last executing test programs:

6.177115913s ago: executing program 2 (id=192):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='xen_mmu_pmd_clear\x00', r3, 0x0, 0x3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f00000004c0)=ANY=[], 0xfffffcdd)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'veth1_virt_wifi\x00', @remote})
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00')
sendfile(r4, r5, 0x0, 0xf95)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r7=>0x0})
clock_nanosleep(0xfffffff2, 0x3, &(0x7f0000000400)={r7}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0)
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

6.175960993s ago: executing program 0 (id=210):
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000ffffffe40000000000a87b8d8f2ec6f8d90000ffffffffffff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000001b00))
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3, 0x1c)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000700)=0x91, 0x4)
socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000002c0)="12cfc70b8bbb6425de51e7a5187058e659931b24595a7ea968ca4157786d56a97e0e2e38d13c183051b94414", 0x2c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x72)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x200, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote, 0xffffffff}, r8, 0xf5ffffff}}, 0x48)
write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0x4, "f09fbd3f338fe7766688d2ebdcbf8eb0db47f8d6e3fd85d8744f91faa6fc10b9a58d695a6aa6f078df0a8da9f0a517211f9ab5f20b912426e713ef23580486b23ee09310198e02d466616c8f8f9ed5d2268e74b0f928b559d567b2de2da701f1ed22a569e65bde5e7c26610228313b94005cfb71bc9694671ec97b9ef29e061e2fcf35ebe799300a6924d8ca76c22408aafe2d9c0ba05df4911646b92ca1292ee8f8a5ea8b92cc4bab627162a01a992ca03582913d54d193047f2a834ea075e997b76d9588f015302f43c2f8f554950c468d702122c13366ed288484366ffb88aa4d590fde6b3921fd2c4b2871254a17d10125d00fca7b401bcafe670cb509bb", 0x7b, 0x8, 0x3, 0x2, 0x4, 0x0, 0x99, 0x1}, r8}}, 0x128)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vxcan1\x00'})

5.24655421s ago: executing program 3 (id=204):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x258, 0x4c, 0x200, 0x258, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)

5.080544465s ago: executing program 3 (id=205):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read$watch_queue(r0, &(0x7f00000000c0)=""/60, 0x3c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
getsockopt$MRT6(r1, 0x29, 0xcf, 0x0, &(0x7f00000000c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=0x4)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x0, 0x800, 0x1, 0x0, 0x2, 0x28, r4})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18003c0000000000000000000000000061105300000000eb9400000000000000b24fba59421c0aef640e9526f3958650483674eca9d188a793c7b2dcfed8e758dd270c2b0cc13dabaa87c40f8c1c892bd778da01a897bb8ff8f460d95781048237c23ee6a6f28a1aa5b9f1055db0bb31ee6b723ce64fb06a759fcb92a50e8fe2111c3d18eb4cbb3f857a9637bd5c81a3fe68d53aa5e639250bfbb5c331e4208dd4e16ec6c6ee437a21ff9f4bea1ef5873da2507d6f549f2038ca9d7e15329d4e084cbede1c9c3e8de37c6d6cf4929324a94181017ffb1d1b3ff0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301010000000000000000000010000800010001"], 0x1c}}, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000001c0)={[{@usrquota}, {@journal_ioprio}]}, 0x1, 0x515, &(0x7f0000001c40)="$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")
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000340)={&(0x7f00000002c0)=""/96, 0x60})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000021a00000000000000000000080027a20100000000000000"], 0x1c}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.789401563s ago: executing program 3 (id=207):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', <r1=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000200)=0x1)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x3, {0x0, 0x0, 0x3}}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3d7e6e05fa7ff4d3fe24665924a8eaa0db8628e8d204ee780ed92388a7c18eca2952c5f392d51bc267eaaba410f3a6ae2857b9241011f4a034098ceaae8b20b7"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000900)={0x6, 0x2, 0x2, 0x3f, 0x12, "95c9f05afbd65b2fd39ceec7e60f30c5ee6c0e"})
ptrace(0x10, r4)
ptrace(0x8, r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x58)

3.768951398s ago: executing program 2 (id=213):
epoll_create1(0x0)
msgget$private(0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000", @ANYRES64=r0], 0x7c}}, 0x200440c1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080001400000001508000240000000060900010093797a300000000009e4020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x401, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r1, 0x5459, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000840)=0x1b)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r4 = dup(r3)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d81050423141100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8001500030001400200000901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e9703000000", 0xd8}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
ioctl$RTC_UIE_OFF(r6, 0x7004)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xf8ff}, 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3.614202292s ago: executing program 2 (id=217):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x0, 0x8, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1635, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000200))
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, 0x0, 0x0)
listen(r4, 0x9)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, 0x0, 0x0)
sendmmsg$inet(r5, 0x0, 0x0, 0x0)

3.558255518s ago: executing program 2 (id=218):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64], 0x0, 0x1, 0xbf, &(0x7f000000cf3d)=""/191, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2b3, &(0x7f0000000440)="$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")
r2 = open(0x0, 0x0, 0x0)
setresuid(0x0, 0xffffffffffffffff, 0xee00)
getresuid(&(0x7f00000009c0), &(0x7f0000000980), &(0x7f0000000a40)=<r3=>0x0)
setresuid(0x0, r3, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee})
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000380)={0x5, [0x9, 0x4, 0x81, 0x101, 0x8]}, 0xe)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffff0932ffffffffffffffffff86dd6011038800583a00fe8000000000000000000000000000bbfe800000000000000000000095000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040200000000fe880000000000000000000000000001fe8800"/142], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x2e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet_nvme_icreq_pdu(r4, &(0x7f0000000540)={{0x0, 0x3, 0x80, 0x5}, 0x0, 0x0, 0x3, 0x3}, 0x80, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x5, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x4900, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe", 0x41}], 0x1, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x2)
getgroups(0x27, &(0x7f0000002540))

3.466575706s ago: executing program 2 (id=220):
syz_io_uring_setup(0x7279, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4410, &(0x7f0000000200)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@mblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x100409e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x80d010, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00')
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x6)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00060000000000000000001400028006000e000100000006"], 0x44}}, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"})
r3 = syz_open_pts(r1, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
fadvise64(0xffffffffffffffff, 0x0, 0x8, 0x4)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "0b2dcd1abe343c03ae55060c18e1a86a36a4ec"})
r4 = epoll_create(0x9)
pwritev2(r4, &(0x7f0000000640)=[{&(0x7f0000000140)="3651bfbe4713666f15476e2a71e4371fd157ed6fe54f92c3cc81ae45a387945de49e5812580cfa9f10f2365b01a77631a11f6b03a8f353c5f1c4", 0x3a}, {&(0x7f00000002c0)="68b42a78c6d341c1f826bdded8d1775c7c329f00a08055008cb94610ed616c7942c195b3a01ab510ff769f1c9204ee8c41784c127386cadeaaca4039567537eb6b278c3b99fe5e121bf9cf8cb521a3f7f577f1b111ea37e10030f3b3c37b63d31419aed83e3667d325bebb937422ba6ad81fb3511b73d4fabe5764a78ef2b2f4e0b0edae394563fa579ae55c6258f0ac345ce93d4222dc9158fc70b3981430219c5d352b236b96de88188c5a5b", 0xad}, {0x0}, {&(0x7f00000001c0)="6b08acc6ebcb6a1b10cc50983823365d2d00c171d986b2675161bf36669870fba0dd42f81346f4383ec89183555532cc50d61ff9331413968424550b8574c593aaa10ece0965", 0x46}, {&(0x7f0000000440)="f9515156a4f3163e5d1dd1d508d7d5515aecd5cfeed3aa7a9c885aa4372d2021912493217e548b93d2d617b4755aab1d264dc19ae6c50496c266b7183de058edaf51beb12436020cd0c1722d726df825ea54bce21110ca2e7c56b46405e244904f390f281872913c5ac5792f5429d22eb8fc2b38e573731e9e6a2a8f6ce9cb623e523e2573ce45288451ab6e0fdda71e00d868861c94264e4483151a833d04673af5b2aa3be631824611c81300a44a1b43d5ce7251ab153939bf497f2148436ddeebe2a186c5b1d6ae4c0903a2", 0xcd}, {0x0}], 0x6, 0x5, 0x18a0, 0x2)
socket$packet(0x11, 0x3, 0x300)
r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r5, &(0x7f00000003c0)=""/102399, 0x18fff, 0xfffffffffffffffc, 0x0)

3.289651563s ago: executing program 1 (id=221):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/196, 0xfe94}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000340)=""/235, 0xf5}], 0x3, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000080039000000000008000300", @ANYRES32=r5], 0x2c}}, 0x0)
r6 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0xa4}, {0x6}]}, 0x10)
r11 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r11, 0x400)
r12 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r6, 0xb)

3.241203707s ago: executing program 4 (id=222):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x2, @private=0xa010100}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @empty}, 0x46, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='sit0\x00', 0x3, 0x7, 0x20})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
clock_settime(0x6, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000500)='cpu>20X|\t')
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x27f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x1ff, 0x0, 0xfffd})
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000300)=0x6080)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
r8 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00')
pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})

3.217886479s ago: executing program 4 (id=223):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
llistxattr(0x0, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08008100", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970026, &(0x7f00000004c0)=ANY=[])
open(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(0xffffffffffffffff, &(0x7f0000004180)=""/4096, 0x1000, 0x0)
ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e24}, 0x1c)
connect$inet6(r4, &(0x7f0000000680), 0x1c)
connect$inet6(r4, &(0x7f0000000680), 0x1c)
socket(0x1, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x39, &(0x7f00000002c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='A\x00'])

3.21352927s ago: executing program 1 (id=224):
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r8 = dup3(r6, r7, 0x0)
ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f00000001c0))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r10}, 0x38)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001e80)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00500000000000001c0012800b0001006d616373656300000c000280050003"], 0x3c}}, 0x0)

3.136919417s ago: executing program 0 (id=225):
ioperm(0x0, 0x404, 0x1)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000600)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000001080)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1887208193379e6a5a30d838000000000000000000000000000000181100000d7db4c64464774e51317f91cd3a8b481b4c24e2ae8bfa8ab89855a5aa0b2c18894b806a183fda07ed42a14a70986d796f458aae65fae6693c7ec7254cffc277aacd95e90464c23030c5a07a2741e704df81885406eff5b45616fb5c22eb49a9f4116e1906dfe05b6675886159962a014ec1aac34e25934f46f7a14894d479118573288f49576082c170a1c5b932d6faa6b05bded94744ae65841c98746666e43729f12f96d26c10ddc34cd0b3b676f981b364b6aead0415b99dc69174d88768f3d12f8e62649d9cfb0e9ce3fe6ba66efa42d36734a01148cd9f35465979436f85c8caa572ee75bfe6519e2483e02a2024c6995c32d3e95d4d884e08695a9c7aed0f9388637e4b89ab9e35f3ef8a06c449c80e49f844e43b13691910e6aa20bab41c5cefc7b10b9b39d2d43bcf1bd3d10af6537a6e6783df55b1c1355d6a1026ba4c8910f7a4a88cd414bfd71f2b7437a42e1245a0aeef3efdbf5e54", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='afs_make_fs_call\x00', r3, 0x0, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket(0x18, 0x3, 0x4)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60)
getsockopt$nfc_llcp(r8, 0x118, 0x2, &(0x7f0000000140)=""/192, 0x20000057)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2.5707887s ago: executing program 2 (id=226):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000140)={[{@acl}, {@noload}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {}, {@bsdgroups}]}, 0x6, 0x652, &(0x7f0000002580)="$eJzs3U9oHF8dAPDvzGbzS9L4SysiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7d/SFKwtWACHhQURLwW6UXw7F169yZC9eZZqCIVC1q6P2Z2ttlsZrNJmuwm2c8HNjvz5m3e++7bt/NmZ99OAANrKvuTRpyOeHcriZho2TYejY1TRb7X/356O7slUa9/919JJEVaM39S3J8oVkYi4s9XIz5d2VruyuMnd+dq9YafRJxfvffw/MrjJ+eW7s3dWbizcH/2wtcuXpr5+uzF2ZaK7t2J4v7a9e98/pc//eFXF/9SO5fE5bhZ/fF8tMWxX6ZiKt4VIbamD0XEpWyh5Hk5ao5BCAOtUrweqxHx2ZiISr7WMBFLv+hr5YADVa9E1LeXdMsAHFW6Nwyq5jigeWxffhyctK3f7MHIpDdeXWkcAG2Nf6j4yGEkPzYae520HBk1Pts4uQ/lZ2W8fTry7O3TyWex6XOIN+9bZ2gfyulkbT0iPlcWf5LX7WQeaRZ/uulYP3tFzETEcFG/b31AHVpfXQfxOcx2dhN/azukEXG5uM/Sr+6x/PaPtXodPwCD6cWVYke+lq1t7P+ysUdz/BMl45/xDz8lk+v3/q/z+K+5vx/Jxz1p2zgsG7PcKP+X1faEv//82q87ld8Y/00+a96y8ptjwV54tR4x2Rb/z7Jgi/FPFn9S0v5ZlluXd1bGt1/+81qnbf2Ov/484kzp8c/GqDRb2ub85PnFpdrCTONvaRl//NMPftep/PL4PzqASMtl7T/WIf6W9k/bH5c9Jw/L/+V6e8Ifbjy/16n88a7tn/5jOGkcbw4XKT9aX11dno0YTq4XWYr0udXV5Qvbx9vI86ae38824j/7pfL+v+n13xbVaPMtcwcefu/u607b9vL6bzmZ/K6+wzp0ksU/3739t/T/LO1XOyzjv99/9IVO2zrHX82f4xJb3l8BAAAAAACAhjQ/B5uk0++X03R6ujFf9jMxltYerKx+efHBo/vzEWfz70NW00iT/CsjE431ZHGptjBbfB+2uX6hbf0rEXEqIn5TGc3Xp28/qM33O3gAAAAAAAAAAAAAAAAAAAA4JE4U8/+b16n+T6Ux/x8YEN0vMLfl+g/AMXGQF5gEDre8/2+3i/+4d3UBesv+HwbXXvv/yD7XA+g9+38YXPo/DC79HwaX/g+Da2i93zUA+sX+HwAAAACOpVNffPG3JCLWvjGa3zLDxTaTfuF4q+4qd+XA6gH0nh4Ng+v9qX+DfRg4Oxr//6/4ccCDrw7QB0lZYj44qG/f+V+UPnKDrxYDAAAAAAAAAAAAwL45c7rz/P/dzQ0GjhrT/mBwfcD8fz8dAEecn/6HweUYH+gyi7/zpf67zf8HAAAAAAAAAAAAAPbNeH5L0uliLvB4pOn0dMSnIuJkVJPFpdrCTER8HBF/rVQ/ytZn+11pAAAAAAAAAAAAAAAAAAAAOGZWHj+5O1erLSy3Lvx/S0oPF37/MqLHhTavgto9c30HebZd+Gbs8lGR9L4JRqPnTdDDhaGWlCRiLWv5Q1Gx5ZU4HNXIF/r8xgQAAAAAAAAAAAAAAAAAAAOoZe5xucnf9rhGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB7G9f/77IwP9Z4wI4yb17od4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNH0SQAAAP//Kbg8mA==")
r6 = dup(r3)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x8020)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r9, 0x0, 0x400000000000000, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})

2.124461492s ago: executing program 0 (id=227):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
clock_getres(0x2, &(0x7f000000ddc0))
write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xfdef)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000a6210571fb7c61bd2ab87e5cf72300000000000000000000af39788b05fee69512dd73db84f5396e84ede85091"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', r8, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
unshare(0x400)
socket$packet(0x11, 0x2, 0x300)
r9 = socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r10, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)

2.096978964s ago: executing program 1 (id=228):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x2, @private=0xa010100}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @empty}, 0x46, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='sit0\x00', 0x3, 0x7, 0x20})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
clock_settime(0x6, 0x0)
r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000500)='cpu>20X|\t')
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x27f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x1ff, 0x0, 0xfffd})
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000300)=0x6080)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
r8 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00')
pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})

2.077582086s ago: executing program 4 (id=229):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='mm_vmscan_write_folio\x00', r1}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x20, r4, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0)
mkdir(0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}})
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
r9 = mq_open(&(0x7f0000000900)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r9, 0x0, 0x0, 0x6, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r9)

1.664122874s ago: executing program 3 (id=230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1c0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000700)='./file0\x00', 0x400097e)
socket$inet6(0xa, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
capset(&(0x7f0000000080)={0x19980330}, 0x0)
ioctl$GIO_SCRNMAP(r3, 0x5608, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)=<r5=>0x0)
perf_event_open(0x0, r5, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext})
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r6, &(0x7f0000000300)={0x1d, r9, 0x0, {}, 0x2}, 0x18)
sendmsg$can_j1939(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000000100)={&(0x7f00000000c0)="d45dac54b098953bd2", 0x9}}, 0x0)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000080)={'vxcan1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)

1.441754585s ago: executing program 4 (id=231):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64], 0x0, 0x1, 0xbf, &(0x7f000000cf3d)=""/191, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68"], 0x97, 0x2b3, &(0x7f0000000440)="$eJzs3T1rLGUUAOAzm83sosVewUoEB7Swutx7Wws3SC4Et1K2UAsNJgHJLkICAT9wTGVrY2lrIwh2/gkb/4FgK9gZMDAyuzPuJG7WWWQTP56nycm858x73smEkCIn7zw7PT7I4uj84x+j30+iM4xhXCRxLzpR+zSuGH4eAMC/2UVRxC/F3Dp1SUT0N9cWALBBa//8/3bjLQEAG/b6G2++ujMa7b6WZf14PP3sbFz+Zl9+nK/vHMV7MYnDeBCDuIwo/jCPHxdFkXez0r14YZqfjcvK6dvfV/ff+TkiJpE2trxavzfafZjNlfWdmNXnZR9PVPsPy/0fxSCeXrL/3mj3UaO+2j+PcRovPt/o/34M4od34/2YxMGsiXl9dCI+eZhlrxRf/PrRW2V7ZX2Sn417s7xG21u39kUBAAAAAAAAAAAAAAAAAAAAAOA/7341O6cXs/k95aVq/s7WZfnJdmS15nyfvJ4PlNQ3ujYfKC/iy3o+z4Msy4oqcVHfjWe60b2bUwMAAAAAAAAAAAAAAAAAAMA/y+kHHx7vTyaHJ62DrKpcllNPA+iuyGkTDBtXnovVyb3FXp0qXHHn2KpzkoiVbZSHaN3zb9XYg+bSy62P/NRNPX/9TetH99Vfn70Ktlvk/M2gfruO95Plz7AX9ZV+/ZJ818xJo+Ve6U1LxVqvX7p0abD22dMnZ0G+IieSVY299NP8yVVXkuunSGdPdWn5dhU0yq/m9Nu/z+V3yp8kpnUAAAAAAAAAAAAAAAAAAMBGLf7od8ni+crSTtHbWFsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKsW//9/jSCvilskp3FyesdHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/g9wAAAP//hfVeCQ==")
r2 = open(0x0, 0x0, 0x0)
setresuid(0x0, 0xffffffffffffffff, 0xee00)
getresuid(&(0x7f00000009c0), &(0x7f0000000980), &(0x7f0000000a40)=<r3=>0x0)
setresuid(0x0, r3, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee})
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000380)={0x5, [0x9, 0x4, 0x81, 0x101, 0x8]}, 0xe)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffff0932ffffffffffffffffff86dd6011038800583a00fe8000000000000000000000000000bbfe800000000000000000000095000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040200000000fe880000000000000000000000000001fe8800"/142], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x2e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet_nvme_icreq_pdu(r4, &(0x7f0000000540)={{0x0, 0x3, 0x80, 0x5}, 0x0, 0x0, 0x3, 0x3}, 0x80, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x5, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x4900, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe", 0x41}], 0x1, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x2)
getgroups(0x27, &(0x7f0000002540))

1.428708196s ago: executing program 1 (id=232):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @private2, 0x3}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffee9}, 0x5b4}], 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x29, 0x1f, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r2, 0xfffffffffffffffd, 0x58)
io_setup(0x81, &(0x7f00000005c0)=<r3=>0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
io_pgetevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0)
r5 = eventfd(0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r5}])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESHEX], 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x36, 0x0, 0x0, 0x5, 0x0, @void, @value}, 0x20)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x1)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000008c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r6, &(0x7f00000001c0)=[{0x2, 0x9, 0x6, 0x0, @tick, {0xfe, 0x81}, {0x1}, @control={0xb2, 0x3, 0x3f}}], 0x1c)
write$sndseq(r6, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = mq_open(&(0x7f0000000080)='!selinuxseZinux\x00', 0x40, 0xf2, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x3})
mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0)

1.042720413s ago: executing program 0 (id=233):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x2, @private=0xa010100}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @empty}, 0x46, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='sit0\x00', 0x3, 0x7, 0x20})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
clock_settime(0x6, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000500)='cpu>20X|\t')
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x27f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x1ff, 0x0, 0xfffd})
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000300)=0x6080)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
r8 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00')
pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})

982.991608ms ago: executing program 3 (id=234):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettaction={0x12c, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x9c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}]}, 0x12c}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x20, 0x4}, {0x400, 0xc2, 0x3f, 0xb02}, {0x8, 0xf8, 0x4, 0x7fffffff}]}, 0x10)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x62)
r5 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
setns(0xffffffffffffffff, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000000c0)=0x28, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0005000000000000070d", @ANYRES16=r7], 0x30)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0)

925.379484ms ago: executing program 1 (id=235):
r0 = creat(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ftruncate(r1, 0x2008002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000000c0)=0x2, 0x4)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000240))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c)
getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, &(0x7f0000000080))
fcntl$setstatus(r0, 0x4, 0x0)

759.673349ms ago: executing program 4 (id=236):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe(&(0x7f0000000180))
epoll_create(0x3)
r0 = socket(0x1e, 0x1, 0x0)
sendto$packet(r0, 0x0, 0xffffff4f, 0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000002d00)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r2}, 0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={r2, 0x3, 0xfff8}, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000e, &(0x7f0000000440)={[{@init_itable}, {@resuid}, {@stripe}], [{@appraise}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e22, 0x21}, 0x1c)
r5 = socket(0x0, 0x1, 0x0)
getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000010400000000000000372cc7b9dc40320000000000fad8722b49bd407091387e9f6f480e5b18527e29f0fe8f20c7ada0d670108aacf5924f513c4891941d977d831aecad690882d86a182102eefe783af06d077cce70cd4cb4d1bdf2a503b7", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="31b8fab4e3126bbc978d53832a52d75e163e29a53ba292cc04ed94cb7350cbe3051491fa7004480fd0e650e1e020720876ad16fa15cb3f53e3fa73f0a5cca49d9187e2089958447f55a18fcc4d76000000000000000000000000000000b140f4ed620bdd13dbdb23913ae9a9b06e792995b8700cb152bf353fb4aee39856b9dda9e1fcb2cd9d4607977eeab1e13954974bd379797857a4a1e2dbb11984c30c4e8e91d9bb7683827a", @ANYBLOB, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x140cc8b0}, 0x0)
listen(r4, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f9", 0x15, 0xffffffffffffffff)
socket$packet(0x11, 0x0, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', <r6=>0x0, 0x0, 0xf3, 0x81, 0x2, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x20, 0x6, 0xffffffff}})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x3, r6, 0x1, 0xfe, 0x6, @remote}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000380)={0x3f, 0x1, 0xfff7})

737.833111ms ago: executing program 0 (id=237):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0x5)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r6}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r6, 0x1ff}, 0x8)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x20000000)
listen(r2, 0xfffffffe)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', <r8=>0x0})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@local, 0x0, r8})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'})

566.917127ms ago: executing program 0 (id=238):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', <r1=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000200)=0x1)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x3, {0x0, 0x0, 0x3}}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000900)={0x6, 0x2, 0x2, 0x3f, 0x12, "95c9f05afbd65b2fd39ceec7e60f30c5ee6c0e"})
ptrace(0x10, r4)
ptrace(0x8, r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x58)

201.114751ms ago: executing program 3 (id=239):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x4048000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
recvmmsg$unix(r2, &(0x7f00000027c0), 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0xfea7)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180))

12.762809ms ago: executing program 4 (id=240):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', <r1=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000200)=0x1)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x3, {0x0, 0x0, 0x3}}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3d7e6e05fa7ff4d3fe24665924a8eaa0db8628e8d204ee780ed92388a7c18eca2952c5f392d51bc267eaaba410f3a6ae2857b9241011f4a034098ceaae8b20b7"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000900)={0x6, 0x2, 0x2, 0x3f, 0x12, "95c9f05afbd65b2fd39ceec7e60f30c5ee6c0e"})
ptrace(0x10, r4)
ptrace(0x8, r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x58)

0s ago: executing program 1 (id=241):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)="a6", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000b00))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xf, 0xfeff, "a69e87ad90ffb6b4b8ef2c88bd9316809d2c5e674fdae02795585a9392d651e2003294cc11be2b39bb2445999a58f0b90e69473ae585be8587529a0247ea14f5475bd7b699075f8172e05c49eb78bedd"}, 0xd8)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)
sendfile(r1, r0, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket(0x80000000000000a, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0})
bind$unix(r5, &(0x7f0000001000)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x7, 0xd, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x20, 0xc26a, 0xe294}})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

nique to avoid problems!
[   33.878832][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.891185][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.900041][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.908807][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.917561][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.953415][ T3268] veth0_macvtap: entered promiscuous mode
[   33.962772][ T3268] veth1_macvtap: entered promiscuous mode
[   33.996088][ T3408] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use)
[   34.022620][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.033225][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.043206][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.053921][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.053936][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.053952][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.053963][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.054030][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.055362][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.058863][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.058990][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.059005][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.059022][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.059052][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.059067][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.059122][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.059137][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.060003][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.062608][ T3268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.062714][ T3268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.062786][ T3268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.062879][ T3268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.185483][ T3422] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure
[   34.285520][ T3433] =======================================================
[   34.285520][ T3433] WARNING: The mand mount option has been deprecated and
[   34.285520][ T3433]          and is ignored by this kernel. Remove the mand
[   34.285520][ T3433]          option from the mount to silence this warning.
[   34.285520][ T3433] =======================================================
[   34.332829][ T3425] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   34.375023][ T3430] loop3: detected capacity change from 0 to 512
[   34.400434][ T3422] loop2: detected capacity change from 0 to 1024
[   34.461516][ T3422] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   34.469355][ T3430] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.492751][ T3430] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[   34.500838][ T3422] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   34.513223][ T3422] EXT4-fs (loop2): orphan cleanup on readonly fs
[   34.522989][ T3422] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3: bg 0: block 10: padding at end of block bitmap is not set
[   34.540267][ T3422] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.3: Failed to acquire dquot type 0
[   34.549812][    C0] Illegal XDP return value 16128 on prog  (id 6) dev team0, expect packet loss!
[   34.561594][ T3422] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.3: Freeing blocks not in datazone - block = 0, count = 4096
[   34.575197][ T3422] EXT4-fs (loop2): 1 truncate cleaned up
[   34.581653][ T3422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   34.599111][ T3422] syz.2.3 (3422) used greatest stack depth: 9296 bytes left
[   34.614559][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.653215][ T3437] loop1: detected capacity change from 0 to 512
[   34.663503][ T3437] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[   34.846962][ T3443] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.864349][ T3443] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.940479][ T3446] tls_set_device_offload: netdev not found
[   34.994439][ T3446] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   35.063802][ T3454] loop2: detected capacity change from 0 to 512
[   35.076443][ T3454] loop2: detected capacity change from 0 to 512
[   35.119266][    C1] hrtimer: interrupt took 26755 ns
[   35.144151][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.153681][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.153877][ T3454] loop2: detected capacity change from 0 to 512
[   35.185695][ T3454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.199795][ T3454] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.208544][ T3457] bridge_slave_1: left allmulticast mode
[   35.216586][ T3457] bridge_slave_1: left promiscuous mode
[   35.222656][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.252509][ T3457] bridge_slave_0: left allmulticast mode
[   35.258719][ T3457] bridge_slave_0: left promiscuous mode
[   35.265258][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.318246][ T3465] pim6reg1: entered promiscuous mode
[   35.323720][ T3465] pim6reg1: entered allmulticast mode
[   35.362381][ T3463] loop3: detected capacity change from 0 to 256
[   35.371431][ T3463] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   35.522662][ T3474] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   35.522662][ T3474] The task syz.3.16 (3474) triggered the difference, watch for misbehavior.
[   35.570522][ T3474] netlink: 'syz.3.16': attribute type 15 has an invalid length.
[   35.624105][ T3481] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET)
[   35.635368][ T3481] process 'syz.1.18' launched './file1' with NULL argv: empty string added
[   35.655667][ T3481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   36.002073][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.130031][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.168600][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   36.181276][ T3495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.192630][ T3484] chnl_net:caif_netlink_parms(): no params data found
[   36.237501][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.244828][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.252502][ T3484] bridge_slave_0: entered allmulticast mode
[   36.259064][ T3484] bridge_slave_0: entered promiscuous mode
[   36.267017][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.274237][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.281769][ T3484] bridge_slave_1: entered allmulticast mode
[   36.288428][ T3484] bridge_slave_1: entered promiscuous mode
[   36.317443][ T3502] loop3: detected capacity change from 0 to 1024
[   36.331632][ T3484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.342574][ T3484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.360624][ T3502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.376313][ T3484] team0: Port device team_slave_0 added
[   36.383352][ T3484] team0: Port device team_slave_1 added
[   36.400589][ T3502] netlink: 'syz.3.22': attribute type 10 has an invalid length.
[   36.415066][ T3502] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   36.427322][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.441896][ T3502] xt_NFQUEUE: number of total queues is 0
[   36.465092][ T3484] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.472187][ T3484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.498233][ T3484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.503241][ T3508] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2792: inode #12: comm syz.3.22: corrupted in-inode xattr: bad magic number in in-inode xattr
[   36.509723][ T3484] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.531271][ T3484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.548410][ T3508] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   36.557516][ T3484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.602890][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.625667][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.654344][ T3484] hsr_slave_0: entered promiscuous mode
[   36.662164][ T3484] hsr_slave_1: entered promiscuous mode
[   36.668178][ T3484] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.676154][ T3484] Cannot create hsr debugfs directory
[   36.704381][ T3495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.722923][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.743752][ T3495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.838511][ T3495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.861284][   T11] bridge_slave_1: left allmulticast mode
[   36.867021][   T11] bridge_slave_1: left promiscuous mode
[   36.872870][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.883293][   T11] bridge_slave_0: left allmulticast mode
[   36.889001][   T11] bridge_slave_0: left promiscuous mode
[   36.895871][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.920425][ T3515] loop4: detected capacity change from 0 to 128
[   36.981439][ T3517] tmpfs: Bad value for 'huge'
[   37.072018][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   37.088817][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   37.101551][   T11] bond0 (unregistering): Released all slaves
[   37.136792][ T3517] veth0_vlan: entered allmulticast mode
[   37.177646][ T3518] ªªªªªª: renamed from vlan0
[   37.218969][   T11] hsr_slave_0: left promiscuous mode
[   37.227215][   T11] hsr_slave_1: left promiscuous mode
[   37.237227][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.244792][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.254640][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.262208][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.285723][   T11] veth1_macvtap: left promiscuous mode
[   37.291431][   T11] veth0_macvtap: left promiscuous mode
[   37.296988][   T11] veth1_vlan: left promiscuous mode
[   37.302323][   T11] veth0_vlan: left promiscuous mode
[   37.515353][   T11] team0 (unregistering): Port device team_slave_1 removed
[   37.541486][   T11] team0 (unregistering): Port device team_slave_0 removed
[   37.600851][ T3495] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.618802][ T3495] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.636896][ T3495] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.659198][ T3495] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.685798][ T3526] loop3: detected capacity change from 0 to 512
[   37.701808][ T3529] random: crng reseeded on system resumption
[   37.713216][ T3526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   37.722323][ T3532] loop1: detected capacity change from 0 to 512
[   37.758752][ T3532] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   37.821712][ T3532] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[   37.883481][ T3526] EXT4-fs (loop3): 1 orphan inode deleted
[   37.889563][ T3526] EXT4-fs (loop3): 1 truncate cleaned up
[   37.891883][ T3529] loop4: detected capacity change from 0 to 256
[   37.930728][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   37.939660][ T3526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.942585][ T3526] EXT4-fs error (device loop3): empty_inline_dir:1850: inode #12: block 7: comm syz.3.27: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0
[   37.985426][ T3526] EXT4-fs (loop3): Remounting filesystem read-only
[   37.992079][ T3526] EXT4-fs warning (device loop3): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[   38.042852][ T3559] netlink: 76 bytes leftover after parsing attributes in process `syz.1.32'.
[   38.075722][ T3526] sctp: [Deprecated]: syz.3.27 (pid 3526) Use of int in max_burst socket option.
[   38.075722][ T3526] Use struct sctp_assoc_value instead
[   38.108944][ T3545] netlink: 'syz.2.30': attribute type 10 has an invalid length.
[   38.121152][ T3545] 8021q: adding VLAN 0 to HW filter on device team0
[   38.130154][ T3545] bond0: (slave team0): Enslaving as an active interface with an up link
[   38.159119][ T3563] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[   38.165800][ T3563] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   38.173536][ T3563] vhci_hcd vhci_hcd.0: Device attached
[   38.174250][ T3553] netlink: 'syz.2.30': attribute type 10 has an invalid length.
[   38.196259][ T3564] vhci_hcd: connection closed
[   38.198953][   T28] vhci_hcd: stop threads
[   38.207968][   T28] vhci_hcd: release socket
[   38.212439][   T28] vhci_hcd: disconnect device
[   38.224165][ T3553] bond0: (slave team0): Releasing backup interface
[   38.233862][ T3553] bridge0: port 3(team0) entered blocking state
[   38.240278][ T3553] bridge0: port 3(team0) entered disabled state
[   38.246958][ T3553] team0: entered allmulticast mode
[   38.247918][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.252131][ T3553] team_slave_0: entered allmulticast mode
[   38.266882][ T3553] team_slave_1: entered allmulticast mode
[   38.281351][ T3553] team0: entered promiscuous mode
[   38.286498][ T3553] team_slave_0: entered promiscuous mode
[   38.290102][   T29] kauditd_printk_skb: 556 callbacks suppressed
[   38.290121][   T29] audit: type=1400 audit(1726895227.984:673): avc:  denied  { connect } for  pid=3566 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.292472][ T3553] team_slave_1: entered promiscuous mode
[   38.303845][ T3571] loop3: detected capacity change from 0 to 512
[   38.363129][ T3571] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.365930][ T3567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'.
[   38.377357][ T3571] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.441769][ T3484] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.476253][ T3484] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.492180][ T3589] syz.2.35[3589] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.492270][ T3589] syz.2.35[3589] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.525690][ T3484] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.547409][   T29] audit: type=1400 audit(1726895228.244:674): avc:  denied  { setopt } for  pid=3587 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   38.553496][ T3589] loop2: detected capacity change from 0 to 1024
[   38.578243][   T29] audit: type=1400 audit(1726895228.244:675): avc:  denied  { bind } for  pid=3587 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   38.582778][ T3589] EXT4-fs: Ignoring removed orlov option
[   38.603990][ T3589] EXT4-fs: Ignoring removed nomblk_io_submit option
[   38.613010][ T3484] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.621206][ T3268] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   38.698859][ T3600] vhci_hcd: default hub control req: 4014 v0000 i0000 l0
[   38.709167][ T3589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.731332][ T3599] loop4: detected capacity change from 0 to 2048
[   38.740487][ T3600] loop3: detected capacity change from 0 to 2048
[   38.742139][ T3484] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.747065][ T3600] EXT4-fs: Ignoring removed orlov option
[   38.787836][   T29] audit: type=1400 audit(1726895228.474:676): avc:  denied  { setattr } for  pid=3587 comm="syz.2.35" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.810253][   T29] audit: type=1400 audit(1726895228.474:677): avc:  denied  { write } for  pid=3587 comm="syz.2.35" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   38.833936][   T29] audit: type=1400 audit(1726895228.484:678): avc:  denied  { execute } for  pid=3587 comm="syz.2.35" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.856211][   T29] audit: type=1400 audit(1726895228.484:679): avc:  denied  { read open } for  pid=3587 comm="syz.2.35" path="/7/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.879844][   T29] audit: type=1400 audit(1726895228.484:680): avc:  denied  { execute_no_trans } for  pid=3587 comm="syz.2.35" path="/7/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.886820][ T3600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.909017][   T29] audit: type=1400 audit(1726895228.514:681): avc:  denied  { create } for  pid=3603 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   38.920142][ T3484] 8021q: adding VLAN 0 to HW filter on device team0
