last executing test programs:

1m6.647037651s ago: executing program 4 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0)
socket$inet(0x2, 0x3, 0x6)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m4.286668402s ago: executing program 4 (id=102):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m4.259728562s ago: executing program 2 (id=103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

1m4.184223673s ago: executing program 2 (id=105):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bff200010074", "e2266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
close_range(r1, r2, 0x0)

1m4.110016544s ago: executing program 2 (id=107):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

1m4.036376105s ago: executing program 2 (id=108):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20)

1m4.017508415s ago: executing program 2 (id=109):
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101041)
ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080))

1m3.416284743s ago: executing program 4 (id=113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

1m3.251048465s ago: executing program 4 (id=119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20)

1m3.223645215s ago: executing program 4 (id=121):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000002480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r2, 0x0, r5, 0x0, 0x7, 0x9)
close_range(r3, r4, 0x0)

1m3.005262368s ago: executing program 4 (id=127):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r2)

1m2.979715798s ago: executing program 32 (id=127):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r2)

59.955668828s ago: executing program 2 (id=176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)

59.868785979s ago: executing program 33 (id=176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)

11.910560764s ago: executing program 5 (id=862):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x4)
socket$kcm(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

11.653115948s ago: executing program 5 (id=865):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1, 0x0, &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x8, @remote, 0x4e20, 0x1, 'nq\x00', 0x28, 0x6258d6d8, 0x30}, {@private=0xa010102, 0x4e22, 0x3, 0x5af7, 0x10, 0x401}}, 0x44)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r1)
add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)

11.158579394s ago: executing program 5 (id=867):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00')
getdents64(r2, &(0x7f0000000040)=""/38, 0x26)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001b59695a8fe1d28d8162cecd65b9b53259fbdd4c17e05eefc6bc74ffbe06d494f113fc5c7f57a602fe4bcea5ead8e93d8e691c546926352954d93137ce47079fbca27dc92005a632c312a74e198edf26eb61862d2c2b965b52139dda4040a40b0ec5a285b0d36a77dbdbd1b4f82447944a783f7d240b6eabe434ce3d0c95860cfbade63a8aba4baf574c028bf2983bc19c5a80c173414f730f1b7ca16a58408ee68b7742909e1811d68ba0e04de7ef5876b821a16f3f8f7865579459", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

10.508083483s ago: executing program 5 (id=875):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000380)={[{@errors_remount}, {@sysvgroups}, {@oldalloc}]}, 0x1, 0x50c, &(0x7f0000001000)="$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")
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1", 0x12}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
r2 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r3, &(0x7f0000000040), 0x0, 0x10041, &(0x7f00000001c0)={0x2, 0x0, @initdev}, 0x10)
fallocate(r2, 0x10, 0x2, 0x7000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000008000000000000000000003a15cefa43a287f7925a911b305de4a3b2073f0006d326eaa2d7f9d147139ac1ef3616b7ce180ccdb18551a041d7b52fcb50191202dd672eebd129562987c133cb36fd2e4e10bb343b0c92aca07b44d22a458fbf74"], 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0x18, 0x0, 0x2})

10.235539326s ago: executing program 5 (id=881):
epoll_create(0x5)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$eJzs3d9rW9cdAPDvla3MTpzZ2faQBZaYsZGELZIdL4nZQ5LB2J4C27J3z7NlYyxbxpKT2IThsOcxGGMb28v61JdC/4BCyZ9QCoH2PZTSEtokfehDWxVJV4nrSnZCJCuxPx84vuf+0P1+j4SOdO691g3gwBqNiKsR0RcRZyNiOF2eSUtsNkptu0cPb8/UShLV6vVPkkjSZc19Jen0SPqwgYj4w28j/pwkjQVblNc3FqeLxcJqOp+vLK3ky+sb5xaWpucL84XliYnxi5OXJi9MjnWsrZd//eG//v76by6//fOb96c+PvOXWr5D6bqt7eikxnOSrT8XTf0RsdqNYD3Ql7Yn+ywbJ93PBwCAndW+438vIn4cEY//2+tsAAAAgG6oXhmKL5KIKgAAALBvZerXwCaZXHotwFBkMrlc4xreH8SVKJbKlZ/NldaWZxvXyo5ENjO3UCyMpdcKj0Q2qc2P1+tP589vm5+IiGMR8c/hwfp8bqZUnO31wQ8AAAA4IGrj/KFMo16bfDbcGP8DAAAA+8xIrxMAAAAAus74HwAAAPa/b4//RxuTpH/vkwEAAAA67XfXrtVKtXn/69kb62uLpRvnZgvlxdzS2kxuprS6kpsvlebrv9m3tNv+iqXSyi9iee1WvlIoV/Ll9Y2ppdLacmWqfl/vqcIz3ScaAAAA6Khjp+6+n0TE5i8H66XmULrOWB32t8zzbZ50Kw9g7/X1OgGgZ1zgCweXMT6w28B+YI/yAAAAuuf0D5+c/x+MLef/j953bAD2u+c8/w/sI87/w8G17fz//3uVB7D3jPGB3Y4DtD3//07ncwEAALpjqF6STC4dAwxFJpPLRRyt3xYgm8wtFAtjEfHdiHhvOPud2vx4r5MGAAAAAAAAAAAAAAAAAAAAAAAAgFdMtZpEFQAAANjXIjIfJRGRxEDE8E+Gth8fOJR8PlyfRsTN/13/963pSmV1vLb80yfLK/9Jl5/vxREMAAAAYLvmOL05jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATnr08PZMs+xl3Ae/ioiRVvH7Y6A+HYhsRBx+nET/lsclEdHXgfibdyLieKv4SS2tGEmz2B4/ExGDPY5/pAPx4SC7W+t/rrZ6/2VitD5t/f7rT8uLejDarv/LPOn/+tr0f0d32fehdHri3pv5tvHvRJzob93/NOMnL9j//umPGxvt1lVfizjd8vMn+UasfGVpJV9e3zi3sDQ9X5gvLE9MjF+cvDR5YXIsP7dQLKR/W8b4x4/e+mqn9h9uE3+kXfuTRk7Vaut9nto2/+W9Ww+/32rDJOLB39J6i9f/eLv46XP/0/RzoLb+dLO+2ahvdfKNd0/u1P7ZNu3f7fU/026n25z9/V8/aNSyz/gIAKCbyusbi9PFYmH1Va/UGvMSpNHByujLkYbKwaz0umcCAAA67emX/l5nAgAAAAAAAAAAAAAAAAAAAAdX8///m7/l3I2fE9sab6BZSZI9bysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6+DgAA///TSdFe")
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)
poll(0x0, 0x0, 0x20003650)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5})

10.110510158s ago: executing program 5 (id=883):
r0 = io_uring_setup(0x1785, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b8})
socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000380)=0x8)

10.110292308s ago: executing program 34 (id=883):
r0 = io_uring_setup(0x1785, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b8})
socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000380)=0x8)

7.005059878s ago: executing program 6 (id=900):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

6.08114169s ago: executing program 0 (id=901):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0xb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1099b, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)

6.08064089s ago: executing program 1 (id=902):
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x1, 0x528, &(0x7f0000000c40)="$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")
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './bus/file0\x00'})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00')
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, r2, 0x8000000)
syz_io_uring_setup(0x7822, &(0x7f0000000300)={0x0, 0xba1e, 0x400, 0x1, 0x3bc}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000380))
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x580, 0x8, 0x10}, 0x18)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000580)=@IORING_OP_OPENAT={0x12, 0x22, 0x0, r6, 0x0, &(0x7f0000000540)='./file0\x00', 0x180, 0x404040, 0x23456})
syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x19, 0x2007, @fd=r3, 0xc137, 0x0, 0x0, 0x18})
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x8002, 0xfe, "90730aef00fffffffffffffbff95647fffffeb"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
sync_file_range(r1, 0x0, 0x7fffffffffffffff, 0x7)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10)
memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

6.08003448s ago: executing program 6 (id=903):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
unshare(0x24020400)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)

6.07227673s ago: executing program 3 (id=904):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f00000010c0))
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0))
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)

5.063967733s ago: executing program 1 (id=905):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x18)
syz_read_part_table(0x5e9, &(0x7f0000000600)="$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")
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040004)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYBLOB="0c000280060001"], 0x24}}, 0x0)

5.063339864s ago: executing program 3 (id=906):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="21c6a41b4cb1ef12142a435d5c81794b8ec7e24a8d1bbf9ef5ee1ca692e1624d0bc7b3b8b3fe85e4b6188391c876e67d0f4917a64fcf3c4fabe56a571904df6e8b3bc23ac977bc065470a958111ea57befec642fda3506b8c5776fdb23dfb21fc0cbf1e47fe4936e95db991e1e805ecf25e3b51f6c6d4b053bd22a2a1b477421a97bb59cb71a275ae652b7b822a8574b6d2fecb6965d7497686db8746bf3ded57b85cd86e577ea50953222444105dafbcfd5ae8e84dbdd6490f62d56a3bed4b8fd2ded839363c5276690f9ee158d488e", 0xd0}], 0x1}, 0x40)
ioctl$TUNGETVNETLE(r1, 0xc008744c, &(0x7f0000000180))
close(r0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x84080, 0x0)
write$tun(r4, &(0x7f00000000c0)={@void, @val={0x1, 0x1, 0x3ff, 0xffff, 0xd9a2, 0x3}, @ipv6=@icmpv6={0x2, 0x6, "b0d271", 0x69, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, [{0x1f, 0xa, "629e881fc0c972b152b838f40a043782dd8411703f32779c0dc48630d48092ca343b504822b6f8c3a9f4eaefa2d85a249fde770fb528876513c5e0d2d28e7ef8b5366f8af15657fb7bf86900000000"}]}}}}, 0x9b)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0xf5, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0xd3, 0x57, &(0x7f0000000480)="0057e863ac1afbbe3e2815e26f4d86b44f73d76346c2afdd71c2e2f2f91ad9e37c25f9beb21c1778dea3c67690525279941751111f0c9c62437771875a904aa85415fe98611f8ad98f72c4db70554aa73c277eb2ce7e50abddeba8165051bba3738ec42c58ce4d49ef890273ab6bc16cba478f98335fe094b74c59810fc9bd412d1867c27c00d007b9497ce59657003a4af803c46706a85fc8ab260251201097cf46b104455da31e6925c49a217afa73f8db58769b5195cfb55e18065575c650f69a00b67c34d9f4318ae336364297cfc96df4", &(0x7f0000000580)=""/87, 0x4, 0x0, 0x7f, 0x4a, &(0x7f0000000600)="ca125cba73640553bef00963bb966020decd80ff1361416285b1cc88eebd981038e6db0201d593fb77bde7b594a65fddcf73ae19bc36d158ac27c9aa8464dc678bf54c57baee8a23a55fb00ebd6cd0dce1b88f0580ed6cbbddf89fa91500db4df7f28a0a34642b256dfe3700a7c6b667011ad4dbb1ac42f574fa5f88458656", &(0x7f00000006c0)="1fa88f60787873999d5dccfebd4193ae1825ecda53f33a18da65ae27f762c811534e1c959b60e71794933c310f99925a86b71396760b93a620d6f69827cb00ae193e29678eff2a4071d6", 0x0, 0x0, 0x8001}, 0x50)
recvfrom(r5, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0)

5.063062454s ago: executing program 0 (id=907):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = creat(0x0, 0xd931d3864d39dcca)
write$binfmt_elf32(r2, 0x0, 0x69)
close(r2)
execve(0x0, 0x0, 0x0)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, 0x0, 0x0, 0x0)
r3 = accept4$unix(r1, 0x0, 0x0, 0x800)
recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

3.938723508s ago: executing program 0 (id=908):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000ff0300000bc01c080200000000080000", @ANYRES32=r4, @ANYBLOB="050000000000fc00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r6)

3.937459648s ago: executing program 1 (id=909):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x925a, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
io_uring_enter(r2, 0x3513, 0x217, 0xa1, 0x0, 0x0)
close_range(r0, r1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r8}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)

3.936874498s ago: executing program 6 (id=910):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7ffff000)
fallocate(r1, 0x0, 0x0, 0x1001f0)
socket$unix(0x1, 0x5, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))

3.936337868s ago: executing program 3 (id=911):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="150000000500000001000100090000000100", @ANYRES32, @ANYBLOB="00000012000000000000000000bb000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
listen(r1, 0xda90)
accept4(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0)

2.724964874s ago: executing program 0 (id=912):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r0 = io_uring_setup(0x22d6, &(0x7f0000000180)={0x0, 0xa982, 0x40, 0x3, 0x320})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200), 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x83f, 0x0, 0x0, &(0x7f0000000280))
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

2.724724194s ago: executing program 1 (id=913):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
getitimer(0x0, &(0x7f0000000440))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572000400028014"], 0x118}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r5=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000cc0)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x5, @empty, 0x4}, {0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, r5, 0x400}}, 0x48)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'ipvlan1\x00', &(0x7f0000000280)=@ethtool_flash={0x33, 0x4, './file0\x00'}})
getpid()

2.723463774s ago: executing program 6 (id=914):
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
socket$unix(0x1, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x410, 0xe8, 0x1f8, 0xe8, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @local, 0xff, 0xff000000, 0x2, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x7c00, 0x8, 0x3, 0x3, 0x40, 'veth1_to_bond\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random='\'wqOc3', @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xf, 0x1, 0x7, 0x0, 0x0, "2f88bc8590ddd72b89f2f1d7f29df8dfc4300e7971aa499db98046803f52aceeef7438a357ef3608622ffdfbd67d8f9fa94400393b88a859b736d862c56d7081"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mq_notify(0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r3, 0xa, 0x13)
fcntl$setlease(r3, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000440)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40)

2.722890944s ago: executing program 3 (id=915):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
shmget(0x0, 0x3000, 0x9ba4babae520bb93, &(0x7f0000ffb000/0x3000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095", @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x82, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r5 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r5, r5, 0x0, 0x4800000009)
ioprio_set$pid(0x2, 0x0, 0x0)

1.413240041s ago: executing program 0 (id=916):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x32600)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.408278491s ago: executing program 1 (id=917):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8)

1.407662641s ago: executing program 6 (id=918):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x0, 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = gettid()
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
writev(r3, &(0x7f00000000c0), 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
waitid(0x0, r5, 0x0, 0x8, 0xfffffffffffffffd)
waitid(0x1, r5, 0x0, 0x4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)

1.407227171s ago: executing program 3 (id=925):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rmdir(&(0x7f0000000340)='./file0\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x20004000)
open(0x0, 0x101000, 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.04058ms ago: executing program 0 (id=919):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$tcp_congestion(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), 0x0, 0x2}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r7], 0x20}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.50263ms ago: executing program 1 (id=920):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
sendfile(r5, r5, 0x0, 0x800000009)
socket$kcm(0x2, 0xa, 0x2)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

888.58µs ago: executing program 6 (id=921):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0x144, {0x0}}, 0x10)

0s ago: executing program 3 (id=922):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0x144, {0x0}}, 0x10)

kernel console output (not intermixed with test programs):

ort 6081 - 0
[   42.586337][ T3780] veth1_macvtap: entered promiscuous mode
[   42.619132][ T3339] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.648501][   T29] audit: type=1400 audit(1746736105.452:347): avc:  denied  { allowed } for  pid=4001 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   42.667925][   T29] audit: type=1400 audit(1746736105.462:348): avc:  denied  { bind } for  pid=4001 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.688839][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.699353][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.709348][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.719915][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.730005][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.740638][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.750513][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.760965][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.775814][   T29] audit: type=1400 audit(1746736105.612:349): avc:  denied  { write } for  pid=4008 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   42.795116][   T29] audit: type=1400 audit(1746736105.652:350): avc:  denied  { connect } for  pid=4008 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   42.818902][ T3780] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.846326][ T3339] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.870437][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.880958][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.890835][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.901357][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.911211][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.921685][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.931562][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.942071][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.953693][ T3780] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.990706][   T29] audit: type=1400 audit(1746736105.852:351): avc:  denied  { bind } for  pid=4021 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.067571][ T4019] loop1: detected capacity change from 0 to 2048
[   43.075527][ T3780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.084413][ T3780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.093234][ T3780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.102210][ T3780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.138151][ T4019]  loop1: p1 < > p4
[   43.142766][ T4019] loop1: p4 size 8388608 extends beyond EOD, truncated
[   43.231530][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   43.243843][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   43.254268][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.278060][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.294248][ T3339] bond0 (unregistering): Released all slaves
[   43.310916][ T4049] netlink: 14 bytes leftover after parsing attributes in process `syz.1.181'.
[   43.341817][ T4049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.354260][ T4049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.365094][ T4049] bond0 (unregistering): Released all slaves
[   43.385667][ T3339] hsr_slave_0: left promiscuous mode
[   43.391697][ T3339] hsr_slave_1: left promiscuous mode
[   43.397976][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.405530][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.413495][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.421115][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.431409][ T3339] veth1_macvtap: left promiscuous mode
[   43.437174][ T3339] veth0_macvtap: left promiscuous mode
[   43.442867][ T3339] veth1_vlan: left promiscuous mode
[   43.448385][ T3339] veth0_vlan: left promiscuous mode
[   43.511954][ T3339] team0 (unregistering): Port device team_slave_1 removed
[   43.522031][ T3339] team0 (unregistering): Port device team_slave_0 removed
[   43.679304][ T4071] loop5: detected capacity change from 0 to 512
[   43.696872][ T4076] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   43.703548][ T4076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   43.711189][ T4076] vhci_hcd vhci_hcd.0: Device attached
[   43.722294][ T4076] loop3: detected capacity change from 0 to 512
[   43.729647][ T4076] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.744493][ T4076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.755096][ T4077] smc: net device bond0 applied user defined pnetid SYZ2
[   43.784887][ T4071] EXT4-fs (loop5): 1 orphan inode deleted
[   43.791381][ T4076] EXT4-fs (loop3): 1 truncate cleaned up
[   43.798264][   T12] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1
[   43.810343][ T4071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.817990][ T4029] chnl_net:caif_netlink_parms(): no params data found
[   43.823786][ T4076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.862076][ T4071] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.964773][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.973950][ T3391] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[   44.001303][ T4109] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[   44.008012][ T4109] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   44.015765][ T4109] vhci_hcd vhci_hcd.0: Device attached
[   44.073552][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.080758][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.116936][ T4029] bridge_slave_0: entered allmulticast mode
[   44.124022][ T4029] bridge_slave_0: entered promiscuous mode
[   44.132708][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.139850][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.147585][ T4029] bridge_slave_1: entered allmulticast mode
[   44.167801][ T4029] bridge_slave_1: entered promiscuous mode
[   44.221360][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.260771][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.309890][ T4133] serio: Serial port pts0
[   44.310256][ T4029] team0: Port device team_slave_0 added
[   44.339051][ T4130] pim6reg1: entered promiscuous mode
[   44.344454][ T4130] pim6reg1: entered allmulticast mode
[   44.361303][ T4029] team0: Port device team_slave_1 added
[   44.382568][ T4078] vhci_hcd: connection reset by peer
[   44.393303][ T4110] vhci_hcd: connection closed
[   44.393550][   T56] vhci_hcd: stop threads
[   44.402648][   T56] vhci_hcd: release socket
[   44.407165][   T56] vhci_hcd: disconnect device
[   44.412402][   T56] vhci_hcd: stop threads
[   44.416774][   T56] vhci_hcd: release socket
[   44.421209][   T56] vhci_hcd: disconnect device
[   44.430199][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.437278][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.463238][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.476296][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.483407][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.510511][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.540267][ T4029] hsr_slave_0: entered promiscuous mode
[   44.547061][ T4029] hsr_slave_1: entered promiscuous mode
[   44.668934][ T4029] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   44.686007][ T4029] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   44.698522][ T4029] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   44.714613][ T4029] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   44.769466][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.783659][ T4029] 8021q: adding VLAN 0 to HW filter on device team0
[   44.794814][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.801957][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.823255][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.830453][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.940469][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.953909][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.998484][ T4202] loop3: detected capacity change from 0 to 512
[   45.005958][ T4202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   45.031275][ T4202] EXT4-fs (loop3): 1 truncate cleaned up
[   45.048561][ T4202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.103948][ T4213] random: crng reseeded on system resumption
[   45.270475][ T4029] veth0_vlan: entered promiscuous mode
[   45.311275][ T4029] veth1_vlan: entered promiscuous mode
[   45.336300][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.343067][ T4029] veth0_macvtap: entered promiscuous mode
[   45.351784][ T4242] serio: Serial port pts0
[   45.355515][ T4029] veth1_macvtap: entered promiscuous mode
[   45.385782][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.396359][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.406235][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.416741][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.426638][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.437095][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.447163][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.457706][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.468839][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.504294][ T4245] syzkaller0: entered promiscuous mode
[   45.509945][ T4245] syzkaller0: entered allmulticast mode
[   45.521632][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.532188][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.542353][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.552883][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.563359][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.573887][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.575655][ T4251] IPv4: Oversized IP packet from 127.202.26.0
[   45.583748][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.600380][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.626079][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.649124][   T12] syzkaller0: tun_net_xmit 48
[   45.657601][ T4029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.658966][ T4245] syzkaller0: tun_net_xmit 1280
[   45.666708][ T4029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.671645][ T4245] syzkaller0: create flow: hash 606843374 index 1
[   45.680299][ T4029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.695509][ T4029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.726566][ T4244] syzkaller0: delete flow: hash 606843374 index 1
[   46.024869][ T4296] loop0: detected capacity change from 0 to 512
[   46.040871][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.216'.
[   46.073917][ T4296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   46.106704][ T4296] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.145888][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.220'.
[   46.174970][ T4296] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.217: corrupted inode contents
[   46.216313][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.224117][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0
[   46.242809][ T4296] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.217: mark_inode_dirty error
[   46.265361][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.272978][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.283418][ T4296] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.217: corrupted inode contents
[   46.314826][ T4296] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.217: mark_inode_dirty error
[   46.329333][ T4296] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.217: mark inode dirty (error -117)
[   46.343269][ T4296] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117)
[   46.385862][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   46.423498][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.431978][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.439981][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.450685][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.458282][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.465902][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.473550][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.481050][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.488533][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.496042][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.503533][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.511012][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.518474][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.526022][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.534263][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.541767][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.549242][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.556769][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.564232][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.571700][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.579319][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.586879][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.594301][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.601741][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.609244][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.616672][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.624084][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.631542][ T3559] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   46.639742][ T3559] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   46.680293][ T4335] fido_id[4335]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   46.851365][ T4351] loop3: detected capacity change from 0 to 512
[   46.880699][ T4351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   46.895065][ T4351] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.915169][ T4351] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.228: corrupted inode contents
[   46.927365][ T4351] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #19: comm syz.3.228: mark_inode_dirty error
[   46.946603][ T4351] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.228: corrupted inode contents
[   46.973576][ T4351] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.228: mark_inode_dirty error
[   46.990862][ T4351] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.228: mark inode dirty (error -117)
[   47.007030][ T4359] loop5: detected capacity change from 0 to 256
[   47.016797][ T4359] msdos: Bad value for 'nfs'
[   47.022849][ T4351] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117)
[   47.088524][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   47.162122][ T4372] syz_tun: entered promiscuous mode
[   47.167512][ T4372] vlan2: entered promiscuous mode
[   47.206212][   T29] kauditd_printk_skb: 42 callbacks suppressed
[   47.206224][   T29] audit: type=1400 audit(1746736110.082:393): avc:  denied  { unlink } for  pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   47.359417][   T29] audit: type=1400 audit(1746736110.242:394): avc:  denied  { create } for  pid=4384 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   47.413200][   T29] audit: type=1400 audit(1746736110.262:395): avc:  denied  { setopt } for  pid=4384 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   47.433239][   T29] audit: type=1400 audit(1746736110.272:396): avc:  denied  { bind } for  pid=4384 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   47.444752][ T4390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4390 comm=syz.3.240
[   47.497537][ T4395] loop3: detected capacity change from 0 to 512
[   47.505251][   T29] audit: type=1400 audit(1746736110.382:397): avc:  denied  { mounton } for  pid=4394 comm="syz.3.242" path="/61/file2" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   47.529358][ T4395] EXT4-fs (loop3): orphan cleanup on readonly fs
[   47.536346][ T4395] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   47.542680][ T4391] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   47.554125][ T4400] netlink: 220 bytes leftover after parsing attributes in process `syz.1.243'.
[   47.557322][ T4391] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   47.557690][ T4391] vhci_hcd vhci_hcd.0: Device attached
[   47.566298][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'.
[   47.577446][ T4395] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.242: invalid indirect mapped block 4278190080 (level 0)
[   47.579337][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'.
[   47.580352][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'.
[   47.591708][ T4395] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.242: invalid indirect mapped block 1 (level 1)
[   47.602327][ T4399] vhci_hcd: connection closed
[   47.612861][ T4395] EXT4-fs (loop3): 1 truncate cleaned up
[   47.633652][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'.
[   47.646655][ T3347] vhci_hcd: stop threads
[   47.657268][ T3347] vhci_hcd: release socket
[   47.661741][ T3347] vhci_hcd: disconnect device
[   47.662328][ T4395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   47.679638][ T4395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.747745][   T29] audit: type=1400 audit(1746736110.632:398): avc:  denied  { create } for  pid=4408 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   47.771994][   T29] audit: type=1400 audit(1746736110.652:399): avc:  denied  { write } for  pid=4408 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   47.817544][ T4412] xt_hashlimit: size too large, truncated to 1048576
[   47.817752][ T4409] infiniband syz!: set active
[   47.829162][ T4409] infiniband syz!: added team_slave_0
[   47.866161][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.882854][ T4409] RDS/IB: syz!: added
[   47.890699][ T4409] smc: adding ib device syz! with port count 1
[   47.896949][ T4409] smc:    ib device syz! port 1 has pnetid 
[   47.909635][   T29] audit: type=1400 audit(1746736110.742:400): avc:  denied  { read write } for  pid=4414 comm="syz.0.248" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   47.933092][   T29] audit: type=1400 audit(1746736110.742:401): avc:  denied  { open } for  pid=4414 comm="syz.0.248" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   47.956573][   T29] audit: type=1400 audit(1746736110.742:402): avc:  denied  { ioctl } for  pid=4414 comm="syz.0.248" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   47.983184][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.170405][ T4424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.250'.
[   48.183777][ T4424] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.192639][ T4424] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.201455][ T4424] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.210227][ T4424] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   48.229110][ T4424] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.238125][ T4424] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.247098][ T4424] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.247984][ T4427] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   48.256062][ T4424] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.284170][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.252'.
[   48.293285][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.252'.
[   48.304030][ T4427] random: crng reseeded on system resumption
[   48.589345][ T4447] loop1: detected capacity change from 0 to 2048
[   48.657583][ T3478]  loop1: p1 < > p4
[   48.666023][ T4452] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   48.672592][ T4452] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   48.680160][ T4452] vhci_hcd vhci_hcd.0: Device attached
[   48.687891][ T3478] loop1: p4 size 8388608 extends beyond EOD, truncated
[   48.699661][ T4447]  loop1: p1 < > p4
[   48.705103][ T4447] loop1: p4 size 8388608 extends beyond EOD, truncated
[   48.724240][ T4453] vhci_hcd: connection closed
[   48.738258][ T3347] vhci_hcd: stop threads
[   48.747544][ T3347] vhci_hcd: release socket
[   48.750337][ T3004]  loop1: p1 < > p4
[   48.752056][ T3347] vhci_hcd: disconnect device
[   48.756353][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[   48.779231][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   48.779528][ T4460] loop1: detected capacity change from 0 to 764
[   48.797896][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   48.819058][ T4460] Symlink component flag not implemented
[   48.824869][ T4460] Symlink component flag not implemented (116)
[   48.827804][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   48.842204][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   48.866196][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   48.880141][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   48.890526][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.899893][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.002490][ T3391] usb 7-1: enqueue for inactive port 0
[   49.008076][ T3391] usb 7-1: enqueue for inactive port 0
[   49.076476][ T3391] vhci_hcd: vhci_device speed not set
[   49.092178][ T4467] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   49.101011][ T4467] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   49.109800][ T4467] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   49.118699][ T4467] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   49.179479][ T4467] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   49.188497][ T4467] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   49.197618][ T4467] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   49.206675][ T4467] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   49.219824][ T4463] Set syz1 is full, maxelem 65536 reached
[   49.361145][ T4475] loop1: detected capacity change from 0 to 164
[   49.425171][ T4477] loop5: detected capacity change from 0 to 128
[   49.833568][ T4510] loop5: detected capacity change from 0 to 512
[   49.840503][ T4510] EXT4-fs: Ignoring removed nobh option
[   49.848987][ T4510] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.283: invalid indirect mapped block 256 (level 2)
[   49.863450][ T4510] EXT4-fs (loop5): 2 truncates cleaned up
[   49.869765][ T4510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.885908][ T4510] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.283: bg 0: block 5: invalid block bitmap
[   49.898593][ T4510] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   49.909103][ T4502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.910795][ T4510] EXT4-fs (loop5): This should not happen!! Data will be lost
[   49.910795][ T4510] 
[   49.921583][ T4502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.928798][ T4510] EXT4-fs (loop5): Total free blocks count 0
[   49.928816][ T4510] EXT4-fs (loop5): Free/Dirty block details
[   49.948648][ T4510] EXT4-fs (loop5): free_blocks=0
[   49.953615][ T4510] EXT4-fs (loop5): dirty_blocks=66
[   49.958816][ T4510] EXT4-fs (loop5): Block reservation details
[   49.964810][ T4510] EXT4-fs (loop5): i_reserved_data_blocks=66
[   49.971207][ T4513] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[   50.004202][ T4515] loop1: detected capacity change from 0 to 128
[   50.051865][ T4515] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.077236][ T4515] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   50.136228][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.227813][ T4525] hsr_slave_0: left promiscuous mode
[   50.233509][ T4525] hsr_slave_1: left promiscuous mode
[   50.426271][ T4534] loop0: detected capacity change from 0 to 2048
[   50.439656][ T4534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.453057][ T4534] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   50.470781][ T4534] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   50.483172][ T4534] EXT4-fs (loop0): This should not happen!! Data will be lost
[   50.483172][ T4534] 
[   50.493043][ T4534] EXT4-fs (loop0): Total free blocks count 0
[   50.499191][ T4534] EXT4-fs (loop0): Free/Dirty block details
[   50.505132][ T4534] EXT4-fs (loop0): free_blocks=2415919504
[   50.510919][ T4534] EXT4-fs (loop0): dirty_blocks=16
[   50.516066][ T4534] EXT4-fs (loop0): Block reservation details
[   50.522248][ T4534] EXT4-fs (loop0): i_reserved_data_blocks=1
[   50.558620][   T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   50.594516][ T4545] loop0: detected capacity change from 0 to 2048
[   50.634494][ T4549] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   50.641235][ T4549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   50.649038][ T4549] vhci_hcd vhci_hcd.0: Device attached
[   50.676967][ T4549] loop0: detected capacity change from 0 to 512
[   50.683864][ T4549] EXT4-fs: Ignoring removed mblk_io_submit option
[   50.699052][ T4549] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   50.710730][ T4549] EXT4-fs (loop0): 1 truncate cleaned up
[   50.716930][ T4549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.729063][ T4555] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   50.738328][ T4555] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   50.805464][ T4563] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[   50.812120][ T4563] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   50.819871][ T4563] vhci_hcd vhci_hcd.0: Device attached
[   50.886471][    T9] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[   50.937901][ T4564] vhci_hcd: connection closed
[   50.937909][ T4550] vhci_hcd: connection reset by peer
[   50.938331][   T51] vhci_hcd: stop threads
[   50.952300][   T51] vhci_hcd: release socket
[   50.956851][   T51] vhci_hcd: disconnect device
[   50.961733][   T51] vhci_hcd: stop threads
[   50.961784][   T51] vhci_hcd: release socket
[   50.961849][   T51] vhci_hcd: disconnect device
[   51.015600][ T4572] bridge_slave_0: left allmulticast mode
[   51.021369][ T4572] bridge_slave_0: left promiscuous mode
[   51.027196][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.038521][ T4572] bridge_slave_1: left allmulticast mode
[   51.044293][ T4572] bridge_slave_1: left promiscuous mode
[   51.050100][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.056216][ T4573] __nla_validate_parse: 3 callbacks suppressed
[   51.056235][ T4573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.303'.
[   51.078104][ T4572] team0: Port device team_slave_0 removed
[   51.087786][ T4572] team0: Port device team_slave_1 removed
[   51.095088][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.102619][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.112054][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.119530][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.143109][ T4573] team0: Mode changed to "loadbalance"
[   51.149416][ T3391] syz!: Port: 1 Link DOWN
[   51.535879][ T4594] loop3: detected capacity change from 0 to 512
[   51.544381][ T4594] EXT4-fs: test_dummy_encryption option not supported
[   51.554055][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.571827][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'.
[   51.581229][ T4594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.588802][ T4594] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.597080][ T4594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.604554][ T4594] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.619915][ T4598] syz!: rxe_newlink: already configured on team_slave_0
[   51.627492][ T3393] usb usb8-port1: attempt power cycle
[   51.640362][ T4598] loop1: detected capacity change from 0 to 128
[   51.641890][ T4599] SELinux:  Context Ü is not valid (left unmapped).
[   51.655288][ T4599] SELinux:  Context attr/ is not valid (left unmapped).
[   51.658325][ T4598] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   51.682941][ T4598] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.714913][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.736759][ T4604] netlink: 96 bytes leftover after parsing attributes in process `syz.1.316'.
[   52.004815][ T4627] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   52.011467][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   52.019188][ T4627] vhci_hcd vhci_hcd.0: Device attached
[   52.055742][ T4637] loop5: detected capacity change from 0 to 512
[   52.078750][ T4637] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.086325][ T4637] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   52.098373][ T4637] EXT4-fs (loop5): 1 truncate cleaned up
[   52.104723][ T4637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.174723][ T4644] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   52.237102][ T4637] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[   52.243770][ T4637] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   52.251588][ T4637] vhci_hcd vhci_hcd.0: Device attached
[   52.266828][   T36] usb 11-1: new low-speed USB device number 2 using vhci_hcd
[   52.616109][ T4647] vhci_hcd: connection closed
[   52.616362][ T3339] vhci_hcd: stop threads
[   52.625431][ T3339] vhci_hcd: release socket
[   52.629970][ T3339] vhci_hcd: disconnect device
[   52.636161][ T4629] vhci_hcd: connection reset by peer
[   52.642609][ T3339] vhci_hcd: stop threads
[   52.646941][ T3339] vhci_hcd: release socket
[   52.651389][ T3339] vhci_hcd: disconnect device
[   52.969133][ T4686] syzkaller0: entered promiscuous mode
[   52.974719][ T4686] syzkaller0: entered allmulticast mode
[   52.986304][ T4691] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   52.998909][ T4688] IPVS: stopping master sync thread 4691 ...
[   53.047120][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'.
[   53.053247][ T4699] loop6: detected capacity change from 0 to 2048
[   53.080752][ T4699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.119808][ T4707] netlink: 'syz.3.343': attribute type 10 has an invalid length.
[   53.123291][   T29] kauditd_printk_skb: 104 callbacks suppressed
[   53.123310][   T29] audit: type=1400 audit(1746736115.992:507): avc:  denied  { mounton } for  pid=4698 comm="syz.6.340" path="/22/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.159909][ T4706] xt_hashlimit: size too large, truncated to 1048576
[   53.338412][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.360519][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.466849][ T3393] usb usb8-port1: unable to enumerate USB device
[   53.602831][ T4730] loop5: detected capacity change from 0 to 1024
[   53.619395][ T4730] EXT4-fs: Ignoring removed oldalloc option
[   53.625493][ T4730] EXT4-fs: Ignoring removed i_version option
[   53.633539][ T4728] loop3: detected capacity change from 0 to 8192
[   53.649665][ T4732] netlink: 96 bytes leftover after parsing attributes in process `syz.1.352'.
[   53.666104][ T4728] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.700489][ T4730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.714879][ T4737] loop3: detected capacity change from 0 to 128
[   53.731726][ T4737] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.744671][ T4737] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   53.762256][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.791855][ T4742] loop5: detected capacity change from 0 to 128
[   53.840712][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.901851][ T4752] netlink: 'syz.3.357': attribute type 4 has an invalid length.
[   53.941790][ T4752] netlink: 'syz.3.357': attribute type 4 has an invalid length.
[   53.988839][ T4755] loop3: detected capacity change from 0 to 1024
[   54.005706][ T4755] EXT4-fs: Ignoring removed bh option
[   54.011276][ T4755] EXT4-fs: inline encryption not supported
[   54.034250][ T4755] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   54.057593][ T4755] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[   54.089668][ T4755] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.358: lblock 2 mapped to illegal pblock 2 (length 1)
[   54.166697][ T4755] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   54.175130][ T4755] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.358: lblock 0 mapped to illegal pblock 48 (length 1)
[   54.189903][ T4755] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   54.198930][ T4755] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.358: Failed to acquire dquot type 0
[   54.212504][   T29] audit: type=1326 audit(1746736117.092:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   54.235895][   T29] audit: type=1326 audit(1746736117.092:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   54.259198][   T29] audit: type=1326 audit(1746736117.092:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   54.282584][   T29] audit: type=1326 audit(1746736117.092:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   54.306244][   T29] audit: type=1326 audit(1746736117.092:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.6.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   54.380217][ T4755] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem
[   54.393774][ T4779] syzkaller0: entered promiscuous mode
[   54.399434][ T4779] syzkaller0: entered allmulticast mode
[   54.409275][ T4795] netlink: 'syz.6.365': attribute type 4 has an invalid length.
[   54.422079][ T4755] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.358: mark_inode_dirty error
[   54.443246][ T4755] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[   54.453619][ T4755] EXT4-fs (loop3): 1 orphan inode deleted
[   54.459737][ T4755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.464571][ T4795] netlink: 'syz.6.365': attribute type 4 has an invalid length.
[   54.473003][   T56] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[   54.496877][   T56] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   54.505345][   T56] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0
[   54.531224][   T29] audit: type=1400 audit(1746736117.412:513): avc:  denied  { mounton } for  pid=4799 comm="syz.1.367" path="/93/file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   54.562152][ T4755] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   54.576891][ T4804] loop6: detected capacity change from 0 to 128
[   54.600231][ T4804] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.687288][ T4810] tipc: Started in network mode
[   54.692219][ T4810] tipc: Node identity 66bae3fb417b, cluster identity 4711
[   54.699520][ T4810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.726891][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.746185][ T4804] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   54.769645][ T4810] syzkaller0: MTU too low for tipc bearer
[   54.775450][ T4810] tipc: Disabling bearer <eth:syzkaller0>
[   54.904828][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[   54.924281][ T4814] IPVS: Error joining to the multicast group
[   54.934757][ T4029] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   55.084811][ T4836] syzkaller0: entered promiscuous mode
[   55.090357][ T4836] syzkaller0: entered allmulticast mode
[   55.310350][ T4863] netlink: 'syz.0.379': attribute type 4 has an invalid length.
[   55.321951][ T4863] netlink: 'syz.0.379': attribute type 4 has an invalid length.
[   55.352368][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'.
[   55.361652][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.369286][ T4868] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.377374][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.384837][ T4868] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.462577][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.381'.
[   55.558996][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'.
[   55.890812][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'.
[   55.933480][ T4917] hsr_slave_0: left promiscuous mode
[   55.945572][ T4917] hsr_slave_1: left promiscuous mode
[   55.956534][    T9] usb 1-1: enqueue for inactive port 0
[   55.968763][    T9] usb 1-1: enqueue for inactive port 0
[   56.047375][    T9] vhci_hcd: vhci_device speed not set
[   56.059574][ T4929] IPVS: stopping backup sync thread 4933 ...
[   56.061337][ T4933] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0
[   56.317929][ T4942] loop6: detected capacity change from 0 to 8192
[   56.443895][ T4948] loop6: detected capacity change from 0 to 512
[   56.456494][ T4948] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[   56.465701][ T4948] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[   56.475519][ T4948] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[   56.485298][ T4948] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   56.494789][ T4948] System zones: 0-2, 18-18, 34-34
[   56.498378][ T4950] loop5: detected capacity change from 0 to 512
[   56.506264][ T4948] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   56.521480][ T4948] EXT4-fs (loop6): 1 truncate cleaned up
[   56.527736][ T4948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.541128][ T4950] EXT4-fs (loop5): too many log groups per flexible block group
[   56.548886][ T4950] EXT4-fs (loop5): failed to initialize mballoc (-12)
[   56.568915][ T4950] EXT4-fs (loop5): mount failed
[   56.632635][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.657755][ T4960] loop6: detected capacity change from 0 to 512
[   56.665650][ T4960] EXT4-fs (loop6): orphan cleanup on readonly fs
[   56.675143][ T4960] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.398: bad orphan inode 13
[   56.686645][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'.
[   56.695563][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'.
[   56.744250][ T4960] ext4_test_bit(bit=12, block=18) = 1
[   56.749910][ T4960] is_bad_inode(inode)=0
[   56.754104][ T4960] NEXT_ORPHAN(inode)=2130706432
[   56.759008][ T4960] max_ino=32
[   56.762223][ T4960] i_nlink=1
[   56.776405][ T4965] netlink: 96 bytes leftover after parsing attributes in process `syz.0.400'.
[   56.785625][ T4965] netlink: 96 bytes leftover after parsing attributes in process `syz.0.400'.
[   56.796384][ T4960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.853000][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.860561][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.868135][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.877031][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.878134][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.893488][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.900933][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.907357][ T4974] loop1: detected capacity change from 0 to 2048
[   56.908363][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.915598][ T4974] EXT4-fs: Ignoring removed mblk_io_submit option
[   56.922094][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.936154][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.943679][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.951121][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.958578][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.966086][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.973655][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.981102][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   56.987994][ T4974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.988728][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.008160][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.015572][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.023154][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.030702][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.038263][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.045720][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.053310][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.060858][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.064701][ T4974] blkio.reset_stats is deprecated
[   57.068269][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.068296][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.088200][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.095758][ T3559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   57.113313][ T4982] pim6reg1: entered promiscuous mode
[   57.118873][ T4982] pim6reg1: entered allmulticast mode
[   57.140186][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.168414][ T3559] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   57.221217][ T4990] loop6: detected capacity change from 0 to 512
[   57.259130][ T4990] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.276392][ T4990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   57.291719][ T4992] loop1: detected capacity change from 0 to 8192
[   57.299300][ T4990] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   57.313759][   T36] usb 11-1: enqueue for inactive port 0
[   57.319550][   T36] usb 11-1: enqueue for inactive port 0
[   57.338983][ T4990] EXT4-fs (loop6): 1 truncate cleaned up
[   57.347709][ T4995] loop5: detected capacity change from 0 to 512
[   57.354597][ T4995] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   57.360809][ T4990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.383508][ T4990] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   57.406497][   T36] vhci_hcd: vhci_device speed not set
[   57.502990][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.513838][ T4995] EXT4-fs (loop5): 1 truncate cleaned up
[   57.525133][ T5004] loop3: detected capacity change from 0 to 1024
[   57.532549][ T4995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.545756][ T5004] EXT4-fs: Ignoring removed nobh option
[   57.551399][ T5004] EXT4-fs: Ignoring removed nobh option
[   57.564015][ T5004] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   57.575002][ T5004] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.414: inode #4294967295: comm syz.3.414: iget: illegal inode #
[   57.589467][ T5004] EXT4-fs (loop3): no journal found
[   57.594716][ T5004] EXT4-fs (loop3): can't get journal size
[   57.614228][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.626980][ T5004] EXT4-fs (loop3): failed to initialize system zone (-22)
[   57.634600][ T5004] EXT4-fs (loop3): mount failed
[   57.693112][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.716144][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.725178][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.733811][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.735984][ T3339] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   57.771703][ T5024] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20002
[   57.817456][ T5029] serio: Serial port ptm0
[   57.935499][ T5043] loop5: detected capacity change from 0 to 128
[   58.071199][ T5058] loop5: detected capacity change from 0 to 512
[   58.079749][ T5058] EXT4-fs: inline encryption not supported
[   58.088728][ T5058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   58.118897][ T5058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   58.131981][ T5058] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.275340][ T5076] pim6reg1: entered promiscuous mode
[   58.280782][ T5076] pim6reg1: entered allmulticast mode
[   58.307611][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   58.393898][   T29] kauditd_printk_skb: 154 callbacks suppressed
[   58.393917][   T29] audit: type=1400 audit(1746736121.272:668): avc:  denied  { audit_write } for  pid=5081 comm="syz.1.426" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   58.425984][ T5088] syzkaller0: entered promiscuous mode
[   58.429451][   T29] audit: type=1107 audit(1746736121.272:669): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   58.431702][ T5088] syzkaller0: entered allmulticast mode
[   58.444747][   T29] audit: type=1400 audit(1746736121.272:670): avc:  denied  { write } for  pid=5081 comm="syz.1.426" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.504962][ T5101] loop3: detected capacity change from 0 to 1024
[   58.544678][ T5106] netlink: 4 bytes leftover after parsing attributes in process `gtp'.
[   58.573388][ T5112] loop1: detected capacity change from 0 to 1024
[   58.582532][ T5101] EXT4-fs: Ignoring removed nobh option
[   58.588919][ T5101] EXT4-fs: Ignoring removed bh option
[   58.596715][ T5106] team0 (unregistering): Port device team_slave_0 removed
[   58.604702][ T5112] EXT4-fs: Ignoring removed mblk_io_submit option
[   58.623578][ T5106] team0 (unregistering): Port device team_slave_1 removed
[   58.647774][   T29] audit: type=1400 audit(1746736121.502:671): avc:  denied  { create } for  pid=5115 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   58.670252][ T5112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.717509][ T5101] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.432: bad orphan inode 32767
[   58.730414][ T5112] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.435: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   58.769667][ T5112] EXT4-fs (loop1): Remounting filesystem read-only
[   58.796821][ T5101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.844224][   T29] audit: type=1400 audit(1746736121.712:672): avc:  denied  { bind } for  pid=5135 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   58.864165][   T29] audit: type=1400 audit(1746736121.712:673): avc:  denied  { connect } for  pid=5135 comm="syz.0.442" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   58.890680][ T5137] netlink: 60 bytes leftover after parsing attributes in process `syz.6.440'.
[   58.900299][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.939102][   T29] audit: type=1400 audit(1746736121.822:674): avc:  denied  { read } for  pid=5148 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   58.977485][ T5151] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[   58.986250][ T5151] ref_ctr increment failed for inode: 0x21d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888100059600
[   59.041534][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.098071][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.6.444'.
[   59.235997][ T5179] netlink: 96 bytes leftover after parsing attributes in process `syz.6.447'.
[   59.287290][   T29] audit: type=1400 audit(1746736122.172:675): avc:  denied  { watch_reads } for  pid=5181 comm="syz.1.448" path="/101" dev="tmpfs" ino=548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   59.328703][ T5182] veth1_macvtap: left promiscuous mode
[   59.384467][ T5195] loop3: detected capacity change from 0 to 512
[   59.395146][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.443'.
[   59.415028][ T5175] IPVS: Error joining to the multicast group
[   59.443279][ T5195] EXT4-fs: Ignoring removed mblk_io_submit option
[   59.476515][ T5195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.505389][ T5195] EXT4-fs (loop3): 1 truncate cleaned up
[   59.531670][ T5195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.546003][   T29] audit: type=1400 audit(1746736122.422:676): avc:  denied  { write } for  pid=5194 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   59.566767][   T29] audit: type=1400 audit(1746736122.422:677): avc:  denied  { read } for  pid=5207 comm="syz.5.454" path="socket:[9732]" dev="sockfs" ino=9732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   59.618324][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.645051][ T5221] @: renamed from vlan0 (while UP)
[   59.730666][ T5233] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   59.743049][ T5230] loop1: detected capacity change from 0 to 512
[   59.754678][ T5236] netlink: 4 bytes leftover after parsing attributes in process `gtp'.
[   59.764021][ T5236] hsr_slave_0: left promiscuous mode
[   59.764263][ T5230] EXT4-fs: Ignoring removed i_version option
[   59.790144][ T5236] hsr_slave_1: left promiscuous mode
[   59.835901][ T5244] team0 (unregistering): Port device team_slave_0 removed
[   59.845850][ T5244] team0 (unregistering): Port device team_slave_1 removed
[   59.853788][ T5230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.867025][ T5242] loop3: detected capacity change from 0 to 8192
[   59.890394][ T5230] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.946822][ T3391] usb usb12-port1: attempt power cycle
[   59.995225][ T5262] netem: change failed
[   60.006661][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.063445][ T5272] loop6: detected capacity change from 0 to 128
[   60.080927][ T5272] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   60.095584][ T5272] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   60.207524][ T4029] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   60.646201][ T5336] syzkaller0: entered promiscuous mode
[   60.651840][ T5336] syzkaller0: entered allmulticast mode
[   61.020711][ T5370] loop1: detected capacity change from 0 to 128
[   61.320092][ T5383] pim6reg1: entered promiscuous mode
[   61.325528][ T5383] pim6reg1: entered allmulticast mode
[   61.539984][ T5401] loop5: detected capacity change from 0 to 2048
[   61.587073][ T5401]  loop5: p1 < > p4
[   61.591641][ T5401] loop5: p4 size 8388608 extends beyond EOD, truncated
[   61.698994][ T5423] pim6reg1: entered promiscuous mode
[   61.702611][ T5419] loop3: detected capacity change from 0 to 8192
[   61.704430][ T5423] pim6reg1: entered allmulticast mode
[   61.735920][ T5426] Cannot find set identified by id 0 to match
[   61.777080][ T3391] usb usb12-port1: unable to enumerate USB device
[   61.939074][ T5442] __nla_validate_parse: 10 callbacks suppressed
[   61.939093][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[   62.122254][ T5452] loop5: detected capacity change from 0 to 512
[   62.139801][ T5452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   62.544498][ T5478] netlink: 24 bytes leftover after parsing attributes in process `syz.6.532'.
[   62.736723][ T5483] netlink: 'syz.3.534': attribute type 7 has an invalid length.
[   62.744747][ T5483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'.
[   62.958295][ T5488] loop6: detected capacity change from 0 to 1024
[   62.978298][ T5488] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.995132][ T5488] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.536: bg 0: block 393: padding at end of block bitmap is not set
[   63.009925][ T5488] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[   63.022627][ T5488] EXT4-fs (loop6): This should not happen!! Data will be lost
[   63.022627][ T5488] 
[   63.058937][ T5493] loop6: detected capacity change from 0 to 1024
[   63.065849][ T5493] EXT4-fs: Ignoring removed nobh option
[   63.072331][ T5493] EXT4-fs: Ignoring removed bh option
[   63.132817][ T1004] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   63.187853][ T5499] syzkaller0: entered promiscuous mode
[   63.193461][ T5499] syzkaller0: entered allmulticast mode
[   63.223439][ T3559] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[   63.231006][ T3559] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[   63.238544][ T3559] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[   63.247762][ T3559] hid-generic 0000:0004:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   63.450203][   T29] kauditd_printk_skb: 425 callbacks suppressed
[   63.450229][   T29] audit: type=1326 audit(1746736126.332:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.480203][   T29] audit: type=1326 audit(1746736126.332:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.514023][ T5513] loop6: detected capacity change from 0 to 512
[   63.525146][ T5513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   63.559118][ T5513] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.563738][   T29] audit: type=1326 audit(1746736126.332:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.593163][   T29] audit: type=1326 audit(1746736126.332:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.616560][   T29] audit: type=1326 audit(1746736126.332:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.639944][   T29] audit: type=1326 audit(1746736126.332:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.652516][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'.
[   63.663289][   T29] audit: type=1326 audit(1746736126.332:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.663325][   T29] audit: type=1326 audit(1746736126.332:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.719201][   T29] audit: type=1400 audit(1746736126.332:1111): avc:  denied  { mount } for  pid=5510 comm="syz.1.544" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   63.741419][   T29] audit: type=1326 audit(1746736126.332:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c69c9e969 code=0x7ffc0000
[   63.903117][ T5525] netlink: 'syz.6.547': attribute type 4 has an invalid length.
[   63.933001][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[   63.944122][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[   63.956768][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[   63.967807][ T5525] netlink: 'syz.6.547': attribute type 4 has an invalid length.
[   64.007711][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[   64.016992][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[   64.041005][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[   64.069339][ T5541] loop5: detected capacity change from 0 to 512
[   64.076023][ T5541] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.107876][ T5541] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   64.116138][ T5542] loop3: detected capacity change from 0 to 8192
[   64.122663][ T5541] EXT4-fs (loop5): orphan cleanup on readonly fs
[   64.139586][ T5541] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   64.156566][ T5541] EXT4-fs (loop5): