last executing test programs:

5.829518373s ago: executing program 4 (id=3057):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nogrpid}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0xf15}}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

5.703148104s ago: executing program 4 (id=3060):
r0 = socket$unix(0x1, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x3000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000002000/0x3000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001c00), &(0x7f0000001c40)=r9}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newchain={0x34, 0x64, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0xd}, {0xd, 0xfff3}, {0x8, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}}, 0x20008040)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

5.664633185s ago: executing program 4 (id=3061):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000020c0)={0x0, 0x38, &(0x7f0000002140)=[@in6={0xa, 0x4e22, 0xc, @remote, 0x80000001}, @in6={0xa, 0x4e22, 0x3, @remote}]}, &(0x7f00000002c0)=0x10)
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$eJzs3W1rZFcdAPD/vZPZZndTM1WRtWBbbGW36M5sGttGkXYF0RdSUOv7NSaTEDLJhMykbkLRLH4AQUSFfgDfCH4AQfoRRCjoe1FRRLf6UnvlztyxeZhJhjzN7uT3g5M55z6c/zmXzJ37cLg3gEvruYi4GxGliHgxIqaL6WmRYreb8uXef/j2Qp6SyLI3/5FEUkzr1ZWXJyLierHaZER862sR300Ox21t76zONxr1zaJca69t1FrbO7dX1uaX68v19dnZmVfmXp17ee5OVjhVPysR8dpX/vLTH/3iq6/95nPf++O9v936ft6sL32i2+6IWDhVgAG6dZc726In30ab5xFsRPL+lEujbgUAAMPIj/E/GhGf7hz/T0epczQHAAAAjJPs9an4TxKRAQAAAGMrjYipSNJqMRZgKtK0Wu2O4f14XEsbzVb7s0vNrfXFfF5EJcrp0kqjfqcYK1yJcpKXZ4oxtr3ySwfKsxHxVET8ZPpqp1xdaDYWR33xAwAAAC6J68/uP///93TayQMAAABjpjKwAAAAAIwLp/wAAAAw/pz/AwAAwFj7xhtv5Cnrvcd78a3trdXmW7cX663V6trWQnWhublRXW42lzvP7Fs7rr5Gs7nx+Vjful9r11vtWmt7595ac2u9fW9l3yuwAQAAgAv01LPv/iGJiN0vXu2kKJ4DCFwWX78y1GJ/PveGABeoNOoGACMzMeoGACNTPnYJewgYd8kx8w8P3uleK4zfnk97AACAs3fzk3vv/7/Tmda7GXj8tQHgcWasDwBcPu7uweVVjtKDE61448ybAozIR7ofTwyaP/DhHUPc/+9eY8iyEzUMAAA4M1OdlKTV4jh9KtK0Wo14svNagHKytNKo3ynOD34/XX4iL8901kyOHTMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRJZX1G8Fbz/XAAAAODxEZH+NSnO9G9OvzC1/+rAgbd+vfPmz+7Pt9ubMxFXkn9O55OuRET758X0lzKvBAAAAIBHQPc8vficGXVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg37z98e6GXLjLu378cEZV+8SdisvM5GeWIuPavJCb2rJdEROkM4u8+iIgb/eIn8UGWZZWiFf3iXz3n+JXOpukfP42I62cQHy6zd/P9z91+3780nut89v/+TRTptAbv/9L/7/9KA/Y/Tx4oD/L0e7+qDYz/IOLpif77n178pBt/X4i88PyQffzOt3d2+s7YU2W/+Htj1dprG7XW9s7tlbX55fpyfX12duaVuVfnXp67U1taadSLv33D/PhTv/7gqP5fGxC/sr//h7b/C0P1Pov/vnf/4ce6hXK/+Lee7//7e2NA/LT47ftMkc/n3+zld7v5vZ755e+eOar/iwP6P3lM/28N1f/4wovf/OGf+s45tDUAgIvQ2t5ZnW806ptHZCaHWOaCM68/Gs04w0w8Gs0YVSb7Qff/8XT1nHL1Q5nsNKtPxBk048qh72kpTlphErGb1zXkPyQAADBmPjzoP+oOEgAAAAAAAAAAAAAAAAAAAHCeTvhYssmIOHKZu3tqPhhzdzRdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40v8CAAD//+SZylA=")
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000040))
r4 = dup(r2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c00040003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250005000000000000001af8ff00000000bfab00000000000007000000000000000902000008000000b703000000008fd8850000000400000095ea508061034979a582fc8e2c45a20b9dc62711c9b83c5b0c29e1610a8af18e1eaa3c7f73753d96293771113db0e2ad1e1d6392b3f9c48e503dce445991ac373b6d31cab3dc8c1c1ba2a4738e6c6cf9883a446343bfa659575cf1f0ea301b34122b0ef83e580dec48bdf64f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00)

4.758961967s ago: executing program 4 (id=3077):
r0 = socket$inet(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r1}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}]}}]}, 0x50}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016eeffffb20000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0xfffffffd, 0x13580}, 0x0, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x0)
select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r11, 0x58, &(0x7f0000000500)}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
splice(r12, 0x0, r13, 0x0, 0x10003, 0x0)
r14 = syz_io_uring_setup(0x3559, &(0x7f00000000c0)={0x0, 0x301, 0x0, 0x3, 0x4e}, &(0x7f0000000180), &(0x7f0000000280))
io_uring_enter(r14, 0x47f6, 0x0, 0x0, 0x0, 0x0)

2.708115074s ago: executing program 2 (id=3104):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2000000000000000}, 0x18)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0xfed, 0x8, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000)
syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0)

2.315377729s ago: executing program 3 (id=3107):
r0 = socket$unix(0x1, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x3000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000002000/0x3000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, &(0x7f0000001c00), &(0x7f0000001c40)=r10}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newchain={0x34, 0x64, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0xd}, {0xd, 0xfff3}, {0x8, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}}, 0x20008040)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

2.25080099s ago: executing program 3 (id=3108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), 0x0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==")
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
write$9p(r3, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xe065)

2.199872601s ago: executing program 3 (id=3110):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x4000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2000000000000000}, 0x18)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0xfed, 0x8, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000)
syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0)

2.104830382s ago: executing program 1 (id=3111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

2.079395563s ago: executing program 1 (id=3112):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nogrpid}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0xf15}}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfd12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

1.996279874s ago: executing program 1 (id=3113):
r0 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x2}}, 0x18)
sendmmsg$sock(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000000100)="ad1a21d2026534", 0x7}], 0x1, &(0x7f0000001500)=[@mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x5281}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)

1.929515114s ago: executing program 1 (id=3114):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
timer_create(0x5, &(0x7f0000000300)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000340))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81901)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
move_mount(r4, 0x0, r3, 0x0, 0x46)
close(r3)
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.857621096s ago: executing program 1 (id=3115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x1000f)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x278, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@srh={{0x30}, {0x32, 0x0, 0x1, 0x7, 0x3, 0x2142, 0x510}}, @common=@srh1={{0x90}, {0xc, 0x2, 0xe, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @mcast1, [0xff, 0xff, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 0x1d42, 0x3422}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x15, "ae87c973f548b15a0293128d49fea1b714dd800d11c725fbceacd67a7175"}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x5, 0x2}, {0x3, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', <r9=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0)
r10 = signalfd(r0, &(0x7f00000003c0)={[0x1]}, 0x8)
ioctl$RTC_UIE_ON(r10, 0x7003)
r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
sigaltstack(&(0x7f00000000c0)={0x0}, &(0x7f0000000100)={&(0x7f0000000480)=""/150, 0x0, 0x96})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
writev(r11, &(0x7f0000000200)=[{&(0x7f0000000400)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

1.815780766s ago: executing program 2 (id=3116):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fb", 0x1}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0)

1.763849707s ago: executing program 1 (id=3117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x20000010)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x3, 0x6, {{0x5, 0x4, 0x3, 0x21, 0x14, 0x64, 0x0, 0xf, 0x4, 0x0, @remote, @remote}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'gretap0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x20000090)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r10], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

1.722134737s ago: executing program 2 (id=3118):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009000000", @ANYRES32=r0, @ANYRES64=r1, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000e00000080000000000000000000011c88f12c4ff74a3c0fefeb2f5f71b0000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
capget(&(0x7f0000feaff9)={0x19980330}, 0x0)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r4, &(0x7f0000000440)={0x1a, 0x1, 0x6, 0x5, 0x7, 0xe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x10)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
pread64(r5, &(0x7f0000000080)=""/196, 0xc4, 0x3)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_setup(0x2dc, &(0x7f00000002c0)=<r9=>0x0)
io_cancel(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x5, r6, &(0x7f0000000300)="e40e1e0e3e3e938db87eb142ddf7a0", 0xf, 0x5a5f, 0x0, 0x3}, &(0x7f0000000380))
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@loopback}, {@in6=@dev, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x800000000000}, {}, {0x2}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000040), 0xfd12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
fdatasync(r11)
perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x28, 0x0, 0x2, 0xe1, 0x0, 0xe9c, 0x24100, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x6, @perf_config_ext={0x7, 0xc15}, 0x110000, 0xb8e, 0x9, 0x1, 0x40, 0x2, 0x4, 0x0, 0x6, 0x0, 0x4}, r11, 0x0, r10, 0x4)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x540, [0x0, 0x200000000c00, 0x200000000e5c, 0x200000001110], 0x0, &(0x7f0000000400), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x38, 0x3a, 'batadv_slave_0\x00', 'ip6_vti0\x00', 'veth1_to_bridge\x00', 'dvmrp1\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff], 0xde, 0xde, 0x10e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x52fd4039, 0x7fffffffffffffff, 0x7, 0x2}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x8}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x3, 0x10, 0x88e5, 'pim6reg1\x00', 'bridge_slave_0\x00', 'macvtap0\x00', 'vlan1\x00', @random="c1a6aad8437f", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xbe, 0xee, 0x11e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x1}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x10, 0x1a, 'veth1_to_hsr\x00', 'vcan0\x00', 'bond_slave_1\x00', 'veth1_macvtap\x00', @local, [0xff, 0x0, 0x0, 0x0, 0xff], @random="825cd956ef80", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x136, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x100}}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x400, 0x0, 0x2, 0x0, 0x0, "d23ddab14d06582309b96db91d2bdb998d462af7c7060184cf114f4a0eac6dc82bd9b9f8dbc08fde656d2983b0130781b1341e8f92fe092b39e1ffb7a63f06ef"}}}}, {0x11, 0x0, 0x88e7, 'team_slave_1\x00', 'dvmrp1\x00', 'batadv_slave_1\x00', 'veth0_macvtap\x00', @remote, [0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x116, 0x14e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7fffffff}}}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7ff, 0x1, 0x0, 0x0, "59335ea23c12e96e95970bf09661131c5dbe96d175676e3a094f2592aeca6aee381c6ae0ca5a04186c43b4df52fca5254599753d6dd498a1c3537aa55343a5b2"}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x5b8)

1.5048761s ago: executing program 2 (id=3121):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==")
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)

1.316734393s ago: executing program 3 (id=3123):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000020c0)={0x0, 0x38, &(0x7f0000002140)=[@in6={0xa, 0x4e22, 0xc, @remote, 0x80000001}, @in6={0xa, 0x4e22, 0x3, @remote}]}, &(0x7f00000002c0)=0x10)
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$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")
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000040))
r4 = dup(r2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c2800005"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250005000000000000001af8ff00000000bfab00000000000007000000000000000902000008000000b703000000008fd8850000000400000095ea508061034979a582fc8e2c45a20b9dc62711c9b83c5b0c29e1610a8af18e1eaa3c7f73753d96293771113db0e2ad1e1d6392b3f9c48e503dce445991ac373b6d31cab3dc8c1c1ba2a4738e6c6cf9883a446343bfa659575cf1f0ea301b34122b0ef83e580dec48bdf64f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00)

1.005039747s ago: executing program 2 (id=3126):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009000000", @ANYRES32=r0, @ANYRES64=r1, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000e00000080000000000000000000011c88f12c4ff74a3c0fefeb2f5f71b0000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
capget(&(0x7f0000feaff9)={0x19980330}, 0x0)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r4, &(0x7f0000000440)={0x1a, 0x1, 0x6, 0x5, 0x7, 0xe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x10)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/196, 0xc4, 0x3)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_setup(0x2dc, &(0x7f00000002c0)=<r8=>0x0)
io_cancel(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x5, r5, &(0x7f0000000300)="e40e1e0e3e3e938db87eb142ddf7a0", 0xf, 0x5a5f, 0x0, 0x3}, &(0x7f0000000380))
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@loopback}, {@in6=@dev, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x800000000000}, {}, {0x2}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000040), 0xfd12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0)
fdatasync(r10)
perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x28, 0x0, 0x2, 0xe1, 0x0, 0xe9c, 0x24100, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x6, @perf_config_ext={0x7, 0xc15}, 0x110000, 0xb8e, 0x9, 0x1, 0x40, 0x2, 0x4, 0x0, 0x6, 0x0, 0x4}, r10, 0x0, r9, 0x4)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x540, [0x0, 0x200000000c00, 0x200000000e5c, 0x200000001110], 0x0, &(0x7f0000000400), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x38, 0x3a, 'batadv_slave_0\x00', 'ip6_vti0\x00', 'veth1_to_bridge\x00', 'dvmrp1\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff], 0xde, 0xde, 0x10e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x52fd4039, 0x7fffffffffffffff, 0x7, 0x2}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x8}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x3, 0x10, 0x88e5, 'pim6reg1\x00', 'bridge_slave_0\x00', 'macvtap0\x00', 'vlan1\x00', @random="c1a6aad8437f", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xbe, 0xee, 0x11e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x1}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x10, 0x1a, 'veth1_to_hsr\x00', 'vcan0\x00', 'bond_slave_1\x00', 'veth1_macvtap\x00', @local, [0xff, 0x0, 0x0, 0x0, 0xff], @random="825cd956ef80", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x136, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x100}}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x400, 0x0, 0x2, 0x0, 0x0, "d23ddab14d06582309b96db91d2bdb998d462af7c7060184cf114f4a0eac6dc82bd9b9f8dbc08fde656d2983b0130781b1341e8f92fe092b39e1ffb7a63f06ef"}}}}, {0x11, 0x0, 0x88e7, 'team_slave_1\x00', 'dvmrp1\x00', 'batadv_slave_1\x00', 'veth0_macvtap\x00', @remote, [0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x116, 0x14e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7fffffff}}}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7ff, 0x1, 0x0, 0x0, "59335ea23c12e96e95970bf09661131c5dbe96d175676e3a094f2592aeca6aee381c6ae0ca5a04186c43b4df52fca5254599753d6dd498a1c3537aa55343a5b2"}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x5b8)

986.331957ms ago: executing program 0 (id=3127):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$eJzs3MtvG0UYAPBvN4++m7SURx9Q8xIRhaRJC/TAARBIvSAhwaEcQxqq0rRFTZBoVdEUoXJE8A8ARyQkTlw4gYQQcAJxhTtCqlAvLRyQ0dq7jV0/4jgvqH8/yc7M7oxnv90de7yTdQA9q5Q9JRFbI+LXiBiqZusLlKp/bly7OPXXtYtTSZTLL/+ZVMpdv3Zxqiha1NuSZ0bSiPS9JPY2aXf2/IVTkzMz0+fy/Njc6TfHZs9fePzk6ckT0yemz0wcOXL40PhTT0480VEclxZZn8V1fc87Z/ftPvrqhy9OleO1Hz7Ptndrvr42jqrhjtptpxSlKOcWlg5Wnh9e9qv/t2yrSSf967ghLElfRGSHa6DS/4eiLxYO3lC88O7NzLeNdT9aq40EVkX22bSjYWlf9U9/XgC4TSW6OPSo4hM/+/5bPNZ0ALLOrj6bPU9X4r+RP6pr+iPNvssOV7+x97Wof1f7ly8PLdL+1og4Nv/3x9kjml6HAABYWV9n45/Hmo3/0rqxzfZ8DmU4Ig5ExM6IuCMidkXEnfk46O6IuGeJ7ZduyTeOf37e1FVgHdocEU/nc1v14780L5HczG2rxD+QvH5yZvpgvk9GYmBDlh9v08Y3z//yQat1pZrxX/bI2i/Ggvl2/NG/ob7O8cm5yWWEXOfq5Yg9/c3iT27OBGR7YHdE7Oni9bN9dvLRz/Zl6e1bGtcvHn8bKzDPVP404pHq8Z+PW+IvJNWWWs1Pjm2MmemDY8VZ0ejHn668VJsfqEnXxb+xs5g2dhtsE9nx39z0/M/jL7pBMV87u/Q2rvz2fsvvNI3HP4lj87Ul8vO/5l0gO/8Hk1cq6cF82duTc3PnxiMG8wV1yycW6hb5onwW/8iDzfv/zoh/Psnr7Y2I7CS+NyLui4j9+bbfHxEPLHJEvn/uoTfa76Euz/+43FmxNrL4j7c7/hHDSe18fReJvlPffdWq/c7e/w5XUiP5kk7e/zrdwOXsOwAAAPi/SCtz0Ek6WqRrLk7tis3pzNnZuQOleOvM8epc9XAMpMWVrqGa66Hj+bXhIj9xS/5QROyo/KfRpkp+dOrszLb1DByo3KtT1/8jTUdHq+t+b/VPL8DtY0nzaLV3B37x5cpvDLCm3K8JvUv/h96l/0Pv0v+hdzXr/5cibqzDpgBrzOc/9C79H3qX/g+9S/+HntR4S3zxQwvd3Om/kNh5dFnVVz1RHlqVV55feq2+VYo0an+0o2UiiYjumoi0fZnBDlpft0S6aJlnFtstA8v6TYwssT9PbIiITmtdWrO9WrxDJMm6vTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsgH8DAAD//0qp3GU=")
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pK    \x00'}, 0x20)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx  \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800})
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x2000000, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20)
write$cgroup_int(r0, &(0x7f0000000000)=0x91e, 0x12)
syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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")
recvfrom$l2tp(r0, &(0x7f00000001c0)=""/74, 0x4a, 0x40000101, 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000563c000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000009df7000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70409a6f9bffdb6791224a5530000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0x1000000100}, 0x18)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0)

813.08589ms ago: executing program 3 (id=3128):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)

612.846172ms ago: executing program 0 (id=3129):
r0 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x7820, 0x700, 0x1, 0x9e, {{0x36, 0x4, 0x3, 0x0, 0xd8, 0x64, 0x0, 0x1, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x24, 0xd9, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9ae5}, {@local, 0x8000}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x1, [0xfff]}, @rr={0x7, 0x23, 0x3c, [@empty, @loopback, @rand_addr=0x64010101, @loopback, @loopback, @loopback, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x91, 0x3, 0x4, [{@private=0xa010100, 0x2}]}, @end, @timestamp={0x44, 0x28, 0x54, 0x0, 0x1, [0x955a, 0xc, 0x2, 0x4, 0x4, 0x7, 0x7, 0xfffffff8, 0xbd]}, @rr={0x7, 0x1b, 0xc7, [@loopback, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x25, 0x0, [{0x7, 0x8, "70cc15f9fa30"}, {0xf, 0x6, "fc07b982"}, {0x5, 0x11, "f28fc5a968ff636427e19f7d76b54d"}]}]}}}}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='rseq_update\x00', r4}, 0x18)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {0x0, 0xd}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100), 0x4)
r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)

520.313933ms ago: executing program 0 (id=3130):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pS    \x00'}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@orlov}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000d80)="$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")

474.639934ms ago: executing program 4 (id=3086):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x110a}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x480}, {0xffffffffffffffff, 0x10}], 0x5, &(0x7f0000000080), &(0x7f0000000200)={[0x37b]}, 0x8)

411.605775ms ago: executing program 0 (id=3131):
r0 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x7820, 0x700, 0x1, 0x9e, {{0x36, 0x4, 0x3, 0x0, 0xd8, 0x64, 0x0, 0x1, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x24, 0xd9, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9ae5}, {@local, 0x8000}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x1, [0xfff]}, @rr={0x7, 0x23, 0x3c, [@empty, @loopback, @rand_addr=0x64010101, @loopback, @loopback, @loopback, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x91, 0x3, 0x4, [{@private=0xa010100, 0x2}]}, @end, @timestamp={0x44, 0x28, 0x54, 0x0, 0x1, [0x955a, 0xc, 0x2, 0x4, 0x4, 0x7, 0x7, 0xfffffff8, 0xbd]}, @rr={0x7, 0x1b, 0xc7, [@loopback, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x25, 0x0, [{0x7, 0x8, "70cc15f9fa30"}, {0xf, 0x6, "fc07b982"}, {0x5, 0x11, "f28fc5a968ff636427e19f7d76b54d"}]}]}}}}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='rseq_update\x00', r4}, 0x18)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {0x0, 0xd}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000001180)=""/207, 0xcf, 0x0, &(0x7f0000001280)=""/190, 0xbe}}, 0x10)
r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)

408.977485ms ago: executing program 4 (id=3132):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
uname(&(0x7f0000000300)=""/10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e00000000000000"], 0x44}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r5, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x9, 0x8f0, {{0x5d, 0x4, 0x1, 0xf, 0x174, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @loopback, {[@cipso={0x86, 0x3e, 0x3, [{0x2, 0x3, "bf"}, {0x6, 0xd, "4dbdc00d75e3e9cd056eb3"}, {0x0, 0xc, "df5048a77ed0c9a0a714"}, {0x0, 0x2}, {0x7, 0x6, "ffbffbd5"}, {0x1, 0x5, 'K-\r'}, {0x3, 0xf, "16aa6d014e96181494e96b112a"}]}, @cipso={0x86, 0x3b, 0x2, [{0x2, 0x4, "8d90"}, {0x0, 0x9, "4f7758fd722bb3"}, {0x0, 0x10, "4061eeaccc56def6308401f8d45e"}, {0x1, 0x9, "4170d498671f4b"}, {0x6, 0xf, "b3624d8bb4961082004bc608ae"}]}, @timestamp_addr={0x44, 0x44, 0xc2, 0x1, 0x8, [{@multicast2, 0x5}, {@multicast2, 0x6}, {@multicast1, 0x140000}, {@multicast2, 0x8001}, {@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@remote, 0xe}, {@private=0xa010102, 0x66}]}, @rr={0x7, 0x13, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101]}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x0, 0xa, "339c4c48556b8613"}, {0x7, 0x10, "22aa7803a2e58066f0a63d49a92e"}, {0x7, 0x12, "99cfa3a41c063c66616c0a20a456c10c"}, {0x0, 0x2}, {0x7, 0xc, "874748a2cdb3540a09ff"}, {0x0, 0x3, "db"}]}, @lsrr={0x83, 0x27, 0x78, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @local, @empty, @empty, @broadcast, @broadcast]}, @lsrr={0x83, 0xf, 0x86, [@loopback, @broadcast, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0x5b, 0x3, 0x4, [{@broadcast, 0xb}, {@remote, 0x2}]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5)
r10 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r11 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r10)
keyctl$KEYCTL_MOVE(0x1e, r11, r11, r10, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0xfffffffe, 0x0, 0x0, 0xfff}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0x7}, 0x2, r9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r12}, 0x10)

328.885616ms ago: executing program 0 (id=3133):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x1000f)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x278, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@srh={{0x30}, {0x32, 0x0, 0x1, 0x7, 0x3, 0x2142, 0x510}}, @common=@srh1={{0x90}, {0xc, 0x2, 0xe, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @mcast1, [0xff, 0xff, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 0x1d42, 0x3422}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x15, "ae87c973f548b15a0293128d49fea1b714dd800d11c725fbceacd67a7175"}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x5, 0x2}, {0x3, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8924, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', <r9=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0)
r10 = signalfd(r0, &(0x7f00000003c0)={[0x1]}, 0x8)
ioctl$RTC_UIE_ON(r10, 0x7003)
r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
sigaltstack(&(0x7f00000000c0)={0x0}, &(0x7f0000000100)={&(0x7f0000000480)=""/150, 0x0, 0x96})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
writev(r11, &(0x7f0000000200)=[{&(0x7f0000000400)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

215.553508ms ago: executing program 2 (id=3134):
r0 = socket$unix(0x1, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x3000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000002000/0x3000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, &(0x7f0000001c00), &(0x7f0000001c40)=r10}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newchain={0x34, 0x64, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0xd}, {0xd, 0xfff3}, {0x8, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}}, 0x20008040)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

61.258239ms ago: executing program 0 (id=3135):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x80}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)

0s ago: executing program 3 (id=3136):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
io_getevents(0x0, 0x6, 0x8, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0)

kernel console output (not intermixed with test programs):

ch(7, /dev/loop1p3, 10) failed: No such file or directory
[  142.924045][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2576'.
[  142.955698][ T9996] syz_tun: entered promiscuous mode
[  142.986880][ T9996] syz_tun: left promiscuous mode
[  143.019964][ T9994] loop1: detected capacity change from 0 to 164
[  143.027527][ T9994] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  143.037320][   T29] kauditd_printk_skb: 649 callbacks suppressed
[  143.037337][   T29] audit: type=1400 audit(1746649173.040:14000): avc:  denied  { mount } for  pid=9993 comm="syz.1.2576" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  143.073129][ T9994] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  143.073393][ T9994] Symlink component flag not implemented
[  143.073402][ T9994] Symlink component flag not implemented
[  143.073737][ T9994] Symlink component flag not implemented (7)
[  143.073746][ T9994] Symlink component flag not implemented (116)
[  143.084561][   T29] audit: type=1400 audit(1746649173.080:14001): avc:  denied  { write } for  pid=9998 comm="syz.4.2578" name="netstat" dev="proc" ino=4026532600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  143.116596][   T29] audit: type=1400 audit(1746649173.110:14002): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  143.198184][   T29] audit: type=1400 audit(1746649173.200:14003): avc:  denied  { map_create } for  pid=10004 comm="syz.1.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  143.244947][   T29] audit: type=1400 audit(1746649173.200:14004): avc:  denied  { bpf } for  pid=10004 comm="syz.1.2580" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  143.266337][   T29] audit: type=1400 audit(1746649173.200:14005): avc:  denied  { prog_load } for  pid=10004 comm="syz.1.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  143.286209][   T29] audit: type=1400 audit(1746649173.200:14006): avc:  denied  { perfmon } for  pid=10004 comm="syz.1.2580" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  143.308036][   T29] audit: type=1400 audit(1746649173.200:14007): avc:  denied  { create } for  pid=10004 comm="syz.1.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  143.328413][   T29] audit: type=1400 audit(1746649173.200:14008): avc:  denied  { write } for  pid=10004 comm="syz.1.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  143.348931][   T29] audit: type=1400 audit(1746649173.200:14009): avc:  denied  { read } for  pid=10004 comm="syz.1.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  143.481551][T10018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10018 comm=syz.2.2586
[  143.525293][T10016] bond1: entered promiscuous mode
[  143.530401][T10016] bond1: entered allmulticast mode
[  143.556103][T10016] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.576885][T10016] bond1 (unregistering): Released all slaves
[  143.636196][T10020] loop3: detected capacity change from 0 to 8192
[  143.695405][T10020]  loop3: p3 < > p4
[  143.700952][T10020] loop3: p4 start 131072 is beyond EOD, truncated
[  143.812096][T10026] syz.0.2588: attempt to access beyond end of device
[  143.812096][T10026] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  143.849503][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  144.083728][T10050] syz.0.2601: attempt to access beyond end of device
[  144.083728][T10050] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  144.225820][T10059] x_tables: duplicate underflow at hook 2
[  144.296119][T10063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10063 comm=syz.0.2609
[  144.299318][T10061] loop4: detected capacity change from 0 to 512
[  144.327532][T10061] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.2606: dx entry: limit 1024 != root limit 124
[  144.339768][T10061] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.2606: Corrupt directory, running e2fsck is recommended
[  144.362580][T10061] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  144.387318][T10061] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.2606: corrupted in-inode xattr: invalid ea_ino
[  144.409749][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2611'.
[  144.420500][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2610'.
[  144.431084][T10061] EXT4-fs (loop4): Remounting filesystem read-only
[  144.446772][T10074] syz_tun: entered promiscuous mode
[  144.457593][T10074] syz_tun: left promiscuous mode
[  144.477983][T10079] loop3: detected capacity change from 0 to 128
[  144.479549][T10061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.502916][T10072] syz_tun: entered promiscuous mode
[  144.503486][T10080] loop2: detected capacity change from 0 to 164
[  144.510542][T10072] syz_tun: left promiscuous mode
[  144.526112][T10080] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  144.537914][T10061] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.2606: dx entry: limit 1024 != root limit 124
[  144.550055][T10061] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.2606: Corrupt directory, running e2fsck is recommended
[  144.550312][T10075] loop1: detected capacity change from 0 to 164
[  144.567284][T10061] syz.4.2606: attempt to access beyond end of device
[  144.567284][T10061] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  144.596839][T10074] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  144.606801][T10061] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.2606: dx entry: limit 1024 != root limit 124
[  144.619075][T10061] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.2606: Corrupt directory, running e2fsck is recommended
[  144.632291][T10075] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  144.636508][T10074] Symlink component flag not implemented
[  144.646291][T10074] Symlink component flag not implemented
[  144.656329][T10074] Symlink component flag not implemented (7)
[  144.662563][T10074] Symlink component flag not implemented (116)
[  144.666243][T10072] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  144.684366][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.699600][T10072] Symlink component flag not implemented
[  144.705521][T10072] Symlink component flag not implemented
[  144.712638][T10072] Symlink component flag not implemented (7)
[  144.718960][T10072] Symlink component flag not implemented (116)
[  144.797214][  T148] kworker/u8:4: attempt to access beyond end of device
[  144.797214][  T148] loop3: rw=1, sector=153, nr_sectors = 8 limit=128
[  144.814615][T10089] loop2: detected capacity change from 0 to 512
[  144.822599][  T148] kworker/u8:4: attempt to access beyond end of device
[  144.822599][  T148] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[  144.847567][  T148] kworker/u8:4: attempt to access beyond end of device
[  144.847567][  T148] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[  144.852495][T10089] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.2617: dx entry: limit 1024 != root limit 124
[  144.873470][T10092] loop4: detected capacity change from 0 to 512
[  144.880093][T10089] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.2617: Corrupt directory, running e2fsck is recommended
[  144.894713][T10089] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  144.903485][  T148] kworker/u8:4: attempt to access beyond end of device
[  144.903485][  T148] loop3: rw=1, sector=201, nr_sectors = 8 limit=128
[  144.917767][T10089] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2617: corrupted in-inode xattr: invalid ea_ino
[  144.927563][T10092] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.2619: dx entry: limit 1024 != root limit 124
[  144.931719][  T148] kworker/u8:4: attempt to access beyond end of device
[  144.931719][  T148] loop3: rw=1, sector=217, nr_sectors = 8 limit=128
[  144.943276][T10092] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.2619: Corrupt directory, running e2fsck is recommended
[  144.943998][T10089] EXT4-fs (loop2): Remounting filesystem read-only
[  144.957478][  T148] kworker/u8:4: attempt to access beyond end of device
[  144.957478][  T148] loop3: rw=1, sector=233, nr_sectors = 8 limit=128
[  144.974984][T10092] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  144.980878][T10089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.990590][T10092] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.2619: corrupted in-inode xattr: invalid ea_ino
[  145.025134][T10092] EXT4-fs (loop4): Remounting filesystem read-only
[  145.032177][T10092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.048234][T10089] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.2617: dx entry: limit 1024 != root limit 124
[  145.060665][T10089] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.2617: Corrupt directory, running e2fsck is recommended
[  145.076812][T10092] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.2619: dx entry: limit 1024 != root limit 124
[  145.088914][T10092] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.2619: Corrupt directory, running e2fsck is recommended
[  145.122540][T10092] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.2619: dx entry: limit 1024 != root limit 124
[  145.134628][T10092] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.2619: Corrupt directory, running e2fsck is recommended
[  145.155587][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2618'.
[  145.166202][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.171742][T10098] netlink: 'syz.3.2618': attribute type 4 has an invalid length.
[  145.214050][T10089] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.2617: dx entry: limit 1024 != root limit 124
[  145.226286][T10089] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.2617: Corrupt directory, running e2fsck is recommended
[  145.255688][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.294055][T10107] loop3: detected capacity change from 0 to 512
[  145.305621][T10106] loop2: detected capacity change from 0 to 1024
[  145.313113][T10106] EXT4-fs: Ignoring removed bh option
[  145.322451][T10107] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2624: dx entry: limit 1024 != root limit 124
[  145.335118][T10107] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2624: Corrupt directory, running e2fsck is recommended
[  145.353599][T10108] bond1: entered promiscuous mode
[  145.358959][T10108] bond1: entered allmulticast mode
[  145.369002][T10106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.381775][T10108] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.391548][T10107] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  145.400279][T10107] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2624: corrupted in-inode xattr: invalid ea_ino
[  145.415855][T10108] bond1 (unregistering): Released all slaves
[  145.417046][T10107] EXT4-fs (loop3): Remounting filesystem read-only
[  145.429637][T10107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.449872][T10107] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2624: dx entry: limit 1024 != root limit 124
[  145.462249][T10107] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2624: Corrupt directory, running e2fsck is recommended
[  145.538755][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.577771][T10107] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2624: dx entry: limit 1024 != root limit 124
[  145.584256][T10120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10120 comm=syz.4.2628
[  145.589913][T10107] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2624: Corrupt directory, running e2fsck is recommended
[  145.643940][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.716090][T10129] x_tables: duplicate underflow at hook 2
[  145.722159][T10130] x_tables: duplicate underflow at hook 2
[  145.839553][T10140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10140 comm=syz.1.2637
[  145.887958][T10136] __nla_validate_parse: 1 callbacks suppressed
[  145.888038][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2635'.
[  145.978070][T10136] syz_tun: entered promiscuous mode
[  145.992463][T10150] loop3: detected capacity change from 0 to 164
[  145.997660][T10136] syz_tun: left promiscuous mode
[  146.029825][T10150] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  146.045512][T10154] loop1: detected capacity change from 0 to 128
[  146.062387][T10150] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  146.091951][T10150] Symlink component flag not implemented
[  146.097692][T10150] Symlink component flag not implemented
[  146.103930][T10150] Symlink component flag not implemented (7)
[  146.110079][T10150] Symlink component flag not implemented (116)
[  146.143021][T10159] x_tables: duplicate underflow at hook 2
[  146.160971][T10163] loop3: detected capacity change from 0 to 128
[  146.169622][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2646'.
[  146.194537][T10160] syz_tun: entered promiscuous mode
[  146.226286][T10160] syz_tun: left promiscuous mode
[  146.256772][T10167] loop4: detected capacity change from 0 to 1024
[  146.271014][T10167] EXT4-fs: Ignoring removed bh option
[  146.288650][T10167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.304665][T10168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.423026][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.467306][T10168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.523974][T10187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10187 comm=syz.4.2654
[  146.539258][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'.
[  146.560587][T10168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.599674][T10191] loop1: detected capacity change from 0 to 128
[  146.629100][T10194] x_tables: duplicate underflow at hook 2
[  146.640357][T10191] FAT-fs (loop1): Directory bread(block 32) failed
[  146.653137][T10191] FAT-fs (loop1): Directory bread(block 33) failed
[  146.671020][T10191] FAT-fs (loop1): Directory bread(block 34) failed
[  146.691719][T10191] FAT-fs (loop1): Directory bread(block 35) failed
[  146.711420][T10191] FAT-fs (loop1): Directory bread(block 36) failed
[  146.721395][T10168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.733126][T10191] FAT-fs (loop1): Directory bread(block 37) failed
[  146.742481][T10191] FAT-fs (loop1): Directory bread(block 38) failed
[  146.749438][T10191] FAT-fs (loop1): Directory bread(block 39) failed
[  146.758054][T10191] FAT-fs (loop1): Directory bread(block 40) failed
[  146.765047][T10191] FAT-fs (loop1): Directory bread(block 41) failed
[  146.799875][T10204] loop4: detected capacity change from 0 to 256
[  146.830640][T10168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.861897][T10168] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.871073][T10204] msdos: Bad value for 'nfs'
[  146.919783][T10168] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.976213][T10191] FAT-fs (loop1): Filesystem has been set read-only
[  146.979967][T10168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.996779][T10207] loop4: detected capacity change from 0 to 1024
[  147.010367][T10191] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  147.035430][T10207] EXT4-fs: Ignoring removed bh option
[  147.069008][T10207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.174492][T10218] loop1: detected capacity change from 0 to 736
[  147.187631][T10218] iso9660: Unknown parameter ''
[  147.247536][T10218] loop1: detected capacity change from 0 to 512
[  147.274951][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.292597][T10218] EXT4-fs (loop1): 1 orphan inode deleted
[  147.306327][T10218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.312342][T10232] loop3: detected capacity change from 0 to 512
[  147.325917][ T1719] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1
[  147.343867][T10218] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.433656][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'.
[  147.458954][T10240] syz_tun: entered promiscuous mode
[  147.469847][T10240] syz_tun: left promiscuous mode
[  147.475094][T10232] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2675: dx entry: limit 1024 != root limit 124
[  147.487433][T10232] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2675: Corrupt directory, running e2fsck is recommended
[  147.520235][T10246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.529698][T10232] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  147.539898][T10232] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2675: corrupted in-inode xattr: invalid ea_ino
[  147.554710][T10232] EXT4-fs (loop3): Remounting filesystem read-only
[  147.574741][T10232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.605101][T10247] loop4: detected capacity change from 0 to 512
[  147.612015][T10247] EXT4-fs: Ignoring removed nobh option
[  147.623048][T10247] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.637179][T10232] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2675: dx entry: limit 1024 != root limit 124
[  147.649768][T10232] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2675: Corrupt directory, running e2fsck is recommended
[  147.664603][T10247] EXT4-fs (loop4): 1 truncate cleaned up
[  147.665361][T10232] bio_check_eod: 334 callbacks suppressed
[  147.665378][T10232] syz.3.2675: attempt to access beyond end of device
[  147.665378][T10232] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  147.673351][T10247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.707529][T10246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.714287][T10232] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2675: dx entry: limit 1024 != root limit 124
[  147.730406][T10232] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2675: Corrupt directory, running e2fsck is recommended
[  147.758835][T10247] EXT4-fs error (device loop4): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.4.2676: path /533/file5/file0: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=16, size=80 fake=0
[  147.781318][T10247] EXT4-fs (loop4): Remounting filesystem read-only
[  147.783053][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.813808][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.826992][T10246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.861303][T10254] x_tables: duplicate underflow at hook 2
[  147.910183][T10246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.943768][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2687'.
[  147.974180][T10264] syz_tun: entered promiscuous mode
[  147.987741][T10264] syz_tun: left promiscuous mode
[  148.002308][T10246] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.041030][T10269] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.056100][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.071077][T10271] bond1: entered promiscuous mode
[  148.076245][T10271] bond1: entered allmulticast mode
[  148.081986][T10271] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.089077][T10264] loop4: detected capacity change from 0 to 164
[  148.098239][T10271] bond1 (unregistering): Released all slaves
[  148.104339][   T29] kauditd_printk_skb: 471 callbacks suppressed
[  148.104400][   T29] audit: type=1400 audit(1746649178.100:14480): avc:  denied  { mounton } for  pid=10263 comm="syz.4.2687" path="/536/file0" dev="tmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  148.126668][T10264] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  148.139152][   T29] audit: type=1326 audit(1746649178.130:14481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.154412][T10273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2691'.
[  148.165425][   T29] audit: type=1326 audit(1746649178.130:14482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.165820][   T29] audit: type=1326 audit(1746649178.150:14483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.165851][   T29] audit: type=1326 audit(1746649178.150:14484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.165876][   T29] audit: type=1326 audit(1746649178.150:14485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.165901][   T29] audit: type=1326 audit(1746649178.150:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.231398][T10264] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  148.245712][   T29] audit: type=1326 audit(1746649178.150:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.245749][   T29] audit: type=1326 audit(1746649178.150:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.245783][   T29] audit: type=1326 audit(1746649178.150:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f74aaa7e969 code=0x7ffc0000
[  148.249907][T10246] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.323570][T10264] Symlink component flag not implemented
[  148.389104][T10264] Symlink component flag not implemented
[  148.396305][T10269] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.397553][T10264] Symlink component flag not implemented (7)
[  148.412802][T10264] Symlink component flag not implemented (116)
[  148.423115][T10246] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.434458][T10278] netlink: 'syz.3.2691': attribute type 4 has an invalid length.
[  148.446446][T10269] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.483246][T10246] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.517226][T10269] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.587309][T10288] loop1: detected capacity change from 0 to 128
[  148.606659][T10269] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.612695][T10294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10294 comm=syz.2.2700
[  148.658287][T10269] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.668123][T10288] FAT-fs (loop1): Directory bread(block 32) failed
[  148.675353][T10288] FAT-fs (loop1): Directory bread(block 33) failed
[  148.691257][T10288] FAT-fs (loop1): Directory bread(block 34) failed
[  148.707907][T10269] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.711455][T10288] FAT-fs (loop1): Directory bread(block 35) failed
[  148.733064][T10288] FAT-fs (loop1): Directory bread(block 36) failed
[  148.747484][T10288] FAT-fs (loop1): Directory bread(block 37) failed
[  148.762244][T10288] FAT-fs (loop1): Directory bread(block 38) failed
[  148.771555][T10269] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.795195][T10288] FAT-fs (loop1): Directory bread(block 39) failed
[  148.804299][T10288] FAT-fs (loop1): Directory bread(block 40) failed
[  148.822894][T10302] loop3: detected capacity change from 0 to 512
[  148.834157][T10304] loop2: detected capacity change from 0 to 128
[  148.842854][T10288] FAT-fs (loop1): Directory bread(block 41) failed
[  148.859128][T10302] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2703: dx entry: limit 1024 != root limit 124
[  148.871333][T10302] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2703: Corrupt directory, running e2fsck is recommended
[  148.901219][T10304] FAT-fs (loop2): Directory bread(block 32) failed
[  148.929146][T10304] FAT-fs (loop2): Directory bread(block 33) failed
[  148.935719][T10302] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  148.935795][T10302] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2703: corrupted in-inode xattr: invalid ea_ino
[  148.944724][T10308] bond1: entered promiscuous mode
[  148.962600][T10308] bond1: entered allmulticast mode
[  148.967917][T10304] FAT-fs (loop2): Directory bread(block 34) failed
[  148.975095][T10302] EXT4-fs (loop3): Remounting filesystem read-only
[  148.982301][T10302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.996030][T10288] syz.1.2699: attempt to access beyond end of device
[  148.996030][T10288] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128
[  148.998397][T10308] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.009806][T10304] FAT-fs (loop2): Directory bread(block 35) failed
[  149.023694][T10304] FAT-fs (loop2): Directory bread(block 36) failed
[  149.027449][T10288] FAT-fs (loop1): Filesystem has been set read-only
[  149.031987][T10304] FAT-fs (loop2): Directory bread(block 37) failed
[  149.036992][T10288] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  149.054737][T10308] bond1 (unregistering): Released all slaves
[  149.076138][T10311] loop1: detected capacity change from 0 to 128
[  149.076287][T10304] FAT-fs (loop2): Directory bread(block 38) failed
[  149.097227][T10302] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2703: dx entry: limit 1024 != root limit 124
[  149.099422][T10304] FAT-fs (loop2): Directory bread(block 39) failed
[  149.109326][T10302] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2703: Corrupt directory, running e2fsck is recommended
[  149.130549][T10304] FAT-fs (loop2): Directory bread(block 40) failed
[  149.142277][T10311] syz.1.2706: attempt to access beyond end of device
[  149.142277][T10311] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[  149.155791][T10311] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  149.166853][T10302] syz.3.2703: attempt to access beyond end of device
[  149.166853][T10302] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  149.175299][T10304] FAT-fs (loop2): Directory bread(block 41) failed
[  149.234472][T10304] syz.2.2704: attempt to access beyond end of device
[  149.234472][T10304] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  149.248993][T10304] FAT-fs (loop2): Filesystem has been set read-only
[  149.262520][T10302] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2703: dx entry: limit 1024 != root limit 124
[  149.274637][T10302] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2703: Corrupt directory, running e2fsck is recommended
[  149.291712][T10304] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  149.333843][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.422276][T10325] bond1: entered promiscuous mode
[  149.427536][T10325] bond1: entered allmulticast mode
[  149.436863][T10325] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.449220][T10325] bond1 (unregistering): Released all slaves
[  149.656423][T10341] x_tables: duplicate underflow at hook 2
[  149.812871][T10348] syz.0.2721: attempt to access beyond end of device
[  149.812871][T10348] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  149.899920][T10356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10356 comm=syz.0.2726
[  149.978119][T10367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10367 comm=syz.4.2730
[  150.077701][T10373] x_tables: duplicate underflow at hook 2
[  150.219557][T10382] x_tables: duplicate underflow at hook 2
[  150.253069][T10380] loop1: detected capacity change from 0 to 512
[  150.260070][T10380] EXT4-fs: Ignoring removed orlov option
[  150.284157][T10380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.324510][T10392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10392 comm=syz.2.2741
[  150.342680][T10380] EXT4-fs (loop1): 1 truncate cleaned up
[  150.355486][T10396] loop3: detected capacity change from 0 to 128
[  150.383668][T10380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.440077][T10397] syz.3.2743: attempt to access beyond end of device
[  150.440077][T10397] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128
[  150.514493][   T31] kworker/u8:1: attempt to access beyond end of device
[  150.514493][   T31] loop3: rw=1, sector=153, nr_sectors = 8 limit=128
[  150.528504][   T31] kworker/u8:1: attempt to access beyond end of device
[  150.528504][   T31] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[  150.542841][   T31] kworker/u8:1: attempt to access beyond end of device
[  150.542841][   T31] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[  150.587871][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.632504][T10410] loop3: detected capacity change from 0 to 128
[  150.668220][T10410] FAT-fs (loop3): Directory bread(block 32) failed
[  150.677516][T10410] FAT-fs (loop3): Directory bread(block 33) failed
[  150.684235][T10410] FAT-fs (loop3): Directory bread(block 34) failed
[  150.691243][T10410] FAT-fs (loop3): Directory bread(block 35) failed
[  150.706128][T10410] FAT-fs (loop3): Directory bread(block 36) failed
[  150.713135][T10410] FAT-fs (loop3): Directory bread(block 37) failed
[  150.721390][T10410] FAT-fs (loop3): Directory bread(block 38) failed
[  150.728068][T10410] FAT-fs (loop3): Directory bread(block 39) failed
[  150.734673][T10410] FAT-fs (loop3): Directory bread(block 40) failed
[  150.741648][T10410] FAT-fs (loop3): Directory bread(block 41) failed
[  150.778885][T10410] FAT-fs (loop3): Filesystem has been set read-only
[  150.793339][T10410] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  150.881519][T10423] tipc: Started in network mode
[  150.886594][T10423] tipc: Node identity 423e61a90745, cluster identity 4711
[  150.894143][T10423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.908022][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2755'.
[  150.921718][T10423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2755'.
[  150.986719][T10422] tipc: Disabling bearer <eth:syzkaller0>
[  151.014229][T10430] loop1: detected capacity change from 0 to 128
[  151.029909][T10425] loop2: detected capacity change from 0 to 8192
[  151.054777][T10430] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  151.085169][T10425]  loop2: p3 < > p4
[  151.099187][T10425] loop2: p4 start 131072 is beyond EOD, truncated
[  151.246154][T10446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10446 comm=syz.1.2766
[  151.283698][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  151.377644][T10451] FAULT_INJECTION: forcing a failure.
[  151.377644][T10451] name failslab, interval 1, probability 0, space 0, times 0
[  151.390732][T10451] CPU: 1 UID: 0 PID: 10451 Comm: syz.4.2768 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  151.390860][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  151.390876][T10451] Call Trace:
[  151.390884][T10451]  <TASK>
[  151.390893][T10451]  __dump_stack+0x1d/0x30
[  151.390918][T10451]  dump_stack_lvl+0xe8/0x140
[  151.390939][T10451]  dump_stack+0x15/0x1b
[  151.390954][T10451]  should_fail_ex+0x265/0x280
[  151.391030][T10451]  should_failslab+0x8c/0xb0
[  151.391064][T10451]  kmem_cache_alloc_noprof+0x50/0x310
[  151.391102][T10451]  ? security_inode_alloc+0x37/0x100
[  151.391137][T10451]  security_inode_alloc+0x37/0x100
[  151.391160][T10451]  inode_init_always_gfp+0x4b7/0x500
[  151.391191][T10451]  ? __pfx_sock_alloc_inode+0x10/0x10
[  151.391220][T10451]  alloc_inode+0x58/0x170
[  151.391246][T10451]  do_accept+0xa0/0x3a0
[  151.391310][T10451]  ? vfs_write+0x75e/0x8d0
[  151.391344][T10451]  __sys_accept4+0xbf/0x140
[  151.391378][T10451]  __x64_sys_accept+0x42/0x50
[  151.391466][T10451]  x64_sys_call+0x2f50/0x2fb0
[  151.391492][T10451]  do_syscall_64+0xd0/0x1a0
[  151.391517][T10451]  ? clear_bhb_loop+0x25/0x80
[  151.391559][T10451]  ? clear_bhb_loop+0x25/0x80
[  151.391583][T10451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.391608][T10451] RIP: 0033:0x7ffa1fb1e969
[  151.391672][T10451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.391692][T10451] RSP: 002b:00007ffa1e187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  151.391712][T10451] RAX: ffffffffffffffda RBX: 00007ffa1fd45fa0 RCX: 00007ffa1fb1e969
[  151.391726][T10451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  151.391740][T10451] RBP: 00007ffa1e187090 R08: 0000000000000000 R09: 0000000000000000
[  151.391753][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.391767][T10451] R13: 0000000000000000 R14: 00007ffa1fd45fa0 R15: 00007ffee1cc4428
[  151.391789][T10451]  </TASK>
[  151.691377][T10460] loop4: detected capacity change from 0 to 1024
[  151.726830][T10460] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2772: bad orphan inode 196608
[  151.731907][T10461] loop1: detected capacity change from 0 to 1024
[  151.738153][T10460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.798898][T10461] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2771: bad orphan inode 196608
[  151.817577][T10461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.866331][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.993465][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.059538][T10479] x_tables: duplicate underflow at hook 2
[  152.302512][T10482] loop4: detected capacity change from 0 to 8192
[  152.396788][T10482]  loop4: p3 < > p4
[  152.407023][T10482] loop4: p4 start 131072 is beyond EOD, truncated
[  152.457289][T10504] FAULT_INJECTION: forcing a failure.
[  152.457289][T10504] name failslab, interval 1, probability 0, space 0, times 0
[  152.470521][T10504] CPU: 1 UID: 0 PID: 10504 Comm: syz.0.2788 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  152.470607][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  152.470621][T10504] Call Trace:
[  152.470629][T10504]  <TASK>
[  152.470639][T10504]  __dump_stack+0x1d/0x30
[  152.470695][T10504]  dump_stack_lvl+0xe8/0x140
[  152.470719][T10504]  dump_stack+0x15/0x1b
[  152.470740][T10504]  should_fail_ex+0x265/0x280
[  152.470772][T10504]  should_failslab+0x8c/0xb0
[  152.470807][T10504]  kmem_cache_alloc_noprof+0x50/0x310
[  152.470848][T10504]  ? getname_flags+0x80/0x3b0
[  152.470966][T10504]  getname_flags+0x80/0x3b0
[  152.471071][T10504]  __x64_sys_symlink+0x33/0x60
[  152.471096][T10504]  x64_sys_call+0x2d8d/0x2fb0
[  152.471118][T10504]  do_syscall_64+0xd0/0x1a0
[  152.471146][T10504]  ? clear_bhb_loop+0x25/0x80
[  152.471183][T10504]  ? clear_bhb_loop+0x25/0x80
[  152.471209][T10504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.471234][T10504] RIP: 0033:0x7f65963ce969
[  152.471266][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.471283][T10504] RSP: 002b:00007f6594a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  152.471300][T10504] RAX: ffffffffffffffda RBX: 00007f65965f5fa0 RCX: 00007f65963ce969
[  152.471321][T10504] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900
[  152.471364][T10504] RBP: 00007f6594a37090 R08: 0000000000000000 R09: 0000000000000000
[  152.471376][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.471391][T10504] R13: 0000000000000000 R14: 00007f65965f5fa0 R15: 00007ffc1974f128
[  152.471415][T10504]  </TASK>
[  152.668295][T10507] loop2: detected capacity change from 0 to 128
[  152.728105][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  152.745715][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  152.783821][T10507] bio_check_eod: 110 callbacks suppressed
[  152.783860][T10507] syz.2.2787: attempt to access beyond end of device
[  152.783860][T10507] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[  152.796903][T10516] x_tables: duplicate underflow at hook 2
[  152.804041][T10507] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  153.105964][   T29] kauditd_printk_skb: 643 callbacks suppressed
[  153.105979][   T29] audit: type=1400 audit(1746649183.110:15133): avc:  denied  { create } for  pid=10526 comm="syz.3.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  153.110935][T10528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.123339][   T29] audit: type=1400 audit(1746649183.120:15134): avc:  denied  { bind } for  pid=10526 comm="syz.3.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  153.167367][   T29] audit: type=1400 audit(1746649183.170:15135): avc:  denied  { module_request } for  pid=10526 comm="syz.3.2797" kmod="arpt_NFLOG" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  153.191286][   T29] audit: type=1400 audit(1746649183.190:15136): avc:  denied  { create } for  pid=10527 comm="syz.4.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  153.264981][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'.
[  153.275820][   T29] audit: type=1400 audit(1746649183.220:15137): avc:  denied  { name_bind } for  pid=10531 comm="syz.0.2799" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  153.298708][   T29] audit: type=1400 audit(1746649183.220:15138): avc:  denied  { read write } for  pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  153.323927][   T29] audit: type=1400 audit(1746649183.220:15139): avc:  denied  { open } for  pid=3318 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  153.348973][   T29] audit: type=1400 audit(1746649183.220:15140): avc:  denied  { ioctl } for  pid=3318 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  153.361181][T10528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2798'.
[  153.375673][   T29] audit: type=1400 audit(1746649183.220:15141): avc:  denied  { create } for  pid=10531 comm="syz.0.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  153.404553][   T29] audit: type=1400 audit(1746649183.240:15142): avc:  denied  { connect } for  pid=10531 comm="syz.0.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  153.446469][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'.
[  153.485433][T10537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2801'.
[  153.617576][T10527] tipc: Disabling bearer <eth:syzkaller0>
[  153.623956][T10538] loop1: detected capacity change from 0 to 8192
[  153.676021][T10538]  loop1: p3 < > p4
[  153.686385][T10538] loop1: p4 start 131072 is beyond EOD, truncated
[  153.755541][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  153.801532][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  153.812937][T10552] x_tables: duplicate underflow at hook 2
[  153.822854][T10547] loop4: detected capacity change from 0 to 128
[  153.857897][T10550] syz.0.2807: attempt to access beyond end of device
[  153.857897][T10550] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  153.940887][T10560] syz.4.2803: attempt to access beyond end of device
[  153.940887][T10560] loop4: rw=2049, sector=569, nr_sectors = 1 limit=128
[  154.128262][T10565] loop2: detected capacity change from 0 to 8192
[  154.166650][   T12] kworker/u8:0: attempt to access beyond end of device
[  154.166650][   T12] loop4: rw=1, sector=153, nr_sectors = 8 limit=128
[  154.181144][   T12] kworker/u8:0: attempt to access beyond end of device
[  154.181144][   T12] loop4: rw=1, sector=169, nr_sectors = 8 limit=128
[  154.195127][ T4214]  loop2: p3 < > p4
[  154.200959][ T4214] loop2: p4 start 131072 is beyond EOD, truncated
[  154.201258][   T12] kworker/u8:0: attempt to access beyond end of device
[  154.201258][   T12] loop4: rw=1, sector=185, nr_sectors = 8 limit=128
[  154.226320][   T12] kworker/u8:0: attempt to access beyond end of device
[  154.226320][   T12] loop4: rw=1, sector=201, nr_sectors = 8 limit=128
[  154.227536][T10565]  loop2: p3 < > p4
[  154.240422][   T12] kworker/u8:0: attempt to access beyond end of device
[  154.240422][   T12] loop4: rw=1, sector=217, nr_sectors = 8 limit=128
[  154.252543][T10565] loop2: p4 start 131072 is beyond EOD, truncated
[  154.276419][T10571] FAULT_INJECTION: forcing a failure.
[  154.276419][T10571] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  154.276451][T10571] CPU: 1 UID: 0 PID: 10571 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  154.276523][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  154.276539][T10571] Call Trace:
[  154.276547][T10571]  <TASK>
[  154.276556][T10571]  __dump_stack+0x1d/0x30
[  154.276581][T10571]  dump_stack_lvl+0xe8/0x140
[  154.276605][T10571]  dump_stack+0x15/0x1b
[  154.276638][T10571]  should_fail_ex+0x265/0x280
[  154.276688][T10571]  should_fail_alloc_page+0xf2/0x100
[  154.276727][T10571]  __alloc_frozen_pages_noprof+0xff/0x360
[  154.276770][T10571]  __alloc_pages_noprof+0x9/0x20
[  154.276796][T10571]  ___kmalloc_large_node+0x73/0x130
[  154.276868][T10571]  __kmalloc_large_node_noprof+0x16/0xa0
[  154.276891][T10571]  __kmalloc_noprof+0x2ab/0x3e0
[  154.276948][T10571]  ? vc_do_resize+0x20e/0xd70
[  154.277019][T10571]  vc_do_resize+0x20e/0xd70
[  154.277117][T10571]  ? __rcu_read_unlock+0x4f/0x70
[  154.277141][T10571]  ? avc_has_perm_noaudit+0x1b1/0x200
[  154.277182][T10571]  ? selinux_capable+0x1f9/0x270
[  154.277353][T10571]  ? _raw_spin_lock_irqsave+0x3a/0x90
[  154.277387][T10571]  __vc_resize+0x3c/0x50
[  154.277431][T10571]  vt_resizex+0x2e1/0x350
[  154.277516][T10571]  vt_ioctl+0xffe/0x1790
[  154.277588][T10571]  ? tty_jobctrl_ioctl+0x29e/0x810
[  154.277632][T10571]  tty_ioctl+0x7db/0xb80
[  154.277660][T10571]  ? __pfx_tty_ioctl+0x10/0x10
[  154.277713][T10571]  __se_sys_ioctl+0xcb/0x140
[  154.277737][T10571]  __x64_sys_ioctl+0x43/0x50
[  154.277759][T10571]  x64_sys_call+0x19a8/0x2fb0
[  154.277784][T10571]  do_syscall_64+0xd0/0x1a0
[  154.277810][T10571]  ? clear_bhb_loop+0x25/0x80
[  154.277851][T10571]  ? clear_bhb_loop+0x25/0x80
[  154.277874][T10571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.277897][T10571] RIP: 0033:0x7f65963ce969
[  154.277913][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.277933][T10571] RSP: 002b:00007f6594a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  154.278009][T10571] RAX: ffffffffffffffda RBX: 00007f65965f5fa0 RCX: 00007f65963ce969
[  154.278023][T10571] RDX: 0000200000000080 RSI: 000000000000560a RDI: 000000000000000e
[  154.278049][T10571] RBP: 00007f6594a37090 R08: 0000000000000000 R09: 0000000000000000
[  154.278063][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.278077][T10571] R13: 0000000000000000 R14: 00007f65965f5fa0 R15: 00007ffc1974f128
[  154.278098][T10571]  </TASK>
[  154.306519][ T3005]  loop2: p3 < > p4
[  154.317745][ T3005] loop2: p4 start 131072 is beyond EOD, truncated
[  154.322899][   T12] kworker/u8:0: attempt to access beyond end of device
[  154.322899][   T12] loop4: rw=1, sector=233, nr_sectors = 8 limit=128
[  154.322963][   T12] kworker/u8:0: attempt to access beyond end of device
[  154.322963][   T12] loop4: rw=1, sector=249, nr_sectors = 8 limit=128
[  154.392652][T10558] block device autoloading is deprecated and will be removed.
[  154.444923][T10582] x_tables: duplicate underflow at hook 2
[  154.510922][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  154.518804][T10586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10586 comm=syz.4.2820
[  154.527703][T10588] x_tables: duplicate underflow at hook 2
[  154.631794][T10592] bond1: entered promiscuous mode
[  154.631829][T10592] bond1: entered allmulticast mode
[  154.632002][T10592] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.648941][T10592] bond1 (unregistering): Released all slaves
[  154.717102][T10595] loop1: detected capacity change from 0 to 512
[  154.743927][T10599] x_tables: duplicate underflow at hook 2
[  154.887199][T10595] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.2823: dx entry: limit 1024 != root limit 124
[  154.945292][T10595] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.2823: Corrupt directory, running e2fsck is recommended
[  154.949503][T10595] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  154.949807][T10595] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.2823: corrupted in-inode xattr: invalid ea_ino
[  154.950045][T10595] EXT4-fs (loop1): Remounting filesystem read-only
[  154.950615][T10595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.951312][T10595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.070140][T10611] loop2: detected capacity change from 0 to 1024
[  155.141347][T10611] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2829: bad orphan inode 196608
[  155.170280][T10620] x_tables: duplicate underflow at hook 2
[  155.383599][T10643] loop2: detected capacity change from 0 to 1024
[  155.391219][T10643] EXT4-fs: Ignoring removed bh option
[  155.475026][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2842'.
[  155.484058][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2842'.
[  155.579914][T10652] loop2: detected capacity change from 0 to 736
[  155.589642][T10652] iso9660: Unknown parameter ''
[  155.747047][T10662] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2846'.
[  155.756304][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'.
[  155.783218][T10664] x_tables: duplicate underflow at hook 2
[  156.011330][T10666] chnl_net:caif_netlink_parms(): no params data found
[  156.039465][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.096549][T10666] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.103784][T10666] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.111070][T10666] bridge_slave_0: entered allmulticast mode
[  156.117721][T10666] bridge_slave_0: entered promiscuous mode
[  156.125613][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.142779][T10666] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.149968][T10666] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.157608][T10666] bridge_slave_1: entered allmulticast mode
[  156.162007][T10686] loop1: detected capacity change from 0 to 736
[  156.164523][T10666] bridge_slave_1: entered promiscuous mode
[  156.181905][T10686] iso9660: Unknown parameter ''
[  156.196067][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.213830][T10666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.228670][T10666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.260254][T10688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10688 comm=syz.3.2852
[  156.274087][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.291489][T10690] loop4: detected capacity change from 0 to 736
[  156.300506][T10690] iso9660: Unknown parameter ''
[  156.327034][T10666] team0: Port device team_slave_0 added
[  156.339529][T10666] team0: Port device team_slave_1 added
[  156.369723][T10666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.376774][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.403142][T10666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.482672][   T12] bridge_slave_1: left allmulticast mode
[  156.482707][   T12] bridge_slave_1: left promiscuous mode
[  156.482912][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.483710][   T12] bridge_slave_0: left allmulticast mode
[  156.483730][   T12] bridge_slave_0: left promiscuous mode
[  156.483904][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.556461][T10695] loop2: detected capacity change from 0 to 1024
[  156.603419][T10695] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2854: Failed to acquire dquot type 0
[  156.643820][T10695] EXT4-fs (loop2): 1 truncate cleaned up
[  156.868705][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.879399][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.889671][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[  156.899389][   T12] bond0 (unregistering): Released all slaves
[  156.908840][T10666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.915926][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.942091][T10666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.966040][   T12] tipc: Left network mode
[  156.979921][   T12] hsr_slave_0: left promiscuous mode
[  156.990969][   T12] hsr_slave_1: left promiscuous mode
[  156.998799][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.006665][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.017153][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.024898][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.050314][   T12] veth1_macvtap: left promiscuous mode
[  157.057242][   T12] veth0_macvtap: left promiscuous mode
[  157.063288][   T12] veth1_vlan: left promiscuous mode
[  157.069937][   T12] veth0_vlan: left promiscuous mode
[  157.106025][T10724] x_tables: duplicate underflow at hook 2
[  157.158392][   T12] team0 (unregistering): Port device team_slave_1 removed
[  157.169834][   T12] team0 (unregistering): Port device team_slave_0 removed
[  157.217226][T10666] hsr_slave_0: entered promiscuous mode
[  157.223925][T10666] hsr_slave_1: entered promiscuous mode
[  157.259825][T10729] loop1: detected capacity change from 0 to 1024
[  157.271592][T10729] EXT4-fs: Ignoring removed bh option
[  157.459090][   T12] IPVS: stop unused estimator thread 0...
[  157.586773][T10762] loop1: detected capacity change from 0 to 512
[  157.594339][T10762] EXT4-fs: Ignoring removed orlov option
[  157.620227][T10762] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  157.660287][T10762] EXT4-fs (loop1): 1 truncate cleaned up
[  157.752808][T10666] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  157.781044][T10666] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  157.805201][T10666] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  157.821932][T10779] loop2: detected capacity change from 0 to 128
[  157.830822][T10666] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  157.863470][T10779] FAT-fs (loop2): Directory bread(block 32) failed
[  157.890835][T10779] FAT-fs (loop2): Directory bread(block 33) failed
[  157.910236][T10779] FAT-fs (loop2): Directory bread(block 34) failed
[  157.931289][T10666] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.940539][T10779] FAT-fs (loop2): Directory bread(block 35) failed
[  157.951253][T10788] loop1: detected capacity change from 0 to 128
[  157.953884][T10779] FAT-fs (loop2): Directory bread(block 36) failed
[  157.966532][T10666] 8021q: adding VLAN 0 to HW filter on device team0
[  157.982063][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.989258][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.006382][T10779] FAT-fs (loop2): Directory bread(block 37) failed
[  158.014337][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.021608][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.034936][T10779] FAT-fs (loop2): Directory bread(block 38) failed
[  158.041617][T10779] FAT-fs (loop2): Directory bread(block 39) failed
[  158.073133][T10666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.084087][T10666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.104929][T10779] FAT-fs (loop2): Directory bread(block 40) failed
[  158.106568][T10796] bio_check_eod: 105 callbacks suppressed
[  158.106681][T10796] syz.1.2879: attempt to access beyond end of device
[  158.106681][T10796] loop1: rw=2049, sector=841, nr_sectors = 1 limit=128
[  158.111695][T10779] FAT-fs (loop2): Directory bread(block 41) failed
[  158.164577][   T29] kauditd_printk_skb: 571 callbacks suppressed
[  158.164615][   T29] audit: type=1400 audit(1746649188.160:15712): avc:  denied  { sys_module } for  pid=10666 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  158.166557][T10779] syz.2.2877: attempt to access beyond end of device
[  158.166557][T10779] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  158.207508][T10775] loop3: detected capacity change from 0 to 8192
[  158.224966][T10779] FAT-fs (loop2): Filesystem has been set read-only
[  158.246700][T10779] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  158.291118][   T29] audit: type=1400 audit(1746649188.290:15713): avc:  denied  { create } for  pid=10774 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  158.325999][   T29] audit: type=1400 audit(1746649188.310:15714): avc:  denied  { unmount } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  158.338920][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.347086][   T29] audit: type=1400 audit(1746649188.320:15715): avc:  denied  { ioctl } for  pid=10806 comm="syz.4.2881" path="socket:[31575]" dev="sockfs" ino=31575 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  158.380773][   T29] audit: type=1400 audit(1746649188.320:15716): avc:  denied  { write } for  pid=10774 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  158.383383][T10775]  loop3: p3 < > p4
[  158.417869][T10813] loop2: detected capacity change from 0 to 128
[  158.428857][T10775] loop3: p4 start 131072 is beyond EOD, truncated
[  158.436586][   T29] audit: type=1400 audit(1746649188.410:15717): avc:  denied  { setopt } for  pid=10811 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  158.456449][   T29] audit: type=1400 audit(1746649188.420:15718): avc:  denied  { create } for  pid=10811 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  158.494922][T10813] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.508361][ T3005]  loop3: p3 < > p4
[  158.522552][T10822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10822 comm=syz.4.2883
[  158.525209][ T3005] loop3: p4 start 131072 is beyond EOD, truncated
[  158.581442][  T148] kworker/u8:4: attempt to access beyond end of device
[  158.581442][  T148] loop1: rw=1, sector=153, nr_sectors = 8 limit=128
[  158.645836][T10693] udevd[10693]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  158.655843][  T148] kworker/u8:4: attempt to access beyond end of device
[  158.655843][  T148] loop1: rw=1, sector=169, nr_sectors = 8 limit=128
[  158.690576][   T29] audit: type=1400 audit(1746649188.690:15719): avc:  denied  { open } for  pid=10834 comm="syz.3.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  158.696591][  T148] kworker/u8:4: attempt to access beyond end of device
[  158.696591][  T148] loop1: rw=1, sector=185, nr_sectors = 8 limit=128
[  158.710077][   T29] audit: type=1400 audit(1746649188.690:15720): avc:  denied  { kernel } for  pid=10834 comm="syz.3.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  158.752322][T10666] veth0_vlan: entered promiscuous mode
[  158.767057][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2884'.
[  158.778309][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  158.778706][   T29] audit: type=1400 audit(1746649188.750:15721): avc:  denied  { name_bind } for  pid=10834 comm="syz.3.2884" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  158.815367][T10666] veth1_vlan: entered promiscuous mode
[  158.848078][T10835] syz_tun: entered promiscuous mode
[  158.863201][T10666] veth0_macvtap: entered promiscuous mode
[  158.884101][T10666] veth1_macvtap: entered promiscuous mode
[  158.897304][T10842] loop4: detected capacity change from 0 to 512
[  158.911517][  T148] kworker/u8:4: attempt to access beyond end of device
[  158.911517][  T148] loop1: rw=1, sector=201, nr_sectors = 8 limit=128
[  158.925247][T10842] EXT4-fs: Ignoring removed orlov option
[  158.925551][T10842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  158.946553][T10846] loop3: detected capacity change from 0 to 164
[  158.955589][  T148] kworker/u8:4: attempt to access beyond end of device
[  158.955589][  T148] loop1: rw=1, sector=217, nr_sectors = 8 limit=128
[  158.969602][T10846] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  158.979621][T10835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.002589][  T148] kworker/u8:4: attempt to access beyond end of device
[  159.002589][  T148] loop1: rw=1, sector=233, nr_sectors = 8 limit=128
[  159.011873][T10842] EXT4-fs (loop4): 1 truncate cleaned up
[  159.024490][  T148] kworker/u8:4: attempt to access beyond end of device
[  159.024490][  T148] loop1: rw=1, sector=249, nr_sectors = 8 limit=128
[  159.039586][  T148] kworker/u8:4: attempt to access beyond end of device
[  159.039586][  T148] loop1: rw=1, sector=265, nr_sectors = 8 limit=128
[  159.053796][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.064529][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.074481][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.085095][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.094980][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.105456][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.124635][T10666] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.133211][T10846] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  159.143839][T10835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.158977][T10846] Symlink component flag not implemented
[  159.164880][T10846] Symlink component flag not implemented
[  159.171114][T10846] Symlink component flag not implemented (7)
[  159.177161][T10846] Symlink component flag not implemented (116)
[  159.229763][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.240316][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.250207][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.260742][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.270786][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.281249][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.293659][T10666] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.308637][T10666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.317927][T10666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.327053][T10666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.336147][T10666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.355605][T10853] loop2: detected capacity change from 0 to 128
[  159.376346][T10853] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  159.413632][T10835] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.428315][T10855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10855 comm=syz.4.2887
[  159.488963][T10835] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.515799][T10859] loop2: detected capacity change from 0 to 512
[  159.527649][T10859] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  159.546317][T10859] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended
[  159.588133][T10859] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.2890: inode #15: comm syz.2.2890: iget: illegal inode #
[  159.610960][T10835] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.622532][T10859] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2890: couldn't read orphan inode 15 (err -117)
[  159.641370][T10835] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.684522][T10835] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.698557][T10835] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.786778][T10873] loop3: detected capacity change from 0 to 128
[  159.809004][T10873] FAT-fs (loop3): Directory bread(block 32) failed
[  159.819460][T10873] FAT-fs (loop3): Directory bread(block 33) failed
[  159.828057][T10873] FAT-fs (loop3): Directory bread(block 34) failed
[  159.840158][T10873] FAT-fs (loop3): Directory bread(block 35) failed
[  159.847982][T10876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10876 comm=syz.4.2895
[  159.861312][T10873] FAT-fs (loop3): Directory bread(block 36) failed
[  159.878215][T10873] FAT-fs (loop3): Directory bread(block 37) failed
[  159.935156][T10873] FAT-fs (loop3): Directory bread(block 38) failed
[  159.953060][T10873] FAT-fs (loop3): Directory bread(block 39) failed
[  159.964556][T10873] FAT-fs (loop3): Directory bread(block 40) failed
[  159.973698][T10873] FAT-fs (loop3): Directory bread(block 41) failed
[  160.018232][T10873] FAT-fs (loop3): Filesystem has been set read-only
[  160.025213][T10873] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  160.038774][   T51] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.133316][   T51] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.159462][T10874] chnl_net:caif_netlink_parms(): no params data found
[  160.209802][   T51] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.269801][T10874] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.277230][T10874] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.295598][T10874] bridge_slave_0: entered allmulticast mode
[  160.307812][T10874] bridge_slave_0: entered promiscuous mode
[  160.319590][   T51] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.370488][T10874] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.377980][T10874] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.392914][T10906] loop4: detected capacity change from 0 to 128
[  160.405309][T10874] bridge_slave_1: entered allmulticast mode
[  160.413780][T10874] bridge_slave_1: entered promiscuous mode
[  160.432699][T10906] FAT-fs (loop4): Directory bread(block 32) failed
[  160.444739][T10906] FAT-fs (loop4): Directory bread(block 33) failed
[  160.457669][T10910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=10910 comm=syz.1.2904
[  160.470965][T10906] FAT-fs (loop4): Directory bread(block 34) failed
[  160.481040][T10906] FAT-fs (loop4): Directory bread(block 35) failed
[  160.502515][T10874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.504660][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2901'.
[  160.536487][T10906] FAT-fs (loop4): Directory bread(block 36) failed
[  160.551396][T10874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.564741][T10906] FAT-fs (loop4): Directory bread(block 37) failed
[  160.581189][   T51] bridge_slave_1: left allmulticast mode
[  160.587109][   T51] bridge_slave_1: left promiscuous mode
[  160.593063][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.593225][T10906] FAT-fs (loop4): Directory bread(block 38) failed
[  160.610708][   T51] bridge_slave_0: left allmulticast mode
[  160.616709][   T51] bridge_slave_0: left promiscuous mode
[  160.622394][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.633784][T10906] FAT-fs (loop4): Directory bread(block 39) failed
[  160.648802][T10906] FAT-fs (loop4): Directory bread(block 40) failed
[  160.655575][T10906] FAT-fs (loop4): Directory bread(block 41) failed
[  160.760802][T10906] FAT-fs (loop4): Filesystem has been set read-only
[  160.768771][T10906] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  160.854651][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2908'.
[  160.884656][T10923] x_tables: duplicate underflow at hook 2
[  161.037164][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.047327][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.058039][   T51] bond0 (unregistering): Released all slaves
[  161.072839][T10903] netlink: 'syz.3.2901': attribute type 4 has an invalid length.
[  161.082384][T10919] netlink: 'syz.0.2908': attribute type 4 has an invalid length.
[  161.125285][   T51] tipc: Left network mode
[  161.138563][T10874] team0: Port device team_slave_0 added
[  161.172948][T10874] team0: Port device team_slave_1 added
[  161.205413][   T51] hsr_slave_0: left promiscuous mode
[  161.220293][   T51] hsr_slave_1: left promiscuous mode
[  161.228848][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.236808][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.257459][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.265351][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.286248][   T51] veth1_macvtap: left promiscuous mode
[  161.293052][   T51] veth0_macvtap: left promiscuous mode
[  161.303174][T10933] loop1: detected capacity change from 0 to 8192
[  161.313242][   T51] veth1_vlan: left promiscuous mode
[  161.319321][   T51] veth0_vlan: left promiscuous mode
[  161.346591][ T4214]  loop1: p3 < > p4
[  161.351678][ T4214] loop1: p4 start 131072 is beyond EOD, truncated
[  161.365528][T10945] loop3: detected capacity change from 0 to 512
[  161.376484][T10933]  loop1: p3 < > p4
[  161.397385][T10933] loop1: p4 start 131072 is beyond EOD, truncated
[  161.405070][T10945] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2915: dx entry: limit 1024 != root limit 124
[  161.417730][T10945] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2915: Corrupt directory, running e2fsck is recommended
[  161.435725][T10945] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  161.437115][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'.
[  161.455813][T10945] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2915: corrupted in-inode xattr: invalid ea_ino
[  161.472818][T10945] EXT4-fs (loop3): Remounting filesystem read-only
[  161.480686][T10945] EXT4-fs mount: 16 callbacks suppressed
[  161.480703][T10945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.548314][T10945] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2915: dx entry: limit 1024 != root limit 124
[  161.560905][T10945] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2915: Corrupt directory, running e2fsck is recommended
[  161.592054][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  161.602669][T10945] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.2915: dx entry: limit 1024 != root limit 124
[  161.616080][T10945] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.2915: Corrupt directory, running e2fsck is recommended
[  161.619640][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  161.640152][   T51] team0 (unregistering): Port device team_slave_1 removed
[  161.649817][T10959] loop1: detected capacity change from 0 to 128
[  161.656993][   T51] team0 (unregistering): Port device team_slave_0 removed
[  161.665103][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.693799][T10959] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  161.760953][T10963] loop4: detected capacity change from 0 to 512
[  161.798784][T10950] tipc: Started in network mode
[  161.804027][T10950] tipc: Node identity 6249655a5499, cluster identity 4711
[  161.809098][T10963] EXT4-fs: Ignoring removed orlov option
[  161.811762][T10950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.841461][T10963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  161.867716][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2922'.
[  161.876947][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2922'.
[  161.893338][T10874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.900654][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.927589][T10874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.940795][T10963] EXT4-fs (loop4): 1 truncate cleaned up
[  161.948814][T10963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.985382][T10874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.992415][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.019410][T10874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.038734][T10939] tipc: Disabling bearer <eth:syzkaller0>
[  162.046481][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.056601][T10974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2922'.
[  162.091596][T10874] hsr_slave_0: entered promiscuous mode
[  162.102741][T10874] hsr_slave_1: entered promiscuous mode
[  162.116817][T10874] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.124521][T10874] Cannot create hsr debugfs directory
[  162.183801][T10981] loop3: detected capacity change from 0 to 164
[  162.197371][T10977] loop4: detected capacity change from 0 to 512
[  162.237861][T10977] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  162.264341][T10977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  162.273213][T10981] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  162.283766][T10977] EXT4-fs (loop4): orphan cleanup on readonly fs
[  162.302191][T10981] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  162.330877][T10977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2923: bg 0: block 361: padding at end of block bitmap is not set
[  162.359485][T10977] EXT4-fs (loop4): Remounting filesystem read-only
[  162.371041][T10981] Symlink component flag not implemented
[  162.377418][T10981] Symlink component flag not implemented
[  162.384623][T10977] EXT4-fs (loop4): 1 truncate cleaned up
[  162.401957][T10981] Symlink component flag not implemented (7)
[  162.408106][T10981] Symlink component flag not implemented (116)
[  162.424006][T10977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  162.460518][T11000] loop1: detected capacity change from 0 to 128
[  162.467495][T10977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  162.504539][T11000] ucma_write: process 1221 (syz.1.2927) changed security contexts after opening file descriptor, this is not allowed.
[  162.554162][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  162.569584][T11009] x_tables: duplicate underflow at hook 2
[  162.584182][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  162.648989][T11006] wg2: entered promiscuous mode
[  162.653998][T11006] wg2: entered allmulticast mode
[  162.691002][T10874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  162.722099][T10874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  162.732711][T10874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  162.744711][T11014] SELinux: failed to load policy
[  162.753273][T10874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  162.881754][T10874] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.901261][T10874] 8021q: adding VLAN 0 to HW filter on device team0
[  162.923314][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.930489][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.962401][T10874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.972912][T10874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.999046][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.006200][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.134705][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.253653][   T29] kauditd_printk_skb: 407 callbacks suppressed
[  163.253674][   T29] audit: type=1400 audit(1746649193.250:16129): avc:  denied  { open } for  pid=11041 comm="syz.0.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  163.336911][   T29] audit: type=1400 audit(1746649193.340:16130): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  163.372878][T11073] bond1: entered promiscuous mode
[  163.378115][T11073] bond1: entered allmulticast mode
[  163.383439][T11073] 8021q: adding VLAN 0 to HW filter on device bond1
[  163.398243][T11073] bond1 (unregistering): Released all slaves
[  163.408550][T10874] veth0_vlan: entered promiscuous mode
[  163.416883][T10874] veth1_vlan: entered promiscuous mode
[  163.444189][   T29] audit: type=1400 audit(1746649193.440:16131): avc:  denied  { append } for  pid=11077 comm="syz.0.2943" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  163.468460][   T29] audit: type=1400 audit(1746649193.440:16132): avc:  denied  { open } for  pid=11077 comm="syz.0.2943" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  163.492977][   T29] audit: type=1400 audit(1746649193.440:16133): avc:  denied  { ioctl } for  pid=11077 comm="syz.0.2943" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  163.532657][T10874] veth0_macvtap: entered promiscuous mode
[  163.540808][T10874] veth1_macvtap: entered promiscuous mode
[  163.552477][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.563028][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.573083][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.583656][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.593539][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.604023][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.645232][T10874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.658158][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.668732][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.678679][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.689155][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.699125][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.709704][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.725619][T10874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.738316][   T29] audit: type=1400 audit(1746649193.740:16134): avc:  denied  { create } for  pid=11085 comm="syz.1.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  163.759898][T11086] x_tables: duplicate underflow at hook 2
[  163.775148][   T29] audit: type=1400 audit(1746649193.760:16135): avc:  denied  { create } for  pid=11085 comm="syz.1.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.795200][   T29] audit: type=1400 audit(1746649193.760:16136): avc:  denied  { setopt } for  pid=11085 comm="syz.1.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  163.816131][T10874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.825191][T10874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.834090][T10874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.843075][T10874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.863708][   T29] audit: type=1400 audit(1746649193.850:16137): avc:  denied  { bind } for  pid=11085 comm="syz.1.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.883505][   T29] audit: type=1400 audit(1746649193.860:16138): avc:  denied  { write } for  pid=11085 comm="syz.1.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.968821][T11097] loop1: detected capacity change from 0 to 512
[  164.021040][T11097] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.2945: dx entry: limit 1024 != root limit 124
[  164.033210][T11097] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.2945: Corrupt directory, running e2fsck is recommended
[  164.049375][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2946'.
[  164.061451][T11097] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  164.085075][T11097] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.2945: corrupted in-inode xattr: invalid ea_ino
[  164.108084][T11099] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.109661][T11097] EXT4-fs (loop1): Remounting filesystem read-only
[  164.129640][T11097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.159232][T11110] loop3: detected capacity change from 0 to 164
[  164.160569][T11097] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.2945: dx entry: limit 1024 != root limit 124
[  164.177853][T11097] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.2945: Corrupt directory, running e2fsck is recommended
[  164.192932][T11097] bio_check_eod: 109 callbacks suppressed
[  164.192948][T11097] syz.1.2945: attempt to access beyond end of device
[  164.192948][T11097] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  164.194313][T11110] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  164.216955][T11097] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.2945: dx entry: limit 1024 != root limit 124
[  164.232987][T11097] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.2945: Corrupt directory, running e2fsck is recommended
[  164.256878][T11099] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.268588][T11110] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  164.287686][T11110] Symlink component flag not implemented
[  164.293542][T11110] Symlink component flag not implemented
[  164.313239][T11110] Symlink component flag not implemented (7)
[  164.319563][T11110] Symlink component flag not implemented (116)
[  164.362083][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.380733][T11099] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.433313][T11126] tipc: New replicast peer: 255.0.0.255
[  164.439311][T11126] tipc: Enabled bearer <udp:s>, priority 10
[  164.455821][T11126] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2954'.
[  164.469105][T11099] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.481299][T11126] wg1: entered promiscuous mode
[  164.486351][T11126] wg1: entered allmulticast mode
[  164.516318][T11127] bond1: entered promiscuous mode
[  164.521688][T11127] bond1: entered allmulticast mode
[  164.542070][T11127] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.558180][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2952'.
[  164.579142][T11127] bond1 (unregistering): Released all slaves
[  164.613778][T11122] bond1: entered promiscuous mode
[  164.619295][T11122] bond1: entered allmulticast mode
[  164.626416][T11122] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.650970][T11122] bond1 (unregistering): Released all slaves
[  164.692243][T11099] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.706594][T11099] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.722943][T11099] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.752752][T11099] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.907648][T11140] xt_hashlimit: max too large, truncated to 1048576
[  165.016264][T11143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11143 comm=syz.2.2960
[  165.507738][T11147] chnl_net:caif_netlink_parms(): no params data found
[  165.554874][ T3390] tipc: Node number set to 1974048821
[  165.820495][T11147] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.828822][T11147] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.875024][T11147] bridge_slave_0: entered allmulticast mode
[  165.881830][T11147] bridge_slave_0: entered promiscuous mode
[  165.929798][T11147] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.937241][T11147] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.952927][T11147] bridge_slave_1: entered allmulticast mode
[  165.971247][T11147] bridge_slave_1: entered promiscuous mode
[  165.999625][T11173] loop2: detected capacity change from 0 to 1764
[  166.031568][T11147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.078534][T11147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.184010][T11147] team0: Port device team_slave_0 added
[  166.199420][T11147] team0: Port device team_slave_1 added
[  166.261328][T11147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.268698][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.295636][T11147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.371385][T11147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.378671][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.405624][T11147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.529250][T11147] hsr_slave_0: entered promiscuous mode
[  166.545771][T11147] hsr_slave_1: entered promiscuous mode
[  166.584048][T11147] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.626882][T11147] Cannot create hsr debugfs directory
[  166.898419][T11147] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.976655][T11147] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.056854][T11147] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.196574][T11147] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.925700][T11201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11201 comm=syz.0.2977
[  167.978468][T11204] x_tables: duplicate underflow at hook 2
[  168.006827][T11199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2976'.
[  168.063725][T11199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.119105][T11202] loop1: detected capacity change from 0 to 164
[  168.148881][T11202] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  168.184592][T11207] loop2: detected capacity change from 0 to 2048
[  168.228298][T11199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.246339][T10693] Alternate GPT is invalid, using primary GPT.
[  168.252918][T10693]  loop2: p1 p2 p3
[  168.260233][T11202] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  168.278956][T11202] Symlink component flag not implemented
[  168.284659][T11202] Symlink component flag not implemented
[  168.307349][T11202] Symlink component flag not implemented (7)
[  168.313545][T11202] Symlink component flag not implemented (116)
[  168.369090][T11199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.389848][   T29] kauditd_printk_skb: 240 callbacks suppressed
[  168.389920][   T29] audit: type=1400 audit(1746649198.390:16379): avc:  denied  { prog_run } for  pid=11206 comm="syz.2.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  168.458005][T11199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.523916][T11199] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.537933][T11199] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.552330][T11199] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.566743][T11199] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.668468][   T29] audit: type=1400 audit(1746649198.670:16380): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  168.712894][   T29] audit: type=1400 audit(1746649198.710:16381): avc:  denied  { read } for  pid=11209 comm="syz.1.2980" dev="nsfs" ino=4026532744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  168.734601][   T29] audit: type=1400 audit(1746649198.710:16382): avc:  denied  { open } for  pid=11209 comm="syz.1.2980" path="net:[4026532744]" dev="nsfs" ino=4026532744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  168.785518][T11212] bond1: entered promiscuous mode
[  168.790625][T11212] bond1: entered allmulticast mode
[  168.796065][T11212] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.838077][T11212] bond1 (unregistering): Released all slaves
[  168.869071][   T29] audit: type=1400 audit(1746649198.870:16383): avc:  denied  { read } for  pid=11214 comm="syz.0.2982" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  168.896231][   T29] audit: type=1400 audit(1746649198.900:16384): avc:  denied  { open } for  pid=11214 comm="syz.0.2982" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  168.921191][   T29] audit: type=1400 audit(1746649198.900:16385): avc:  denied  { ioctl } for  pid=11214 comm="syz.0.2982" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  169.016055][   T29] audit: type=1400 audit(1746649199.020:16386): avc:  denied  { create } for  pid=11218 comm="syz.0.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  169.065926][   T29] audit: type=1400 audit(1746649199.040:16387): avc:  denied  { bind } for  pid=11218 comm="syz.0.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  169.086097][   T29] audit: type=1326 audit(1746649199.040:16388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.1.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6323e3e969 code=0x7ffc0000
[  170.188759][T11232] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2989'.
[  170.296603][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  170.309438][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  170.323073][T10693] udevd[10693]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  170.438197][T11239] loop2: detected capacity change from 0 to 128
[  170.461072][T11239] FAT-fs (loop2): Directory bread(block 32) failed
[  170.472983][T11239] FAT-fs (loop2): Directory bread(block 33) failed
[  170.495811][T11239] FAT-fs (loop2): Directory bread(block 34) failed
[  170.502643][T11239] FAT-fs (loop2): Directory bread(block 35) failed
[  170.513567][T11239] FAT-fs (loop2): Directory bread(block 36) failed
[  170.521568][T11239] FAT-fs (loop2): Directory bread(block 37) failed
[  170.528755][T11239] FAT-fs (loop2): Directory bread(block 38) failed
[  170.537154][T11239] FAT-fs (loop2): Directory bread(block 39) failed
[  170.544092][T11239] FAT-fs (loop2): Directory bread(block 40) failed
[  170.552123][T11239] FAT-fs (loop2): Directory bread(block 41) failed
[  170.589095][T11239] syz.2.2992: attempt to access beyond end of device
[  170.589095][T11239] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  170.611942][T11239] FAT-fs (loop2): Filesystem has been set read-only
[  170.620618][T11239] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  170.687787][T11243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.731469][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2994'.
[  170.757389][T11243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2994'.
[  170.768585][T11245] loop2: detected capacity change from 0 to 128
[  170.806977][T11242] tipc: Disabling bearer <eth:syzkaller0>
[  170.822121][T11245] syz.2.2995: attempt to access beyond end of device
[  170.822121][T11245] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[  170.836408][T11245] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  170.890549][T11251] syz.0.2998: attempt to access beyond end of device
[  170.890549][T11251] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  170.987822][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'.
[  170.989148][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'.
[  171.036774][T11267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11267 comm=syz.0.3004
[  171.059583][T11266] x_tables: duplicate underflow at hook 2
[  171.196640][T11275] x_tables: duplicate underflow at hook 2
[  171.289936][T11284] bond1: entered promiscuous mode
[  171.295375][T11284] bond1: entered allmulticast mode
[  171.308061][T11284] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.309687][T11291] x_tables: duplicate underflow at hook 2
[  171.323617][T11284] bond1 (unregistering): Released all slaves
[  171.418584][T11299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11299 comm=syz.1.3018
[  171.507748][T11301] loop2: detected capacity change from 0 to 128
[  171.536335][T11301] FAT-fs (loop2): Directory bread(block 32) failed
[  171.543255][T11301] FAT-fs (loop2): Directory bread(block 33) failed
[  171.552132][T11301] FAT-fs (loop2): Directory bread(block 34) failed
[  171.561074][T11301] FAT-fs (loop2): Directory bread(block 35) failed
[  171.569373][T11301] FAT-fs (loop2): Directory bread(block 36) failed
[  171.577687][T11301] FAT-fs (loop2): Directory bread(block 37) failed
[  171.585044][T11301] FAT-fs (loop2): Directory bread(block 38) failed
[  171.592218][T11301] FAT-fs (loop2): Directory bread(block 39) failed
[  171.599188][T11301] FAT-fs (loop2): Directory bread(block 40) failed
[  171.606106][T11301] FAT-fs (loop2): Directory bread(block 41) failed
[  171.640832][T11308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11308 comm=syz.1.3022
[  171.641185][T11301] syz.2.3019: attempt to access beyond end of device
[  171.641185][T11301] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  171.668966][T11301] FAT-fs (loop2): Filesystem has been set read-only
[  171.675949][T11301] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  171.747761][T11312] x_tables: duplicate underflow at hook 2
[  171.826820][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'.
[  171.912225][T11321] netlink: 'syz.4.3025': attribute type 4 has an invalid length.
[  171.948760][T11329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11329 comm=syz.1.3030
[  171.976835][T11327] tipc: Started in network mode
[  171.981958][T11327] tipc: Node identity 1ebcf7bdc1a6, cluster identity 4711
[  171.989592][T11327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.014191][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3029'.
[  172.025381][T11327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3029'.
[  172.056093][T11326] tipc: Disabling bearer <eth:syzkaller0>
[  172.172434][T11345] bond1: entered promiscuous mode
[  172.178046][T11345] bond1: entered allmulticast mode
[  172.185409][T11345] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.197824][T11345] bond1 (unregistering): Released all slaves
[  172.436365][T11364] bond0: entered promiscuous mode
[  172.441496][T11364] bond0: entered allmulticast mode
[  172.447172][T11364] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.461664][T11364] bond0 (unregistering): Released all slaves
[  172.502435][T11371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.513790][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3044'.
[  172.527865][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'.
[  172.532066][T11147] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  172.551057][T11147] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  172.564428][T11147] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  172.573657][T11147] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  172.608562][T11370] tipc: Disabling bearer <eth:syzkaller0>
[  172.647604][T11147] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.660854][T11147] 8021q: adding VLAN 0 to HW filter on device team0
[  172.673326][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.680576][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.700775][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.707938][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.784451][T11382] x_tables: duplicate underflow at hook 2
[  172.819503][T11385] bond1: entered promiscuous mode
[  172.824636][T11385] bond1: entered allmulticast mode
[  172.851288][T11385] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.862638][T11385] bond1 (unregistering): Released all slaves
[  172.952182][T11147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.973542][   T37] bridge_slave_1: left allmulticast mode
[  172.979569][   T37] bridge_slave_1: left promiscuous mode
[  172.985672][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.005510][   T37] bridge_slave_0: left allmulticast mode
[  173.011254][   T37] bridge_slave_0: left promiscuous mode
[  173.017140][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.047763][T11400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11400 comm=syz.0.3058
[  173.233445][T11411] x_tables: duplicate underflow at hook 2
[  173.347425][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.357376][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.367942][   T37] bond0 (unregistering): Released all slaves
[  173.396191][   T29] kauditd_printk_skb: 463 callbacks suppressed
[  173.396211][   T29] audit: type=1400 audit(1746649203.390:16852): avc:  denied  { module_request } for  pid=11147 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  173.443553][   T29] audit: type=1400 audit(1746649203.400:16853): avc:  denied  { sys_module } for  pid=11147 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  173.465632][   T29] audit: type=1400 audit(1746649203.440:16854): avc:  denied  { read write } for  pid=10874 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.490162][   T29] audit: type=1400 audit(1746649203.440:16855): avc:  denied  { open } for  pid=10874 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.514739][   T29] audit: type=1400 audit(1746649203.440:16856): avc:  denied  { ioctl } for  pid=10874 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.540916][   T37] tipc: Left network mode
[  173.545818][   T29] audit: type=1400 audit(1746649203.490:16857): avc:  denied  { map_create } for  pid=11418 comm="syz.1.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  173.565294][   T29] audit: type=1400 audit(1746649203.490:16858): avc:  denied  { bpf } for  pid=11418 comm="syz.1.3064" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  173.586073][   T29] audit: type=1400 audit(1746649203.490:16859): avc:  denied  { map_read map_write } for  pid=11418 comm="syz.1.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  173.606452][   T29] audit: type=1400 audit(1746649203.490:16860): avc:  denied  { prog_load } for  pid=11418 comm="syz.1.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  173.626011][   T29] audit: type=1400 audit(1746649203.490:16861): avc:  denied  { perfmon } for  pid=11418 comm="syz.1.3064" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  173.665186][T11424] bond1: entered promiscuous mode
[  173.670460][T11424] bond1: entered allmulticast mode
[  173.677767][T11424] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.690863][T11424] bond1 (unregistering): Released all slaves
[  173.693535][T11436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11436 comm=syz.1.3070
[  173.727218][T11431] bond1: entered promiscuous mode
[  173.732341][T11431] bond1: entered allmulticast mode
[  173.737810][T11431] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.748718][T11431] bond1 (unregistering): Released all slaves
[  173.773033][T11439] loop2: detected capacity change from 0 to 128
[  173.779778][   T37] hsr_slave_0: left promiscuous mode
[  173.793970][T11439] syz.2.3071: attempt to access beyond end of device
[  173.793970][T11439] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[  173.807504][T11439] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  173.816434][   T37] hsr_slave_1: left promiscuous mode
[  173.834677][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.842533][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.857291][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.865168][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.882442][T11444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11444 comm=syz.2.3073
[  173.899865][   T37] veth1_macvtap: left promiscuous mode
[  173.911099][   T37] veth0_macvtap: left promiscuous mode
[  173.919010][   T37] veth1_vlan: left promiscuous mode
[  173.924526][   T37] veth0_vlan: left promiscuous mode
[  174.102821][   T37] team0 (unregistering): Port device team_slave_1 removed
[  174.113201][   T37] team0 (unregistering): Port device team_slave_0 removed
[  174.145594][T11459] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  174.170189][T11147] veth0_vlan: entered promiscuous mode
[  174.182450][T11147] veth1_vlan: entered promiscuous mode
[  174.209221][T11147] veth0_macvtap: entered promiscuous mode
[  174.229081][T11147] veth1_macvtap: entered promiscuous mode
[  174.239644][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.250305][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.260287][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.271085][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.281076][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.291711][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.302579][T11147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.314154][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.325117][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.335362][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.346195][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.356320][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.367128][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.377845][T11147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.388045][T11147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.397209][T11147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.406196][T11147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.415924][T11147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.731975][T11478] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.796855][T11478] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.847319][T11478] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.897609][T11478] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.960989][T11478] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.997613][T11478] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.013287][T11478] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.026977][T11478] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.107486][T11494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11494 comm=syz.2.3088
[  175.140502][   T37] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.179734][   T37] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.243567][   T37] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.269317][T11481] chnl_net:caif_netlink_parms(): no params data found
[  175.340860][   T37] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.420235][T11481] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.427528][T11481] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.462395][T11481] bridge_slave_0: entered allmulticast mode
[  175.469721][T11481] bridge_slave_0: entered promiscuous mode
[  175.480556][T11481] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.487884][T11481] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.495500][T11481] bridge_slave_1: entered allmulticast mode
[  175.502435][T11481] bridge_slave_1: entered promiscuous mode
[  175.561351][T11481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.606756][T11481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.623119][T11521] loop2: detected capacity change from 0 to 512
[  175.662141][T11521] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.3097: dx entry: limit 1024 != root limit 124
[  175.674727][T11521] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.3097: Corrupt directory, running e2fsck is recommended
[  175.689755][T11521] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  175.715916][T11521] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3097: corrupted in-inode xattr: invalid ea_ino
[  175.731606][T11521] EXT4-fs (loop2): Remounting filesystem read-only
[  175.738809][T11521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.757652][T11521] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.3097: dx entry: limit 1024 != root limit 124
[  175.769795][T11521] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.3097: Corrupt directory, running e2fsck is recommended
[  175.785881][T11521] syz.2.3097: attempt to access beyond end of device
[  175.785881][T11521] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  175.833568][T11534] __nla_validate_parse: 6 callbacks suppressed
[  175.833693][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3098'.
[  175.842326][T11521] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.3097: dx entry: limit 1024 != root limit 124
[  175.861486][T11521] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.3097: Corrupt directory, running e2fsck is recommended
[  175.892305][T10874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.947830][T11548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=11548 comm=syz.2.3101
[  175.963162][   T37] bond0 (unregistering): Released all slaves
[  175.978304][T11550] x_tables: duplicate underflow at hook 2
[  176.003312][T11531] bond1: entered promiscuous mode
[  176.008514][T11531] bond1: entered allmulticast mode
[  176.013905][T11531] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.024401][T11531] bond1 (unregistering): Released all slaves
[  176.061702][T11481] team0: Port device team_slave_0 added
[  176.068730][   T37] tipc: Disabling bearer <udp:s>
[  176.074025][   T37] tipc: Left network mode
[  176.081777][T11481] team0: Port device team_slave_1 added
[  176.120685][   T37] hsr_slave_0: left promiscuous mode
[  176.137349][   T37] hsr_slave_1: left promiscuous mode
[  176.149529][   T37] veth1_macvtap: left promiscuous mode
[  176.156234][   T37] veth0_macvtap: left promiscuous mode
[  176.162210][   T37] veth1_vlan: left promiscuous mode
[  176.171809][   T37] veth0_vlan: left promiscuous mode
[  176.301724][T11481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.309103][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.336180][T11481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.349638][T11481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.356909][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.383775][T11481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.442548][T11481] hsr_slave_0: entered promiscuous mode
[  176.456676][T11481] hsr_slave_1: entered promiscuous mode
[  176.470190][T11481] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.486199][T11481] Cannot create hsr debugfs directory
[  176.589361][T11581] loop3: detected capacity change from 0 to 128
[  176.642986][T11583] syz.1.3109: attempt to access beyond end of device
[  176.642986][T11583] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  176.979622][T11481] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  176.991184][T11624] x_tables: duplicate underflow at hook 2
[  176.999870][T11481] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  177.011605][T11481] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  177.033954][T11481] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  177.082888][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'.
[  177.092284][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.100282][T11630] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.112130][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.119852][T11630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.163700][T11481] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.184652][T11481] 8021q: adding VLAN 0 to HW filter on device team0
[  177.203609][T11640] netlink: 'syz.1.3117': attribute type 1 has an invalid length.
[  177.206455][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.218607][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.243762][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.250919][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.343745][T11657] loop2: detected capacity change from 0 to 128
[  177.366188][T11657] FAT-fs (loop2): Directory bread(block 32) failed
[  177.382145][T11657] FAT-fs (loop2): Directory bread(block 33) failed
[  177.397870][T11657] FAT-fs (loop2): Directory bread(block 34) failed
[  177.406355][T11657] FAT-fs (loop2): Directory bread(block 35) failed
[  177.413072][T11657] FAT-fs (loop2): Directory bread(block 36) failed
[  177.421286][T11662] bond1: entered promiscuous mode
[  177.426563][T11662] bond1: entered allmulticast mode
[  177.433406][T11662] 8021q: adding VLAN 0 to HW filter on device bond1
[  177.440627][T11657] FAT-fs (loop2): Directory bread(block 37) failed
[  177.453201][T11662] bond1 (unregistering): Released all slaves
[  177.461977][T11657] FAT-fs (loop2): Directory bread(block 38) failed
[  177.473220][T11657] FAT-fs (loop2): Directory bread(block 39) failed
[  177.487739][T11481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.538610][T11657] FAT-fs (loop2): Directory bread(block 40) failed
[  177.553904][T11676] loop3: detected capacity change from 0 to 736
[  177.554640][T11657] FAT-fs (loop2): Directory bread(block 41) failed
[  177.583216][T11676] iso9660: Unknown parameter ''
[  177.640884][T11676] loop3: detected capacity change from 0 to 512
[  177.656455][T11657] syz.2.3121: attempt to access beyond end of device
[  177.656455][T11657] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  177.688579][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3125'.
[  177.707786][T11676] EXT4-fs (loop3): 1 orphan inode deleted
[  177.713002][T11686] syz_tun: entered promiscuous mode
[  177.715886][T11657] FAT-fs (loop2): Filesystem has been set read-only
[  177.727327][T11676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.728926][   T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[  177.747617][T11657] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  177.775749][T11676] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.932977][T11708] syz.0.3127: attempt to access beyond end of device
[  177.932977][T11708] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  177.953468][T11481] veth0_vlan: entered promiscuous mode
[  177.986909][T11481] veth1_vlan: entered promiscuous mode
[  178.010710][T11481] veth0_macvtap: entered promiscuous mode
[  178.017968][T11147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.034241][T11481] veth1_macvtap: entered promiscuous mode
[  178.066986][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.077664][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.087551][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.098206][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.108202][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.118698][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.139605][T11722] loop3: detected capacity change from 0 to 128
[  178.143603][T11481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.156614][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.167312][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.177343][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.187882][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.197787][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.208354][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.222748][T11481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.241203][T11481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.250139][T11481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.259868][T11481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.268998][T11481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.280634][T11722] FAT-fs (loop3): Directory bread(block 32) failed
[  178.310845][T11722] FAT-fs (loop3): Directory bread(block 33) failed
[  178.340806][T11722] FAT-fs (loop3): Directory bread(block 34) failed
[  178.361507][T11722] FAT-fs (loop3): Directory bread(block 35) failed
[  178.370885][T11722] FAT-fs (loop3): Directory bread(block 36) failed
[  178.380247][T11722] FAT-fs (loop3): Directory bread(block 37) failed
[  178.390507][T11722] FAT-fs (loop3): Directory bread(block 38) failed
[  178.403838][T11722] FAT-fs (loop3): Directory bread(block 39) failed
[  178.417141][T11722] FAT-fs (loop3): Directory bread(block 40) failed
[  178.422719][   T29] kauditd_printk_skb: 301 callbacks suppressed
[  178.422738][   T29] audit: type=1326 audit(1746649208.420:17162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.443799][T11722] FAT-fs (loop3): Directory bread(block 41) failed
[  178.500419][   T29] audit: type=1326 audit(1746649208.470:17163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.503525][T11754] x_tables: duplicate underflow at hook 2
[  178.525007][   T29] audit: type=1326 audit(1746649208.470:17164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.554654][   T29] audit: type=1326 audit(1746649208.470:17165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.579299][   T29] audit: type=1326 audit(1746649208.470:17166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.604058][   T29] audit: type=1326 audit(1746649208.470:17167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.628773][   T29] audit: type=1326 audit(1746649208.470:17168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.653327][   T29] audit: type=1326 audit(1746649208.470:17169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.678124][   T29] audit: type=1326 audit(1746649208.470:17170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.678174][   T29] audit: type=1326 audit(1746649208.470:17171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.0.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909edae969 code=0x7ffc0000
[  178.735120][ T2968] ==================================================================
[  178.735146][ T2968] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  178.735165][ T2968] 
[  178.735171][ T2968] read-write to 0xffff888237c299e4 of 4 bytes by task 3390 on cpu 0:
[  178.735187][ T2968]  wq_worker_running+0x95/0x120
[  178.735204][ T2968]  schedule_timeout+0xb7/0x170
[  178.735229][ T2968]  msleep+0x50/0x90
[  178.735249][ T2968]  nsim_fib_event_work+0x1ebc/0x21a0
[  178.735270][ T2968]  process_scheduled_works+0x4cb/0x9d0
[  178.735301][ T2968]  worker_thread+0x582/0x770
[  178.735328][ T2968]  kthread+0x486/0x510
[  178.735344][ T2968]  ret_from_fork+0x4b/0x60
[  178.735360][ T2968]  ret_from_fork_asm+0x1a/0x30
[  178.735380][ T2968] 
[  178.735385][ T2968] read to 0xffff888237c299e4 of 4 bytes by task 2968 on cpu 1:
[  178.735399][ T2968]  kick_pool+0x49/0x2d0
[  178.735413][ T2968]  __queue_work+0x8d6/0xb60
[  178.735427][ T2968]  queue_work_on+0xd1/0x160
[  178.735442][ T2968]  process_srcu+0x999/0xbc0
[  178.735466][ T2968]  process_scheduled_works+0x4cb/0x9d0
[  178.735495][ T2968]  worker_thread+0x582/0x770
[  178.735522][ T2968]  kthread+0x486/0x510
[  178.735539][ T2968]  ret_from_fork+0x4b/0x60
[  178.735554][ T2968]  ret_from_fork_asm+0x1a/0x30
[  178.735575][ T2968] 
[  178.735578][ T2968] value changed: 0x00000000 -> 0x00000001
[  178.735589][ T2968] 
[  178.735592][ T2968] Reported by Kernel Concurrency Sanitizer on:
[  178.735603][ T2968] CPU: 1 UID: 0 PID: 2968 Comm: kworker/1:2 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  178.735630][ T2968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  178.735644][ T2968] Workqueue: rcu_gp process_srcu
[  178.735669][ T2968] ==================================================================
[  178.765164][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3132'.
[  178.771287][T11751] netlink: 'syz.4.3132': attribute type 4 has an invalid length.
[  178.931407][T11765] block device autoloading is deprecated and will be removed.
[  178.942040][T11768] loop0: detected capacity change from 0 to 512
[  178.977567][T11768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.051515][T11768] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.365717][T10666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.