[   38.946889][ T3599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.962404][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.963156][ T3608] loop1: detected capacity change from 0 to 164
[   38.993031][ T3608] Unable to read rock-ridge attributes
[   39.013129][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.020279][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.032422][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.039594][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.055812][ T3484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   39.066231][ T3484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.078406][   T29] audit: type=1400 audit(1726895228.744:682): avc:  denied  { mount } for  pid=3603 comm="syz.1.38" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   39.102798][    C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   39.165299][ T3599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.313259][ T3484] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.344363][ T3596] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   39.382405][ T3596] EXT4-fs (loop3): Remounting filesystem read-only
[   39.395028][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'.
[   39.472710][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.581330][ T3634] loop3: detected capacity change from 0 to 512
[   39.660416][ T3484] veth0_vlan: entered promiscuous mode
[   39.678690][ T3634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.698923][ T3484] veth1_vlan: entered promiscuous mode
[   39.704665][ T3634] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.730680][ T3639] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.43'.
[   39.876825][ T3639] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.43'.
[   39.886184][ T3639] netlink: 332 bytes leftover after parsing attributes in process `syz.4.43'.
[   39.913230][ T3640] netlink: 'syz.1.42': attribute type 3 has an invalid length.
[   39.932868][ T3484] veth0_macvtap: entered promiscuous mode
[   40.018285][ T3484] veth1_macvtap: entered promiscuous mode
[   40.073220][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.083841][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.093848][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.104632][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.115107][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.125582][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.135460][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.145979][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.166638][ T3484] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.183213][ T3639] block device autoloading is deprecated and will be removed.
[   40.194534][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.205173][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.215137][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.225629][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.235599][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.246157][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.256179][ T3484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.267046][ T3484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.282572][ T3484] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.295274][ T3646] loop4: detected capacity change from 0 to 512
[   40.311341][ T3646] EXT4-fs: Ignoring removed i_version option
[   40.317438][ T3646] EXT4-fs: Ignoring removed nobh option
[   40.337276][ T3646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   40.416740][ T3646] EXT4-fs (loop4): 1 truncate cleaned up
[   40.423152][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.450041][ T3484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.458898][ T3484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.467669][ T3484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.476420][ T3484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.531062][ T3646] loop4: detected capacity change from 512 to 0
[   40.575084][ T3646] syz.4.44: attempt to access beyond end of device
[   40.575084][ T3646] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0
[   40.588576][ T3646] EXT4-fs error (device loop4): __ext4_find_entry:1641: inode #2: comm syz.4.44: reading directory lblock 0
[   40.600641][ T3646] syz.4.44: attempt to access beyond end of device
[   40.600641][ T3646] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0
[   40.613809][ T3646] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   40.622512][ T3646] EXT4-fs (loop4): I/O error while writing superblock
[   40.631710][ T3646] syz.4.44: attempt to access beyond end of device
[   40.631710][ T3646] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0
[   40.660022][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.662487][ T3646] EXT4-fs error (device loop4): __ext4_find_entry:1641: inode #2: comm syz.4.44: reading directory lblock 0
[   40.687934][ T3646] syz.4.44: attempt to access beyond end of device
[   40.687934][ T3646] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0
[   40.701138][ T3646] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   40.712194][ T3646] EXT4-fs (loop4): I/O error while writing superblock
[   40.738326][ T3652] syz.4.44: attempt to access beyond end of device
[   40.738326][ T3652] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0
[   40.751748][ T3652] EXT4-fs error (device loop4): __ext4_find_entry:1641: inode #2: comm syz.4.44: reading directory lblock 0
[   40.763843][ T3652] syz.4.44: attempt to access beyond end of device
[   40.763843][ T3652] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0
[   40.777043][ T3652] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   40.786166][ T3652] EXT4-fs (loop4): I/O error while writing superblock
[   40.800945][ T3668] 9pnet_fd: p9_fd_create_tcp (3668): problem connecting socket to 127.0.0.1
[   40.815659][ T3263] syz-executor: attempt to access beyond end of device
[   40.815659][ T3263] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0
[   40.821233][ T3667] serio: Serial port ptm0
[   40.832477][ T3263] syz-executor: attempt to access beyond end of device
[   40.832477][ T3263] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0
[   40.840338][ T3668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[   40.853506][ T3668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   40.861103][ T3668] vhci_hcd vhci_hcd.0: Device attached
[   40.861106][ T3263] syz-executor: attempt to access beyond end of device
[   40.861106][ T3263] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0
[   40.880496][ T3263] syz-executor: attempt to access beyond end of device
[   40.880496][ T3263] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0
[   40.892763][ T3668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   40.897612][ T3263] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block
[   40.909372][ T3668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   40.925940][ T3263] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   40.925965][ T3263] EXT4-fs (loop4): I/O error while writing superblock
[   40.941177][ T3263] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure
[   40.946422][ T3668] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17)
[   40.954707][ T3263] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   40.956447][ T3668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   40.964749][ T3263] EXT4-fs (loop4): I/O error while writing superblock
[   40.972234][ T3668] vhci_hcd vhci_hcd.0: Device attached
[   40.978817][ T3263] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error
[   40.997282][ T3263] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   41.006029][ T3263] EXT4-fs (loop4): I/O error while writing superblock
[   41.007096][ T3668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   41.024720][ T3668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   41.033801][ T3668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   41.042559][   T28] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:1: unable to read itable block
[   41.057433][   T28] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   41.059561][ T3668] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   41.066762][   T28] EXT4-fs (loop4): I/O error while writing superblock
[   41.083645][ T3569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.084669][ T3668] vhci_hcd vhci_hcd.0: port 0 already used
[   41.098929][ T3569] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[   41.107376][ T3569] EXT4-fs (loop4): I/O error while writing superblock
[   41.325029][   T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.373226][   T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.414299][   T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.463399][   T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.563624][ T3671] vhci_hcd: connection closed
[   41.563751][ T3669] vhci_hcd: connection closed
[   41.568693][   T11] vhci_hcd: stop threads
[   41.578045][   T11] vhci_hcd: release socket
[   41.582533][   T11] vhci_hcd: disconnect device
[   41.588038][   T11] vhci_hcd: stop threads
[   41.592347][   T11] vhci_hcd: release socket
[   41.596781][   T11] vhci_hcd: disconnect device
[   41.621198][ T3677] chnl_net:caif_netlink_parms(): no params data found
[   41.637341][ T3692] loop1: detected capacity change from 0 to 2048
[   41.692068][ T3692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.714059][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.726434][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.737649][   T28] bond0 (unregistering): Released all slaves
[   41.820731][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.827875][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.869074][ T3677] bridge_slave_0: entered allmulticast mode
[   41.876161][ T3677] bridge_slave_0: entered promiscuous mode
[   41.892005][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.899204][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.919931][ T3677] bridge_slave_1: entered allmulticast mode
[   41.927007][ T3677] bridge_slave_1: entered promiscuous mode
[   41.950285][   T28] hsr_slave_0: left promiscuous mode
[   41.969506][   T28] hsr_slave_1: left promiscuous mode
[   41.976256][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.983930][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.992559][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.000072][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.022147][   T28] veth1_macvtap: left promiscuous mode
[   42.027669][   T28] veth0_macvtap: left promiscuous mode
[   42.033584][   T28] veth1_vlan: left promiscuous mode
[   42.038883][   T28] veth0_vlan: left promiscuous mode
[   42.094318][ T3725] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[   42.171665][   T28] team0 (unregistering): Port device team_slave_1 removed
[   42.198379][   T28] team0 (unregistering): Port device team_slave_0 removed
[   42.342015][ T3704] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   42.360070][ T3704] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4095 with max blocks 33 with error 28
[   42.379754][ T3704] EXT4-fs (loop1): This should not happen!! Data will be lost
[   42.379754][ T3704] 
[   42.393317][ T3704] EXT4-fs (loop1): Total free blocks count 0
[   42.400060][ T3704] EXT4-fs (loop1): Free/Dirty block details
[   42.407500][ T3704] EXT4-fs (loop1): free_blocks=2415919104
[   42.414009][ T3704] EXT4-fs (loop1): dirty_blocks=48
[   42.421010][ T3704] EXT4-fs (loop1): Block reservation details
[   42.430320][ T3704] EXT4-fs (loop1): i_reserved_data_blocks=3
[   42.501445][ T3734] loop3: detected capacity change from 0 to 512
[   42.614102][ T3677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.645779][ T3734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.664152][ T3734] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.728431][ T3677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.911962][ T3677] team0: Port device team_slave_0 added
[   42.929198][ T3677] team0: Port device team_slave_1 added
[   42.961773][ T3677] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.970286][ T3677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.006495][ T3677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.037461][ T3677] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.046583][ T3677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.078341][ T3677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.100049][ T3746] loop0: detected capacity change from 0 to 4096
[   43.136004][ T3746] EXT4-fs: Ignoring removed nobh option
[   43.145843][ T3746] EXT4-fs: Ignoring removed i_version option
[   43.172511][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.224245][ T3677] hsr_slave_0: entered promiscuous mode
[   43.232970][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.253823][ T3677] hsr_slave_1: entered promiscuous mode
[   43.281086][ T3756] loop3: detected capacity change from 0 to 512
[   43.292502][   T29] kauditd_printk_skb: 129 callbacks suppressed
[   43.292523][   T29] audit: type=1400 audit(1726895232.975:812): avc:  denied  { block_suspend } for  pid=3751 comm="syz.2.58" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   43.325024][   T29] audit: type=1326 audit(1726895232.975:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.355365][   T29] audit: type=1326 audit(1726895232.975:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.391139][   T29] audit: type=1326 audit(1726895232.975:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.425559][   T29] audit: type=1326 audit(1726895232.975:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.456237][   T29] audit: type=1326 audit(1726895232.975:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.486577][   T29] audit: type=1326 audit(1726895232.975:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.519262][   T29] audit: type=1326 audit(1726895232.975:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.550879][   T29] audit: type=1326 audit(1726895232.975:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.550907][   T29] audit: type=1326 audit(1726895232.975:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7fcfdef9 code=0x7ffc0000
[   43.561260][ T3752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.58'.
[   43.635912][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.686381][ T3756] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.59: bg 0: block 248: padding at end of block bitmap is not set
[   43.706167][ T3484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.735361][ T3756] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.59: Failed to acquire dquot type 1
[   43.781995][ T3775] loop2: detected capacity change from 0 to 512
[   43.789023][ T3756] EXT4-fs (loop3): 1 truncate cleaned up
[   43.807162][ T3756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.822863][ T3770] loop0: detected capacity change from 0 to 512
[   43.835813][ T3775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.840290][ T3756] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.871726][ T3775] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.884157][ T3770] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6
[   43.912503][ T3775] loop7: detected capacity change from 0 to 16384
[   43.913328][ T3770] loop0: detected capacity change from 0 to 512
[   43.942782][ T3770] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.964661][ T3770] EXT4-fs (loop0): 1 truncate cleaned up
[   43.986568][ T3770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.068901][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.102200][ T3790] loop7: detected capacity change from 16384 to 16383
[   44.222227][ T3677] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   44.277373][ T3677] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   44.293855][ T3677] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   44.302508][ T3677] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   44.401040][ T3775] I/O error, dev loop7, sector 14848 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[   44.428262][ T3775] I/O error, dev loop7, sector 15104 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[   44.445133][ T3825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.64'.
[   44.647956][ T3484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.696110][ T3677] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.714129][ T3775] I/O error, dev loop7, sector 14848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   44.723852][ T3775] Buffer I/O error on dev loop7, logical block 1856, async page read
[   44.724887][ T3677] 8021q: adding VLAN 0 to HW filter on device team0
[   44.760676][ T3773] I/O error, dev loop7, sector 10496 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   44.770789][ T3773] Buffer I/O error on dev loop7, logical block 1312, lost async page write
[   44.774561][ T3677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   44.783579][ T3773] I/O error, dev loop7, sector 11520 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   44.789992][ T3677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.803527][ T3773] I/O error, dev loop7, sector 12544 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   44.825886][ T3773] I/O error, dev loop7, sector 13568 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   44.838034][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.843102][ T3773] I/O error, dev loop7, sector 14592 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[   44.845145][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.847058][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.869431][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.954914][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.955128][ T3840] tmpfs: Unknown parameter 'mpÿ'
[   45.135260][ T3863] loop2: detected capacity change from 0 to 128
[   45.166974][ T3677] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.433737][ T3900] loop2: detected capacity change from 0 to 764
[   45.456353][ T3900] rock: directory entry would overflow storage
[   45.462619][ T3900] rock: sig=0x4f50, size=4, remaining=3
[   45.468266][ T3900] iso9660: Corrupted directory entry in block 4 of inode 1792
[   45.487982][ T3903] loop1: detected capacity change from 0 to 2048
[   45.503365][ T3900] Zero length message leads to an empty skb
[   45.512269][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.535366][ T3903] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.72: bg 0: block 274: padding at end of block bitmap is not set
[   45.550931][ T3677] veth0_vlan: entered promiscuous mode
[   45.561724][ T3677] veth1_vlan: entered promiscuous mode
[   45.575775][ T3677] veth0_macvtap: entered promiscuous mode
[   45.580491][ T3903] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[   45.583824][ T3677] veth1_macvtap: entered promiscuous mode
[   45.594207][ T3903] EXT4-fs (loop1): This should not happen!! Data will be lost
[   45.594207][ T3903] 
[   45.606018][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.620087][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.629984][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.640805][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.651046][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.661645][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.671572][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.682104][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.692965][ T3677] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.725224][ T3915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'.
[   45.734139][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'.
[   45.753203][ T3903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.816873][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.827537][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.837654][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.848349][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.858194][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.868702][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.878627][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.889157][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.904017][ T3677] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.916423][ T3919] netlink: 'syz.2.73': attribute type 10 has an invalid length.
[   45.924218][ T3919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.73'.
[   45.936058][ T3919] vlan0: entered promiscuous mode
[   45.941208][ T3919] vlan0: entered allmulticast mode
[   45.946350][ T3919] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   45.968800][ T3677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.977661][ T3677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.986756][ T3677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.995616][ T3677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.996726][ T3921] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   46.090673][ T3939] netlink: 140 bytes leftover after parsing attributes in process `syz.3.75'.
[   46.103090][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.110171][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.113543][ T3943] loop2: detected capacity change from 0 to 512
[   46.121140][ T3928] Invalid ELF section header overflow
[   46.141030][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.145778][ T3943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.221195][ T3939] infiniband syz1: set down
[   46.225863][ T3939] infiniband syz1: added caif0
[   46.230835][ T3339] caif0 speed is unknown, defaulting to 1000
[   46.250419][ T3939] RDS/IB: syz1: added
[   46.254529][ T3939] smc: adding ib device syz1 with port count 1
[   46.260858][ T3943] loop2: detected capacity change from 512 to 511
[   46.288869][ T3943] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #18: comm syz.2.76: corrupted in-inode xattr: bad magic number in in-inode xattr
[   46.299315][ T3939] smc:    ib device syz1 port 1 has pnetid 
[   46.309865][ T3339] caif0 speed is unknown, defaulting to 1000
[   46.332808][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.347296][ T3961] loop4: detected capacity change from 0 to 512
[   46.382083][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.396258][ T3961] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.411995][ T3961] loop7: detected capacity change from 0 to 16384
[   46.432394][ T3269] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   46.447715][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.495751][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.539371][ T3269] EXT4-fs error (device loop2): ext4_lookup:1813: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   46.555504][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.579426][ T3269] EXT4-fs error (device loop2): ext4_lookup:1813: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   46.596754][ T3939] caif0 speed is unknown, defaulting to 1000
[   46.619465][ T3968] loop7: detected capacity change from 16384 to 16383
[   46.766479][ T3597] buffer_io_error: 543 callbacks suppressed
[   46.766498][ T3597] Buffer I/O error on dev loop7, logical block 2047, async page read
[   46.792512][ T3972] loop1: detected capacity change from 0 to 1024
[   46.799714][ T3972] EXT4-fs: Ignoring removed orlov option
[   46.808000][ T3972] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.831342][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.891671][ T3961] Buffer I/O error on dev loop7, logical block 2047, async page read
[   46.902329][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.915224][   T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.919540][ T3961] Buffer I/O error on dev loop7, logical block 2047, async page read
[   46.959854][ T3961] Buffer I/O error on dev loop7, logical block 2047, async page read
[   46.975298][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.986484][   T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.039155][ T3983] loop3: detected capacity change from 0 to 128
[   47.056497][   T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.077907][ T3597] Buffer I/O error on dev loop7, logical block 2047, async page read
[   47.152733][   T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.330437][ T3677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.331501][   T36] team0: left allmulticast mode
[   47.344577][   T36] team_slave_0: left allmulticast mode
[   47.350235][   T36] team_slave_1: left allmulticast mode
[   47.355750][   T36] team0: left promiscuous mode
[   47.360562][   T36] team_slave_0: left promiscuous mode
[   47.366059][   T36] team_slave_1: left promiscuous mode
[   47.371681][   T36] bridge0: port 3(team0) entered disabled state
[   47.392443][   T36] bridge_slave_1: left allmulticast mode
[   47.398127][   T36] bridge_slave_1: left promiscuous mode
[   47.403964][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.414421][   T36] bridge_slave_0: left allmulticast mode
[   47.420207][   T36] bridge_slave_0: left promiscuous mode
[   47.425965][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.477119][ T4013] loop0: detected capacity change from 0 to 2048
[   47.512653][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.552910][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.563787][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.574655][   T36] bond0 (unregistering): Released all slaves
[   47.585111][ T3984] caif0 speed is unknown, defaulting to 1000
[   47.596454][ T4014] pim6reg1: entered promiscuous mode
[   47.601895][ T4014] pim6reg1: entered allmulticast mode
[   47.640879][ T4013] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.87: bg 0: block 234: padding at end of block bitmap is not set
[   47.670447][ T4013] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 14 with error 28
[   47.683043][ T4013] EXT4-fs (loop0): This should not happen!! Data will be lost
[   47.683043][ T4013] 
[   47.692774][ T4013] EXT4-fs (loop0): Total free blocks count 0
[   47.698812][ T4013] EXT4-fs (loop0): Free/Dirty block details
[   47.704893][ T4013] EXT4-fs (loop0): free_blocks=0
[   47.709930][ T4013] EXT4-fs (loop0): dirty_blocks=16
[   47.715150][ T4013] EXT4-fs (loop0): Block reservation details
[   47.721199][ T4013] EXT4-fs (loop0): i_reserved_data_blocks=1
[   47.790439][ T4031] loop3: detected capacity change from 0 to 512
[   47.801207][ T4031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.817604][ T3484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.836490][ T4031] EXT4-fs (loop3): 1 orphan inode deleted
[   47.842334][ T4031] EXT4-fs (loop3): 1 truncate cleaned up
[   47.849577][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.864432][ T4031] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   47.883630][ T4031] EXT4-fs (loop3): Remounting filesystem read-only
[   47.890843][ T4031] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   47.899715][ T4031] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   47.908738][   T36] hsr_slave_0: left promiscuous mode
[   47.908980][ T4031] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   47.923095][   T36] hsr_slave_1: left promiscuous mode
[   47.930816][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.938350][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.973723][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.987506][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.995126][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.006807][ T4045] netlink: 140 bytes leftover after parsing attributes in process `syz.0.92'.
[   48.041418][ T4045] rdma_rxe: rxe_newlink: failed to add caif0
[   48.053043][   T36] veth1_macvtap: left promiscuous mode
[   48.058679][   T36] veth0_macvtap: left promiscuous mode
[   48.064352][   T36] veth1_vlan: left promiscuous mode
[   48.186271][ T4052] loop3: detected capacity change from 0 to 1024
[   48.200704][ T4052] EXT4-fs: Ignoring removed orlov option
[   48.220685][ T4052] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.232463][   T36] team0 (unregistering): Port device team_slave_1 removed
[   48.253183][ T4052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002]
[   48.262328][   T36] team0 (unregistering): Port device team_slave_0 removed
[   48.271309][ T4052] System zones: 0-1, 3-12
[   48.295346][ T4052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.311136][   T29] kauditd_printk_skb: 587 callbacks suppressed
[   48.311228][   T29] audit: type=1326 audit(1726895238.015:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f939b6c4ea7 code=0x7ffc0000
[   48.346495][ T4052] syz.3.93[4052] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.390936][ T4052] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.3.93: corrupted in-inode xattr: bad magic number in in-inode xattr
[   48.425899][   T29] audit: type=1326 audit(1726895238.015:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939b669879 code=0x7ffc0000
[   48.449226][   T29] audit: type=1326 audit(1726895238.015:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f939b6cdef9 code=0x7ffc0000
[   48.472484][   T29] audit: type=1326 audit(1726895238.015:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f939b6c4ea7 code=0x7ffc0000
[   48.495687][   T29] audit: type=1326 audit(1726895238.015:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939b669879 code=0x7ffc0000
[   48.518879][   T29] audit: type=1326 audit(1726895238.015:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f939b6cdef9 code=0x7ffc0000
[   48.542165][   T29] audit: type=1326 audit(1726895238.015:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f939b6c4ea7 code=0x7ffc0000
[   48.565320][   T29] audit: type=1326 audit(1726895238.015:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939b669879 code=0x7ffc0000
[   48.588528][   T29] audit: type=1326 audit(1726895238.015:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f939b6cdef9 code=0x7ffc0000
[   48.611805][   T29] audit: type=1326 audit(1726895238.015:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f939b6c4ea7 code=0x7ffc0000
[   48.637644][ T4012] coredump: 26(syz.0.87): written to core: VMAs: 29, size 91127808; core: 62104238 bytes, pos 91136000
[   48.640668][ T4052] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.93: attempt to clear invalid blocks 1886221359 len 1
[   48.688840][ T3984] chnl_net:caif_netlink_parms(): no params data found
[   48.807478][ T4075] loop1: detected capacity change from 0 to 128
[   49.054458][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.124385][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.132413][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.200730][ T4090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.97'.
[   49.331890][ T3984] bridge_slave_0: entered allmulticast mode
[   49.351483][ T3984] bridge_slave_0: entered promiscuous mode
[   49.478613][ T4089] caif0 speed is unknown, defaulting to 1000
[   49.592710][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.599877][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.618090][ T3984] bridge_slave_1: entered allmulticast mode
[   49.662614][ T3984] bridge_slave_1: entered promiscuous mode
[   49.745839][ T4108] tap0: tun_chr_ioctl cmd 1074025692
[   49.754541][ T4103] usb usb5: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   49.764391][ T4103] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[   49.774947][ T3984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.776693][ T3984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.828979][ T3984] team0: Port device team_slave_0 added
[   49.837299][ T3984] team0: Port device team_slave_1 added
[   49.876271][ T3984] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.883734][ T3984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.909968][ T3984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.926122][ T3984] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.926138][ T3984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.926172][ T3984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.992801][ T4136] loop0: detected capacity change from 0 to 1024
[   49.993503][ T3984] hsr_slave_0: entered promiscuous mode
[   50.008022][ T3984] hsr_slave_1: entered promiscuous mode
[   50.014703][ T4136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.027581][ T3984] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.042259][ T3984] Cannot create hsr debugfs directory
[   50.065223][ T3484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.209566][ T4155] netlink: 'syz.0.106': attribute type 10 has an invalid length.
[   50.223017][ T4155] team0: Failed to send options change via netlink (err -105)
[   50.230754][ T4155] team0: Port device netdevsim1 added
[   50.402594][ T3984] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.411943][ T3984] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.421691][ T3984] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.432707][ T3984] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.486905][ T3984] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.520795][  T310] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[   50.535477][ T3984] 8021q: adding VLAN 0 to HW filter on device team0
[   50.538539][ T4191] loop3: detected capacity change from 0 to 764
[   50.554259][ T4191] Symlink component flag not implemented
[   50.568966][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.576125][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.585130][ T4191] Symlink component flag not implemented (129)
[   50.592280][ T4191] rock: directory entry would overflow storage
[   50.598710][ T4191] rock: sig=0x4f50, size=4, remaining=3
[   50.604368][ T4191] iso9660: Corrupted directory entry in block 6 of inode 1792
[   50.616966][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.624116][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.772028][ T3984] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.905869][ T3984] veth0_vlan: entered promiscuous mode
[   50.921141][ T3984] veth1_vlan: entered promiscuous mode
[   50.949908][ T3984] veth0_macvtap: entered promiscuous mode
[   50.957701][ T3984] veth1_macvtap: entered promiscuous mode
[   50.969723][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.980288][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.990247][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.000824][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.010747][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.021327][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.031298][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.041804][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.061447][ T3984] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.071865][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.082544][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.092541][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.103010][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.112920][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.123444][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.132391][ T4245] loop4: detected capacity change from 0 to 128
[   51.133320][ T3984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.150045][ T3984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.165880][ T3984] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.395584][ T3984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.404483][ T3984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.413257][ T3984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.421998][ T3984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.678975][ T4268] loop3: detected capacity change from 0 to 512
[   51.710275][ T4268] EXT4-fs: Ignoring removed nobh option
[   51.713373][ T4272] tap0: tun_chr_ioctl cmd 1074025692
[   51.747252][ T4268] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   51.769425][ T4268] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.116: attempt to clear invalid blocks 2 len 1
[   51.812957][ T4268] EXT4-fs (loop3): Remounting filesystem read-only
[   51.844934][ T4268] EXT4-fs (loop3): 1 truncate cleaned up
[   51.854269][ T4268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.867983][ T4268] SELinux: (dev loop3, type ext4) getxattr errno 5
[   51.902034][ T4268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.595447][ T4309] caif0 speed is unknown, defaulting to 1000
[   52.662021][ T4313] loop2: detected capacity change from 0 to 512
[   52.745939][ T4311] tap0: tun_chr_ioctl cmd 1074025681
[   52.746044][ T4313] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   52.866258][ T4321] loop1: detected capacity change from 0 to 256
[   52.995881][ T4265] coredump: 4(syz.2.82): written to core: VMAs: 28, size 88956928; core: 60011144 bytes, pos 88973312
[   53.179005][ T4328] pim6reg1: entered promiscuous mode
[   53.184755][ T4328] pim6reg1: entered allmulticast mode
[   53.202050][ T4332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'.
[   53.376999][ T4337] xt_CT: You must specify a L4 protocol and not use inversions on it
[   53.531499][   T29] kauditd_printk_skb: 595 callbacks suppressed
[   53.531517][   T29] audit: type=1326 audit(1726895499.239:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a77c8def9 code=0x7ffc0000
[   53.574877][ T4347] loop3: detected capacity change from 0 to 128
[   53.623054][   T29] audit: type=1326 audit(1726895499.269:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a77c8def9 code=0x7ffc0000
[   53.646460][   T29] audit: type=1326 audit(1726895499.269:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7a77c8fd8c code=0x7ffc0000
[   53.670185][   T29] audit: type=1326 audit(1726895499.269:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7a77c8fcc4 code=0x7ffc0000
[   53.710318][ T4347] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.740315][ T4347] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   53.893187][   T29] audit: type=1400 audit(1726895499.599:2016): avc:  denied  { load_policy } for  pid=4378 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   53.918868][ T4379] SELinux: failed to load policy
[   53.931599][ T4366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.972236][ T4374] SELinux:  Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped).
[   53.985742][   T29] audit: type=1400 audit(1726895499.679:2017): avc:  denied  { relabelfrom } for  pid=4346 comm="syz.3.130" name="NETLINK" dev="sockfs" ino=7322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   53.987272][ T4366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.013520][   T29] audit: type=1400 audit(1726895499.689:2018): avc:  denied  { relabelto } for  pid=4346 comm="syz.3.130" name="NETLINK" dev="sockfs" ino=7322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0"
[   54.104021][ T4366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.143389][ T4366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.218602][ T4366] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.228734][   T29] audit: type=1400 audit(1726895499.929:2019): avc:  denied  { write } for  pid=4412 comm="syz.4.134" name="ptp0" dev="devtmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   54.232079][ T4366] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.268613][ T4366] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.281304][ T4366] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.292507][ T4413] 9pnet_virtio: no channels available for device 127.0.0.1
[   54.304295][ T4413] loop4: detected capacity change from 0 to 1024
[   54.321929][ T4413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.334139][ T4413] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.356235][ T3677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.379144][   T29] audit: type=1400 audit(1726895500.079:2020): avc:  denied  { create } for  pid=4416 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   54.411145][ T4417] loop4: detected capacity change from 0 to 512
[   54.420513][ T3268] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.429963][ T4417] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[   54.440255][ T4417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[   54.449329][ T4417] System zones: 1-12
[   54.456833][ T4417] EXT4-fs (loop4): orphan cleanup on readonly fs
[   54.472219][ T4417] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.135: Inode bitmap for bg 0 marked uninitialized
[   54.494662][   T29] audit: type=1400 audit(1726895500.189:2021): avc:  denied  { connect } for  pid=4420 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   54.516167][ T4417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   54.538172][ T4417] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.135: lblock 0 mapped to illegal pblock 5 (length 1)
[   54.554045][ T4417] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.135: error -117 reading directory block
[   54.567008][ T4417] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.135: lblock 0 mapped to illegal pblock 5 (length 1)
[   54.568318][ T4423] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[   54.582599][ T4417] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.135: error -117 reading directory block
[   54.615386][ T4425] tap0: tun_chr_ioctl cmd 1074025692
[   54.633685][ T3677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.667673][ T4429] No such timeout policy "syz1"
[   54.680930][ T4431] loop4: detected capacity change from 0 to 512
[   54.690971][ T4431] EXT4-fs: Ignoring removed bh option
[   54.698410][ T4431] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   54.730304][ T4431] EXT4-fs (loop4): 1 truncate cleaned up
[   54.736822][ T4431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.809372][ T4431] loop4: detected capacity change from 512 to 64
[   54.818340][ T4431] bio_check_eod: 12 callbacks suppressed
[   54.818354][ T4431] syz.4.139: attempt to access beyond end of device
[   54.818354][ T4431] loop4: rw=2049, sector=72, nr_sectors = 2 limit=64
[   54.837399][ T4431] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36)
[   54.848788][ T4431] Buffer I/O error on device loop4, logical block 36
[   54.858545][ T4431] syz.4.139: attempt to access beyond end of device
[   54.858545][ T4431] loop4: rw=2049, sector=510, nr_sectors = 2 limit=64
[   54.871909][ T4431] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255)
[   54.883196][ T4431] Buffer I/O error on device loop4, logical block 255
[   54.891627][ T4431] syz.4.139: attempt to access beyond end of device
[   54.891627][ T4431] loop4: rw=2049, sector=506, nr_sectors = 2 limit=64
[   54.904961][ T4431] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253)
[   54.916350][ T4431] Buffer I/O error on device loop4, logical block 253
[   54.958108][ T3677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.013777][ T4440] loop4: detected capacity change from 0 to 2048
[   55.052682][ T4440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.354839][ T3677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.431097][ T4446] loop4: detected capacity change from 0 to 4096
[   55.453868][ T4438] coredump: 17(syz.2.141): written to core: VMAs: 29, size 91127808; core: 62108334 bytes, pos 91136000
[   55.520405][ T4446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.575550][ T4451] loop1: detected capacity change from 0 to 512
[   55.607366][ T4451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   55.666785][ T4454] netlink: 'syz.4.143': attribute type 10 has an invalid length.
[   55.677374][ T4454] batman_adv: batadv0: Adding interface: team0
[   55.680061][ T4451] EXT4-fs (loop1): 1 orphan inode deleted
[   55.687129][ T4454] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.693062][ T4451] EXT4-fs (loop1): 1 truncate cleaned up
[   55.719207][ T4454] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   55.745916][ T4451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.787874][ T4452] pimreg: entered allmulticast mode
[   55.796449][ T3677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.847731][ T4452] pimreg: left allmulticast mode
[   55.866873][ T4457] loop4: detected capacity change from 0 to 512
[   55.919048][ T4461] loop2: detected capacity change from 0 to 512
[   55.926490][ T4461] EXT4-fs: Ignoring removed orlov option
[   55.945626][ T4457] loop4: detected capacity change from 0 to 2048
[   55.953969][ T4461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   55.974406][ T4461] EXT4-fs (loop2): 1 orphan inode deleted
[   55.980246][ T4461] EXT4-fs (loop2): 1 truncate cleaned up
[   55.997019][ T4457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.010890][ T4461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.050360][ T4461] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   56.071169][ T4464] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   56.109593][ T4464] EXT4-fs (loop1): Remounting filesystem read-only
[   56.113664][ T4461] netlink: 64 bytes leftover after parsing attributes in process `syz.2.148'.
[   56.161658][ T3677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.195352][ T3984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.334278][ T4478] 9pnet_fd: Insufficient options for proto=fd
[   56.381088][ T4482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.398357][ T4483] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   56.456471][ T4478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   56.463116][ T4478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   56.470709][ T4478] vhci_hcd vhci_hcd.0: Device attached
[   56.503945][ T4482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.569117][ T4483] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   56.597346][ T4482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.657632][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.666895][ T3339] vhci_hcd: vhci_device speed not set
[   56.683518][ T4485] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15)
[   56.690221][ T4485] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   56.697750][ T4485] vhci_hcd vhci_hcd.0: Device attached
[   56.723843][ T4478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   56.732858][ T4478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   56.740398][ T3339] usb 5-1: new full-speed USB device number 2 using vhci_hcd
[   56.741837][ T4478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   56.765327][ T4482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.775959][ T4478] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(22)
[   56.782605][ T4478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   56.790217][ T4478] vhci_hcd vhci_hcd.0: Device attached
[   56.802815][ T4488] vhci_hcd: connection closed
[   56.803137][ T4486] vhci_hcd: connection closed
[   56.807950][ T4480] vhci_hcd: connection reset by peer
[   56.822054][   T36] vhci_hcd: stop threads
[   56.826355][   T36] vhci_hcd: release socket
[   56.830906][   T36] vhci_hcd: disconnect device
[   56.836029][   T36] vhci_hcd: stop threads
[   56.840344][   T36] vhci_hcd: release socket
[   56.844787][   T36] vhci_hcd: disconnect device
[   56.849950][   T36] vhci_hcd: stop threads
[   56.854301][   T36] vhci_hcd: release socket
[   56.858807][   T36] vhci_hcd: disconnect device
[   56.891769][ T4482] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.915273][ T4482] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.936496][ T4482] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.952312][ T4482] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.964505][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'.
[   56.973471][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.980971][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.002603][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.010127][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.014045][ T4498] loop3: detected capacity change from 0 to 512
[   57.082256][ T4500] loop1: detected capacity change from 0 to 512
[   57.097232][ T4498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   57.113194][ T4498] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.126826][ T4498] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.156: Failed to acquire dquot type 0
[   57.127067][ T4500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.178045][ T4500] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.214681][ T4498] block device autoloading is deprecated and will be removed.
[   57.230508][ T4498] syz.3.156: attempt to access beyond end of device
[   57.230508][ T4498] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   57.506686][ T4517] tap0: tun_chr_ioctl cmd 1074025692
[   57.661667][ T4521] caif0 speed is unknown, defaulting to 1000
[   57.803620][ T4521] netlink: 48 bytes leftover after parsing attributes in process `syz.2.159'.
[   58.414080][ T4527] syz.2.163[4527] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.414165][ T4527] syz.2.163[4527] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.456656][ T4531] loop3: detected capacity change from 0 to 512
[   58.490410][ T4527] loop2: detected capacity change from 0 to 128
[   58.498257][ T4531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.523347][ T4527] syz.2.163: attempt to access beyond end of device
[   58.523347][ T4527] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128
[   58.536864][ T4531] EXT4-fs (loop3): 1 truncate cleaned up
[   58.547845][   T29] kauditd_printk_skb: 432 callbacks suppressed
[   58.547864][   T29] audit: type=1400 audit(1726895504.249:2452): avc:  denied  { write } for  pid=4529 comm="syz.3.165" path=2F33352FE91F7189591E9233614B2F627573 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   58.567571][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.588743][   T29] audit: type=1400 audit(1726895504.259:2453): avc:  denied  { read } for  pid=4529 comm="syz.3.165" path="socket:[8247]" dev="sockfs" ino=8247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.612077][   T29] audit: type=1400 audit(1726895504.259:2454): avc:  denied  { read write } for  pid=4529 comm="syz.3.165" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.635736][   T29] audit: type=1400 audit(1726895504.259:2455): avc:  denied  { open } for  pid=4529 comm="syz.3.165" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.644600][ T4508] syz.0.158 (4508) used greatest stack depth: 6288 bytes left
[   58.659111][   T29] audit: type=1400 audit(1726895504.259:2456): avc:  denied  { ioctl } for  pid=4529 comm="syz.3.165" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.692156][   T29] audit: type=1400 audit(1726895504.339:2457): avc:  denied  { ioctl } for  pid=4536 comm="syz.4.166" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   58.718410][   T29] audit: type=1400 audit(1726895504.339:2458): avc:  denied  { create } for  pid=4536 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   58.738849][   T29] audit: type=1400 audit(1726895504.399:2459): avc:  denied  { module_request } for  pid=4536 comm="syz.4.166" kmod="crypto-ccm(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   58.773498][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.792612][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.802422][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.813465][ T4531] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   58.912506][   T29] audit: type=1400 audit(1726895504.519:2460): avc:  denied  { mac_admin } for  pid=4529 comm="syz.3.165" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   59.028107][   T29] audit: type=1400 audit(1726895504.619:2461): avc:  denied  { create } for  pid=4536 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   59.088741][ T4542] caif0 speed is unknown, defaulting to 1000
[   59.526724][ T4566] loop4: detected capacity change from 0 to 512
[   59.536488][ T4566] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   59.564666][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'.
[   59.588013][ T4572] loop2: detected capacity change from 0 to 512
[   59.596278][ T4566] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.170: iget: bad i_size value: -6917529027641081756
[   59.597606][ T4568] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   59.611462][ T4566] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.170: couldn't read orphan inode 17 (err -117)
[   59.656498][ T4574] loop1: detected capacity change from 0 to 2048
[   59.665898][ T4566] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.170: bg 0: block 65: padding at end of block bitmap is not set
[   59.738989][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'.
[   59.740358][ T4566] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.170: Failed to acquire dquot type 0
[   59.760011][ T4572] loop2: detected capacity change from 512 to 511
[   59.765873][ T4576] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 13: comm syz.4.170: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0
[   59.793167][ T4574] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.806887][ T4583] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #18: comm syz.2.172: corrupted in-inode xattr: bad magic number in in-inode xattr
[   59.861051][ T4566] x_tables: duplicate underflow at hook 2
[   59.885627][ T4588] tap0: tun_chr_ioctl cmd 1074025692
[   59.921609][ T4574] loop1: detected capacity change from 0 to 128
[   59.939449][ T4574] vfat: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ'
[   59.989911][ T3984] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   60.022792][ T3984] EXT4-fs error (device loop2): ext4_lookup:1813: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   60.042708][ T4594] netlink: 'syz.4.177': attribute type 4 has an invalid length.
[   60.054104][ T3984] EXT4-fs error (device loop2): ext4_lookup:1813: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   60.061717][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[   60.084083][ T4594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.177'.
[   60.102530][ T4594] loop4: detected capacity change from 0 to 512
[   60.115359][ T4598] loop1: detected capacity change from 0 to 512
[   60.130988][ T4594] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.177: casefold flag without casefold feature
[   60.144836][ T4594] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.177: couldn't read orphan inode 15 (err -117)
[   60.145794][ T4598] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   60.189559][ T4603] loop4: detected capacity change from 0 to 512
[   60.198623][ T4603] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.180: casefold flag without casefold feature
[   60.211923][ T4603] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.180: couldn't read orphan inode 15 (err -117)
[   60.232561][ T4603] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.180: Directory hole found for htree leaf block 0
[   60.265932][   T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.380939][   T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.393544][ T4603] ip6t_srh: unknown srh match flags  7402
[   60.468490][   T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.556626][   T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.572575][ T4615] caif0 speed is unknown, defaulting to 1000
[   60.664100][ T4615] chnl_net:caif_netlink_parms(): no params data found
[   60.752262][   T58] bridge_slave_1: left allmulticast mode
[   60.757942][   T58] bridge_slave_1: left promiscuous mode
[   60.763726][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.801888][   T58] bridge_slave_0: left allmulticast mode
[   60.807603][   T58] bridge_slave_0: left promiscuous mode
[   60.813444][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.982999][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.995123][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.005830][   T58] bond0 (unregistering): Released all slaves
[   61.050533][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.057721][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.069387][ T4615] bridge_slave_0: entered allmulticast mode
[   61.076085][ T4615] bridge_slave_0: entered promiscuous mode
[   61.085619][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.092760][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.101416][ T4615] bridge_slave_1: entered allmulticast mode
[   61.108093][ T4615] bridge_slave_1: entered promiscuous mode
[   61.162433][ T4647] caif0 speed is unknown, defaulting to 1000
[   61.165028][ T4615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.185998][   T58] hsr_slave_0: left promiscuous mode
[   61.192979][   T58] hsr_slave_1: left promiscuous mode
[   61.200046][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.207495][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.214982][ T4648] loop4: detected capacity change from 0 to 512
[   61.222117][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.229689][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.232883][ T4648] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   61.254744][   T58] veth1_macvtap: left promiscuous mode
[   61.260525][   T58] veth0_macvtap: left promiscuous mode
[   61.266329][   T58] veth1_vlan: left promiscuous mode
[   61.271828][   T58] veth0_vlan: left promiscuous mode
[   61.360384][   T58] team0 (unregistering): Port device team_slave_1 removed
[   61.371674][   T58] team0 (unregistering): Port device team_slave_0 removed
[   61.410024][ T4615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.438133][ T4615] team0: Port device team_slave_0 added
[   61.449549][ T4615] team0: Port device team_slave_1 added
[   61.474996][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.482180][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.508249][ T4615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.522523][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.529575][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.555604][ T4615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.586570][ T4615] hsr_slave_0: entered promiscuous mode
[   61.593468][ T4615] hsr_slave_1: entered promiscuous mode
[   61.600546][ T4615] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.608143][ T4615] Cannot create hsr debugfs directory
[   61.683155][ T4670] loop4: detected capacity change from 0 to 512
[   61.830273][ T3339] usb 5-1: enqueue for inactive port 0
[   61.836170][ T3339] usb 5-1: enqueue for inactive port 0
[   61.852845][ T4670] loop4: detected capacity change from 512 to 511
[   61.861893][ T4685] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #18: comm syz.4.189: corrupted in-inode xattr: bad magic number in in-inode xattr
[   62.184669][ T4615] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.208501][ T3677] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   62.248172][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.273601][ T4615] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.287223][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.307302][ T4615] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.320178][ T3677] EXT4-fs error (device loop4): ext4_lookup:1813: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   62.324939][ T3339] vhci_hcd: vhci_device speed not set
[   62.341829][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.354388][ T4615] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.364315][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.401226][ T3677] EXT4-fs error (device loop4): ext4_lookup:1813: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220
[   62.403682][ T4615] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.440818][ T4615] 8021q: adding VLAN 0 to HW filter on device team0
[   62.451843][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.459460][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.479043][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.486818][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.521238][ T4615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.660743][ T3845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.671654][ T4714] 9pnet_fd: p9_fd_create_tcp (4714): problem connecting socket to 127.0.0.1
[   62.695559][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[   62.703703][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   62.714815][ T4714] vhci_hcd vhci_hcd.0: Device attached
[   62.726259][ T4714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   62.748218][ T4714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   62.764674][ T4615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.781928][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17)
[   62.790990][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   62.802555][ T4714] vhci_hcd vhci_hcd.0: Device attached
[   62.813713][ T3845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.844403][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19)
[   62.853604][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   62.862753][ T4714] vhci_hcd vhci_hcd.0: Device attached
[   62.877030][ T4714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   62.893065][ T3845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.918518][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(23)
[   62.925823][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   62.936147][ T4714] vhci_hcd vhci_hcd.0: Device attached
[   62.984641][ T3845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.048754][ T4756] tap0: tun_chr_ioctl cmd 1074025692
[   63.111447][ T4615] veth0_vlan: entered promiscuous mode
[   63.133381][ T3845] bridge_slave_1: left allmulticast mode
[   63.139355][ T3845] bridge_slave_1: left promiscuous mode
[   63.146822][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.156130][ T3845] bridge_slave_0: left allmulticast mode
[   63.162085][ T3845] bridge_slave_0: left promiscuous mode
[   63.167991][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.312049][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.331708][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.350430][ T3845] bond0 (unregistering): Released all slaves
[   63.363385][ T4727] caif0 speed is unknown, defaulting to 1000
[   63.387450][ T4615] veth1_vlan: entered promiscuous mode
[   63.394550][ T4735] vhci_hcd: connection closed
[   63.394720][ T4728] vhci_hcd: connection closed
[   63.399995][ T4720] vhci_hcd: connection closed
[   63.405847][ T4742] vhci_hcd: connection closed
[   63.413868][   T50] vhci_hcd: stop threads
[   63.431065][   T50] vhci_hcd: release socket
[   63.436210][   T50] vhci_hcd: disconnect device
[   63.549711][   T29] kauditd_printk_skb: 323 callbacks suppressed
[   63.549731][   T29] audit: type=1400 audit(1726895509.209:2783): avc:  denied  { write } for  pid=4765 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   63.650812][   T50] vhci_hcd: stop threads
[   63.662952][   T50] vhci_hcd: release socket
[   63.667602][   T50] vhci_hcd: disconnect device
[   63.761815][ T3845] hsr_slave_0: left promiscuous mode
[   63.786358][ T3845] hsr_slave_1: left promiscuous mode
[   63.804471][ T3845] batman_adv: batadv0: Removing interface: team0
[   63.827547][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.835152][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.844968][   T50] vhci_hcd: stop threads
[   63.849474][   T50] vhci_hcd: release socket
[   63.854098][   T50] vhci_hcd: disconnect device
[   63.862045][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.869712][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.877265][   T50] vhci_hcd: stop threads
[   63.881594][   T50] vhci_hcd: release socket
[   63.886025][   T50] vhci_hcd: disconnect device
[   63.894130][ T3845] veth1_macvtap: left promiscuous mode
[   63.899770][ T3845] veth0_macvtap: left promiscuous mode
[   63.905333][ T3845] veth1_vlan: left promiscuous mode
[   63.910620][ T3845] veth0_vlan: left promiscuous mode
[   64.016909][ T3845] team0 (unregistering): Port device team_slave_1 removed
[   64.032034][ T3845] team0 (unregistering): Port device team_slave_0 removed
[   64.088730][ T4615] veth0_macvtap: entered promiscuous mode
[   64.096276][ T4615] veth1_macvtap: entered promiscuous mode
[   64.106525][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.117184][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.127130][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.137685][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.151364][ T4615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.168894][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.179450][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.189382][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.200076][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.210986][ T4615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.222819][ T4615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.231581][ T4615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.240403][ T4615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.249124][ T4615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.290906][   T29] audit: type=1400 audit(1726895509.999:2784): avc:  denied  { mounton } for  pid=4615 comm="syz-executor" path="/root/syzkaller.FRsAU7/syz-tmp" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   64.320757][ T4727] chnl_net:caif_netlink_parms(): no params data found
[   64.339610][   T29] audit: type=1400 audit(1726895509.999:2785): avc:  denied  { mount } for  pid=4615 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.361811][   T29] audit: type=1400 audit(1726895510.019:2786): avc:  denied  { mounton } for  pid=4615 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   64.437582][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.444847][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.455442][ T4727] bridge_slave_0: entered allmulticast mode
[   64.462252][ T4727] bridge_slave_0: entered promiscuous mode
[   64.469193][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.476320][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.483693][ T4727] bridge_slave_1: entered allmulticast mode
[   64.490507][ T4727] bridge_slave_1: entered promiscuous mode
[   64.515852][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.541168][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.557994][   T29] audit: type=1400 audit(1726895510.259:2787): avc:  denied  { create } for  pid=4796 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   64.588042][ T4727] team0: Port device team_slave_0 added
[   64.594624][ T4727] team0: Port device team_slave_1 added
[   64.615441][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.622487][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.648508][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.662453][ T4800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.679697][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.686704][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.712886][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.721683][   T29] audit: type=1400 audit(1726895510.419:2788): avc:  denied  { getopt } for  pid=4797 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.753905][ T4727] hsr_slave_0: entered promiscuous mode
[   64.760083][ T4727] hsr_slave_1: entered promiscuous mode
[   64.884215][   T29] audit: type=1400 audit(1726895510.589:2789): avc:  denied  { getopt } for  pid=4836 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   65.013204][ T4849] loop3: detected capacity change from 0 to 2048
[   65.170355][   T29] audit: type=1400 audit(1726895510.879:2790): avc:  denied  { map } for  pid=4826 comm="syz.3.202" path="/40/file0/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   65.206236][ T4849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.202: bg 0: block 234: padding at end of block bitmap is not set
[   65.221696][ T4849] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 152 with error 117
[   65.234309][ T4849] EXT4-fs (loop3): This should not happen!! Data will be lost
[   65.234309][ T4849] 
[   65.263609][ T4727] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.289974][ T4727] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   65.308934][ T4727] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.323174][ T4727] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.392558][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.405796][ T4727] 8021q: adding VLAN 0 to HW filter on device team0
[   65.417987][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.425129][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.451364][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.458681][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.467707][   T29] audit: type=1400 audit(1726895511.159:2791): avc:  denied  { read } for  pid=4885 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   65.509111][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.525110][ T4886] loop3: detected capacity change from 0 to 512
[   65.542673][ T4886] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[   65.610958][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.748756][   T29] audit: type=1400 audit(1726895511.449:2792): avc:  denied  { connect } for  pid=4916 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   65.754406][ T4917] loop1: detected capacity change from 0 to 512
[   65.799187][ T4917] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.825275][ T4924] tap0: tun_chr_ioctl cmd 1074025692
[   65.844122][ T4917] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.206: corrupted inode contents
[   65.869020][ T4917] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.206: mark_inode_dirty error
[   65.891283][ T4917] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.206: corrupted inode contents
[   65.916308][ T4800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.945568][ T4917] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #19: comm syz.1.206: mark_inode_dirty error
[   65.967817][ T4727] veth0_vlan: entered promiscuous mode
[   65.983884][ T4727] veth1_vlan: entered promiscuous mode
[   66.007240][ T4917] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #19: comm syz.1.206: mark inode dirty (error -117)
[   66.027020][ T4727] veth0_macvtap: entered promiscuous mode
[   66.041375][ T4727] veth1_macvtap: entered promiscuous mode
[   66.072479][ T4917] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[   66.084314][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.094860][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.104837][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.115376][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.125271][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.135805][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.148464][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.171259][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.181898][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.191918][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.202428][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.212315][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.222820][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.236785][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.252353][ T4727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.261232][ T4727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.270015][ T4727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.278864][ T4727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.294869][ T4839] coredump: 131(syz.3.202): written to core: VMAs: 29, size 91127808; core: 62104238 bytes, pos 91136000
[   66.394309][ T4800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.411038][ T4963] netlink: 'syz.4.197': attribute type 10 has an invalid length.
[   66.418811][ T4963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'.
[   66.428676][ T4963] vlan0: entered promiscuous mode
[   66.433930][ T4963] vlan0: entered allmulticast mode
[   66.439092][ T4963] veth0_vlan: entered allmulticast mode
[   66.445685][ T4963] bridge0: port 3(vlan0) entered blocking state
[   66.452077][ T4963] bridge0: port 3(vlan0) entered disabled state
[   66.461798][ T4963] bridge0: port 3(vlan0) entered blocking state
[   66.468122][ T4963] bridge0: port 3(vlan0) entered forwarding state
[   66.487827][ T4964] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   66.557977][ T4966] loop4: detected capacity change from 0 to 256
[   66.568141][ T4966] FAT-fs (loop4): bogus sectors per cluster 255
[   66.574527][ T4966] FAT-fs (loop4): Can't find a valid FAT filesystem
[   66.595721][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'.
[   66.669694][ T4800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.695714][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'.
[   66.718958][ T4975] loop1: detected capacity change from 0 to 512
[   66.719214][ T4800] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.741448][ T4975] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   66.743558][ T4800] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.764939][ T4800] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.782214][ T4800] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.807536][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[   66.926343][ T4997] syz.1.214[4997] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   66.926480][ T4997] syz.1.214[4997] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   66.964185][ T5007] loop4: detected capacity change from 0 to 512
[   66.972683][ T4997] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.214'.
[   66.989217][ T5007] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   66.992503][ T4997] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.214'.
[   67.024134][ T5019] loop2: detected capacity change from 0 to 256
[   67.030712][ T5007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   67.039912][ T5007] EXT4-fs (loop4): orphan cleanup on readonly fs
[   67.046990][ T5007] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.216: bg 0: block 361: padding at end of block bitmap is not set
[   67.066437][ T5007] EXT4-fs (loop4): Remounting filesystem read-only
[   67.073462][ T5007] EXT4-fs (loop4): 1 truncate cleaned up
[   67.076950][ T5021] loop1: detected capacity change from 0 to 512
[   67.079707][ T5007] SELinux: (dev loop4, type ext4) getxattr errno 5
[   67.096256][ T5021] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   67.122334][ T5007] tun0: tun_chr_ioctl cmd 2147767511
[   67.135619][ T5023] loop2: detected capacity change from 0 to 512
[   67.151519][ T5021] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.170783][ T5023] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.317016][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[   67.449095][ T5039] 9pnet_fd: Insufficient options for proto=fd
[   67.708873][ T5045] hub 9-0:1.0: USB hub found
[   67.714103][ T5045] hub 9-0:1.0: 8 ports detected
[   68.000497][ T4615] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /4/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   68.564181][   T29] kauditd_printk_skb: 195 callbacks suppressed
[   68.564196][   T29] audit: type=1326 audit(1726895514.269:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac598def9 code=0x7ffc0000
[   68.595932][   T29] audit: type=1326 audit(1726895514.299:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac598def9 code=0x7ffc0000
[   68.630438][   T29] audit: type=1400 audit(1726895514.339:2990): avc:  denied  { write } for  pid=2946 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.652011][   T29] audit: type=1400 audit(1726895514.339:2991): avc:  denied  { remove_name } for  pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.674624][   T29] audit: type=1400 audit(1726895514.339:2992): avc:  denied  { rename } for  pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   68.697174][   T29] audit: type=1400 audit(1726895514.339:2993): avc:  denied  { add_name } for  pid=2946 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.719768][   T29] audit: type=1400 audit(1726895514.339:2994): avc:  denied  { unlink } for  pid=2946 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   68.742208][   T29] audit: type=1400 audit(1726895514.339:2995): avc:  denied  { create } for  pid=2946 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   68.768310][   T29] audit: type=1326 audit(1726895514.469:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6ac598def9 code=0x7ffc0000
[   68.791998][   T29] audit: type=1326 audit(1726895514.469:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac598def9 code=0x7ffc0000
[   69.068320][ T5055] ------------[ cut here ]------------
[   69.073912][ T5055] refcount_t: underflow; use-after-free.
[   69.080018][ T5055] WARNING: CPU: 1 PID: 5055 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230
[   69.090448][ T5055] Modules linked in:
[   69.094410][ T5055] CPU: 1 UID: 0 PID: 5055 Comm: syz.3.230 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0
[   69.104911][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   69.115093][ T5055] RIP: 0010:refcount_warn_saturate+0x1c6/0x230
[   69.121405][ T5055] Code: 72 ff ff ff e8 3b 5f 72 ff 48 c7 c7 a9 fd b2 86 e8 df c5 8a ff c6 05 31 24 f5 04 01 90 48 c7 c7 28 35 1b 86 e8 0b 1e 54 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 0c 5f 72 ff 48 c7 c7 a6 fd b2 86 e8
[   69.141259][ T5055] RSP: 0018:ffffc9000121fb38 EFLAGS: 00010246
[   69.147451][ T5055] RAX: d54cb69a01fe7d00 RBX: ffff888116e8f6e4 RCX: 0000000000040000
[   69.155537][ T5055] RDX: ffffc90003f7f000 RSI: 0000000000003dbe RDI: 0000000000003dbf
[   69.163569][ T5055] RBP: 0000000000000003 R08: ffffffff8111f8f7 R09: 0000000000000000
[   69.171600][ T5055] R10: 0001ffffffffffff R11: ffff8881017a4200 R12: ffff888116370e68
[   69.179666][ T5055] R13: ffff88811530ff88 R14: ffff888116e8f6e4 R15: 0000000000000000
[   69.187683][ T5055] FS:  00007f1a7e9776c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[   69.196662][ T5055] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.203292][ T5055] CR2: 00007f7fd6077ab8 CR3: 0000000126af4000 CR4: 00000000003506f0
[   69.211437][ T5055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   69.219473][ T5055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   69.227479][ T5055] Call Trace:
[   69.230807][ T5055]  <TASK>
[   69.233763][ T5055]  ? __warn+0x141/0x350
[   69.237987][ T5055]  ? report_bug+0x315/0x420
[   69.242600][ T5055]  ? refcount_warn_saturate+0x1c6/0x230
[   69.248344][ T5055]  ? handle_bug+0x60/0x90
[   69.252874][ T5055]  ? exc_invalid_op+0x1a/0x50
[   69.257643][ T5055]  ? asm_exc_invalid_op+0x1a/0x20
[   69.262799][ T5055]  ? __warn_printk+0x167/0x1b0
[   69.267877][ T5055]  ? refcount_warn_saturate+0x1c6/0x230
[   69.274997][ T5055]  ? refcount_warn_saturate+0x1c5/0x230
[   69.282913][ T5055]  sk_skb_reason_drop+0xe9/0x290
[   69.288822][ T5055]  j1939_session_put+0x157/0x2a0
[   69.295509][ T5055]  j1939_sk_netdev_event_netdown+0x159/0x1d0
[   69.301823][ T5055]  j1939_netdev_notify+0x142/0x1b0
[   69.307092][ T5055]  ? __pfx_j1939_netdev_notify+0x10/0x10
[   69.312914][ T5055]  raw_notifier_call_chain+0x6f/0x1d0
[   69.318697][ T5055]  call_netdevice_notifiers_info+0xae/0x100
[   69.325843][ T5055]  __dev_notify_flags+0xff/0x1a0
[   69.332016][ T5055]  dev_change_flags+0xab/0xd0
[   69.339009][ T5055]  dev_ifsioc+0x67f/0xa10
[   69.344450][ T5055]  dev_ioctl+0x7fa/0xab0
[   69.351626][ T5055]  sock_do_ioctl+0x11c/0x260
[   69.357223][ T5055]  sock_ioctl+0x46a/0x640
[   69.363603][ T5055]  ? __pfx_sock_ioctl+0x10/0x10
[   69.368696][ T5055]  __se_sys_ioctl+0xcd/0x140
[   69.374843][ T5055]  __x64_sys_ioctl+0x43/0x50
[   69.380696][ T5055]  x64_sys_call+0x15cc/0x2d60
[   69.387982][ T5055]  do_syscall_64+0xc9/0x1c0
[   69.393710][ T5055]  ? clear_bhb_loop+0x55/0xb0
[   69.399301][ T5055]  ? clear_bhb_loop+0x55/0xb0
[   69.405299][ T5055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.415001][ T5055] RIP: 0033:0x7f1a7fcfdef9
[   69.421827][ T5055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.445812][ T5055] RSP: 002b:00007f1a7e977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   69.457317][ T5055] RAX: ffffffffffffffda RBX: 00007f1a7feb5f80 RCX: 00007f1a7fcfdef9
[   69.466453][ T5055] RDX: 0000000020000080 RSI: 0000000000008914 RDI: 000000000000000e
[   69.477846][ T5055] RBP: 00007f1a7fd70b76 R08: 0000000000000000 R09: 0000000000000000
[   69.488592][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.497856][ T5055] R13: 0000000000000000 R14: 00007f1a7feb5f80 R15: 00007ffe1b39d478
[   69.507778][ T5055]  </TASK>
[   69.512250][ T5055] ---[ end trace 0000000000000000 ]---
[   69.548494][ T5061] loop4: detected capacity change from 0 to 256
[   69.619777][ T5066] loop3: detected capacity change from 0 to 1024
[   69.652021][ T5066] EXT4-fs mount: 27 callbacks suppressed
[   69.652098][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.674286][ T5066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.870059][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.052679][ T5077] tap0: tun_chr_ioctl cmd 1074025692
[   70.080379][ T5078] loop4: detected capacity change from 0 to 512
[   70.118457][ T5078] ext4: Unknown parameter 'appraise'
[   70.183567][ T5078] xt_l2tp: missing protocol rule (udp|l2tpip)
[   70.568302][ T5086] loop3: detected capacity change from 0 to 1024
[   70.598276][ T5089] tap0: tun_chr_ioctl cmd 1074025692
[   70.612712][ T5090] loop1: detected capacity change from 0 to 512
[   70.621803][ T5086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.652748][ T5090] EXT4-fs: Ignoring removed i_version option
[   70.663937][ T5090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   70.681122][ T5090] EXT4-fs (loop1): 1 truncate cleaned up
[   70.687309][ T5090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.029463][ T5099] ==================================================================
[   71.037783][ T5099] BUG: KCSAN: data-race in atime_needs_update / touch_atime
[   71.045262][ T5099] 
[   71.047649][ T5099] write to 0xffff88810acb6118 of 4 bytes by task 5090 on cpu 0:
[   71.055344][ T5099]  touch_atime+0x1f3/0x350
[   71.059820][ T5099]  filemap_splice_read+0x8a5/0x910
[   71.064995][ T5099]  ext4_file_splice_read+0x8f/0xb0
[   71.070152][ T5099]  splice_direct_to_actor+0x269/0x670
[   71.075669][ T5099]  do_splice_direct+0xd7/0x150
[   71.080490][ T5099]  do_sendfile+0x39b/0x970
[   71.084970][ T5099]  __x64_sys_sendfile64+0x110/0x150
[   71.090214][ T5099]  x64_sys_call+0xed5/0x2d60
[   71.094854][ T5099]  do_syscall_64+0xc9/0x1c0
[   71.099388][ T5099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.105325][ T5099] 
[   71.108275][ T5099] read to 0xffff88810acb6118 of 4 bytes by task 5099 on cpu 1:
[   71.115853][ T5099]  atime_needs_update+0x261/0x3e0
[   71.120930][ T5099]  touch_atime+0x4a/0x350
[   71.125316][ T5099]  filemap_splice_read+0x8a5/0x910
[   71.130533][ T5099]  ext4_file_splice_read+0x8f/0xb0
[   71.135693][ T5099]  splice_direct_to_actor+0x269/0x670
[   71.141129][ T5099]  do_splice_direct+0xd7/0x150
[   71.145957][ T5099]  do_sendfile+0x39b/0x970
[   71.150472][ T5099]  __x64_sys_sendfile64+0x110/0x150
[   71.155727][ T5099]  x64_sys_call+0xed5/0x2d60
[   71.160365][ T5099]  do_syscall_64+0xc9/0x1c0
[   71.164904][ T5099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.170852][ T5099] 
[   71.173197][ T5099] value changed: 0x2b7491ac -> 0x2c0d282d
[   71.179022][ T5099] 
[   71.181367][ T5099] Reported by Kernel Concurrency Sanitizer on:
[   71.187535][ T5099] CPU: 1 UID: 0 PID: 5099 Comm: syz.1.241 Tainted: G        W          6.11.0-syzkaller-07462-g1868f9d0260e #0
[   71.199289][ T5099] Tainted: [W]=WARN
[   71.203116][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   71.213204][ T5099] ==================================================================
[   71.271316][   T58] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   71.288658][   T58] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[   71.301117][   T58] EXT4-fs (loop3): This should not happen!! Data will be lost
[   71.301117][   T58] 
[   71.310810][   T58] EXT4-fs (loop3): Total free blocks count 0
[   71.316861][   T58] EXT4-fs (loop3): Free/Dirty block details
[   71.322914][   T58] EXT4-fs (loop3): free_blocks=68451041280
[   71.328746][   T58] EXT4-fs (loop3): dirty_blocks=64
[   71.333973][   T58] EXT4-fs (loop3): Block reservation details
[   71.340040][   T58] EXT4-fs (loop3): i_reserved_data_blocks=4
[   71.353073][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.530537][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.