last executing test programs:

16.654934729s ago: executing program 3 (id=4):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800)

16.115981115s ago: executing program 3 (id=12):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000440)=""/257, 0x101}], 0x1, 0x20001, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)

15.790395589s ago: executing program 3 (id=14):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getdents(0xffffffffffffffff, 0x0, 0x48)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)

15.675431931s ago: executing program 3 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)

15.613776721s ago: executing program 3 (id=19):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

14.02849961s ago: executing program 3 (id=71):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)

14.01714679s ago: executing program 32 (id=71):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)

2.729822697s ago: executing program 1 (id=337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)

2.644352928s ago: executing program 1 (id=338):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r1, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x2, 0x6)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3)
bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r2, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0)

2.588948899s ago: executing program 1 (id=339):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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")
llistxattr(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x80000000}}], [], 0x6b}})

2.48080194s ago: executing program 1 (id=342):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xd5419, &(0x7f0000000080), 0x1, 0x587, &(0x7f0000000b40)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{}, {0x0, 0x2}]}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

2.357968002s ago: executing program 1 (id=343):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

2.304984562s ago: executing program 2 (id=345):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './bus'}, 0x9)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000380)='.\x00', 0xa0000061)
copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1)

2.287182033s ago: executing program 2 (id=346):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc2680, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {0x1, 0xfff1}, {0xffe0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

2.272998793s ago: executing program 1 (id=347):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x2}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r3, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0)

2.202595143s ago: executing program 2 (id=351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8040)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48c8}, 0x20004804)

2.142057284s ago: executing program 2 (id=354):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x34, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x20000080)
open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xa)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

1.943040947s ago: executing program 2 (id=356):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0xff, 0x11dc, &(0x7f0000001280)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

1.351451734s ago: executing program 0 (id=368):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x80000)

1.207568826s ago: executing program 0 (id=372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
open(&(0x7f00000003c0)='.\x00', 0x800, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.169007616s ago: executing program 0 (id=375):
r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x400000000}, 0x18)
write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.106968727s ago: executing program 0 (id=377):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0)

1.012113378s ago: executing program 0 (id=378):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0xc92b)

804.40504ms ago: executing program 5 (id=379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800)

793.05919ms ago: executing program 4 (id=380):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4)

730.913411ms ago: executing program 0 (id=381):
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)

697.447792ms ago: executing program 2 (id=382):
socket$netlink(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)
brk(0x400000ffc020)

682.442782ms ago: executing program 5 (id=383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
close_range(r2, 0xffffffffffffffff, 0x0)

672.682152ms ago: executing program 4 (id=384):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006)

632.719603ms ago: executing program 4 (id=385):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0x5, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0)

581.357653ms ago: executing program 4 (id=386):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)

500.942484ms ago: executing program 5 (id=387):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
fcntl$setlease(r1, 0x400, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

461.635285ms ago: executing program 4 (id=388):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@local, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bc, 0x1000000, 0x7e, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)

385.811046ms ago: executing program 5 (id=389):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x6, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)

355.262516ms ago: executing program 5 (id=390):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00"], 0xdc}}, 0x0)

216.552858ms ago: executing program 4 (id=391):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000040)={[{@norecovery}, {@dioread_nolock}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getrandom(0x0, 0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

211.464767ms ago: executing program 33 (id=391):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000040)={[{@norecovery}, {@dioread_nolock}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getrandom(0x0, 0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

