))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000100))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettaction={0x12c, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x9c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}]}, 0x12c}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x20, 0x4}, {0x400, 0xc2, 0x3f, 0xb02}, {0x8, 0xf8, 0x4, 0x7fffffff}]}, 0x10)

560.976934ms ago: executing program 4 (id=341):
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pim6reg1\x00', <r1=>0x0})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000080)={@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)
setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000000c0)={@local, @private=0xa010101, @broadcast}, 0xc)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/169, 0xa9, 0x0, &(0x7f00000001c0)=""/216, 0xd8}, &(0x7f0000000300)=0x40)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f, 0x6}}, 0x20)
setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x20}, @multicast2, @local}, 0xc)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x130, r4, 0x100, 0x70bd28, 0x6, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000040}, 0x801)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0)
mknodat$loop(r5, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_buf(r6, 0x0, 0x2a, &(0x7f0000000700)=""/102, &(0x7f0000000780)=0x66)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000007c0)=0x3, 0x4)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000800)=<r7=>0x0)
connect$nfc_raw(r5, &(0x7f0000000840)={0x27, r7, 0x1, 0x5}, 0x10)
execveat(r5, &(0x7f0000000880)='./file0\x00', &(0x7f0000000b40)=[&(0x7f00000008c0)='!\x00', &(0x7f0000000900)='ethtool\x00', &(0x7f0000000940)=',#}}\'{,-^\x00', &(0x7f0000000980)='#!@}/(\x00', &(0x7f00000009c0)='pimreg0\x00', &(0x7f0000000a00)='#!\x00', &(0x7f0000000a40)='ethtool\x00', &(0x7f0000000a80)='bridge0\x00', &(0x7f0000000ac0)='macsec0\x00', &(0x7f0000000b00)='/+\\()\\\x00'], &(0x7f0000000c40)=[&(0x7f0000000bc0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000c00)='(\x00'], 0x100)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e00)=@nat={'nat\x00', 0x1b, 0x5, 0x660, 0x350, 0x350, 0xffffffff, 0x0, 0x350, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, &(0x7f0000000d80), {[{{@ipv6={@remote, @empty, [0xffffff00, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0x0, 0x80, 0x7}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x18, @ipv6=@remote, @ipv4=@remote, @icmp_id=0x64, @gre_key=0xb}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff, 0xff], 'ipvlan0\x00', 'wg0\x00', {0xff}, {}, 0x1d, 0x9, 0x4, 0xc}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e20], [0x4e20, 0x4e23], [0x3, 0x1bca, 0x5, 0x7, 0x8, 0x3ff, 0x2, 0x8, 0xa64b, 0x200, 0xd, 0x7, 0x5, 0xfffffff8, 0xfffffffb, 0x5, 0x8, 0xfff, 0x4, 0xe, 0x0, 0x4, 0x7, 0x0, 0x9, 0x6, 0x100, 0x1d, 0xb, 0x8, 0x8, 0xfff, 0x1, 0x5, 0x8, 0x40, 0x100, 0x6, 0x800, 0x400, 0x100000, 0x400, 0x401, 0x80000001, 0x8, 0x6, 0x0, 0x2, 0x951, 0x1, 0x7, 0x300, 0x3, 0xc6, 0x917, 0x0, 0x800, 0x4, 0x6, 0x9, 0x8, 0x4, 0x9, 0x2], 0x5, [{0x9, 0x9, 0x7f}, {0x2, 0xd, 0x2}, {0x5, 0x41, 0x2}, {0x80, 0x3, 0x3}], 0x0, 0x0, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x65, @port=0x4e20}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}, {[0xcbe, 0x2], 0x9, 0x8, 0x1}}, @common=@frag={{0x30}, {[0xee, 0xdf8], 0x9, 0x19}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x1, 0x7}}}}, {{@ipv6={@mcast2, @local, [0x0, 0xffffff00, 0xff000000, 0xfffffefe], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vcan0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6e, 0x7, 0x3f9b327357270dc5, 0x1}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x2, 0x8, 0x40, 0x3, 0x44842da61d2e2885, 0x1020}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x2}, {0x3, 0x6}, {0x2, 0x4, 0x3}, 0x1, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000001500))
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001540))

527.919497ms ago: executing program 4 (id=342):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000000000000100100000b0000001000000000000000040000020000000047f16689b67b942cc1df7f368bb1ea0be03843dfc95c8793287e3c077b4dc0ad4f4ca9b5c6de9d5392220e303b76e6acbf5acb15ec41e79e458f59fa2391df33a4ca4df405d5219d673f6271d9f7f8e8a1997ac12f1c32c5c2866d2f9950b92b55727f8eb3f89d6f0e853845f43fc15e86d21296089f23cad6c563397ae0e5cca99d2c916c78dbe4a5a37e53a4734e56fb8cf4a77b84c0423e1bd14ee08aaf617e6365df1060259d5f45a5779d0c575f765b9ccfc76d1187f7b91dd74091836e8ca51a77c569"], 0x20}, 0x0)
socket(0x840000000002, 0x3, 0xff)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x1c}, 0x90)
r2 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0)
io_uring_setup(0x63d2, &(0x7f0000000240)={0x0, 0x1e0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]})
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14}, 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
setreuid(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x10)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000ff7c060000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000}, 0x90)
r7 = syz_io_uring_setup(0x34b3, &(0x7f0000000fc0), &(0x7f0000000100), &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)={0xe000200f})

477.358511ms ago: executing program 3 (id=343):
semget$private(0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$packet(0x11, 0x0, 0x300)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffede, 0x40, 0x1, 0xfd, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0x3}, 0x4080}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000080)=0xa, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
io_uring_setup(0x4f04, &(0x7f0000000180))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00008eb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
socket$inet6(0xa, 0x2, 0x0)

458.013412ms ago: executing program 2 (id=345):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x181080, 0x10f)
getdents64(r0, 0x0, 0x22)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x87cd}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x101, 0x0, 0xf, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x4}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x0, "00fa00"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000740)='./file0/../file0/../file0\x00', 0x208051, &(0x7f0000000840)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@jqfmt_vfsv0}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50e, &(0x7f0000000a00)="$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")
open(0x0, 0x400141042, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="20000001d6f90d2a767d5b8adb8630faeaf281b8698b57d091613e8665ce06ec8189c599927c26a1bb023a134cbddd5ac51598eb0e4c9d3e69509e858214f9a987852b8958b5f68836fb71bcdd04423bb9bed3951f4f7c71ed59e64c2b6709e70056644f44fc079a5d16b820d7ef7f52ea9bfeeff5a00a00545e95fabfb531e35658380a2d38b557dc94f97f8199330a7a420ea0cc34665354cd", @ANYRES8=r1, @ANYBLOB="01000000000000000000010000000c000180060001000a000000"], 0x20}}, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$inet(0x2, 0x4000000805, 0x0)
syz_open_dev$sg(&(0x7f0000000100), 0xfffffffffffffffd, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001980)={0xa, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty}}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

322.066964ms ago: executing program 4 (id=346):
socket(0xa, 0x2, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a30d100007006000000002000020d3"])
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x40000014})
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200040, &(0x7f0000000280)={[{@noblock_validity}, {@i_version}, {@sysvgroups}, {@norecovery}, {@grpid}, {@nobarrier}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x573, &(0x7f0000000a00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8ThM1H0eFA32do78pouowmHWsdbHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75UbnqzZW3SpllmU/P5wN3Oufem557c+z35ntyEBDCwxrJ/ChGvRsQ3ScThpm3DkW8cW9tv5fGN6WxJYnX1sz+TSPJ1jf2T/P+DeeWViPj1q4iThY3tVpeW50rlcrqQ18dr81fHq0vLpy7Pl2bT2fTK5NTUmXemJt9/792e9fXNC39//+n9j858fXzlu58fHrmbxLk4lG9r7sdzuNVcGYux/DkZiXPrdpzoQWP9JNnpA6ArQ3mcj0Q2BhyOoTzqgf+/mxGx2oEsDehkP2A3ScQ1DKhGHtCY23c6D24xpd+VHn24NgHa2P/htfdGYl99bnRgJXlmZpTNd0d70H7Wxi9/3LubLbHF+xA3e9AeQMOt2xFxenh44/iX5ONf90538DKxvo0evQ8LdOB+lv+81Sr/KTzJf6JF/nOwRex2Y+v4LzzsQTNtZfnfBy3z3ydD1+hQXnupnvONJJcul9PTEfFyRJyIkb1ZfbP7OWdWHqy229ac/2VL1n4jF8yP4+Hw3mcfM1OqlZ6nz80e3Y547Wn+m8SG8X9fPdddf/6z5+NCh20cS++93m7b1v1v1vsMePWniDdanv+nd7SSze9Pjtevh/HGVbHRX3eO/dau/e31v/ey839g8/6PJs33a6vbb+PHff+k7bZ1e/3vST6vl/fk666XarWFiYg9yScb108+fWyj3tg/6/+J45uPf62u//0R8UWH/b9z9E7bXfvh/M9s6/xvv/Dg4y9/aNd+Z+f/7XrpRL6mk/Gv0wN8nucOAAAAAAAA+k0hIg5FUig+KRcKxeLa5zuOxoFCuVKtnbxUWbwyE/Xvyo7GSKFxp/tw0+chJvLPwzbqk+vqUxFxJCK+HdpfrxenK+WZne48AAAAAAAAAAAAAAAAAAAA9ImDbb7/n/l9aKePDnjh/OQ3DK4t478Xv/QE9CWv/zC4xD8MLvEPg0v8w+AS/zC4xD8MLvEPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dOH8+W1ZXHt+Yzuoz15YW5yrXTs2k1bni/OJ0cbqycLU4W6nMltPidGV+q79XrlSuTkzG4vXxWlqtjVeXli/OVxav1C5eni/NphfTkf+kVwAAAAAAAAAAAAAAAAAAALC7VJeW50rlcrqg0LZwNvriMLouJFud5bP5xdBVE8M730GFF1DY4YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr8GwAA//86Qi/P")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x18, 0x17, [0xbf, 0x5, 0x5, 0x75e, 0x1]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc81}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x468}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x804}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004015}, 0x40004)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r2, &(0x7f0000000400)="240000001a005f3814f9dc070009040180fb2000"/36, 0x24)

263.846049ms ago: executing program 2 (id=347):
socket$inet6(0xa, 0x3, 0xff) (async)
socket$inet6(0xa, 0x3, 0xff)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) (async)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x66) (async)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x66)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xb, 0xc, 0xcf, 0x6}]})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r5}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0x2002) (async)
syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0x2002)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
socket(0x11, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x6a, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x10000, 0x1}, 0x100100, 0xf2, 0x8, 0x6, 0x200, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x3, r0, 0x1) (async)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x6a, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x10000, 0x1}, 0x100100, 0xf2, 0x8, 0x6, 0x200, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x3, r0, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000000c0)='{\x00')
r9 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='qgroup_meta_convert\x00', r10}, 0x10)
close(0xffffffffffffffff)

201.300624ms ago: executing program 3 (id=348):
syz_io_uring_submit(0x0, 0x0, 0x0)
getpgid(0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x5865, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
gettid()
ioperm(0x0, 0xe63b, 0x7fffffffffffffff)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4)
recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0)
signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x0)

117.616241ms ago: executing program 4 (id=349):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
io_uring_setup(0x4d91, &(0x7f00000002c0)={0x0, 0xc9ed, 0x2, 0x0, 0xbb})
r1 = syz_io_uring_setup(0x279, 0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2000080001, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(r4, &(0x7f0000000180)='1', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00')
read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5)
preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000280)=""/31, 0x1f}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="4c00018014000200697036677265746170300000000000000800030003000000080003000200000014000200626f6e645f736c6176655f3100000000080003000200000008000100", @ANYRES64=0x0, @ANYBLOB="3c000180080003000300000008000300000000001400020064756d6d79300000000000000000000014000200697036746e6c300000000000000000000c00018008000100", @ANYRES32, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
read$msr(r5, &(0x7f0000000080)=""/202, 0xca)
perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$can_bcm(r5, &(0x7f0000000840)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f00000005c0)}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x181, &(0x7f0000000740)=""/246, 0xf6}, 0x10000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)

84.230403ms ago: executing program 2 (id=350):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
rt_tgsigqueueinfo(0x0, 0x0, 0x68, 0x0)

82.656224ms ago: executing program 4 (id=351):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x0, 0x15e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x3}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x3, 0x0)
write(r4, &(0x7f00000005c0)="120000001a005f0014f9ff0f000909008100a08642c21ffe37601d2ed213290bbf98832c15281204d7e0466fa95820382677676560ffb82725162bf475f88bab697e315b", 0x2a)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast1}, 0x80004}}, 0x2e)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800090087"], 0x1c}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000646400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007369e6c714ec67f8aeefd2199fa393198e1ef9fb8fa9e30b58bf018f53d34a3a5ce2c05d42b167d50a79fc0a1ab4f0e1fa98af22d7de4121a2ef4f4dbe0e0601c763cd05d2dc4b40ce139f60a6b37554009eef14ab62b9"], 0xb8}}, 0x0)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r13}, 0x10)
r14 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r14, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r14, &(0x7f0000000780)={&(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f00000000c0)=0xfffffffffffffffc, 0x0, 0x100, 0x0, 0x0, 0x0, 0x18}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0, 0x0, 0x0, 0x400000000}}], 0xb0}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

37.298307ms ago: executing program 2 (id=352):
ptrace$getenv(0x4201, 0xffffffffffffffff, 0x80, &(0x7f0000000000)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r0=>0x0})
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000010c0)={&(0x7f00000000c0)="7138a0c29a5f2d0fa608259054ac4e138f544a5acf72f41fa02640e562ee397f0e219a408c6541442bd574eb0e9c7c8ce189818b609698399aac7d5aa3964e914dd6ef76542d22c0d247114b145ddd9369ade9d2971dff910da2d3f16fe748e3166ab2c5e4618cb0b70fae0b59bc75e445c2ef5d888ca595ed518930ae94a7d89da4a4e59c39a4a0a35d179c1b440917e8f852f5eb5669b1fcd1ce7ed03ce5553ff30c5b30bc2ac4d9ea95b2088ed388bd58db600710fa42f5e2c841ba67e57aa9ca70b0744973604869d893622b9b9bba6a16ad0099a25f09a3b4e0f86b8966cf41b1dbd7e83d9a80ad86a4bbdc2b36c5aca3c7ed37790b9f96e94fa1aa2e56b42669b4f714d177cf9e983677b4b11e30c7bcb6641336c86a94ee539e1c7c005e84caf4e3b30e9c80853f2e7b9a5a6b3b113d3f21c1d87647cccb8c33555ea188a6fbb3a8109f3087dea366a03788b0bc24feb1096c536805fea8e80c7f6bc5ed229c81dfc5bce140f1cf598b8686f73432bcdc4ef61d3b698f76618f553e7cf7a95a8588a60613898c05938a86b81ba9118ff7fdf954a408fd8472a014827c5a3599a0182dba4bc71e78a64ce322677c84316d56c9c7a3f4ec6a46157d1c350f999d861204e4f907bf58162f5cdfb2c4612362525d2bc4a6585180ad18dde11448d4ce5b0f4b1df8c759f651261876a32badd1b079400467c6890b10d1d5bd51002fd927cf862668341f546dcf063dd28598f34291d320bd545a8b59aedfcbf541ce94dfbe12f0cec293fadc0335ec3855cdb74b4bda4244da7edb68c09ecff937fd732a87f8fe473add073715156977b2af33cc859eac6ad5167bf08c51f9e85de69810367bf9702b8efc955b93fa1a377d6bf4d3e45c0780d73148c4059419cf7349418f3b4911de7b84fd0be21f057834ba1b20dfa0bf06e6a829d81806f19888e4251fba27ec1a4999cf7ea8eb29430831bd17bec8ee9a10e88e95c739d22f4916cee2797fb2a3f7c4038b6261f8fff62512b799d14a90ef07abd6347c576947c09cf6fdcf22bdf56dc4b72fc5d9673ec024c4c148eec6462a33377c576ab086de8eda3e19eefd78919ae45993162d6037e922127c083075dabc534aaf0843350c3cb6f11c8996e8bdb6f54999350beecf2e811d1c9483a28c65656a042de931a59f88e55befcb7f3ab893f7637b9cffebaaa4929894318a7eb1666bca90e166a6479efd6d4a020b8d30a1ab81c1a5134bab47ffe58e5f7e2c18125cf17fe42c611f026f65e246af52cba32f41a6560e940b1a068315dd6baeda5bac6ac5012cdccaba51677e636c86e0b188d42aef4a92507988c025940356193a43960ec5c5e7f679f8febabdf49b6e148cfb6b8f0c970dec1ee30f2904861a4207590a52847fcb18cb225d5023798e63f1dd8ee66144baf09b06cda72f9682463389fb720756eddf108866676d920d559ef8db9b1ddca7557d330559448d0fb61a692cb3b3723bcd1b193c6147a4369b060f102ba58869687a9775db1696d593d65ee10ada4adf799e15e4ed79f4b27ddb0e30dabbe11ee08d4d2178d68f0c8d514863ab7527ba31cafbccb486f84eb7a33e5029d4a9381bbebbc2a58d653c0f6ca0c28f39f209be38cea722595a304efe95474d9c77acf944b440602117136a722978a4ca391c04194ebdf2e4a3c3f0c5241d7434f8626866bb3c95de5c1331ab713211885bc9cb73f9ebb49098b2ac345ecd8b31b9badbd5ff7f91ee3d5f73a9a6cbded84e27483530c18aae0191fc610cd23f0d9fa0abb98a2844f84d52a66ae37616ca8664741887201640ff142a325dcc03a4c56daca8fe23764ffb27d58f702825b2ecbf21d430d6fd1e48197218126823d9c52ad49e66aa2b68f37a6b185d7857eb417e67379d556a49db4e0459afc620caff0ea0c18ddc2a17ac2b2ed545beb7b949bb5cf97c4a990a717466216876c4e25f49cdaed22c418e424b9967ac818636115f29374852aa63435b85a8a2acb15f677426dacc514aaebec09b522c7e78f23b009254347fbf9bdaab0acdeec6788f75ddaf9cad80487196092fba5605841b7b9660d6b1be48230ffebeb36c16455c34a2c8b102586ae1a9ab0e9eb343f9ec50bb2a41b8462fe4bae08fb450fdd973e3682ecb4b0d2d39895d3e67270efe1bd859f11238ed95cbd9ffda7b94d3c1a91b00ed353d1b236d5a3958c0402291eb9b3e66aa62bb1811bd0fb4d1fbff35bdbfd8de05e45ada83388a20cc2365eca2a4def5f6fcb6cea4f7566c48a644d99ca5321a6e04448501cb21818d5422ce76b8df1f2927f449bd2502ca27b1e1dc93609f3990ffd58f271a278ecf4e1c29361d2c65e6ea3474e5c5de52a877d7270ea079dac1ac23684138d731e48aad87fb3fe1133cbfb9cb3f613c9ba983063959111b8ddf75ac564ea767fc5331993c9f49a6a7aa68620641bf4ead6e0a7fd92d5396551b98574bae5f1f6b5f76fc503865f3da975924b2c512f7aaa3e500df70994a00de81186747f72452b92df4c71390e7817d893ef1d0fd792363849c42f77e41c0ad4ececcf2de0bab4bada65b1c72e773e621f1acbc1f066db68ecc544aa67613652af3aa557131b95a9cdad883e5080e0ec66e08dc1534eb2d9e62738b434f97801f40af1bf69dc050bfbd0f60001a4aa18e1b858415f653de5958c693e464871d4d9e4344e4fa923a50d693c95382746a66fcf3d7408c40a13871f5ef60f2cbcb90159c676030f7af20cec3698d07b17817176d448f3c30e1aaaa78860ae0a2a019e9d1786a9011e1683abf83156e15092a0fb7c7c30e8964c9f57c9be917557ad7a9f1498d59b559f090b5ea8d7dce9d6e43ba8f09e5c80e0b275cb8ac8ccea7e9a4d37185ad4ad6225ef21a712b9f345d40b441f202f2417fa5833cf03f842ffdd2af88d92d34796808b8be8ede17716b96f1dcf09dbe1862f30290bf3b98763f8bd356682da520f988b9a506d0b8cbab59d7643601e60958764dbbec13d4591cf4a8913a549b133b9d7d4be53461d06db40b881ad119552380662a61ee5088bdb288dfbd6eb79401eb4461d14a0fe9d966b0015499cb8d3a859352a2328758c441802b6160586307251499cd55e8c7825fba94becd799ef4fa6b699ca775b5bc9c18386511ca8503792130652909ca9462a6f77a34b8c3c244cd20224efe15dfb936d1ef52ddd780f32c9ac74efe3fae4b8fb628df012d31179f5564683f7ac1d784f2663aca53bb93239b99c0c98d61b4e335ae2157cddd5cb70336fe0a14e1b38f5ca9ef5623dbbb45cde398eaec9203136fd6869b3ef942360b55e3fab0c9b74451fb5cfd3515b22b68839ad2f29af251e54d12d18b21d8f952ef06ae39e413a0cf8988ba14fd2089dda36e905e970dc4a50b5db71faf7e94fc8da5e2b09e3aa7ea93c61dc6fb7f9dd911d4d5717a6a6fa8e62b2446615635ead8e5b039dd83bc21320df467671209785ab0414ec7cd1d96604d8ef7c57bb057e865d60808317ab1317f1d395c035b6c84e74904d142212e2fb9ef23deca0c0694ed475768d8a78bf10c6f0899560d21a396b96412d391765d2ff4164976e28c8c931a8f554bb3f0e71f8f22fcf4812c5d15e056912e1b142f971c75fe33192d7b3b60e276332c4ec5bf03bf079ddfcc714c083524987b526a3354201957562ee43813c196834da1c88bdf8bcfae2dc389238168f383474e36c46a095d716ad8f55141bc966e64d69398e9f3e914f36a7d8e3a0c7a995593d27bca39ba815c791d279d8e3046969dd23fd72028673c23daa5174d478f17988852de7fb9fe0f5c14aa4b14fd4dc0d7d68b4c1ece1afb3bba90b15c93b5e8f22319174cddb4cef58c2f095d426f5e58ebfb60ca9442c7968c4a3643bd14b995824ad440bac32dbc5ad46f06b75921df9ce64ef10e222cde50a3d620be19d9fb24bd9aaa8e2da9b0532aef7ea593fef2d7b692fb3b5e0fb0e2755a9cee0fdf71bd61bd831c675e1dd4d3cb9df2aa678125f91d20ee1f637f578506f5451d2aa7827d83c604d5be021b7061e7ef5a696aa5470ad51345f11e7ce277c10d26397580c9b811a26f04912bc89d433f7876ae890117259c800c0398bfdfa2707aa312f8ea65c64fa0172a6988a31bc009f5ff82289fa5f5ff4e401207142f9244b66c246d7ed0625e739106d555e0058ce113f48687f331e56793f6e79ce6074e330deaa7166df7c76cea4169ca96703484717bdd2d146c679271631d8da16b06146ab5a31b1048293e543b6efad47e64fe4d5ba011d0bf579c3f912f45e9712602080ac12caf47440c04c401ddb4a47a3a0c09182501bc97a604609479b64bc3295f4066ae5777ecb6f816b87d62ce68c011f0da9a198678d3e2041dd79cdf14d8963a151dfbeafb26f86c9edd6fceeda81cb4f2861d1c12f76199d5d474ba80d1c799995e534bf6d27eb19771cc0dc01621940fecb505249c62a70c1e2f715a8da645a5761559b6ae883ff9a255d69dc869d2fbaa6d632f6d897771bdc7b43b5c5f32d648b8fd4b2d337825c9abb2dfe57ef804f94e7f8f21fdb5883d48644cda18d75e8fe5649bbd5de537a333546b24c6a5d39b0081eb32ea787c75442fc6c756ec4517e795c9e1af9901abbee801a4e7a98cc34378854c19f953bc416496fc879f391fcbcfcfb3b1e9dc44423731fed89456dffbc94280c695765e70698d6c5d25206503b68a8c32336af2bb25aa1b155aa030429a3e8242424cfc3b7688fd435cc51a54dcb4352db673248ef600f3747c89062c1d16da769c43bf9b88a7e8cdd94e9c144ac5c24b8b88537a07b972a87d2c9599b15aa6b4f30c345fdced31d3825292091c6341703572a911d9d9dcb2a062c56435bd36050e46efe87300454be755c1ae42223289fad959ac221ea601a73dac5cfdee6aaa15f0e7d6d1ec546648b1159cbd84214dc553cb7dc1dbfa6319ee842b65719f561cc4da14aef87d1cb00b99eba099169b721c98364e24c54a7f8ceb0ce6e409f3b7ae303e029e6dc855275d26a2ec1653ee4e34c1ce45a9f10d272c51b03763a99986c24b916a3fe87fabc3d7c2362cc130600ccea4eefee73b5235d16a49fcef50c00b5dc23a14d1b876b1786cd992beb13d207b9f75d558e46d95daac79f3c65dfc5d95b5f809fd35a9384e712a1b9e7879f76415c3b3f2e5fe5059abf0c922e0043e9e3e3119b20e2c830c856753bc6d716f02c89dfe22ad1d6c1981ef46468d0c0f8825b16f16c8be5eaf605bb5a3a4ebb5bed51b1cfa3e6d72dec03983cb5ecf4d142df3e5409b0590f752d06d1c4287bdf497e70ee97534661bc059e6c959e4823dd84e823f088f04dde114fade50bf1ab0b276614f185a78fd1a0e238d0c30e34c72ab84f820c744e858141782188059e31de81d65cd4e75dcb6c4e9ccdb2c97990da85d814f9d0c91ec6e9448e13cba17b7b530e5bb1bab45c2f521a53ea6a43c946c45eb2d533acb9a4bf996f0fc7ef45e6722bd5e7cba29fdb8f38c126e7f85119cfd7592033965aa5f2adda3a23f94c7b3d19d5315a40290f1f1b115d6e961f18221d9124a0107e33723fd8dd2c064485a4673533f6e1e4a08aa95096aace68ac5e15ae7c87249cdb61dfcb9b29b06891826ec9fceea7bc63ad251e664863e65bee8f549da82bca383850e53b14a54ce9f9c636c309e4252f984602976e799e1c8ba913c083d827f01ca1b3b02f55c16b40122a2cef3399a1719082440a78db1f8c249a4d909bb1f4d971d6666dd056b18ad2b35cc2342d7", 0x1000}) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x4441, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001140)={<r2=>0x0, 0xf9e, 0x0, [0xd, 0x4, 0xff, 0x2, 0x8000000000000001], [0x3, 0x7, 0x6, 0x7, 0x80000000, 0x4, 0x1, 0xf, 0xf, 0xf, 0x7ff, 0x3ff, 0x100000000, 0x5, 0x3df7, 0x7, 0x6, 0x3, 0x8000000000000001, 0xce40, 0x3, 0xf, 0x3, 0x0, 0x1, 0x9, 0x6, 0x4, 0x90f, 0x5, 0x6263, 0x7e8b, 0x7, 0x100, 0x8001, 0x4, 0x18, 0xfc, 0x7, 0xfffffffffffffff9, 0x4, 0x7, 0x0, 0x64, 0x401, 0x100000001, 0x5d6, 0x6, 0xf, 0x8, 0x10000, 0x8, 0x3, 0x4, 0x7, 0x7, 0x0, 0x0, 0x4, 0x9, 0x10, 0x1000, 0x72aaf74b, 0x6, 0x2, 0x8000000000000001, 0x495, 0x8, 0xb57d, 0x8, 0x9, 0x7, 0xfffffffffffffffd, 0x1000, 0x2, 0x7, 0x3, 0x1, 0x4, 0xfff, 0x4, 0x6, 0x1000, 0x4, 0x2, 0x100000001, 0x2, 0x9, 0x0, 0x5, 0x4, 0x400, 0x7, 0x3, 0x4, 0x5f2, 0x7fff, 0x7fffffffffffffff, 0x7, 0x80000000, 0xfff, 0x7, 0x5, 0x8000000000000000, 0x6a42, 0x674, 0x8, 0x6, 0x7, 0x5, 0x3, 0x7f02, 0x6, 0x4, 0x40, 0x100, 0x5, 0x9, 0x1, 0x8, 0x10001]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001580)={r2, 0x40, 0xc, 0x1})
r3 = dup2(r1, r1)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x20044015) (async)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
ioctl$int_in(r1, 0x5421, &(0x7f0000001ac0)) (async)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000001f00)={0x0, 0x1, 0x1a, 0x5, 0xb, &(0x7f0000001b00)="d08b17fe5adc772144ab88dbb5fe3795a2ed540e1dc16044b1b371b12106af8ed900f78d6bdf0efe6ecef1805a6eff3d23881f2f851feb193b6fa5b66459f44155109847e9da586df1cccd7b609838b3363845a7043221bea0501428f3c5601921d6b502441e6274bab955d222bfa6343c71ae79ad7726cd533426179af58ea25b8ba32c42c33b2109f6e4e5f522f4c119f174644032de0d0205f5b84f7a0ed841f56e09c568a4dba83f1f817381b9ceefaf2b7dab13d95c95c7f38d4289c6563a93860c12597e94a8c1656f4693212da725c04a89c65c0872a2af0ccaa06f731a6578f89fceafde4456c78b6b40315308ba8509916b72028a5cbc8e53767a5c92b7702b940f8743b27f1aa4b32315cee0e6d5f7afe9d5a853f2aa189480537d97429a067f3a152d6294171703a99488e7eadda4ffab1a98ec5cf3ba24032e94ee7cdcce3f0ce2460f352bdf6121794e5b8e0fdd65ea1f220dbe10ec750012ea2a9cabb5c5f0b27d4551539c33fb6f75ba424f3761e733ce74735d6598654e52bdbb90baae0f681e5a995cf27ef18a84b127d04fce1cc99f16bb04cd27c0fe5755f7f4c43880e68f000dc00e0a64cbb523d2ffb2beed8bca4359ac9f6d899b37b94f66018c1296a34f758df2840118f6537cd73bc0060e39ba313807609294d7d0db44013820399ffc212dd7066eadf1768b5f6458ec104c5ca34f31e0ff9e1d42aa2cc586a186888971683c0cfe1b5a1d26f9c093ba20a49fa92ae3ef2afecaf65d979bd60b04157bf1334c8ccff29e0bade7ba699bdd666696e8a32a591094e62c3624a493455887760ebda6184bd47b7561ec7e06c86dc85d60861f654949da738c6abadd0c64ce9699c5ebad96b5d77faac87726346430b60275a2e28a4976b2cfba1670e6a29c66f3b8d398a271dadceb15d99a28a38e0050c14b7233e094496eba2a2789bb6be33665665f7434909a9ef9f7593f86df1535b3d36b7eec8cd8d544d121614684982bce5e14bed7a868c91478b2e0e9d8758c27e813a37381f6a81afffc28172f9e172e295553adc844408533162d3ba4f2da7c511546efe7e49525cdfdc8b98c7b25c2b399ce8ecc6e28d8d960fe1c507cffaac6d25456eda3320b1a114fc865041970771058a5efb6a72062321476b72afefdedfc420c0484a58789197a22bd2e2254e45bad184f6b35c8901796d0b4430562332174de8beca0f6fc054a7aede20114a934342930af6a3c5390855f5678ae2d463e2a2ef772852a028c5496f848cd051e366b72335457cf663108d2ff8f2018bc022c90edb6aa2a21bce138d9bae0b2e2c4c18e6fa427d3a5494a97797bcfac6678499fd03b5064eaa9d784d832b168af43e1382edb10372b04f0d6b9e1fec433ac667b9338227723e1d13a8334680b197297549b52467736c89b3ed3346c3eef28aca9"}) (async)
ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) (async, rerun: 64)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async, rerun: 64)
connect$unix(r3, &(0x7f0000001f40)=@file={0x1, './file0\x00'}, 0x6e) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002000)={r0, r3, 0x0, 0xd, &(0x7f0000001fc0)='hash:ip,mark\x00'}, 0x30)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000002040)=0x5, 0x4) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000002080)={0x8, [0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0]}, &(0x7f00000020c0)=0x24)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000002100)={r5, 0x80000001, 0x10}, 0xc) (async, rerun: 32)
r7 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002140)={'wlan1\x00'}) (async)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000002180)={r6, 0x5, 0x8, 0x7f}, 0x10)
chdir(&(0x7f00000021c0)='./file0\x00') (async, rerun: 64)
ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000002200)=0x100000000) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002240)={{0x1, 0x1, 0x18, <r8=>r7, {0x6}}, './file0\x00'})
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000002280), &(0x7f00000022c0)=0x4)
sendmsg$nl_xfrm(r8, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)=@newspdinfo={0x2c, 0x24, 0x800, 0x70bd2b, 0x25dfdbfc, 0x3, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}}, 0x4000840) (async, rerun: 64)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x243140, 0x62, 0x4}, 0x18) (async, rerun: 64)
sendmsg$SOCK_DESTROY(r3, &(0x7f00000026c0)={&(0x7f0000002480), 0xc, &(0x7f0000002680)={&(0x7f00000024c0)={0x1ac, 0x15, 0x20, 0x70bd2d, 0x25dfdbfb, {0x3, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "0654dfb5065007dfc58bb7acc1ac41ccfc58b0e4a61c5dc556d489670bf702a970b8f3855e1a1c87d8783fdbc3d0c6ddb1bae857fd82f1b6004ce8032d7895a9a1aaa9c978b7f5e7c8183197373254cf586b664a582ea2033b250d86bab2121f6bca3906dd102c2a1fca2ea4ee9de5f116a78b7913af1550bd5e7c005e6d7539c0049d9c20db0556426fe51d4dbd33829c0fc448652b6c7d1b606caaf078cfa03f7a21b5c6"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "5e772f152aa2f18f09deaefab78b49e9bfcf2398102949456e66412c55f44e25f9de45a280da4f6e17c7bc47528a54ccfc0b95ef919c20b418bd5b5460d1d06438eae642daf6bbd865892e52878d923476dd0596ad81ba1737628e57173dc1d7ba0705c0936ce74699e3e83cff3ef456094b2b253d2fa8e2402eb46925f75dab316d5a9b2bda5ae29c1a985a1c9f0586dbddbfdfa88e626801840fc4ad10fe7a0a22a97d5d34bfb7b104525e49"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "c87b776a12f28605c8746012424ede39000e31b84f9941b206dfa86c1e5943f7a95590d52b929b1d49e8ee21bbb945a224760b05"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x753fbf613d66ebbf)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x0)