0s ago: executing program 5 (id=393):
syz_open_procfs(0x0, &(0x7f0000000180)='attr/prev\x00')
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000030000004d6d000000000000", @ANYRES64=0x0, @ANYRES64=r0], 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.15.202' (ED25519) to the list of known hosts.
[   33.537123][   T29] audit: type=1400 audit(1745560447.303:81): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.538181][ T3293] cgroup: Unknown subsys name 'net'
[   33.563606][   T29] audit: type=1400 audit(1745560447.303:82): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.591448][   T29] audit: type=1400 audit(1745560447.333:83): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.611322][   T29] audit: type=1400 audit(1745560447.333:84): avc:  denied  { read } for  pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   33.727126][ T3293] cgroup: Unknown subsys name 'cpuset'
[   33.733740][ T3293] cgroup: Unknown subsys name 'rlimit'
[   33.844840][   T29] audit: type=1400 audit(1745560447.603:85): avc:  denied  { setattr } for  pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.872475][   T29] audit: type=1400 audit(1745560447.603:86): avc:  denied  { create } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.893194][   T29] audit: type=1400 audit(1745560447.603:87): avc:  denied  { write } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.906817][ T3297] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   33.913555][   T29] audit: type=1400 audit(1745560447.603:88): avc:  denied  { read } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   33.942489][   T29] audit: type=1400 audit(1745560447.603:89): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.964701][ T3293] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   33.967372][   T29] audit: type=1400 audit(1745560447.603:90): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   35.114055][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   35.144494][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   35.158889][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   35.202027][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   35.226067][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.233239][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.240507][ T3307] bridge_slave_0: entered allmulticast mode
[   35.246927][ T3307] bridge_slave_0: entered promiscuous mode
[   35.267132][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.274281][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.281514][ T3307] bridge_slave_1: entered allmulticast mode
[   35.288074][ T3307] bridge_slave_1: entered promiscuous mode
[   35.355800][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   35.365000][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.372186][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.379574][ T3303] bridge_slave_0: entered allmulticast mode
[   35.386006][ T3303] bridge_slave_0: entered promiscuous mode
[   35.393576][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.412731][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.419822][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.427001][ T3303] bridge_slave_1: entered allmulticast mode
[   35.433454][ T3303] bridge_slave_1: entered promiscuous mode
[   35.440825][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.458023][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.465343][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.472640][ T3305] bridge_slave_0: entered allmulticast mode
[   35.479125][ T3305] bridge_slave_0: entered promiscuous mode
[   35.503567][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.510755][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.518152][ T3305] bridge_slave_1: entered allmulticast mode
[   35.524655][ T3305] bridge_slave_1: entered promiscuous mode
[   35.540884][ T3307] team0: Port device team_slave_0 added
[   35.547685][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.572417][ T3307] team0: Port device team_slave_1 added
[   35.580406][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.596188][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.603860][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.611413][ T3310] bridge_slave_0: entered allmulticast mode
[   35.619284][ T3310] bridge_slave_0: entered promiscuous mode
[   35.647771][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.654967][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.662276][ T3310] bridge_slave_1: entered allmulticast mode
[   35.668889][ T3310] bridge_slave_1: entered promiscuous mode
[   35.675890][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.690915][ T3303] team0: Port device team_slave_0 added
[   35.697423][ T3303] team0: Port device team_slave_1 added
[   35.703459][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.710481][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.736483][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.753531][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.778232][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.785192][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.811247][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.831619][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.838860][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.846179][ T3312] bridge_slave_0: entered allmulticast mode
[   35.852942][ T3312] bridge_slave_0: entered promiscuous mode
[   35.868291][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.878334][ T3305] team0: Port device team_slave_0 added
[   35.884199][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.891551][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.899055][ T3312] bridge_slave_1: entered allmulticast mode
[   35.905948][ T3312] bridge_slave_1: entered promiscuous mode
[   35.912497][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.919704][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.945864][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.957882][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.964867][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.990954][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.002511][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.012307][ T3305] team0: Port device team_slave_1 added
[   36.031998][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.067442][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.086553][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.093522][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.119586][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.132529][ T3307] hsr_slave_0: entered promiscuous mode
[   36.138735][ T3307] hsr_slave_1: entered promiscuous mode
[   36.155896][ T3310] team0: Port device team_slave_0 added
[   36.162665][ T3310] team0: Port device team_slave_1 added
[   36.175353][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.182514][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.208831][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.228308][ T3312] team0: Port device team_slave_0 added
[   36.249033][ T3303] hsr_slave_0: entered promiscuous mode
[   36.255230][ T3303] hsr_slave_1: entered promiscuous mode
[   36.261351][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.268986][ T3303] Cannot create hsr debugfs directory
[   36.275081][ T3312] team0: Port device team_slave_1 added
[   36.296929][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.303944][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.329933][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.351929][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.358994][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.384908][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.396184][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.403230][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.429173][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.440214][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.447233][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.473154][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.502592][ T3305] hsr_slave_0: entered promiscuous mode
[   36.508791][ T3305] hsr_slave_1: entered promiscuous mode
[   36.514627][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.522222][ T3305] Cannot create hsr debugfs directory
[   36.564389][ T3312] hsr_slave_0: entered promiscuous mode
[   36.570470][ T3312] hsr_slave_1: entered promiscuous mode
[   36.576734][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.584418][ T3312] Cannot create hsr debugfs directory
[   36.592061][ T3310] hsr_slave_0: entered promiscuous mode
[   36.599089][ T3310] hsr_slave_1: entered promiscuous mode
[   36.604866][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.612473][ T3310] Cannot create hsr debugfs directory
[   36.799524][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   36.809280][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   36.817872][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   36.826610][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   36.852499][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   36.864529][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   36.873575][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   36.882278][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   36.908852][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.929344][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   36.941730][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   36.952163][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   36.990243][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.010619][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.025048][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.032761][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.042064][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.062643][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   37.069991][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.090446][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   37.108607][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.118583][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.129507][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.136592][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.145265][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.152350][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.161182][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.168288][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.181591][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.195935][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.203127][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.214982][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.305749][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.319633][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   37.341651][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.358602][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.365810][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.382542][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.392557][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.400438][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.418293][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.431232][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   37.443987][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   37.454295][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.461429][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.470551][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.477625][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.492269][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.503178][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.523631][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.530849][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.548748][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.559403][  T418] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.566534][  T418] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.654571][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.673661][ T3303] veth0_vlan: entered promiscuous mode
[   37.703463][ T3303] veth1_vlan: entered promiscuous mode
[   37.743950][ T3303] veth0_macvtap: entered promiscuous mode
[   37.760175][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.769882][ T3307] veth0_vlan: entered promiscuous mode
[   37.775891][ T3303] veth1_macvtap: entered promiscuous mode
[   37.790456][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.803611][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.811422][ T3307] veth1_vlan: entered promiscuous mode
[   37.822861][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.831718][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.840491][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.849380][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.874104][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.901770][ T3307] veth0_macvtap: entered promiscuous mode
[   37.901989][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   37.917363][ T3305] veth0_vlan: entered promiscuous mode
[   37.942325][ T3305] veth1_vlan: entered promiscuous mode
[   37.964615][ T3307] veth1_macvtap: entered promiscuous mode
[   37.998501][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.009125][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.020912][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.031136][ T3305] veth0_macvtap: entered promiscuous mode
[   38.067078][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.077682][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.090404][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.098949][ T3305] veth1_macvtap: entered promiscuous mode
[   38.114358][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.118194][ T3444] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   38.125059][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.141039][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.151712][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.166296][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.180624][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.189745][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.198703][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.207837][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.223430][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.234183][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.244151][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.254630][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.265603][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.287678][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.296571][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.305406][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.314332][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.358976][ T3310] veth0_vlan: entered promiscuous mode
[   38.368976][ T3312] veth0_vlan: entered promiscuous mode
[   38.389109][ T3312] veth1_vlan: entered promiscuous mode
[   38.399728][ T3310] veth1_vlan: entered promiscuous mode
[   38.419702][ T3455] loop0: detected capacity change from 0 to 164
[   38.427439][ T3455] =======================================================
[   38.427439][ T3455] WARNING: The mand mount option has been deprecated and
[   38.427439][ T3455]          and is ignored by this kernel. Remove the mand
[   38.427439][ T3455]          option from the mount to silence this warning.
[   38.427439][ T3455] =======================================================
[   38.479094][ T3455] Unable to read rock-ridge attributes
[   38.488942][ T3312] veth0_macvtap: entered promiscuous mode
[   38.508967][ T3312] veth1_macvtap: entered promiscuous mode
[   38.522585][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.533245][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.543222][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.554119][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.564034][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.566322][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   38.566339][   T29] audit: type=1400 audit(1745560452.303:141): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   38.574503][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.576321][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.619084][ T3310] veth0_macvtap: entered promiscuous mode
[   38.647595][   T29] audit: type=1400 audit(1745560452.413:142): avc:  denied  { open } for  pid=3461 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   38.651896][ T3460] syzkaller0: entered promiscuous mode
[   38.666704][   T29] audit: type=1400 audit(1745560452.413:143): avc:  denied  { kernel } for  pid=3461 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   38.672104][ T3460] syzkaller0: entered allmulticast mode
[   38.703815][ T3310] veth1_macvtap: entered promiscuous mode
[   38.711461][   T29] audit: type=1326 audit(1745560452.463:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3461 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c883e969 code=0x7ffc0000
[   38.734831][   T29] audit: type=1326 audit(1745560452.463:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3461 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77c883e969 code=0x7ffc0000
[   38.758113][   T29] audit: type=1326 audit(1745560452.463:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3461 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c883e969 code=0x7ffc0000
[   38.781478][   T29] audit: type=1326 audit(1745560452.463:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3461 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f77c883e969 code=0x7ffc0000
[   38.804945][   T29] audit: type=1326 audit(1745560452.463:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3461 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c883e969 code=0x7ffc0000
[   38.810143][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.838788][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.848903][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.859392][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.869236][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.879781][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.893641][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.901148][ T3458] smc: net device bond0 applied user defined pnetid SYZ2
[   38.904732][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.909544][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   38.917013][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.934541][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.943374][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.978423][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.989037][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.999104][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.001769][ T3465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   39.009612][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.009649][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.009666][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.049414][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.059974][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.070690][ T3465] syz.0.11 (3465) used greatest stack depth: 10272 bytes left
[   39.071367][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.088732][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.099304][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.109304][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.119942][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.130296][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.140988][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.150881][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.161513][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.172395][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.183274][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.192193][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.200984][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.209721][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.310448][ T3478] loop0: detected capacity change from 0 to 512
[   39.320975][ T3477] Cannot find del_set index 0 as target
[   39.328257][   T29] audit: type=1400 audit(1745560453.083:149): avc:  denied  { create } for  pid=3475 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   39.347629][   T29] audit: type=1400 audit(1745560453.083:150): avc:  denied  { setopt } for  pid=3475 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   39.395346][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   39.418144][ T3478] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.427484][ T3478] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   39.487725][ T3478] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   39.498277][ T3478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   39.510220][ T3478] System zones: 0-2, 18-18, 34-34
[   39.519095][ T3478] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   39.535442][ T3478] EXT4-fs (loop0): 1 truncate cleaned up
[   39.543215][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.615700][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.845931][ T3520] process 'syz.0.31' launched './file0' with NULL argv: empty string added
[   39.942462][ T3535] loop4: detected capacity change from 0 to 512
[   39.977149][ T3540] loop9: detected capacity change from 0 to 7
[   39.983531][ T3540] Buffer I/O error on dev loop9, logical block 0, async page read
[   39.992405][ T3535] EXT4-fs: Ignoring removed nobh option
[   40.010969][ T3540] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.011678][ T3535] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   40.019310][ T3540]  loop9: unable to read partition table
[   40.036185][ T3535] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.38: attempt to clear invalid blocks 2 len 1
[   40.054826][ T3535] EXT4-fs (loop4): Remounting filesystem read-only
[   40.061718][ T3540] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   40.061718][ T3540] 
U�������) failed (rc=-5)
[   40.076872][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.085416][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.087402][ T3535] EXT4-fs (loop4): 1 truncate cleaned up
[   40.093888][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.107532][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.108542][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.115448][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.137040][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.145007][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.155153][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read
[   40.180991][ T3546] loop0: detected capacity change from 0 to 1024
[   40.191997][ T3543] netlink: 96 bytes leftover after parsing attributes in process `syz.2.41'.
[   40.218459][ T3546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.246729][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.283210][ T3552] loop2: detected capacity change from 0 to 1024
[   40.298652][ T3552] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   40.309909][ T3552] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   40.309913][ T3546] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.42: Allocating blocks 497-513 which overlap fs metadata
[   40.334045][ T3552] JBD2: no valid journal superblock found
[   40.335216][ T3546] EXT4-fs (loop0): pa ffff8881060c80e0: logic 272, phys. 385, len 8
[   40.339959][ T3552] EXT4-fs (loop2): Could not load journal inode
[   40.347958][ T3546] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   40.507145][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.775958][ T3595] IPv4: Oversized IP packet from 127.202.26.0
[   40.817804][    C1] hrtimer: interrupt took 27904 ns
[   41.012519][  T336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.182175][ T3625] SELinux: failed to load policy
[   41.216214][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'.
[   41.228789][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'.
[   41.301195][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[   41.331449][ T3635] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   41.340308][ T3635] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   41.349167][ T3635] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   41.357990][ T3635] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   41.369238][ T3635] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   41.378247][ T3635] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   41.387218][ T3635] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   41.396394][ T3635] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   41.446548][ T3635] Zero length message leads to an empty skb
[   41.499193][ T3639] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.517580][ T3619] chnl_net:caif_netlink_parms(): no params data found
[   41.652612][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.659790][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.676791][ T3619] bridge_slave_0: entered allmulticast mode
[   41.683571][ T3619] bridge_slave_0: entered promiscuous mode
[   41.690523][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.697689][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.704996][ T3619] bridge_slave_1: entered allmulticast mode
[   41.711880][ T3619] bridge_slave_1: entered promiscuous mode
[   41.733180][ T3654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'.
[   41.747234][ T3619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.760369][  T336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.790822][ T3619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.837410][ T3656] rdma_op ffff8881183a9580 conn xmit_rdma 0000000000000000
[   41.858711][ T3619] team0: Port device team_slave_0 added
[   41.864933][ T3660] 9pnet: p9_errstr2errno: server reported unknown error 
[   41.865676][ T3619] team0: Port device team_slave_1 added
[   41.929077][  T336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.965371][ T3619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.972516][ T3619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.998585][ T3619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.009816][ T3619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.016823][ T3619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.043023][ T3619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.148132][  T336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.207789][ T3680] tipc: Started in network mode
[   42.212761][ T3680] tipc: Node identity ac14140f, cluster identity 4711
[   42.227049][ T3680] tipc: New replicast peer: 255.255.255.83
[   42.233075][ T3680] tipc: Enabled bearer <udp:�>, priority 10
[   42.243940][ T3619] hsr_slave_0: entered promiscuous mode
[   42.257718][ T3619] hsr_slave_1: entered promiscuous mode
[   42.265031][ T3619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.274827][ T3619] Cannot create hsr debugfs directory
[   42.398932][  T336] bridge_slave_1: left allmulticast mode
[   42.404639][  T336] bridge_slave_1: left promiscuous mode
[   42.410456][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.427740][  T336] bridge_slave_0: left allmulticast mode
[   42.433515][  T336] bridge_slave_0: left promiscuous mode
[   42.439744][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.525878][ T3702] loop2: detected capacity change from 0 to 1024
[   42.575779][ T3702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.601657][ T3702] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.629590][  T336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.645412][ T3702] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   42.646703][  T336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   42.669431][ T3702] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   42.681832][ T3702] EXT4-fs (loop2): This should not happen!! Data will be lost
[   42.681832][ T3702] 
[   42.691887][ T3702] EXT4-fs (loop2): Total free blocks count 0
[   42.698089][ T3702] EXT4-fs (loop2): Free/Dirty block details
[   42.704031][ T3702] EXT4-fs (loop2): free_blocks=4293918720
[   42.709820][ T3702] EXT4-fs (loop2): dirty_blocks=64
[   42.715144][ T3702] EXT4-fs (loop2): Block reservation details
[   42.721236][ T3702] EXT4-fs (loop2): i_reserved_data_blocks=4
[   42.728337][  T336] bond0 (unregistering): Released all slaves
[   42.739693][ T3700] netlink: 96 bytes leftover after parsing attributes in process `syz.0.106'.
[   42.764957][ T3702] syz.2.107 (3702) used greatest stack depth: 9656 bytes left
[   42.775111][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.812057][  T336] hsr_slave_0: left promiscuous mode
[   42.819238][ T3711] netlink: 'syz.0.109': attribute type 1 has an invalid length.
[   42.837877][  T336] hsr_slave_1: left promiscuous mode
[   42.843712][  T336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.851249][  T336] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.885534][  T336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.893135][  T336] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.913387][  T336] veth1_macvtap: left promiscuous mode
[   42.943711][  T336] veth0_macvtap: left promiscuous mode
[   42.961926][  T336] veth1_vlan: left promiscuous mode
[   42.974263][  T336] veth0_vlan: left promiscuous mode
[   43.112801][  T336] team0 (unregistering): Port device team_slave_1 removed
[   43.128130][  T336] team0 (unregistering): Port device team_slave_0 removed
[   43.147434][ T3720] loop2: detected capacity change from 0 to 1764
[   43.156303][ T3720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'.
[   43.224282][ T3718] ip6gretap1: entered promiscuous mode
[   43.231896][ T3717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'.
[   43.267162][ T3619] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   43.306960][ T3619] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   43.331727][ T3619] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   43.338588][ T3726] loop1: detected capacity change from 0 to 2048
[   43.348787][ T3619] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   43.356816][ T3368] tipc: Node number set to 2886997007
[   43.367296][ T3726]  loop1: p1 < > p4
[   43.392649][ T3726] loop1: p4 size 8388608 extends beyond EOD, truncated
[   43.424555][ T3733] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   43.487147][ T3619] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.521826][ T3619] 8021q: adding VLAN 0 to HW filter on device team0
[   43.543582][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.550846][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.598310][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.605492][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.648928][   T29] kauditd_printk_skb: 811 callbacks suppressed
[   43.648945][   T29] audit: type=1400 audit(1745560457.413:962): avc:  denied  { create } for  pid=3746 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   43.741614][   T29] audit: type=1400 audit(1745560457.503:963): avc:  denied  { read } for  pid=3753 comm="syz.1.125" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.764325][   T29] audit: type=1400 audit(1745560457.503:964): avc:  denied  { open } for  pid=3753 comm="syz.1.125" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.832831][   T29] audit: type=1400 audit(1745560457.583:965): avc:  denied  { ioctl } for  pid=3753 comm="syz.1.125" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.870222][ T3619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.920920][   T29] audit: type=1400 audit(1745560457.683:966): avc:  denied  { write } for  pid=3767 comm="syz.1.128" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   44.041549][ T3619] veth0_vlan: entered promiscuous mode
[   44.059103][ T3619] veth1_vlan: entered promiscuous mode
[   44.081722][ T3619] veth0_macvtap: entered promiscuous mode
[   44.092059][ T3619] veth1_macvtap: entered promiscuous mode
[   44.131725][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.142271][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.152140][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.162789][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.172729][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.183233][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.193146][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.203800][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.214790][ T3619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.233979][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.244695][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.254673][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.265158][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.275263][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.285797][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.295651][ T3619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.306193][ T3619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.316829][ T3619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.326307][ T3619] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.335100][ T3619] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.344045][ T3619] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.352831][ T3619] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.391382][ T3787] loop1: detected capacity change from 0 to 512
[   44.401349][ T3787] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   44.429787][ T3787] EXT4-fs (loop1): 1 orphan inode deleted
[   44.447850][   T51] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   44.457936][   T51] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1
[   44.472314][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.528983][ T3787] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.595189][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.604880][   T29] audit: type=1400 audit(1745560458.323:967): avc:  denied  { append } for  pid=3786 comm="syz.1.132" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.639170][   T29] audit: type=1400 audit(1745560458.393:968): avc:  denied  { create } for  pid=3794 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   44.658895][   T29] audit: type=1400 audit(1745560458.393:969): avc:  denied  { connect } for  pid=3794 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   44.679182][   T29] audit: type=1400 audit(1745560458.393:970): avc:  denied  { write } for  pid=3794 comm="syz.2.133" path="socket:[6327]" dev="sockfs" ino=6327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   44.749295][ T3803] ref_ctr increment failed for inode: 0xf1 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104b5dd80
[   44.780105][ T3802] uprobe: syz.1.135:3802 failed to unregister, leaking uprobe
[   44.881670][ T3808] bond1: entered promiscuous mode
[   44.886896][ T3808] bond1: entered allmulticast mode
[   44.903522][ T3808] 8021q: adding VLAN 0 to HW filter on device bond1
[   44.923045][ T3808] bond1 (unregistering): Released all slaves
[   44.956364][ T3817] tipc: Started in network mode
[   44.961266][ T3817] tipc: Node identity d1, cluster identity 4711
[   44.967636][ T3817] tipc: Node number set to 209
[   44.978225][ T3817] tipc: Cannot configure node identity twice
[   45.023668][ T3822] loop0: detected capacity change from 0 to 1024
[   45.032393][ T3824] loop1: detected capacity change from 0 to 512
[   45.061884][ T3824] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.146: bg 0: block 248: padding at end of block bitmap is not set
[   45.080478][ T3830] __nla_validate_parse: 1 callbacks suppressed
[   45.080491][ T3830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'.
[   45.084250][ T3824] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.146: Failed to acquire dquot type 1
[   45.112174][ T3824] EXT4-fs (loop1): 1 truncate cleaned up
[   45.118565][ T3824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.131523][ T3824] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.159676][ T3824] syz.1.146 (3824) used greatest stack depth: 9360 bytes left
[   45.168130][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.193857][ T3837] netlink: 'syz.0.150': attribute type 27 has an invalid length.
[   45.195656][ T3835] pim6reg1: entered promiscuous mode
[   45.207117][ T3835] pim6reg1: entered allmulticast mode
[   45.246539][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.253890][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.296093][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.306698][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.337869][ T3837] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.346879][ T3837] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.355794][ T3837] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.364923][ T3837] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.400837][ T3845] loop2: detected capacity change from 0 to 1024
[   45.419091][ T3845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.444784][ T3845] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   45.860746][ T3859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.241678][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.413705][ T3887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'.
[   46.430567][ T3887] 8021q: adding VLAN 0 to HW filter on device bond1
[   46.463550][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'.
[   46.489419][ T3887] bond1 (unregistering): Released all slaves
[   46.658970][ T3904] netlink: 56 bytes leftover after parsing attributes in process `syz.4.175'.
[   46.672513][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'.
[   46.720691][ T3910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.179'.
[   46.881627][ T3925] loop2: detected capacity change from 0 to 2048
[   46.900775][ T3925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.941128][ T3925] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   46.965417][ T3934] random: crng reseeded on system resumption
[   46.988130][ T3925] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[   47.027317][ T3937] netlink: 52 bytes leftover after parsing attributes in process `syz.4.188'.
[   47.071623][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.121385][ T3940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.177613][ T3940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.196905][ T3951] veth0_vlan: entered allmulticast mode
[   47.205745][ T3951] veth0_vlan: left promiscuous mode
[   47.211082][ T3951] veth0_vlan: entered promiscuous mode
[   47.249523][ T3940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.322320][ T3940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.352639][ T3859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.411607][ T3859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.447799][ T3940] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.492741][ T3859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.514382][ T3940] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.528642][ T3940] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.551279][ T3940] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.574698][ T3859] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.595968][ T3859] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.622437][ T3984] loop4: detected capacity change from 0 to 128
[   47.632053][ T3859] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.669997][ T3859] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.737644][ T3984] syz.4.209: attempt to access beyond end of device
[   47.737644][ T3984] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128
[   47.759876][ T3984] syz.4.209: attempt to access beyond end of device
[   47.759876][ T3984] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[   47.775686][ T3984] syz.4.209: attempt to access beyond end of device
[   47.775686][ T3984] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[   47.796754][ T3984] syz.4.209: attempt to access beyond end of device
[   47.796754][ T3984] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[   47.824667][ T3984] syz.4.209: attempt to access beyond end of device
[   47.824667][ T3984] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[   47.851985][ T3984] syz.4.209: attempt to access beyond end of device
[   47.851985][ T3984] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[   47.858226][ T4001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'.
[   47.876262][ T3984] syz.4.209: attempt to access beyond end of device
[   47.876262][ T3984] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[   47.890140][ T3984] syz.4.209: attempt to access beyond end of device
[   47.890140][ T3984] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[   47.903731][ T3984] syz.4.209: attempt to access beyond end of device
[   47.903731][ T3984] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[   47.927108][ T3984] syz.4.209: attempt to access beyond end of device
[   47.927108][ T3984] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[   47.945855][ T4009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.027825][ T4015] loop4: detected capacity change from 0 to 2048
[   48.049044][ T4015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.075967][ T4018] loop1: detected capacity change from 0 to 512
[   48.111372][ T4026] loop5: detected capacity change from 0 to 8192
[   48.180267][ T4018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   48.260368][ T4018] EXT4-fs (loop1): 1 truncate cleaned up
[   48.300627][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.385266][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.396190][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.448820][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.471816][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.504570][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.533602][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.556509][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.579945][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.606408][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.636419][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.658034][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.686435][ T4047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4047 comm=syz.0.235
[   48.834537][   T29] kauditd_printk_skb: 192 callbacks suppressed
[   48.834602][   T29] audit: type=1400 audit(1745560462.593:1161): avc:  denied  { checkpoint_restore } for  pid=4054 comm="syz.4.238" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   48.894385][ T4055] loop4: detected capacity change from 0 to 512
[   48.902843][ T4055] EXT4-fs: Ignoring removed nobh option
[   48.912790][   T29] audit: type=1400 audit(1745560462.673:1162): avc:  denied  { mount } for  pid=4059 comm="syz.1.240" name="/" dev="configfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   48.952937][   T29] audit: type=1400 audit(1745560462.703:1163): avc:  denied  { search } for  pid=4059 comm="syz.1.240" name="/" dev="configfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   48.975127][   T29] audit: type=1400 audit(1745560462.703:1164): avc:  denied  { read } for  pid=4059 comm="syz.1.240" name="/" dev="configfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   48.979148][ T4055] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.238: corrupted inode contents
[   48.997469][   T29] audit: type=1400 audit(1745560462.703:1165): avc:  denied  { open } for  pid=4059 comm="syz.1.240" path="/" dev="configfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   49.047895][ T4055] EXT4-fs (loop4): Remounting filesystem read-only
[   49.095965][ T4055] EXT4-fs (loop4): 1 truncate cleaned up
[   49.106707][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   49.117327][   T31] Quota error (device loop4): write_blk: dquota write failed
[   49.124825][   T31] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[   49.134879][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   49.145428][   T31] Quota error (device loop4): write_blk: dquota write failed
[   49.153013][   T31] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[   49.173278][ T4055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.189418][ T4055] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.216788][   T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   49.227036][   T31] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   49.289394][ T4055] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   49.299926][ T4072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.245'.
[   49.309637][ T4072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'.
[   49.357585][ T4055] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.374415][ T4079] xt_hashlimit: max too large, truncated to 1048576
[   49.579216][ T4094] loop2: detected capacity change from 0 to 512
[   49.601508][ T4094] EXT4-fs: Ignoring removed nobh option
[   49.655911][ T4094] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   49.667407][ T4094] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.255: attempt to clear invalid blocks 2 len 1
[   49.701325][ T4094] EXT4-fs (loop2): Remounting filesystem read-only
[   49.729668][ T4094] EXT4-fs (loop2): 1 truncate cleaned up
[   49.741393][ T4094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.812712][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.860224][ T4100] loop4: detected capacity change from 0 to 8192
[   50.170795][ T4100] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   50.178765][ T4100] FAT-fs (loop4): Filesystem has been set read-only
[   50.270961][ T4100] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   50.301670][ T4100] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   50.403386][ T4157] loop5: detected capacity change from 0 to 256
[   50.441441][ T4157] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   50.474081][ T4169] netlink: '+}[@': attribute type 3 has an invalid length.
[   50.878595][ T4229] __nla_validate_parse: 4 callbacks suppressed
[   50.878614][ T4229] netlink: 96 bytes leftover after parsing attributes in process `syz.4.288'.
[   51.500022][ T4287] netlink: 76 bytes leftover after parsing attributes in process `syz.5.317'.
[   51.639673][ T4290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.691301][ T4290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.748181][ T4290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.789213][ T4290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.883928][ T4290] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.895530][ T4290] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.907017][ T4290] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.919016][ T4290] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.991873][ T4301] loop2: detected capacity change from 0 to 512
[   52.000962][ T4301] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent
[   52.063457][ T4309] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[   52.063457][ T4309]    program syz.2.327 not setting count and/or reply_len properly
[   52.111503][   T36] IPVS: starting estimator thread 0...
[   52.206337][ T4313] IPVS: using max 2256 ests per chain, 112800 per kthread
[   52.239465][ T4320] smc: net device bond0 erased user defined pnetid SYZ2
[   52.318442][ T4329] loop4: detected capacity change from 0 to 256
[   52.335317][ T4332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.357362][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.363576][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.371585][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.378142][ T4329] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   52.385969][ T4329] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   52.394883][ T4332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.406273][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.412886][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.420754][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.427854][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.443164][ T4329] dummy0 speed is unknown, defaulting to 1000
[   52.445132][ T4338] netlink: 'syz.1.338': attribute type 7 has an invalid length.
[   52.457128][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'.
[   52.471022][ T4332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.497872][ T4340] loop1: detected capacity change from 0 to 512
[   52.508737][ T4340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.521439][ T4340] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.538250][ T4332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.599377][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.608909][ T4347] loop4: detected capacity change from 0 to 1024
[   52.615811][ T4347] EXT4-fs: Ignoring removed oldalloc option
[   52.622510][ T4347] EXT4-fs: Ignoring removed orlov option
[   52.633259][ T4347] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[   52.635779][ T4349] loop1: detected capacity change from 0 to 1024
[   52.646101][ T4332] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.661593][ T4332] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.673993][ T4332] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.674151][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.686158][ T4332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.721436][ T4347] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[   52.736891][ T4347] EXT4-fs (loop4): Remounting filesystem read-only
[   52.763306][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.814338][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'.
[   52.847464][ T4363] loop4: detected capacity change from 0 to 128
[   53.058442][ T4381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.068231][ T4381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.078697][ T4381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.090743][ T4381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.101788][ T4381] geneve2: entered promiscuous mode
[   53.108620][ T4381] geneve2: entered allmulticast mode
[   53.122279][ T4381] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.133226][ T4381] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.144869][ T4381] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.155174][ T4381] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.210457][ T4383] loop2: detected capacity change from 0 to 8192
[   53.292206][ T3383] IPVS: starting estimator thread 0...
[   53.386585][ T4391] IPVS: using max 1968 ests per chain, 98400 per kthread
[   53.498995][ T4409] loop5: detected capacity change from 0 to 164
[   53.508411][ T4409] Unable to read rock-ridge attributes
[   53.512974][ T4408] loop0: detected capacity change from 0 to 512
[   53.521227][ T4408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.542131][ T4408] EXT4-fs (loop0): orphan cleanup on readonly fs
[   53.551359][ T4408] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.374: bg 0: block 248: padding at end of block bitmap is not set
[   53.596765][ T4408] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.374: Failed to acquire dquot type 1
[   53.609110][ T4408] EXT4-fs (loop0): 1 truncate cleaned up
[   53.624139][ T4408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.674744][ T4408] smc: net device bond0 applied user defined pnetid SYZ2
[   53.682619][ T4408] smc: net device bond0 erased user defined pnetid SYZ2
[   53.717340][ T4408] syz.0.374 (4408) used greatest stack depth: 8784 bytes left
[   53.733242][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.923188][ T4430] loop5: detected capacity change from 0 to 512
[   53.939202][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'.
[   53.986343][ T4430] EXT4-fs: Mount option(s) incompatible with ext3
[   53.993233][ T4433] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   54.029911][   T29] kauditd_printk_skb: 152 callbacks suppressed
[   54.029924][   T29] audit: type=1326 audit(1745560467.793:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.086319][   T29] audit: type=1326 audit(1745560467.833:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.109821][   T29] audit: type=1326 audit(1745560467.833:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.133232][   T29] audit: type=1326 audit(1745560467.833:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.156800][   T29] audit: type=1326 audit(1745560467.833:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.180524][   T29] audit: type=1326 audit(1745560467.833:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.203937][   T29] audit: type=1326 audit(1745560467.833:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.227349][   T29] audit: type=1326 audit(1745560467.833:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.250770][   T29] audit: type=1326 audit(1745560467.833:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.5.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3694b4e969 code=0x7ffc0000
[   54.321652][   T29] audit: type=1400 audit(1745560468.073:1324): avc:  denied  { ioctl } for  pid=4437 comm="syz.0.378" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   54.358639][ T4447] loop0: detected capacity change from 0 to 1024
[   54.365419][ T4447] EXT4-fs: Ignoring removed orlov option
[   54.408229][ T4447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.455382][ T4458] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   54.824060][ T4125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.845868][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.390'.
[   54.899773][ T4125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.970053][ T4125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.050974][ T4125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.085253][ T4116] ==================================================================
[   55.093408][ T4116] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic
[   55.102747][ T4116] 
[   55.105086][ T4116] write to 0xffff888121a2fa22 of 2 bytes by task 4459 on cpu 1:
[   55.112742][ T4116]  copy_page_from_iter_atomic+0x77f/0xff0
[   55.118511][ T4116]  generic_perform_write+0x2c2/0x490
[   55.123824][ T4116]  ext4_buffered_write_iter+0x1ee/0x3c0
[   55.129394][ T4116]  ext4_file_write_iter+0x383/0xf00
[   55.134617][ T4116]  iter_file_splice_write+0x5ef/0x970
[   55.140030][ T4116]  direct_splice_actor+0x153/0x2a0
[   55.145183][ T4116]  splice_direct_to_actor+0x30f/0x680
[   55.150605][ T4116]  do_splice_direct+0xda/0x150
[   55.155400][ T4116]  do_sendfile+0x380/0x640
[   55.159883][ T4116]  __x64_sys_sendfile64+0x105/0x150
[   55.165121][ T4116]  x64_sys_call+0xb39/0x2fb0
[   55.169758][ T4116]  do_syscall_64+0xd0/0x1a0
[   55.174328][ T4116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.180262][ T4116] 
[   55.182594][ T4116] read to 0xffff888121a2f800 of 1024 bytes by task 4116 on cpu 0:
[   55.190403][ T4116]  copy_page_from_iter_atomic+0x77f/0xff0
[   55.196157][ T4116]  generic_perform_write+0x2c2/0x490
[   55.201469][ T4116]  shmem_file_write_iter+0xc5/0xf0
[   55.206595][ T4116]  lo_rw_aio+0x5f7/0x7c0
[   55.210851][ T4116]  loop_process_work+0x52d/0xa60
[   55.215802][ T4116]  loop_workfn+0x31/0x40
[   55.220056][ T4116]  process_scheduled_works+0x4cb/0x9d0
[   55.225528][ T4116]  worker_thread+0x582/0x770
[   55.230134][ T4116]  kthread+0x486/0x510
[   55.234220][ T4116]  ret_from_fork+0x4b/0x60
[   55.238657][ T4116]  ret_from_fork_asm+0x1a/0x30
[   55.243430][ T4116] 
[   55.245751][ T4116] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   55.251918][ T4116] CPU: 0 UID: 0 PID: 4116 Comm: kworker/u8:13 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) 
[   55.264601][ T4116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   55.274667][ T4116] Workqueue: loop0 loop_workfn
[   55.279452][ T4116] ==================================================================
[   55.427266][ T4125] bridge_slave_1: left allmulticast mode
[   55.432980][ T4125] bridge_slave_1: left promiscuous mode
[   55.438817][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.467739][ T4125] bridge_slave_0: left allmulticast mode
[   55.473438][ T4125] bridge_slave_0: left promiscuous mode
[   55.479277][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.613236][ T4125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.623363][ T4125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.634838][ T4125] bond0 (unregistering): Released all slaves
[   55.698043][ T4125] tipc: Left network mode
[   55.707441][ T4125] hsr_slave_0: left promiscuous mode
[   55.713561][ T4125] hsr_slave_1: left promiscuous mode
[   55.719794][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.727252][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.735436][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.743107][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.756001][ T4125] veth1_macvtap: left promiscuous mode
[   55.761656][ T4125] veth0_macvtap: left promiscuous mode
[   55.768691][ T4125] veth1_vlan: left promiscuous mode
[   55.773949][ T4125] veth0_vlan: left promiscuous mode
[   55.825206][ T4446] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.865017][ T4125] team0 (unregistering): Port device team_slave_1 removed
[   55.878208][ T4125] team0 (unregistering): Port device team_slave_0 removed
[   55.918905][   T36] dummy0 speed is unknown, defaulting to 1000
[   55.925022][   T36] infiniband syz2: ib_query_port failed (-19)
[   56.239373][ T4125] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.285819][ T4125] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.327743][ T4125] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.387835][ T4125] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.649355][ T4125] bridge_slave_1: left allmulticast mode
[   56.655027][ T4125] bridge_slave_1: left promiscuous mode
[   56.660833][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.668793][ T4125] bridge_slave_0: left allmulticast mode
[   56.674457][ T4125] bridge_slave_0: left promiscuous mode
[   56.680533][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.689292][ T4125] bridge_slave_1: left allmulticast mode
[   56.694995][ T4125] bridge_slave_1: left promiscuous mode
[   56.700683][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.708694][ T4125] bridge_slave_0: left allmulticast mode
[   56.714378][ T4125] bridge_slave_0: left promiscuous mode
[   56.720139][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.958167][ T4125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.967909][ T4125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.977704][ T4125] bond0 (unregistering): Released all slaves
[   56.986431][ T4125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.995631][ T4125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.004953][ T4125] bond0 (unregistering): Released all slaves
[   57.058047][ T4125] tipc: Disabling bearer <udp:�>
[   57.063147][ T4125] tipc: Left network mode
[   57.070668][ T4125] hsr_slave_0: left promiscuous mode
[   57.076301][ T4125] hsr_slave_1: left promiscuous mode
[   57.081902][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.089428][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.097210][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.104624][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.113730][ T4125] hsr_slave_0: left promiscuous mode
[   57.119655][ T4125] hsr_slave_1: left promiscuous mode
[   57.125351][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.132933][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.142795][ T4125] veth1_macvtap: left promiscuous mode
[   57.148326][ T4125] veth0_macvtap: left promiscuous mode
[   57.153948][ T4125] veth1_vlan: left promiscuous mode
[   57.159402][ T4125] veth0_vlan: left promiscuous mode
[   57.222964][ T4125] team0 (unregistering): Port device team_slave_1 removed
[   57.232732][ T4125] team0 (unregistering): Port device team_slave_0 removed
[   57.285248][ T4125] team0 (unregistering): Port device team_slave_1 removed
[   57.294659][ T4125] team0 (unregistering): Port device team_slave_0 removed
[   57.818836][ T4125] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.857828][ T4125] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.897992][ T4125] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.947837][ T4125] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.030457][ T4125] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.097463][ T4125] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.147716][ T4125] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.227647][ T4125] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.319731][ T4125] bridge_slave_1: left allmulticast mode
[   58.325444][ T4125] bridge_slave_1: left promiscuous mode
[   58.331163][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.338803][ T4125] bridge_slave_0: left allmulticast mode
[   58.344452][ T4125] bridge_slave_0: left promiscuous mode
[   58.350251][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.358340][ T4125] bridge_slave_1: left allmulticast mode
[   58.364040][ T4125] bridge_slave_1: left promiscuous mode
[   58.369798][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.377663][ T4125] bridge_slave_0: left allmulticast mode
[   58.383307][ T4125] bridge_slave_0: left promiscuous mode
[   58.389242][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.578352][ T4125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.588148][ T4125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.598045][ T4125] bond0 (unregistering): Released all slaves
[   58.607027][ T4125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.616857][ T4125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.626129][ T4125] bond0 (unregistering): Released all slaves
[   58.680563][ T4125] hsr_slave_0: left promiscuous mode
[   58.686143][ T4125] hsr_slave_1: left promiscuous mode
[   58.691976][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.699419][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.706951][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.714504][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.723568][ T4125] hsr_slave_0: left promiscuous mode
[   58.729703][ T4125] hsr_slave_1: left promiscuous mode
[   58.735399][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.742852][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.750606][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.758137][ T4125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.770181][ T4125] veth1_macvtap: left promiscuous mode
[   58.775686][ T4125] veth0_macvtap: left promiscuous mode
[   58.781236][ T4125] veth1_vlan: left promiscuous mode
[   58.786525][ T4125] veth0_vlan: left promiscuous mode
[   58.792169][ T4125] veth1_macvtap: left promiscuous mode
[   58.797846][ T4125] veth0_macvtap: left promiscuous mode
[   58.803371][ T4125] veth1_vlan: left promiscuous mode
[   58.808773][ T4125] veth0_vlan: left promiscuous mode
[   58.904374][ T4125] team0 (unregistering): Port device team_slave_1 removed
[   58.914842][ T4125] team0 (unregistering): Port device team_slave_0 removed
[   58.967825][ T4125] team0 (unregistering): Port device team_slave_1 removed
[   58.977176][ T4125] team0 (unregistering): Port device team_slave_0 removed
[   59.434882][ T4125] IPVS: stop unused estimator thread 0...
[   59.441082][ T4125] IPVS: stop unused estimator thread 0...