37.154837ms ago: executing program 2 (id=353):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100ff00000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 32)
truncate(&(0x7f0000000200)='./file0\x00', 0xfeffffff) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', <r3=>0x0}) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

26.622958ms ago: executing program 2 (id=354):
io_uring_setup(0x1895, &(0x7f00000002c0))
setfsuid(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x2)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/375], 0x12, 0x9ef, &(0x7f0000000e40)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x5c}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/245, 0xf5}], 0x3, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x3bd081, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000002100)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast2}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x4}, {{@in6=@private1, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0xa, @in6=@dev}]}]}, 0x1bc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'})
fallocate(r2, 0x0, 0x0, 0x1000f4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x10, 0x0, &(0x7f0000000180)="a663f3cb268509f6eb4f5724029c5b02", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0xf8}}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x28, 0x0, 0x10ada85e65c25349, 0x0, 0x0, {{0x6b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003c000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000500))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))

0s ago: executing program 4 (id=355):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x11}}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)

kernel console output (not intermixed with test programs):

ved_data_blocks=0
[   30.916375][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.943856][ T3499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.959117][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   31.077819][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'.
[   31.100676][ T3505] loop3: detected capacity change from 0 to 512
[   31.107368][ T3505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   31.118205][ T3505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.130789][ T3505] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.142908][ T3505] SELinux:  Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped).
[   31.167631][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.230911][ T3515] loop3: detected capacity change from 0 to 128
[   31.239124][ T3515] vfat: Unknown parameter '00000000000000000000'
[   31.265242][ T3519] dccp_invalid_packet: P.Data Offset(172) too large
[   31.274679][ T3519] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   31.317797][ T3475] syz.1.13 (3475) used greatest stack depth: 10512 bytes left
[   31.322318][ T3530] loop0: detected capacity change from 0 to 512
[   31.343367][ T3530] EXT4-fs: Ignoring removed orlov option
[   31.354439][ T3530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102]
[   31.354952][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.378303][ T3530] System zones: 1-12
[   31.382838][ T3530] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.24: casefold flag without casefold feature
[   31.406564][ T3530] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.24: couldn't read orphan inode 15 (err -117)
[   31.419375][ T3530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.434153][ T3530] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.24: Directory hole found for htree leaf block 0
[   31.458680][ T3549] Zero length message leads to an empty skb
[   31.460558][ T3551] loop3: detected capacity change from 0 to 1024
[   31.479765][ T3551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.514906][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.812716][ T3583] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.969020][ T3587] loop3: detected capacity change from 0 to 256
[   32.138871][ T3593] loop3: detected capacity change from 0 to 164
[   32.155383][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.494151][ T3620] can0: slcan on pts1.
[   32.504517][ T3621] can1: slcan on pts2.
[   32.510215][ T3620] FAULT_INJECTION: forcing a failure.
[   32.510215][ T3620] name failslab, interval 1, probability 0, space 0, times 0
[   32.522901][ T3620] CPU: 0 UID: 0 PID: 3620 Comm: syz.0.44 Not tainted 6.11.0-rc3-syzkaller #0
[   32.531746][ T3620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   32.541797][ T3620] Call Trace:
[   32.545062][ T3620]  <TASK>
[   32.547980][ T3620]  dump_stack_lvl+0xf2/0x150
[   32.552621][ T3620]  dump_stack+0x15/0x20
[   32.556829][ T3620]  should_fail_ex+0x229/0x230
[   32.561503][ T3620]  ? kobject_get_path+0x85/0x160
[   32.566439][ T3620]  should_failslab+0x8f/0xb0
[   32.571061][ T3620]  __kmalloc_noprof+0xa5/0x370
[   32.575814][ T3620]  kobject_get_path+0x85/0x160
[   32.580568][ T3620]  kobject_uevent_env+0x1b9/0x550
[   32.585666][ T3620]  kobject_uevent+0x1c/0x30
[   32.590223][ T3620]  __kobject_del+0x8e/0x1a0
[   32.594718][ T3620]  kobject_put+0x123/0x180
[   32.599179][ T3620]  netdev_queue_update_kobjects+0x42f/0x470
[   32.605119][ T3620]  netdev_unregister_kobject+0xc1/0x120
[   32.610658][ T3620]  unregister_netdevice_many_notify+0xd21/0x1110
[   32.616978][ T3620]  ? _raw_spin_unlock+0x26/0x50
[   32.621894][ T3620]  ? __mutex_lock+0x221/0x8e0
[   32.626570][ T3620]  unregister_netdevice_queue+0x1f4/0x220
[   32.632281][ T3620]  unregister_netdev+0x1c/0x30
[   32.637082][ T3620]  unregister_candev+0x15/0x20
[   32.641837][ T3620]  slcan_close+0x46/0xe0
[   32.646067][ T3620]  ? __pfx_slcan_close+0x10/0x10
[   32.651063][ T3620]  tty_ldisc_kill+0x90/0x140
[   32.655674][ T3620]  tty_ldisc_hangup+0x2f4/0x370
[   32.660534][ T3620]  __tty_hangup+0x3c6/0x540
[   32.665023][ T3620]  tty_ioctl+0x613/0xbe0
[   32.669391][ T3620]  ? __pfx_tty_ioctl+0x10/0x10
[   32.674211][ T3620]  __se_sys_ioctl+0xd3/0x150
[   32.678800][ T3620]  __x64_sys_ioctl+0x43/0x50
[   32.683412][ T3620]  x64_sys_call+0x15cc/0x2d60
[   32.688158][ T3620]  do_syscall_64+0xc9/0x1c0
[   32.692654][ T3620]  ? clear_bhb_loop+0x55/0xb0
[   32.697324][ T3620]  ? clear_bhb_loop+0x55/0xb0
[   32.701991][ T3620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.707922][ T3620] RIP: 0033:0x7ff0ca5599f9
[   32.712404][ T3620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.732026][ T3620] RSP: 002b:00007ff0c91b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   32.740510][ T3620] RAX: ffffffffffffffda RBX: 00007ff0ca6f6058 RCX: 00007ff0ca5599f9
[   32.748468][ T3620] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000005
[   32.756505][ T3620] RBP: 00007ff0c91b6090 R08: 0000000000000000 R09: 0000000000000000
[   32.764462][ T3620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   32.772481][ T3620] R13: 0000000000000000 R14: 00007ff0ca6f6058 R15: 00007ffde0da0328
[   32.780442][ T3620]  </TASK>
[   32.790790][ T3625] loop4: detected capacity change from 0 to 512
[   32.801424][ T3625] EXT4-fs: Ignoring removed mblk_io_submit option
[   32.809233][ T3625] EXT4-fs: Ignoring removed i_version option
[   32.816191][ T3621] can1 (unregistered): slcan off pts2.
[   32.816856][ T3625] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.46: invalid block
[   32.833596][ T3620] can0 (unregistered): slcan off pts1.
[   32.839389][ T3625] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.46: couldn't read orphan inode 11 (err -117)
[   32.852375][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.871688][ T3631] loop1: detected capacity change from 0 to 512
[   32.888397][ T3631] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   33.183816][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115775400: rx timeout, send abort
[   33.192115][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115774000: rx timeout, send abort
[   33.200348][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115775400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   33.214640][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115774000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   33.423924][ T3258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.465960][ T3666] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[   33.488558][ T3667] can0: slcan on pts0.
[   33.492860][ T3665] loop4: detected capacity change from 0 to 512
[   33.526327][ T3665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.538889][ T3667] can0 (unregistered): slcan off pts0.
[   33.556298][ T3665] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.587320][ T3665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.596774][ T3671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'.
[   33.818474][ T3684] loop4: detected capacity change from 0 to 128
[   33.917168][ T3690] can0: slcan on pts1.
[   33.923813][ T3690] FAULT_INJECTION: forcing a failure.
[   33.923813][ T3690] name failslab, interval 1, probability 0, space 0, times 0
[   33.936486][ T3690] CPU: 0 UID: 0 PID: 3690 Comm: syz.0.60 Not tainted 6.11.0-rc3-syzkaller #0
[   33.945364][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   33.955481][ T3690] Call Trace:
[   33.958770][ T3690]  <TASK>
[   33.961697][ T3690]  dump_stack_lvl+0xf2/0x150
[   33.966339][ T3690]  dump_stack+0x15/0x20
[   33.970525][ T3690]  should_fail_ex+0x229/0x230
[   33.975275][ T3690]  ? __alloc_skb+0x10b/0x310
[   33.979868][ T3690]  should_failslab+0x8f/0xb0
[   33.984505][ T3690]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   33.990422][ T3690]  __alloc_skb+0x10b/0x310
[   33.994839][ T3690]  alloc_uevent_skb+0x5b/0x120
[   33.999810][ T3690]  kobject_uevent_net_broadcast+0xfb/0x420
[   34.005662][ T3690]  kobject_uevent_env+0x415/0x550
[   34.010764][ T3690]  kobject_uevent+0x1c/0x30
[   34.015270][ T3690]  __kobject_del+0x8e/0x1a0
[   34.019839][ T3690]  kobject_put+0x123/0x180
[   34.024323][ T3690]  netdev_queue_update_kobjects+0x42f/0x470
[   34.030254][ T3690]  netdev_unregister_kobject+0xc1/0x120
[   34.035804][ T3690]  unregister_netdevice_many_notify+0xd21/0x1110
[   34.042158][ T3690]  unregister_netdevice_queue+0x1f4/0x220
[   34.047932][ T3690]  unregister_netdev+0x1c/0x30
[   34.052701][ T3690]  unregister_candev+0x15/0x20
[   34.057501][ T3690]  slcan_close+0x46/0xe0
[   34.061768][ T3690]  ? __pfx_slcan_close+0x10/0x10
[   34.066709][ T3690]  tty_ldisc_kill+0x90/0x140
[   34.071306][ T3690]  tty_ldisc_hangup+0x2f4/0x370
[   34.076153][ T3690]  __tty_hangup+0x3c6/0x540
[   34.080734][ T3690]  tty_ioctl+0x613/0xbe0
[   34.084973][ T3690]  ? __pfx_tty_ioctl+0x10/0x10
[   34.089781][ T3690]  __se_sys_ioctl+0xd3/0x150
[   34.094382][ T3690]  __x64_sys_ioctl+0x43/0x50
[   34.098977][ T3690]  x64_sys_call+0x15cc/0x2d60
[   34.103735][ T3690]  do_syscall_64+0xc9/0x1c0
[   34.108246][ T3690]  ? clear_bhb_loop+0x55/0xb0
[   34.113065][ T3690]  ? clear_bhb_loop+0x55/0xb0
[   34.117751][ T3690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.123641][ T3690] RIP: 0033:0x7ff0ca5599f9
[   34.128088][ T3690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.147742][ T3690] RSP: 002b:00007ff0c91b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   34.156187][ T3690] RAX: ffffffffffffffda RBX: 00007ff0ca6f6058 RCX: 00007ff0ca5599f9
[   34.164188][ T3690] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000005
[   34.172152][ T3690] RBP: 00007ff0c91b6090 R08: 0000000000000000 R09: 0000000000000000
[   34.180160][ T3690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   34.188160][ T3690] R13: 0000000000000000 R14: 00007ff0ca6f6058 R15: 00007ffde0da0328
[   34.196129][ T3690]  </TASK>
[   34.210906][ T3691] can0: slcan on pts2.
[   34.266264][ T3690] can0 (unregistered): slcan off pts1.
[   34.306346][ T3691] can0 (unregistered): slcan off pts2.
[   34.328199][ T3697] loop0: detected capacity change from 0 to 1024
[   34.337269][ T3697] EXT4-fs: Ignoring removed nobh option
[   34.342881][ T3697] EXT4-fs: Ignoring removed nomblk_io_submit option
[   34.358230][ T3697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.372127][ T3697] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.63: bg 0: block 392: padding at end of block bitmap is not set
[   34.389607][ T3706] can0: slcan on pts1.
[   34.395042][ T3706] FAULT_INJECTION: forcing a failure.
[   34.395042][ T3706] name failslab, interval 1, probability 0, space 0, times 0
[   34.407897][ T3706] CPU: 1 UID: 0 PID: 3706 Comm: syz.4.66 Not tainted 6.11.0-rc3-syzkaller #0
[   34.416665][ T3706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   34.426779][ T3706] Call Trace:
[   34.430041][ T3706]  <TASK>
[   34.433018][ T3706]  dump_stack_lvl+0xf2/0x150
[   34.437639][ T3706]  dump_stack+0x15/0x20
[   34.441787][ T3706]  should_fail_ex+0x229/0x230
[   34.446491][ T3706]  ? kobject_uevent_env+0x1a4/0x550
[   34.451745][ T3706]  should_failslab+0x8f/0xb0
[   34.456330][ T3706]  __kmalloc_cache_noprof+0x4b/0x2a0
[   34.461674][ T3706]  ? up_write+0x30/0xf0
[   34.465822][ T3706]  kobject_uevent_env+0x1a4/0x550
[   34.470846][ T3706]  kobject_uevent+0x1c/0x30
[   34.475343][ T3706]  __kobject_del+0x8e/0x1a0
[   34.479838][ T3706]  kobject_put+0x123/0x180
[   34.484346][ T3706]  net_rx_queue_update_kobjects+0x3d5/0x410
[   34.490257][ T3706]  ? nlmsg_notify+0xca/0x170
[   34.494832][ T3706]  ? nlmsg_notify+0x12e/0x170
[   34.499532][ T3706]  netdev_unregister_kobject+0xb4/0x120
[   34.505121][ T3706]  unregister_netdevice_many_notify+0xd21/0x1110
[   34.511450][ T3706]  unregister_netdevice_queue+0x1f4/0x220
[   34.517197][ T3706]  unregister_netdev+0x1c/0x30
[   34.522027][ T3706]  unregister_candev+0x15/0x20
[   34.526782][ T3706]  slcan_close+0x46/0xe0
[   34.531066][ T3706]  ? __pfx_slcan_close+0x10/0x10
[   34.536067][ T3706]  tty_ldisc_kill+0x90/0x140
[   34.540649][ T3706]  tty_ldisc_hangup+0x2f4/0x370
[   34.545486][ T3706]  __tty_hangup+0x3c6/0x540
[   34.550039][ T3706]  tty_ioctl+0x613/0xbe0
[   34.554356][ T3706]  ? __pfx_tty_ioctl+0x10/0x10
[   34.559221][ T3706]  __se_sys_ioctl+0xd3/0x150
[   34.563802][ T3706]  __x64_sys_ioctl+0x43/0x50
[   34.568448][ T3706]  x64_sys_call+0x15cc/0x2d60
[   34.573186][ T3706]  do_syscall_64+0xc9/0x1c0
[   34.577692][ T3706]  ? clear_bhb_loop+0x55/0xb0
[   34.582375][ T3706]  ? clear_bhb_loop+0x55/0xb0
[   34.587271][ T3706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.593154][ T3706] RIP: 0033:0x7f82e08099f9
[   34.597610][ T3706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.617830][ T3706] RSP: 002b:00007f82df466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   34.626278][ T3706] RAX: ffffffffffffffda RBX: 00007f82e09a6058 RCX: 00007f82e08099f9
[   34.634235][ T3706] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   34.642262][ T3706] RBP: 00007f82df466090 R08: 0000000000000000 R09: 0000000000000000
[   34.650216][ T3706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.658169][ T3706] R13: 0000000000000000 R14: 00007f82e09a6058 R15: 00007ffda5d18db8
[   34.666227][ T3706]  </TASK>
[   34.694071][ T3713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'.
[   34.705763][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.716618][ T3706] can0 (unregistered): slcan off pts1.
[   34.753095][ T3721] loop1: detected capacity change from 0 to 1024
[   34.759783][ T3721] EXT4-fs: dax option not supported
[   34.800225][ T3725] loop3: detected capacity change from 0 to 4096
[   34.810529][ T3733] can0: slcan on pts0.
[   34.816948][ T3725] EXT4-fs: Ignoring removed nobh option
[   34.822565][ T3725] EXT4-fs: Ignoring removed i_version option
[   34.832829][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.835411][ T3731] loop1: detected capacity change from 0 to 1024
[   34.856258][ T3733] can0 (unregistered): slcan off pts0.
[   34.865133][ T3461] udevd[3461]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory
[   34.877630][ T3731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.900685][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.930456][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.965709][ T3745] batadv_slave_0: entered promiscuous mode
[   34.980481][   T29] kauditd_printk_skb: 206 callbacks suppressed
[   34.980494][   T29] audit: type=1400 audit(1723484918.376:361): avc:  denied  { create } for  pid=3742 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   35.007179][   T29] audit: type=1400 audit(1723484918.376:362): avc:  denied  { listen } for  pid=3742 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   35.026674][   T29] audit: type=1400 audit(1723484918.376:363): avc:  denied  { ioctl } for  pid=3742 comm="syz.1.78" path="socket:[5296]" dev="sockfs" ino=5296 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   35.051130][   T29] audit: type=1400 audit(1723484918.376:364): avc:  denied  { bind } for  pid=3742 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.072034][   T29] audit: type=1400 audit(1723484918.456:365): avc:  denied  { setopt } for  pid=3746 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.096992][ T3744] batadv_slave_0: left promiscuous mode
[   35.141894][ T3754] loop0: detected capacity change from 0 to 512
[   35.148447][ T3754] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   35.163366][   T29] audit: type=1326 audit(1723484918.556:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ca5599f9 code=0x7ffc0000
[   35.186793][   T29] audit: type=1326 audit(1723484918.556:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ca5599f9 code=0x7ffc0000
[   35.212440][   T29] audit: type=1326 audit(1723484918.556:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ff0ca5599f9 code=0x7ffc0000
[   35.235706][   T29] audit: type=1326 audit(1723484918.556:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0ca5509a7 code=0x7ffc0000
[   35.259616][   T29] audit: type=1326 audit(1723484918.556:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0ca4f5369 code=0x7ffc0000
[   35.261026][ T3757] loop0: detected capacity change from 0 to 8192
[   35.292066][ T3755] can0: slcan on pts1.
[   35.336423][ T3755] can0 (unregistered): slcan off pts1.
[   35.336854][ T3757]  loop0: p1 p2 p4 < >
[   35.345991][ T3757] loop0: partition table partially beyond EOD, truncated
[   35.354327][ T3757] loop0: p1 size 108986237 extends beyond EOD, truncated
[   35.361975][ T3757] loop0: p2 start 65535 is beyond EOD, truncated
[   35.368441][ T3757] loop0: p4 start 50331648 is beyond EOD, truncated
[   35.414529][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   35.435207][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   35.453809][ T3766] can0: slcan on pts1.
[   35.459180][ T3766] FAULT_INJECTION: forcing a failure.
[   35.459180][ T3766] name failslab, interval 1, probability 0, space 0, times 0
[   35.471809][ T3766] CPU: 1 UID: 0 PID: 3766 Comm: syz.3.85 Not tainted 6.11.0-rc3-syzkaller #0
[   35.480547][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   35.490638][ T3766] Call Trace:
[   35.493894][ T3766]  <TASK>
[   35.496843][ T3766]  dump_stack_lvl+0xf2/0x150
[   35.501432][ T3766]  dump_stack+0x15/0x20
[   35.505596][ T3766]  should_fail_ex+0x229/0x230
[   35.510330][ T3766]  ? kobject_get_path+0x85/0x160
[   35.515275][ T3766]  should_failslab+0x8f/0xb0
[   35.519849][ T3766]  __kmalloc_noprof+0xa5/0x370
[   35.524635][ T3766]  kobject_get_path+0x85/0x160
[   35.529387][ T3766]  kobject_uevent_env+0x1b9/0x550
[   35.534415][ T3766]  kobject_uevent+0x1c/0x30
[   35.538976][ T3766]  __kobject_del+0x8e/0x1a0
[   35.543464][ T3766]  kobject_put+0x123/0x180
[   35.547929][ T3766]  net_rx_queue_update_kobjects+0x3d5/0x410
[   35.553819][ T3766]  ? nlmsg_notify+0xca/0x170
[   35.558424][ T3766]  ? nlmsg_notify+0x12e/0x170
[   35.563078][ T3766]  netdev_unregister_kobject+0xb4/0x120
[   35.568657][ T3766]  unregister_netdevice_many_notify+0xd21/0x1110
[   35.574976][ T3766]  unregister_netdevice_queue+0x1f4/0x220
[   35.580705][ T3766]  unregister_netdev+0x1c/0x30
[   35.585453][ T3766]  unregister_candev+0x15/0x20
[   35.590195][ T3766]  slcan_close+0x46/0xe0
[   35.594558][ T3766]  ? __pfx_slcan_close+0x10/0x10
[   35.599474][ T3766]  tty_ldisc_kill+0x90/0x140
[   35.604084][ T3766]  tty_ldisc_hangup+0x2f4/0x370
[   35.608911][ T3766]  __tty_hangup+0x3c6/0x540
[   35.613397][ T3766]  tty_ioctl+0x613/0xbe0
[   35.617652][ T3766]  ? __pfx_tty_ioctl+0x10/0x10
[   35.622403][ T3766]  __se_sys_ioctl+0xd3/0x150
[   35.626994][ T3766]  __x64_sys_ioctl+0x43/0x50
[   35.631585][ T3766]  x64_sys_call+0x15cc/0x2d60
[   35.636349][ T3766]  do_syscall_64+0xc9/0x1c0
[   35.640858][ T3766]  ? clear_bhb_loop+0x55/0xb0
[   35.645589][ T3766]  ? clear_bhb_loop+0x55/0xb0
[   35.650395][ T3766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.656305][ T3766] RIP: 0033:0x7f9dbfd199f9
[   35.660709][ T3766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.680364][ T3766] RSP: 002b:00007f9dbe976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   35.688786][ T3766] RAX: ffffffffffffffda RBX: 00007f9dbfeb6058 RCX: 00007f9dbfd199f9
[   35.696741][ T3766] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   35.704756][ T3766] RBP: 00007f9dbe976090 R08: 0000000000000000 R09: 0000000000000000
[   35.712798][ T3766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.720750][ T3766] R13: 0000000000000000 R14: 00007f9dbfeb6058 R15: 00007fff36df67c8
[   35.728714][ T3766]  </TASK>
[   35.751121][ T3771] can0: slcan on pts2.
[   35.767884][ T3771] FAULT_INJECTION: forcing a failure.
[   35.767884][ T3771] name failslab, interval 1, probability 0, space 0, times 0
[   35.771265][ T3775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.780527][ T3771] CPU: 1 UID: 0 PID: 3771 Comm: syz.0.87 Not tainted 6.11.0-rc3-syzkaller #0
[   35.797610][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   35.807734][ T3771] Call Trace:
[   35.808998][ T3777] loop4: detected capacity change from 0 to 128
[   35.810994][ T3771]  <TASK>
[   35.811003][ T3771]  dump_stack_lvl+0xf2/0x150
[   35.824807][ T3771]  dump_stack+0x15/0x20
[   35.828963][ T3771]  should_fail_ex+0x229/0x230
[   35.833666][ T3771]  ? kobject_uevent_env+0x1a4/0x550
[   35.838924][ T3771]  should_failslab+0x8f/0xb0
[   35.843508][ T3771]  __kmalloc_cache_noprof+0x4b/0x2a0
[   35.848783][ T3771]  ? __pfx_dev_uevent_name+0x10/0x10
[   35.854052][ T3771]  kobject_uevent_env+0x1a4/0x550
[   35.859135][ T3771]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   35.865030][ T3771]  ? device_pm_check_callbacks+0x632/0x650
[   35.870869][ T3771]  kobject_uevent+0x1c/0x30
[   35.875361][ T3771]  device_del+0x6fa/0x780
[   35.879721][ T3771]  ? pm_runtime_set_memalloc_noio+0x180/0x1a0
[   35.885772][ T3771]  netdev_unregister_kobject+0x10c/0x120
[   35.891396][ T3771]  unregister_netdevice_many_notify+0xd21/0x1110
[   35.897717][ T3771]  unregister_netdevice_queue+0x1f4/0x220
[   35.903452][ T3771]  unregister_netdev+0x1c/0x30
[   35.908202][ T3771]  unregister_candev+0x15/0x20
[   35.913058][ T3771]  slcan_close+0x46/0xe0
[   35.917294][ T3771]  ? __pfx_slcan_close+0x10/0x10
[   35.922235][ T3771]  tty_ldisc_kill+0x90/0x140
[   35.926811][ T3771]  tty_ldisc_hangup+0x2f4/0x370
[   35.931683][ T3771]  __tty_hangup+0x3c6/0x540
[   35.936171][ T3771]  tty_ioctl+0x613/0xbe0
[   35.940493][ T3771]  ? __pfx_tty_ioctl+0x10/0x10
[   35.945325][ T3771]  __se_sys_ioctl+0xd3/0x150
[   35.949988][ T3771]  __x64_sys_ioctl+0x43/0x50
[   35.954569][ T3771]  x64_sys_call+0x15cc/0x2d60
[   35.959317][ T3771]  do_syscall_64+0xc9/0x1c0
[   35.963813][ T3771]  ? clear_bhb_loop+0x55/0xb0
[   35.968482][ T3771]  ? clear_bhb_loop+0x55/0xb0
[   35.973187][ T3771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.979128][ T3771] RIP: 0033:0x7ff0ca5599f9
[   35.983524][ T3771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.003114][ T3771] RSP: 002b:00007ff0c91b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   36.011542][ T3771] RAX: ffffffffffffffda RBX: 00007ff0ca6f6058 RCX: 00007ff0ca5599f9
[   36.019566][ T3771] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000005
[   36.027522][ T3771] RBP: 00007ff0c91b6090 R08: 0000000000000000 R09: 0000000000000000
[   36.035477][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   36.043498][ T3771] R13: 0000000000000000 R14: 00007ff0ca6f6058 R15: 00007ffde0da0328
[   36.051462][ T3771]  </TASK>
[   36.055458][ T3766] can0 (unregistered): slcan off pts1.
[   36.061059][ T3775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.063179][ T3777] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.071908][ T3775] process 'syz.1.91' launched '/dev/fd/3' with NULL argv: empty string added
[   36.082455][ T3777] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   36.136439][ T3771] can0 (unregistered): slcan off pts2.
[   36.188539][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'.
[   36.198648][ T3258] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   36.222164][ T3258] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   36.237861][ T3258] EXT4-fs error (device loop4): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   36.276171][ T3258] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   36.291669][ T3258] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   36.314862][ T3258] EXT4-fs error (device loop4): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   36.354021][ T3258] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   36.369408][ T3258] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   36.384903][ T3258] EXT4-fs error (device loop4): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   36.398827][ T3258] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   36.443925][ T3804] loop2: detected capacity change from 0 to 2048
[   36.662001][ T3815] pim6reg: entered allmulticast mode
[   36.668125][ T3815] pim6reg: left allmulticast mode
[   36.810038][ T3821] can0: slcan on pts1.
[   36.815104][ T3821] FAULT_INJECTION: forcing a failure.
[   36.815104][ T3821] name failslab, interval 1, probability 0, space 0, times 0
[   36.827891][ T3821] CPU: 1 UID: 0 PID: 3821 Comm: syz.1.105 Not tainted 6.11.0-rc3-syzkaller #0
[   36.836732][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   36.846802][ T3821] Call Trace:
[   36.850061][ T3821]  <TASK>
[   36.852970][ T3821]  dump_stack_lvl+0xf2/0x150
[   36.857575][ T3821]  dump_stack+0x15/0x20
[   36.861772][ T3821]  should_fail_ex+0x229/0x230
[   36.866447][ T3821]  ? __alloc_skb+0x10b/0x310
[   36.871026][ T3821]  should_failslab+0x8f/0xb0
[   36.875646][ T3821]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   36.881439][ T3821]  __alloc_skb+0x10b/0x310
[   36.885840][ T3821]  alloc_uevent_skb+0x5b/0x120
[   36.890588][ T3821]  kobject_uevent_net_broadcast+0xfb/0x420
[   36.896468][ T3821]  kobject_uevent_env+0x415/0x550
[   36.901488][ T3821]  kobject_uevent+0x1c/0x30
[   36.905981][ T3821]  __kobject_del+0x8e/0x1a0
[   36.910555][ T3821]  kobject_put+0x123/0x180
[   36.914960][ T3821]  net_rx_queue_update_kobjects+0x3d5/0x410
[   36.920844][ T3821]  ? nlmsg_notify+0xca/0x170
[   36.925420][ T3821]  ? nlmsg_notify+0x12e/0x170
[   36.930084][ T3821]  netdev_unregister_kobject+0xb4/0x120
[   36.935857][ T3821]  unregister_netdevice_many_notify+0xd21/0x1110
[   36.942289][ T3821]  unregister_netdevice_queue+0x1f4/0x220
[   36.948043][ T3821]  unregister_netdev+0x1c/0x30
[   36.952791][ T3821]  unregister_candev+0x15/0x20
[   36.957598][ T3821]  slcan_close+0x46/0xe0
[   36.961827][ T3821]  ? __pfx_slcan_close+0x10/0x10
[   36.966752][ T3821]  tty_ldisc_kill+0x90/0x140
[   36.971330][ T3821]  tty_ldisc_hangup+0x2f4/0x370
[   36.976207][ T3821]  __tty_hangup+0x3c6/0x540
[   36.980704][ T3821]  tty_ioctl+0x613/0xbe0
[   36.984930][ T3821]  ? __pfx_tty_ioctl+0x10/0x10
[   36.989717][ T3821]  __se_sys_ioctl+0xd3/0x150
[   36.994312][ T3821]  __x64_sys_ioctl+0x43/0x50
[   36.998966][ T3821]  x64_sys_call+0x15cc/0x2d60
[   37.003681][ T3821]  do_syscall_64+0xc9/0x1c0
[   37.008234][ T3821]  ? clear_bhb_loop+0x55/0xb0
[   37.012900][ T3821]  ? clear_bhb_loop+0x55/0xb0
[   37.017567][ T3821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.023468][ T3821] RIP: 0033:0x7f49bae999f9
[   37.027865][ T3821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.047533][ T3821] RSP: 002b:00007f49b9af6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   37.055932][ T3821] RAX: ffffffffffffffda RBX: 00007f49bb036058 RCX: 00007f49bae999f9
[   37.063907][ T3821] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   37.071860][ T3821] RBP: 00007f49b9af6090 R08: 0000000000000000 R09: 0000000000000000
[   37.079812][ T3821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.087765][ T3821] R13: 0000000000000000 R14: 00007f49bb036058 R15: 00007ffed28dc698
[   37.095801][ T3821]  </TASK>
[   37.141710][ T3823] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[   37.149405][ T3823] netlink: 'syz.0.106': attribute type 2 has an invalid length.
[   37.156316][ T3821] can0 (unregistered): slcan off pts1.
[   37.157254][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'.
[   37.203781][ T3831] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614)
[   37.213935][ T3831] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   37.260844][ T3839] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[   37.272156][ T3839] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET)
[   37.292936][ T3841] loop0: detected capacity change from 0 to 2048
[   37.308301][ T3841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.323980][ T3258] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.335334][ T3841] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   37.355968][ T1572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.376201][ T3841] EXT4-fs (loop0): Remounting filesystem read-only
[   37.398490][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.418404][ T3841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.429705][ T1572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.440184][ T3841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.450076][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.500838][ T1572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.549881][ T1572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.653212][ T3864] loop2: detected capacity change from 0 to 2048
[   37.670319][ T1572] bridge_slave_1: left allmulticast mode
[   37.676009][ T1572] bridge_slave_1: left promiscuous mode
[   37.681857][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.690977][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.716352][ T1572] bridge_slave_0: left allmulticast mode
[   37.722039][ T1572] bridge_slave_0: left promiscuous mode
[   37.727729][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.762710][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.864901][ T1572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   37.868075][ T1572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   37.881865][ T1572] bond0 (unregistering): Released all slaves
[   37.951183][ T3853] chnl_net:caif_netlink_parms(): no params data found
[   37.961112][ T3841] syz.0.112 (3841) used greatest stack depth: 9296 bytes left
[   37.969316][ T1572] IPVS: stopping backup sync thread 3666 ...
[   38.006769][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.026231][ T1572] hsr_slave_0: left promiscuous mode
[   38.048626][ T1572] hsr_slave_1: left promiscuous mode
[   38.058545][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.066009][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_0
[   38.076537][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.084076][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_1
[   38.112851][ T1572] veth1_macvtap: left promiscuous mode
[   38.116624][ T3884] 9pnet: Could not find request transport: nd
[   38.118396][ T1572] veth0_macvtap: left promiscuous mode
[   38.129189][ T3884] netlink: 'syz.0.121': attribute type 1 has an invalid length.
[   38.129881][ T1572] veth1_vlan: left promiscuous mode
[   38.137452][ T3884] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.121'.
[   38.142607][ T1572] veth0_vlan: left promiscuous mode
[   38.226906][ T1572] team0 (unregistering): Port device team_slave_1 removed
[   38.237693][ T1572] team0 (unregistering): Port device team_slave_0 removed
[   38.274004][ T3874] can0: slcan on pts0.
[   38.319063][ T3853] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.326356][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.335790][ T3898] loop1: detected capacity change from 0 to 2048
[   38.336324][ T3853] bridge_slave_0: entered allmulticast mode
[   38.348998][ T3853] bridge_slave_0: entered promiscuous mode
[   38.355911][ T3853] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.363086][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.370617][ T3880] can0 (unregistered): slcan off pts0.
[   38.382627][ T3853] bridge_slave_1: entered allmulticast mode
[   38.391497][ T3898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.394006][ T3853] bridge_slave_1: entered promiscuous mode
[   38.423522][ T3904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'.
[   38.454450][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.469977][ T3910] loop3: detected capacity change from 0 to 512
[   38.477597][ T3910] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   38.484024][ T3853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.512258][ T3909] loop2: detected capacity change from 0 to 2048
[   38.523056][ T3853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.548560][ T3919] loop3: detected capacity change from 0 to 1024
[   38.550188][ T3853] team0: Port device team_slave_0 added
[   38.555145][ T3919] EXT4-fs: Ignoring removed orlov option
[   38.566162][ T3919] EXT4-fs: Ignoring removed nomblk_io_submit option
[   38.566427][ T3853] team0: Port device team_slave_1 added
[   38.582989][ T3909] netlink: 'syz.2.129': attribute type 5 has an invalid length.
[   38.597568][ T3919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.617621][ T3919] ipt_ECN: cannot use operation on non-tcp rule
[   38.625305][ T3853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.632312][ T3853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.658296][ T3853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.680738][ T3931] loop2: detected capacity change from 0 to 512
[   38.689769][ T3931] ext4: Unknown parameter ''
[   38.717226][ T3853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.724182][ T3853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.750286][ T3853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.777734][ T3941] can0: slcan on pts2.
[   38.791900][ T3941] FAULT_INJECTION: forcing a failure.
[   38.791900][ T3941] name failslab, interval 1, probability 0, space 0, times 0
[   38.804526][ T3941] CPU: 0 UID: 0 PID: 3941 Comm: syz.2.135 Not tainted 6.11.0-rc3-syzkaller #0
[   38.813433][ T3941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   38.823533][ T3941] Call Trace:
[   38.826815][ T3941]  <TASK>
[   38.829752][ T3941]  dump_stack_lvl+0xf2/0x150
[   38.834427][ T3941]  dump_stack+0x15/0x20
[   38.838603][ T3941]  should_fail_ex+0x229/0x230
[   38.843285][ T3941]  ? kobject_uevent_env+0x1a4/0x550
[   38.848494][ T3941]  should_failslab+0x8f/0xb0
[   38.853100][ T3941]  __kmalloc_cache_noprof+0x4b/0x2a0
[   38.858400][ T3941]  ? up_write+0x30/0xf0
[   38.862561][ T3941]  kobject_uevent_env+0x1a4/0x550
[   38.867596][ T3941]  kobject_uevent+0x1c/0x30
[   38.872146][ T3941]  __kobject_del+0x8e/0x1a0
[   38.876641][ T3941]  kobject_put+0x123/0x180
[   38.881086][ T3941]  netdev_queue_update_kobjects+0x42f/0x470
[   38.887037][ T3941]  netdev_unregister_kobject+0xc1/0x120
[   38.892660][ T3941]  unregister_netdevice_many_notify+0xd21/0x1110
[   38.899075][ T3941]  ? _raw_spin_unlock+0x26/0x50
[   38.903963][ T3941]  ? __mutex_lock+0x221/0x8e0
[   38.908702][ T3941]  unregister_netdevice_queue+0x1f4/0x220
[   38.914497][ T3941]  unregister_netdev+0x1c/0x30
[   38.919263][ T3941]  unregister_candev+0x15/0x20
[   38.924110][ T3941]  slcan_close+0x46/0xe0
[   38.928363][ T3941]  ? __pfx_slcan_close+0x10/0x10
[   38.933303][ T3941]  tty_ldisc_kill+0x90/0x140
[   38.937927][ T3941]  tty_ldisc_hangup+0x2f4/0x370
[   38.942772][ T3941]  __tty_hangup+0x3c6/0x540
[   38.947366][ T3941]  tty_ioctl+0x613/0xbe0
[   38.951596][ T3941]  ? __pfx_tty_ioctl+0x10/0x10
[   38.956504][ T3941]  __se_sys_ioctl+0xd3/0x150
[   38.961136][ T3941]  __x64_sys_ioctl+0x43/0x50
[   38.965766][ T3941]  x64_sys_call+0x15cc/0x2d60
[   38.970438][ T3941]  do_syscall_64+0xc9/0x1c0
[   38.975008][ T3941]  ? clear_bhb_loop+0x55/0xb0
[   38.979677][ T3941]  ? clear_bhb_loop+0x55/0xb0
[   38.984366][ T3941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.990269][ T3941] RIP: 0033:0x7f76c8c799f9
[   38.994668][ T3941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.014306][ T3941] RSP: 002b:00007f76c78d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   39.022703][ T3941] RAX: ffffffffffffffda RBX: 00007f76c8e16058 RCX: 00007f76c8c799f9
[   39.030659][ T3941] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   39.038650][ T3941] RBP: 00007f76c78d6090 R08: 0000000000000000 R09: 0000000000000000
[   39.046607][ T3941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   39.054586][ T3941] R13: 0000000000000000 R14: 00007f76c8e16058 R15: 00007ffd4a2a4fd8
[   39.062595][ T3941]  </TASK>
[   39.076969][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.095812][ T3853] hsr_slave_0: entered promiscuous mode
[   39.100678][ T3945] 9pnet: p9_errstr2errno: server reported unknown error 
[   39.108549][ T3941] can0 (unregistered): slcan off pts2.
[   39.109481][ T3853] hsr_slave_1: entered promiscuous mode
[   39.120188][ T3853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.128724][ T3949] loop0: detected capacity change from 0 to 512
[   39.135642][ T3853] Cannot create hsr debugfs directory
[   39.145859][ T3949] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   39.192463][ T3953] loop2: detected capacity change from 0 to 2048
[   39.228520][ T3953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.238170][ T3956] loop0: detected capacity change from 0 to 256
[   39.256825][ T3961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'.
[   39.300539][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.363114][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'.
[   39.396268][ T3979] netlink: 25 bytes leftover after parsing attributes in process `syz.0.149'.
[   39.505052][ T3988] loop3: detected capacity change from 0 to 512
[   39.512855][ T3988] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   39.561221][ T3853] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   39.577509][ T3992] xt_addrtype: ipv6 does not support BROADCAST matching
[   39.590016][ T3853] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   39.608514][ T3996] can0: slcan on pts1.
[   39.614352][ T3853] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   39.636587][ T3853] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   39.654420][ T3996] FAULT_INJECTION: forcing a failure.
[   39.654420][ T3996] name failslab, interval 1, probability 0, space 0, times 0
[   39.667068][ T3996] CPU: 1 UID: 0 PID: 3996 Comm: syz.1.151 Not tainted 6.11.0-rc3-syzkaller #0
[   39.675994][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   39.686104][ T3996] Call Trace:
[   39.689409][ T3996]  <TASK>
[   39.692326][ T3996]  dump_stack_lvl+0xf2/0x150
[   39.696945][ T3996]  dump_stack+0x15/0x20
[   39.701093][ T3996]  should_fail_ex+0x229/0x230
[   39.705793][ T3996]  ? kobject_get_path+0x85/0x160
[   39.710752][ T3996]  should_failslab+0x8f/0xb0
[   39.715335][ T3996]  __kmalloc_noprof+0xa5/0x370
[   39.720088][ T3996]  kobject_get_path+0x85/0x160
[   39.724842][ T3996]  kobject_uevent_env+0x1b9/0x550
[   39.729859][ T3996]  kobject_uevent+0x1c/0x30
[   39.734490][ T3996]  __kobject_del+0x8e/0x1a0
[   39.739011][ T3996]  kobject_put+0x123/0x180
[   39.743493][ T3996]  netdev_queue_update_kobjects+0x42f/0x470
[   39.749376][ T3996]  netdev_unregister_kobject+0xc1/0x120
[   39.754908][ T3996]  unregister_netdevice_many_notify+0xd21/0x1110
[   39.761304][ T3996]  ? _raw_spin_unlock+0x26/0x50
[   39.766147][ T3996]  ? __mutex_lock+0x221/0x8e0
[   39.770813][ T3996]  unregister_netdevice_queue+0x1f4/0x220
[   39.776518][ T3996]  unregister_netdev+0x1c/0x30
[   39.781270][ T3996]  unregister_candev+0x15/0x20
[   39.786108][ T3996]  slcan_close+0x46/0xe0
[   39.790339][ T3996]  ? __pfx_slcan_close+0x10/0x10
[   39.795332][ T3996]  tty_ldisc_kill+0x90/0x140
[   39.799938][ T3996]  tty_ldisc_hangup+0x2f4/0x370
[   39.804836][ T3996]  __tty_hangup+0x3c6/0x540
[   39.809326][ T3996]  tty_ioctl+0x613/0xbe0
[   39.813555][ T3996]  ? __pfx_tty_ioctl+0x10/0x10
[   39.818305][ T3996]  __se_sys_ioctl+0xd3/0x150
[   39.823005][ T3996]  __x64_sys_ioctl+0x43/0x50
[   39.827657][ T3996]  x64_sys_call+0x15cc/0x2d60
[   39.832327][ T3996]  do_syscall_64+0xc9/0x1c0
[   39.836822][ T3996]  ? clear_bhb_loop+0x55/0xb0
[   39.841488][ T3996]  ? clear_bhb_loop+0x55/0xb0
[   39.846235][ T3996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.852139][ T3996] RIP: 0033:0x7f49bae999f9
[   39.856538][ T3996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.876193][ T3996] RSP: 002b:00007f49b9af6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   39.884655][ T3996] RAX: ffffffffffffffda RBX: 00007f49bb036058 RCX: 00007f49bae999f9
[   39.892630][ T3996] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   39.900664][ T3996] RBP: 00007f49b9af6090 R08: 0000000000000000 R09: 0000000000000000
[   39.908619][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   39.916574][ T3996] R13: 0000000000000000 R14: 00007f49bb036058 R15: 00007ffed28dc698
[   39.924566][ T3996]  </TASK>
[   39.932851][ T4005] loop3: detected capacity change from 0 to 2048
[   39.960044][ T4005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.986415][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.999672][ T3853] 8021q: adding VLAN 0 to HW filter on device team0
[   40.006829][ T3996] can0 (unregistered): slcan off pts1.
[   40.012327][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.014792][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.028428][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.047431][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.054515][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.068714][ T4014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'.
[   40.079017][ T4012] loop2: detected capacity change from 0 to 512
[   40.103557][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'.
[   40.108034][ T4012] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.157: corrupted in-inode xattr: invalid ea_ino
[   40.128790][ T4018] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   40.133766][ T4012] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.157: couldn't read orphan inode 15 (err -117)
[   40.201221][ T4012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.266286][ T3853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.368158][ T4039] loop0: detected capacity change from 0 to 2048
[   40.402925][ T4043] capability: warning: `syz.3.166' uses deprecated v2 capabilities in a way that may be insecure
[   40.415889][ T4046] can0: slcan on pts1.
[   40.420903][ T4039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.437971][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   40.437983][   T29] audit: type=1400 audit(1723484923.836:421): avc:  denied  { listen } for  pid=4041 comm="syz.3.166" laddr=0:0:0:1:: faddr=::ffff:100:0:0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.496222][   T29] audit: type=1400 audit(1723484923.886:422): avc:  denied  { ioctl } for  pid=4038 comm="syz.0.165" path="socket:[4810]" dev="sockfs" ino=4810 ioctlcmd=0x89b1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   40.507099][ T4039] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.165: bg 0: block 2: invalid block bitmap
[   40.520584][   T29] audit: type=1400 audit(1723484923.896:423): avc:  denied  { rename } for  pid=4038 comm="syz.0.165" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.534780][ T4050] can0 (unregistered): slcan off pts1.
[   40.611738][ T3853] veth0_vlan: entered promiscuous mode
[   40.618660][ T4039] EXT4-fs (loop0): Remounting filesystem read-only
[   40.645114][ T4055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'.
[   40.673684][ T3853] veth1_vlan: entered promiscuous mode
[   40.678305][ T4057] loop1: detected capacity change from 0 to 2048
[   40.695492][ T3853] veth0_macvtap: entered promiscuous mode
[   40.703621][ T4057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.718336][ T3853] veth1_macvtap: entered promiscuous mode
[   40.728907][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.739376][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.749220][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.759863][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.769669][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.780165][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.789986][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.800416][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.811527][ T3853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.817086][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.819750][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.838261][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.848193][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.858632][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.868471][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.878908][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.888726][ T3853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.899147][ T3853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.921471][ T3853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.934020][ T3853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.942811][ T3853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.951559][ T3853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.960274][ T3853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.991019][ T4062] can0: slcan on pts1.
[   40.995447][   T29] audit: type=1400 audit(1723484924.376:424): avc:  denied  { mount } for  pid=3853 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   41.022086][ T4062] FAULT_INJECTION: forcing a failure.
[   41.022086][ T4062] name failslab, interval 1, probability 0, space 0, times 0
[   41.034833][ T4062] CPU: 0 UID: 0 PID: 4062 Comm: syz.1.168 Not tainted 6.11.0-rc3-syzkaller #0
[   41.043680][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   41.053771][ T4062] Call Trace:
[   41.057086][ T4062]  <TASK>
[   41.060004][ T4062]  dump_stack_lvl+0xf2/0x150
[   41.064594][ T4062]  dump_stack+0x15/0x20
[   41.068774][ T4062]  should_fail_ex+0x229/0x230
[   41.073520][ T4062]  ? __alloc_skb+0x10b/0x310
[   41.078105][ T4062]  should_failslab+0x8f/0xb0
[   41.082707][ T4062]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   41.088664][ T4062]  __alloc_skb+0x10b/0x310
[   41.093077][ T4062]  alloc_uevent_skb+0x5b/0x120
[   41.097847][ T4062]  kobject_uevent_net_broadcast+0xfb/0x420
[   41.103650][ T4062]  kobject_uevent_env+0x415/0x550
[   41.108684][ T4062]  kobject_uevent+0x1c/0x30
[   41.113215][ T4062]  __kobject_del+0x8e/0x1a0
[   41.117722][ T4062]  kobject_put+0x123/0x180
[   41.122141][ T4062]  netdev_queue_update_kobjects+0x42f/0x470
[   41.128029][ T4062]  netdev_unregister_kobject+0xc1/0x120
[   41.133648][ T4062]  unregister_netdevice_many_notify+0xd21/0x1110
[   41.140015][ T4062]  ? finish_task_switch+0xb5/0x2b0
[   41.145188][ T4062]  unregister_netdevice_queue+0x1f4/0x220
[   41.150904][ T4062]  unregister_netdev+0x1c/0x30
[   41.155668][ T4062]  unregister_candev+0x15/0x20
[   41.160503][ T4062]  slcan_close+0x46/0xe0
[   41.164746][ T4062]  ? __pfx_slcan_close+0x10/0x10
[   41.169674][ T4062]  tty_ldisc_kill+0x90/0x140
[   41.174290][ T4062]  tty_ldisc_hangup+0x2f4/0x370
[   41.179132][ T4062]  __tty_hangup+0x3c6/0x540
[   41.183635][ T4062]  tty_ioctl+0x613/0xbe0
[   41.187936][ T4062]  ? __pfx_tty_ioctl+0x10/0x10
[   41.192717][ T4062]  __se_sys_ioctl+0xd3/0x150
[   41.197323][ T4062]  __x64_sys_ioctl+0x43/0x50
[   41.202054][ T4062]  x64_sys_call+0x15cc/0x2d60
[   41.206773][ T4062]  do_syscall_64+0xc9/0x1c0
[   41.211322][ T4062]  ? clear_bhb_loop+0x55/0xb0
[   41.216128][ T4062]  ? clear_bhb_loop+0x55/0xb0
[   41.220816][ T4062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.226731][ T4062] RIP: 0033:0x7f49bae999f9
[   41.231145][ T4062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.250751][ T4062] RSP: 002b:00007f49b9af6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   41.259180][ T4062] RAX: ffffffffffffffda RBX: 00007f49bb036058 RCX: 00007f49bae999f9
[   41.267129][ T4062] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   41.275152][ T4062] RBP: 00007f49b9af6090 R08: 0000000000000000 R09: 0000000000000000
[   41.283130][ T4062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   41.291077][ T4062] R13: 0000000000000000 R14: 00007f49bb036058 R15: 00007ffed28dc698
[   41.299098][ T4062]  </TASK>
[   41.323068][ T4065] loop4: detected capacity change from 0 to 1024
[   41.323694][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.329877][ T4065] EXT4-fs: Ignoring removed nomblk_io_submit option
[   41.349570][ T4062] can0 (unregistered): slcan off pts1.
[   41.369527][ T4070] loop3: detected capacity change from 0 to 512
[   41.376496][ T4065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.391037][ T4068] loop2: detected capacity change from 0 to 2048
[   41.397681][ T4068] vfat: Unknown parameter '00000000000000000003���u���d~�$��#�{h�
'
[   41.420594][ T4076] 9pnet_fd: Insufficient options for proto=fd
[   41.436799][ T4068] 9pnet_fd: Insufficient options for proto=fd
[   41.447780][   T29] audit: type=1400 audit(1723484924.846:425): avc:  denied  { watch watch_reads } for  pid=4064 comm="syz.4.114" path="/0/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.490135][ T3853] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[   41.514472][ T3853] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[   41.538482][ T3853] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[   41.561826][ T3853] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[   41.584687][ T3853] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[   41.608224][ T3853] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[   41.628935][ T3853] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[   41.652229][ T3853] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[   41.674584][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.684645][ T3853] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[   41.684741][   T29] audit: type=1400 audit(1723484925.076:426): avc:  denied  { execute } for  pid=4084 comm="syz.3.174" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=6126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   41.744331][ T3853] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[   41.767130][ T4090] loop0: detected capacity change from 0 to 512
[   41.773617][ T4090] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   41.855011][ T4094] can0: slcan on pts1.
[   41.936353][ T4094] can0 (unregistered): slcan off pts1.
[   41.941923][ T4094] FAULT_INJECTION: forcing a failure.
[   41.941923][ T4094] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   41.954970][ T4094] CPU: 1 UID: 0 PID: 4094 Comm: syz.0.177 Not tainted 6.11.0-rc3-syzkaller #0
[   41.963889][ T4094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   41.973920][ T4094] Call Trace:
[   41.977177][ T4094]  <TASK>
[   41.980125][ T4094]  dump_stack_lvl+0xf2/0x150
[   41.984698][ T4094]  dump_stack+0x15/0x20
[   41.988838][ T4094]  should_fail_ex+0x229/0x230
[   41.993494][ T4094]  should_fail+0xb/0x10
[   41.997730][ T4094]  should_fail_usercopy+0x1a/0x20
[   42.002800][ T4094]  _copy_to_user+0x1e/0xa0
[   42.007203][ T4094]  simple_read_from_buffer+0xa0/0x110
[   42.012629][ T4094]  proc_fail_nth_read+0xfc/0x140
[   42.017568][ T4094]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   42.023115][ T4094]  vfs_read+0x1a2/0x6e0
[   42.027261][ T4094]  ? __rcu_read_unlock+0x4e/0x70
[   42.032180][ T4094]  ? __fget_files+0x1da/0x210
[   42.036848][ T4094]  ksys_read+0xeb/0x1b0
[   42.041041][ T4094]  __x64_sys_read+0x42/0x50
[   42.045546][ T4094]  x64_sys_call+0x27d3/0x2d60
[   42.050202][ T4094]  do_syscall_64+0xc9/0x1c0
[   42.054743][ T4094]  ? clear_bhb_loop+0x55/0xb0
[   42.059409][ T4094]  ? clear_bhb_loop+0x55/0xb0
[   42.064146][ T4094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.070033][ T4094] RIP: 0033:0x7ff0ca55843c
[   42.074425][ T4094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48
[   42.094055][ T4094] RSP: 002b:00007ff0c91b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   42.102521][ T4094] RAX: ffffffffffffffda RBX: 00007ff0ca6f6058 RCX: 00007ff0ca55843c
[   42.110469][ T4094] RDX: 000000000000000f RSI: 00007ff0c91b60a0 RDI: 0000000000000009
[   42.118417][ T4094] RBP: 00007ff0c91b6090 R08: 0000000000000000 R09: 0000000000000000
[   42.126363][ T4094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   42.134474][ T4094] R13: 0000000000000000 R14: 00007ff0ca6f6058 R15: 00007ffde0da0328
[   42.142512][ T4094]  </TASK>
[   42.173022][   T29] audit: type=1400 audit(1723484925.566:427): avc:  denied  { create } for  pid=4097 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   42.215381][   T29] audit: type=1400 audit(1723484925.606:428): avc:  denied  { setopt } for  pid=4099 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.235294][   T29] audit: type=1400 audit(1723484925.626:429): avc:  denied  { bind } for  pid=4099 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   42.291502][ T4113] loop0: detected capacity change from 0 to 256
[   42.303850][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[   42.317645][ T4116] can0: slcan on pts2.
[   42.356488][ T4116] can0 (unregistered): slcan off pts2.
[   42.394741][   T29] audit: type=1400 audit(1723484925.786:430): avc:  denied  { write } for  pid=4117 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   42.420231][ T4118] loop1: detected capacity change from 0 to 512
[   42.426967][ T4118] EXT4-fs: Ignoring removed oldalloc option
[   42.432961][ T4118] EXT4-fs: Ignoring removed nobh option
[   42.438891][ T4118] EXT4-fs: Ignoring removed i_version option
[   42.445691][ T4118] EXT4-fs: Invalid want_extra_isize 512
[   42.453529][ T4126] loop0: detected capacity change from 0 to 512
[   42.464171][ T4126] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   42.521318][ T4128] loop3: detected capacity change from 0 to 2048
[   42.549522][ T4128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.563825][ T4131] loop0: detected capacity change from 0 to 256
[   42.580814][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.598017][ T4131] FAT-fs (loop0): Directory bread(block 64) failed
[   42.604665][ T4131] FAT-fs (loop0): Directory bread(block 65) failed
[   42.611801][ T4131] FAT-fs (loop0): Directory bread(block 66) failed
[   42.619847][ T4131] FAT-fs (loop0): Directory bread(block 67) failed
[   42.628303][ T4131] FAT-fs (loop0): Directory bread(block 68) failed
[   42.635197][ T4131] FAT-fs (loop0): Directory bread(block 69) failed
[   42.642359][ T4131] FAT-fs (loop0): Directory bread(block 70) failed
[   42.649930][ T4131] FAT-fs (loop0): Directory bread(block 71) failed
[   42.656895][ T4136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'.
[   42.666087][ T4131] FAT-fs (loop0): Directory bread(block 72) failed
[   42.673688][ T4131] FAT-fs (loop0): Directory bread(block 73) failed
[   42.758414][ T4140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24147 sclass=netlink_audit_socket pid=4140 comm=syz.3.192
[   42.798626][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   42.807835][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   42.817824][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   42.827297][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   42.836755][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   42.846272][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   42.857068][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   42.867424][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   43.032166][ T4150] loop3: detected capacity change from 0 to 32768
[   43.068468][ T4154] netlink: 'syz.2.197': attribute type 29 has an invalid length.
[   43.076656][ T4154] netlink: 'syz.2.197': attribute type 29 has an invalid length.
[   43.084694][ T4154] netlink: 'syz.2.197': attribute type 29 has an invalid length.
[   43.094079][ T4150]  loop3: p1 p3 < p5 p6 >
[   43.138638][ T4155] can0: slcan on pts1.
[   43.164383][ T4155] FAULT_INJECTION: forcing a failure.
[   43.164383][ T4155] name failslab, interval 1, probability 0, space 0, times 0
[   43.178065][ T4155] CPU: 0 UID: 0 PID: 4155 Comm: syz.1.196 Not tainted 6.11.0-rc3-syzkaller #0
[   43.186993][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   43.197043][ T4155] Call Trace:
[   43.200348][ T4155]  <TASK>
[   43.203265][ T4155]  dump_stack_lvl+0xf2/0x150
[   43.207911][ T4155]  dump_stack+0x15/0x20
[   43.212064][ T4155]  should_fail_ex+0x229/0x230
[   43.216735][ T4155]  ? kobject_uevent_env+0x1a4/0x550
[   43.221956][ T4155]  should_failslab+0x8f/0xb0
[   43.226609][ T4155]  __kmalloc_cache_noprof+0x4b/0x2a0
[   43.232004][ T4155]  ? __pfx_dev_uevent_name+0x10/0x10
[   43.237343][ T4155]  kobject_uevent_env+0x1a4/0x550
[   43.242372][ T4155]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   43.248178][ T4155]  ? device_pm_check_callbacks+0x632/0x650
[   43.253982][ T4155]  kobject_uevent+0x1c/0x30
[   43.258522][ T4155]  device_del+0x6fa/0x780
[   43.262908][ T4155]  ? pm_runtime_set_memalloc_noio+0x180/0x1a0
[   43.268969][ T4155]  netdev_unregister_kobject+0x10c/0x120
[   43.274600][ T4155]  unregister_netdevice_many_notify+0xd21/0x1110
[   43.280929][ T4155]  unregister_netdevice_queue+0x1f4/0x220
[   43.286735][ T4155]  unregister_netdev+0x1c/0x30
[   43.291486][ T4155]  unregister_candev+0x15/0x20
[   43.296239][ T4155]  slcan_close+0x46/0xe0
[   43.300467][ T4155]  ? __pfx_slcan_close+0x10/0x10
[   43.305492][ T4155]  tty_ldisc_kill+0x90/0x140
[   43.310072][ T4155]  tty_ldisc_hangup+0x2f4/0x370
[   43.315021][ T4155]  __tty_hangup+0x3c6/0x540
[   43.319626][ T4155]  tty_ioctl+0x613/0xbe0
[   43.323869][ T4155]  ? __pfx_tty_ioctl+0x10/0x10
[   43.328656][ T4155]  __se_sys_ioctl+0xd3/0x150
[   43.333239][ T4155]  __x64_sys_ioctl+0x43/0x50
[   43.337845][ T4155]  x64_sys_call+0x15cc/0x2d60
[   43.342572][ T4155]  do_syscall_64+0xc9/0x1c0
[   43.347139][ T4155]  ? clear_bhb_loop+0x55/0xb0
[   43.351924][ T4155]  ? clear_bhb_loop+0x55/0xb0
[   43.356598][ T4155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.362481][ T4155] RIP: 0033:0x7f49bae999f9
[   43.366889][ T4155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.386535][ T4155] RSP: 002b:00007f49b9af6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.394962][ T4155] RAX: ffffffffffffffda RBX: 00007f49bb036058 RCX: 00007f49bae999f9
[   43.402932][ T4155] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   43.410895][ T4155] RBP: 00007f49b9af6090 R08: 0000000000000000 R09: 0000000000000000
[   43.418907][ T4155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   43.426916][ T4155] R13: 0000000000000000 R14: 00007f49bb036058 R15: 00007ffed28dc698
[   43.434899][ T4155]  </TASK>
[   43.477113][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   43.485259][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   43.489586][ T3247] udevd[3247]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   43.498804][ T3461] udevd[3461]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   43.540881][ T3247] udevd[3247]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   43.540987][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   43.551768][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   43.561570][ T4155] can0 (unregistered): slcan off pts1.
[   43.578960][ T3461] udevd[3461]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   43.621918][ T4164] loop1: detected capacity change from 0 to 2048
[   43.642687][ T2959] udevd[2959]: worker [3624] terminated by signal 33 (Unknown signal 33)
[   43.643419][ T4166] loop0: detected capacity change from 0 to 512
[   43.665921][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.698492][ T4166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.711903][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.718903][ T4166] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.757169][ T4178] loop3: detected capacity change from 0 to 2048
[   43.763828][ T4178] ext3: Unknown parameter 'pcr'
[   43.766912][ T4180] loop1: detected capacity change from 0 to 256
[   43.781299][ T4178] loop3: detected capacity change from 0 to 512
[   43.790681][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.816913][ T4180] loop1: detected capacity change from 256 to 11
[   43.826891][ T4180] FAT-fs (loop1): unable to read inode block for updating (i_pos 205)
[   43.835270][ T4180] FAT-fs (loop1): unable to read inode block for updating (i_pos 205)
[   43.843622][ T4179] FAT-fs (loop1): unable to read inode block for updating (i_pos 205)
[   43.879537][ T4205] can0: slcan on pts2.
[   43.885262][ T4205] FAULT_INJECTION: forcing a failure.
[   43.885262][ T4205] name failslab, interval 1, probability 0, space 0, times 0
[   43.897912][ T4205] CPU: 0 UID: 0 PID: 4205 Comm: syz.3.211 Not tainted 6.11.0-rc3-syzkaller #0
[   43.906766][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   43.916804][ T4205] Call Trace:
[   43.920071][ T4205]  <TASK>
[   43.922982][ T4205]  dump_stack_lvl+0xf2/0x150
[   43.927557][ T4205]  dump_stack+0x15/0x20
[   43.931743][ T4205]  should_fail_ex+0x229/0x230
[   43.936485][ T4205]  ? kobject_get_path+0x85/0x160
[   43.941411][ T4205]  should_failslab+0x8f/0xb0
[   43.946001][ T4205]  __kmalloc_noprof+0xa5/0x370
[   43.950756][ T4205]  kobject_get_path+0x85/0x160
[   43.955532][ T4205]  kobject_uevent_env+0x1b9/0x550
[   43.960569][ T4205]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   43.966369][ T4205]  ? device_pm_check_callbacks+0x632/0x650
[   43.972175][ T4205]  kobject_uevent+0x1c/0x30
[   43.976728][ T4205]  device_del+0x6fa/0x780
[   43.981058][ T4205]  ? pm_runtime_set_memalloc_noio+0x180/0x1a0
[   43.987104][ T4205]  netdev_unregister_kobject+0x10c/0x120
[   43.992778][ T4205]  unregister_netdevice_many_notify+0xd21/0x1110
[   43.999114][ T4205]  unregister_netdevice_queue+0x1f4/0x220
[   44.004856][ T4205]  unregister_netdev+0x1c/0x30
[   44.009661][ T4205]  unregister_candev+0x15/0x20
[   44.014435][ T4205]  slcan_close+0x46/0xe0
[   44.018658][ T4205]  ? __pfx_slcan_close+0x10/0x10
[   44.023571][ T4205]  tty_ldisc_kill+0x90/0x140
[   44.028154][ T4205]  tty_ldisc_hangup+0x2f4/0x370
[   44.032989][ T4205]  __tty_hangup+0x3c6/0x540
[   44.037468][ T4205]  tty_ioctl+0x613/0xbe0
[   44.041747][ T4205]  ? __pfx_tty_ioctl+0x10/0x10
[   44.046488][ T4205]  __se_sys_ioctl+0xd3/0x150
[   44.051100][ T4205]  __x64_sys_ioctl+0x43/0x50
[   44.055671][ T4205]  x64_sys_call+0x15cc/0x2d60
[   44.060384][ T4205]  do_syscall_64+0xc9/0x1c0
[   44.064869][ T4205]  ? clear_bhb_loop+0x55/0xb0
[   44.069526][ T4205]  ? clear_bhb_loop+0x55/0xb0
[   44.074247][ T4205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.080130][ T4205] RIP: 0033:0x7f9dbfd199f9
[   44.084521][ T4205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.104106][ T4205] RSP: 002b:00007f9dbe976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   44.112498][ T4205] RAX: ffffffffffffffda RBX: 00007f9dbfeb6058 RCX: 00007f9dbfd199f9
[   44.120455][ T4205] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004
[   44.128484][ T4205] RBP: 00007f9dbe976090 R08: 0000000000000000 R09: 0000000000000000
[   44.136485][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   44.144453][ T4205] R13: 0000000000000000 R14: 00007f9dbfeb6058 R15: 00007fff36df67c8
[   44.152419][ T4205]  </TASK>
[   44.196194][ T4205] can0 (unregistered): slcan off pts2.
[   44.232646][ T3315] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4
[   44.240345][ T3315] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2
[   44.248008][ T3315] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3
[   44.255943][ T3315] hid-generic 0000:3000000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   44.270225][ T4208] bridge1: the hash_elasticity option has been deprecated and is always 16
[   44.323149][ T4214] loop3: detected capacity change from 0 to 2048
[   44.337537][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.358687][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.382453][ T3262] FAT-fs (loop1): Directory bread(block 3) failed
[   44.395188][ T3262] FAT-fs (loop1): unable to read inode block for updating (i_pos 205)
[   44.404263][ T3262] FAT-fs (loop1): unable to read inode block for updating (i_pos 205)
[   44.412515][ T3262] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[   44.438478][ T4222] loop3: detected capacity change from 0 to 1024
[   44.445092][ T4222] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.468446][ T4222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.497572][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.533696][ T4226] loop3: detected capacity change from 0 to 1024
[   44.540816][ T4226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   44.552211][ T4226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.664820][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.685473][ T3557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.769862][ T3557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.809112][ T4252] loop0: detected capacity change from 0 to 2048
[   44.838251][ T4252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.851474][ T3557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.862776][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.902955][ T4262] loop0: detected capacity change from 0 to 512
[   44.912857][ T3557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.928094][ T4262] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.230: invalid block
[   44.943755][ T4242] chnl_net:caif_netlink_parms(): no params data found
[   44.945509][ T4262] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.230: invalid indirect mapped block 4294967295 (level 1)
[   44.964900][ T4262] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.230: invalid indirect mapped block 4294967295 (level 1)
[   44.980029][ T4262] EXT4-fs (loop0): 2 truncates cleaned up
[   44.986087][ T4262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.003591][ T4262] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.230: bg 0: block 5: invalid block bitmap
[   45.017180][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.024361][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.031657][ T4242] bridge_slave_0: entered allmulticast mode
[   45.038222][ T4242] bridge_slave_0: entered promiscuous mode
[   45.045015][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.052144][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.059306][ T4242] bridge_slave_1: entered allmulticast mode
[   45.065744][ T4242] bridge_slave_1: entered promiscuous mode
[   45.085895][ T4242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.096292][ T4242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.117133][ T3853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.121302][ T4242] team0: Port device team_slave_0 added
[   45.132573][ T4242] team0: Port device team_slave_1 added
[   45.147436][ T4262] loop0: detected capacity change from 512 to 511
[   45.163128][ T3557] bridge_slave_1: left allmulticast mode
[   45.168877][ T3557] bridge_slave_1: left promiscuous mode
[   45.172201][ T4274] loop3: detected capacity change from 0 to 1764
[   45.174540][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.198712][ T3256] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   45.221274][ T3256] EXT4-fs error (device loop0): ext4_lookup:1811: inode #17: comm syz-executor: iget: bad extended attribute block 2683928664
[   45.234489][ T3557] bridge_slave_0: left allmulticast mode
[   45.234623][ T3256] EXT4-fs error (device loop0): ext4_lookup:1811: inode #17: comm syz-executor: iget: bad extended attribute block 2683928664
[   45.240165][ T3557] bridge_slave_0: left promiscuous mode
[   45.259026][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.339095][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.349753][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.359809][ T3557] bond0 (unregistering): Released all slaves
[   45.367643][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.374579][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.400652][ T4242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.431390][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.438376][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.464381][ T4242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.493620][ T4242] hsr_slave_0: entered promiscuous mode
[   45.500220][ T4242] hsr_slave_1: entered promiscuous mode
[   45.506088][ T4242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.514050][ T4242] Cannot create hsr debugfs directory
[   45.529358][ T4288] loop2: detected capacity change from 0 to 128
[   45.556931][ T3557] hsr_slave_0: left promiscuous mode
[   45.562536][ T3557] hsr_slave_1: left promiscuous mode
[   45.568295][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.575800][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.583731][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.591240][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.601268][ T3557] veth1_macvtap: left promiscuous mode
[   45.606788][ T3557] veth0_macvtap: left promiscuous mode
[   45.612286][ T3557] veth1_vlan: left promiscuous mode
[   45.617539][ T3557] veth0_vlan: left promiscuous mode
[   45.627068][ T4297] loop3: detected capacity change from 0 to 2048
[   45.628809][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.653656][ T4297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.693692][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.742955][ T3557] team0 (unregistering): Port device team_slave_1 removed
[   45.752910][ T3557] team0 (unregistering): Port device team_slave_0 removed
[   45.796967][ T4295] can0: slcan on pts1.
[   45.831222][ T4309] loop3: detected capacity change from 0 to 8192
[   45.866410][ T4298] can0 (unregistered): slcan off pts1.
[   45.884412][ T4279] chnl_net:caif_netlink_parms(): no params data found
[   45.946789][ T4330] loop3: detected capacity change from 0 to 128
[   45.955681][ T4330] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.968145][ T4330] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   46.015376][ T3263] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.026467][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.033515][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.042312][ T4279] bridge_slave_0: entered allmulticast mode
[   46.048692][ T4279] bridge_slave_0: entered promiscuous mode
[   46.066653][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.073715][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.084878][ T4279] bridge_slave_1: entered allmulticast mode
[   46.091768][ T4279] bridge_slave_1: entered promiscuous mode
[   46.099860][ T4342] loop3: detected capacity change from 0 to 2048
[   46.116854][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.127237][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.139275][ T4302] chnl_net:caif_netlink_parms(): no params data found
[   46.151793][ T4342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.191304][   T29] kauditd_printk_skb: 35 callbacks suppressed
[   46.191319][   T29] audit: type=1400 audit(1723484929.586:466): avc:  denied  { read } for  pid=4320 comm="syz.2.245" name="event2" dev="devtmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   46.238964][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.302444][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.309629][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.318479][ T4302] bridge_slave_0: entered allmulticast mode
[   46.325472][ T4302] bridge_slave_0: entered promiscuous mode
[   46.343811][ T4279] team0: Port device team_slave_0 added
[   46.353733][ T4279] team0: Port device team_slave_1 added
[   46.361681][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.368847][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.377841][ T4302] bridge_slave_1: entered allmulticast mode
[   46.384718][ T4302] bridge_slave_1: entered promiscuous mode
[   46.409541][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.416536][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.442485][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.470391][ T3557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.482004][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.488979][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.514910][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.533650][ T4352] loop3: detected capacity change from 0 to 2048
[   46.539700][ T4242] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.550255][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.564784][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.576508][ T4352]  loop3: p1 < > p4
[   46.577080][ T3557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.580644][ T4352] loop3: p4 size 8388608 extends beyond EOD, truncated
[   46.598151][ T4242] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.632472][ T4242] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.642954][ T3557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.654709][ T4302] team0: Port device team_slave_0 added
[   46.674528][ T4242] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.685890][ T4302] team0: Port device team_slave_1 added
[   46.693748][ T4279] hsr_slave_0: entered promiscuous mode
[   46.700289][ T4279] hsr_slave_1: entered promiscuous mode
[   46.726293][ T3557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.738088][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.745040][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.771001][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.782428][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.789425][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.815427][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.890594][ T4242] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.915913][ T4302] hsr_slave_0: entered promiscuous mode
[   46.922243][ T4302] hsr_slave_1: entered promiscuous mode
[   46.928176][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.935727][ T4302] Cannot create hsr debugfs directory
[   46.966066][ T4242] 8021q: adding VLAN 0 to HW filter on device team0
[   46.975777][ T3557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.004362][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.011536][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.022838][   T29] audit: type=1400 audit(1723484930.416:467): avc:  denied  { listen } for  pid=4369 comm="syz.2.254" lport=59995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   47.045837][   T29] audit: type=1400 audit(1723484930.416:468): avc:  denied  { accept } for  pid=4369 comm="syz.2.254" lport=59995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   47.068729][   T29] audit: type=1400 audit(1723484930.416:469): avc:  denied  { setopt } for  pid=4369 comm="syz.2.254" lport=59995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   47.093307][   T29] audit: type=1400 audit(1723484930.416:470): avc:  denied  { write } for  pid=4369 comm="syz.2.254" lport=59995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   47.120189][ T3557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.148840][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.156076][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.183275][ T3557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.230614][ T3557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.242267][ T4382] loop2: detected capacity change from 0 to 512
[   47.248973][ T4382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   47.261394][ T4382] EXT4-fs (loop2): 1 orphan inode deleted
[   47.267152][ T4382] EXT4-fs (loop2): 1 truncate cleaned up
[   47.272582][ T4242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.273015][ T4382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.320347][ T3557] bridge_slave_1: left allmulticast mode
[   47.326073][ T3557] bridge_slave_1: left promiscuous mode
[   47.330228][ T4394] loop3: detected capacity change from 0 to 2048
[   47.331827][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.346814][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.357249][ T3557] bridge_slave_0: left allmulticast mode
[   47.362901][ T3557] bridge_slave_0: left promiscuous mode
[   47.368669][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.377147][ T3557] bridge_slave_1: left allmulticast mode
[   47.380240][   T29] audit: type=1400 audit(1723484930.776:471): avc:  denied  { write } for  pid=4399 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   47.382781][ T3557] bridge_slave_1: left promiscuous mode
[   47.408388][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.416659][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.429936][ T3557] bridge_slave_0: left allmulticast mode
[   47.435585][ T3557] bridge_slave_0: left promiscuous mode
[   47.441289][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.449500][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.618394][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.628658][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.638652][ T3557] bond0 (unregistering): Released all slaves
[   47.647952][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.658326][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.668647][ T3557] bond0 (unregistering): Released all slaves
[   47.702008][ T4242] veth0_vlan: entered promiscuous mode
[   47.709480][ T4242] veth1_vlan: entered promiscuous mode
[   47.723560][ T4242] veth0_macvtap: entered promiscuous mode
[   47.730591][ T4242] veth1_macvtap: entered promiscuous mode
[   47.740545][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.751083][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.760934][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.771405][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.781241][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.791793][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.801631][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.812029][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.822805][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.833262][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.843768][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.853574][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.863980][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.873841][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.884285][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.894091][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.904505][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.915434][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.927335][ T4242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.936069][ T4242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.944801][ T4242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.953725][ T4242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.988124][ T4412] loop1: detected capacity change from 0 to 512
[   47.994668][ T4412] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   48.004834][ T3557] hsr_slave_0: left promiscuous mode
[   48.011630][ T3557] hsr_slave_1: left promiscuous mode
[   48.017561][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.024979][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.033692][ T4416] __nla_validate_parse: 11 callbacks suppressed
[   48.033703][ T4416] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.261'.
[   48.033711][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.033731][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.040038][ T4416] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   48.042599][   T29] audit: type=1400 audit(1723484931.436:472): avc:  denied  { lock } for  pid=4415 comm="syz.1.261" path="socket:[8356]" dev="sockfs" ino=8356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   48.098338][ T3557] hsr_slave_0: left promiscuous mode
[   48.103870][ T3557] hsr_slave_1: left promiscuous mode
[   48.109645][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.117082][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.118273][   T29] audit: type=1400 audit(1723484931.516:473): avc:  denied  { create } for  pid=4415 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   48.144323][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.151867][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.161873][ T3557] veth1_macvtap: left promiscuous mode
[   48.167439][ T3557] veth0_macvtap: left promiscuous mode
[   48.172931][ T3557] veth1_vlan: left promiscuous mode
[   48.178188][ T3557] veth0_vlan: left promiscuous mode
[   48.183988][ T3557] veth1_macvtap: left promiscuous mode
[   48.189557][ T3557] veth0_macvtap: left promiscuous mode
[   48.195051][ T3557] veth1_vlan: left promiscuous mode
[   48.200405][ T3557] veth0_vlan: left promiscuous mode
[   48.254941][ T4419] loop2: detected capacity change from 0 to 512
[   48.262669][ T4419] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.270667][ T4419] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   48.278679][ T4419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002]
[   48.286872][ T4419] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[   48.296413][ T4419] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features
[   48.305596][ T4419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   48.329857][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.338465][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.346822][ T4419] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.262: dx entry: limit 65535 != root limit 120
[   48.359032][ T4419] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.262: Corrupt directory, running e2fsck is recommended
[   48.373048][ T4419] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.262: dx entry: limit 65535 != root limit 120
[   48.385102][ T4419] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.262: Corrupt directory, running e2fsck is recommended
[   48.423186][ T3557] team0 (unregistering): Port device team_slave_1 removed
[   48.434784][ T3557] team0 (unregistering): Port device team_slave_0 removed
[   48.479272][   T29] audit: type=1400 audit(1723484931.876:474): avc:  denied  { setopt } for  pid=4430 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   48.518883][ T3557] team0 (unregistering): Port device team_slave_1 removed
[   48.529174][ T3557] team0 (unregistering): Port device team_slave_0 removed
[   48.565650][ T4416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.261'.
[   48.601529][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'.
[   48.602163][ T4436] loop3: detected capacity change from 0 to 2048
[   48.627633][ T4436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.651770][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.678761][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   48.687840][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   48.704182][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   48.715885][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   48.721833][ T4445] loop3: detected capacity change from 0 to 1024
[   48.739930][ T4445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.741030][   T29] audit: type=1400 audit(1723484932.136:475): avc:  denied  { wake_alarm } for  pid=4439 comm="syz.1.268" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   48.752155][ T4445] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.808419][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.819444][ T4279] 8021q: adding VLAN 0 to HW filter on device team0
[   48.832325][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.839477][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.851316][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.852353][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.867501][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.892749][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.903205][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.964879][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.985307][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'.
[   49.040858][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.050383][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.059569][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.070531][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.091540][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.097989][ T4279] veth0_vlan: entered promiscuous mode
[   49.117201][ T4279] veth1_vlan: entered promiscuous mode
[   49.141461][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.155120][ T4279] veth0_macvtap: entered promiscuous mode
[   49.164231][ T4486] loop3: detected capacity change from 0 to 512
[   49.171329][ T4279] veth1_macvtap: entered promiscuous mode
[   49.177632][ T4486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   49.189228][ T4486] EXT4-fs (loop3): 1 truncate cleaned up
[   49.193458][ T4302] 8021q: adding VLAN 0 to HW filter on device team0
[   49.202130][ T4486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.210051][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.224634][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.234450][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.237516][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'.
[   49.244875][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.263614][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.274120][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.286298][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.299637][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.310588][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.310527][ T4493] netlink: 'syz.3.278': attribute type 1 has an invalid length.
[   49.325322][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.335318][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.342455][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.361773][ T4302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   49.372204][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.396661][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.407167][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.417033][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.427598][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.437513][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.447983][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.458940][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.478472][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.487257][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.495967][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.504895][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.567317][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.599585][ T4518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'.
[   49.608551][ T4518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'.
[   49.621254][ T4518] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   49.629150][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'.
[   49.639781][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'.
[   49.648584][ T4518] netlink: 18 bytes leftover after parsing attributes in process `syz.3.283'.
[   49.665836][ T4518] capability: warning: `syz.3.283' uses 32-bit capabilities (legacy support in use)
[   49.692823][ T4302] veth0_vlan: entered promiscuous mode
[   49.702295][ T4302] veth1_vlan: entered promiscuous mode
[   49.719321][ T4302] veth0_macvtap: entered promiscuous mode
[   49.738160][ T4302] veth1_macvtap: entered promiscuous mode
[   49.750963][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.761466][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.771424][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.781934][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.791828][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.802251][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.812134][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.822733][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.835964][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.844731][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.855304][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.865241][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.875709][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.885549][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.895967][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.905803][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.916297][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.928521][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.943632][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.952559][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.961304][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.970097][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.000471][ T4543] qrtr: Invalid version 4
[   50.022566][ T4548] ipt_ECN: cannot use operation on non-tcp rule
[   50.095705][ T4572] loop0: detected capacity change from 0 to 1024
[   50.102548][ T4572] EXT4-fs: Ignoring removed oldalloc option
[   50.109080][ T4572] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   50.128365][ T4572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.186280][ T4572] loop0: detected capacity change from 1024 to 64
[   50.194543][ T4572] syz.0.296: attempt to access beyond end of device
[   50.194543][ T4572] loop0: rw=2049, sector=224, nr_sectors = 2 limit=64
[   50.207847][ T4572] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 112)
[   50.221202][ T4572] syz.0.296: attempt to access beyond end of device
[   50.221202][ T4572] loop0: rw=2049, sector=230, nr_sectors = 2 limit=64
[   50.234650][ T4572] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 115)
[   50.246525][ T4572] Buffer I/O error on device loop0, logical block 115
[   50.253469][ T4572] Buffer I/O error on device loop0, logical block 112
[   50.323699][ T4581] qrtr: Invalid version 4
[   50.677996][ T4624] loop2: detected capacity change from 0 to 164
[   50.684490][ T4624] iso9660: Unknown parameter '�[�j���n���w��;��H{trq��uWH/���'
[   50.698241][ T4624] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   50.707149][ T4624] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   50.715918][ T4624] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   50.724612][ T4624] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   50.733544][ T4624] vxlan0: entered promiscuous mode
[   50.738855][ T4624] vxlan0: entered allmulticast mode
[   50.746542][ T4624] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   50.755514][ T4624] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   50.764388][ T4624] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   50.773411][ T4624] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   50.939263][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   50.958710][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   50.973156][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   50.991773][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   51.011524][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   51.040725][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   51.056066][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   51.070837][ T4302] EXT4-fs warning (device loop0): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   51.164459][ T4644] loop1: detected capacity change from 0 to 2048
[   51.182794][ T4644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.259577][   T29] kauditd_printk_skb: 72 callbacks suppressed
[   51.259591][   T29] audit: type=1400 audit(1723484934.656:548): avc:  denied  { read write } for  pid=4643 comm="syz.1.319" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   51.293406][ T4644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17600 sclass=netlink_route_socket pid=4644 comm=syz.1.319
[   51.316255][   T29] audit: type=1400 audit(1723484934.686:549): avc:  denied  { open } for  pid=4643 comm="syz.1.319" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   51.503821][ T4650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.319: bg 0: block 234: padding at end of block bitmap is not set
[   51.531588][ T4650] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 117
[   51.543896][ T4650] EXT4-fs (loop1): This should not happen!! Data will be lost
[   51.543896][ T4650] 
[   51.561245][ T4644] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28
[   51.573736][ T4644] EXT4-fs (loop1): This should not happen!! Data will be lost
[   51.573736][ T4644] 
[   51.583530][ T4644] EXT4-fs (loop1): Total free blocks count 0
[   51.589526][ T4644] EXT4-fs (loop1): Free/Dirty block details
[   51.595431][ T4644] EXT4-fs (loop1): free_blocks=0
[   51.600379][ T4644] EXT4-fs (loop1): dirty_blocks=8192
[   51.605709][ T4644] EXT4-fs (loop1): Block reservation details
[   51.644680][ T4650] syz.1.319 (4650) used greatest stack depth: 8784 bytes left
[   51.684001][   T29] audit: type=1400 audit(1723484935.076:550): avc:  denied  { ioctl } for  pid=4670 comm="syz.4.324" path="socket:[9204]" dev="sockfs" ino=9204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   51.902764][ T4678] can0: slcan on ptm1.
[   52.011412][ T3557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.109716][ T3557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.191564][ T3557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.215781][ T4680] chnl_net:caif_netlink_parms(): no params data found
[   52.241629][ T3557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.260531][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.267610][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.274703][ T4680] bridge_slave_0: entered allmulticast mode
[   52.281052][ T4680] bridge_slave_0: entered promiscuous mode
[   52.287914][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.294958][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.302413][ T4680] bridge_slave_1: entered allmulticast mode
[   52.308786][ T4680] bridge_slave_1: entered promiscuous mode
[   52.325487][ T4680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.340481][ T4680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.362531][ T4680] team0: Port device team_slave_0 added
[   52.368462][ T3557] bridge_slave_1: left allmulticast mode
[   52.374194][ T3557] bridge_slave_1: left promiscuous mode
[   52.380008][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.388038][ T3557] bridge_slave_0: left allmulticast mode
[   52.393661][ T3557] bridge_slave_0: left promiscuous mode
[   52.399316][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.501961][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.513467][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.525037][ T3557] bond0 (unregistering): Released all slaves
[   52.533728][ T4680] team0: Port device team_slave_1 added
[   52.549958][ T4695] vlan2: entered allmulticast mode
[   52.555558][ T4695] bond0: entered allmulticast mode
[   52.560790][ T4695] bond_slave_0: entered allmulticast mode
[   52.566525][ T4695] bond_slave_1: entered allmulticast mode
[   52.573283][ T4695] bond0: left allmulticast mode
[   52.578146][ T4695] bond_slave_0: left allmulticast mode
[   52.583580][ T4695] bond_slave_1: left allmulticast mode
[   52.600556][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.607562][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.633559][ T4680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.645410][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.652365][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.678388][ T4680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.703339][ T4680] hsr_slave_0: entered promiscuous mode
[   52.709461][ T4680] hsr_slave_1: entered promiscuous mode
[   52.715307][ T4680] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.723046][ T4680] Cannot create hsr debugfs directory
[   52.735856][ T3557] hsr_slave_0: left promiscuous mode
[   52.741554][ T3557] hsr_slave_1: left promiscuous mode
[   52.748110][ T4677] can0 (unregistered): slcan off ptm1.
[   52.756604][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.764035][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.771284][ T4706] loop4: detected capacity change from 0 to 512
[   52.778863][ T4706] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.779912][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.796236][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.798482][ T4706] EXT4-fs (loop4): 1 truncate cleaned up
[   52.809450][ T4706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.829427][ T3557] veth1_macvtap: left promiscuous mode
[   52.835107][ T3557] veth0_macvtap: left promiscuous mode
[   52.840913][ T3557] veth1_vlan: left promiscuous mode
[   52.846340][ T3557] veth0_vlan: left promiscuous mode
[   52.848102][ T4279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.871117][   T29] audit: type=1400 audit(1723484936.266:551): avc:  denied  { read } for  pid=4715 comm="syz.4.334" path="socket:[9634]" dev="sockfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   52.925304][ T4716] ebtables: ebtables: counters copy to user failed while replacing table
[   52.993188][ T3557] team0 (unregistering): Port device team_slave_1 removed
[   53.004919][ T3557] team0 (unregistering): Port device team_slave_0 removed
[   53.370872][ T4680] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.381354][ T4680] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.390159][ T4680] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.398628][ T4680] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.431739][ T4680] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.443772][ T4680] 8021q: adding VLAN 0 to HW filter on device team0
[   53.453334][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.460413][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.471641][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.478689][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.502981][ T4680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.548011][ T4680] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.598645][ T4741] loop3: detected capacity change from 0 to 1024
[   53.607018][ T4741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.615614][ T4680] veth0_vlan: entered promiscuous mode
[   53.628543][ T4680] veth1_vlan: entered promiscuous mode
[   53.647406][ T4680] veth0_macvtap: entered promiscuous mode
[   53.654676][ T4680] veth1_macvtap: entered promiscuous mode
[   53.667829][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.678322][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.688152][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.698591][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.708507][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.718920][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.728827][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.739402][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.750386][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.763448][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.773981][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.783936][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.794355][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.804154][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.814782][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.824668][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.835109][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.846017][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.860227][ T4680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.869095][ T4680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.878067][ T4680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.886918][ T4680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.924115][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.943946][   T29] audit: type=1326 audit(1723484937.336:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20770c99f9 code=0x7ffc0000
[   53.967482][   T29] audit: type=1326 audit(1723484937.336:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20770c99f9 code=0x7ffc0000
[   53.990893][   T29] audit: type=1326 audit(1723484937.336:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f20770c99f9 code=0x7ffc0000
[   54.007950][ T4761] loop2: detected capacity change from 0 to 512
[   54.014317][   T29] audit: type=1326 audit(1723484937.336:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20770c99f9 code=0x7ffc0000
[   54.021187][ T4764] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   54.043714][   T29] audit: type=1326 audit(1723484937.336:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f20770c99f9 code=0x7ffc0000
[   54.053589][ T4763] IPVS: stopping master sync thread 4764 ...
[   54.076486][   T29] audit: type=1326 audit(1723484937.336:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20770c99f9 code=0x7ffc0000
[   54.131647][ T4757] loop3: detected capacity change from 0 to 512
[   54.141705][ T4770] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   54.150455][ T4757] EXT4-fs: Ignoring removed i_version option
[   54.156570][ T4770] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub
[   54.164896][ T4757] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   54.179805][ T4770] loop4: detected capacity change from 0 to 1024
[   54.188946][ T4757] EXT4-fs (loop3): 1 truncate cleaned up
[   54.194889][ T4757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.207772][ T4770] EXT4-fs: Ignoring removed i_version option
[   54.213802][ T4770] EXT4-fs: Ignoring removed nomblk_io_submit option
[   54.269684][ T4767] bond0: entered promiscuous mode
[   54.274775][ T4767] bond_slave_0: entered promiscuous mode
[   54.280540][ T4767] bond_slave_1: entered promiscuous mode
[   54.299730][ T4777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4777 comm=syz.4.346
[   54.324379][ T4766] bond0: left promiscuous mode
[   54.329223][ T4766] bond_slave_0: left promiscuous mode
[   54.334691][ T4766] bond_slave_1: left promiscuous mode
[   54.423638][ T4800] loop2: detected capacity change from 0 to 1764
[   54.440219][ T4800] netlink: 'syz.2.354': attribute type 10 has an invalid length.
[   54.450490][ T4800] team0: Device veth1_macvtap failed to register rx_handler
[   54.489915][ T4807] ==================================================================
[   54.498016][ T4807] BUG: KCSAN: data-race in mas_wr_modify / mtree_range_walk
[   54.505309][ T4807] 
[   54.507629][ T4807] write to 0xffff88811535f610 of 8 bytes by task 4805 on cpu 0:
[   54.515257][ T4807]  mas_wr_modify+0x155c/0x3c90
[   54.520024][ T4807]  mas_wr_store_entry+0x250/0x390
[   54.525052][ T4807]  mas_store_prealloc+0x151/0x2b0
[   54.530075][ T4807]  vma_expand+0x57f/0x660
[   54.534401][ T4807]  mmap_region+0x80c/0x1620
[   54.538904][ T4807]  do_mmap+0x72a/0xb70
[   54.542970][ T4807]  vm_mmap_pgoff+0x133/0x290
[   54.547550][ T4807]  ksys_mmap_pgoff+0xd0/0x340
[   54.552225][ T4807]  x64_sys_call+0x1884/0x2d60
[   54.556908][ T4807]  do_syscall_64+0xc9/0x1c0
[   54.561421][ T4807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.567315][ T4807] 
[   54.569637][ T4807] read to 0xffff88811535f610 of 8 bytes by task 4807 on cpu 1:
[   54.577170][ T4807]  mtree_range_walk+0x1b4/0x460
[   54.582026][ T4807]  mas_walk+0x16e/0x320
[   54.586187][ T4807]  lock_vma_under_rcu+0x84/0x260
[   54.591130][ T4807]  exc_page_fault+0x150/0x650
[   54.595813][ T4807]  asm_exc_page_fault+0x26/0x30
[   54.600665][ T4807] 
[   54.602986][ T4807] value changed: 0x00007f4b9d385fff -> 0x00007f4b9d364fff
[   54.610087][ T4807] 
[   54.612405][ T4807] Reported by Kernel Concurrency Sanitizer on:
[   54.618552][ T4807] CPU: 1 UID: 0 PID: 4807 Comm: syz.2.357 Not tainted 6.11.0-rc3-syzkaller #0
[   54.627401][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   54.637445][ T4807] ==================================================================
[   55.078764][ T4776] dccp_close: ABORT with 32 bytes unread
[   55.176186][ T4573] kmmpd-loop0: attempt to access beyond end of device
[   55.176186][ T4573] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64
[   55.189734][ T4573] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[   55.198174][ T4573] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block
[   55.278422][ T4573] kmmpd-loop0: attempt to access beyond end of device
[   55.278422][ T4573] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64
[   55.291929][ T4573] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[   55.301585][ T3557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.609055][ T3557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.659562][ T3557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.729494][ T3557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.778212][ T3557] bridge_slave_1: left allmulticast mode
[   56.783872][ T3557] bridge_slave_1: left promiscuous mode
[   56.789550][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.797091][ T3557] bridge_slave_0: left allmulticast mode
[   56.802781][ T3557] bridge_slave_0: left promiscuous mode
[   56.808515][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.888752][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.898871][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.908985][ T3557] bond0 (unregistering): Released all slaves
[   57.007888][ T3557] hsr_slave_0: left promiscuous mode
[   57.013653][ T3557] hsr_slave_1: left promiscuous mode
[   57.019524][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.027000][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.034521][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.041939][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.050592][ T3557] veth1_macvtap: left promiscuous mode
[   57.056042][ T3557] veth0_macvtap: left promiscuous mode
[   57.061556][ T3557] veth1_vlan: left promiscuous mode
[   57.066851][ T3557] veth0_vlan: left promiscuous mode
[   57.137027][ T3557] team0 (unregistering): Port device team_slave_1 removed
[   57.149811][ T3557] team0 (unregistering): Port device team_slave_0 removed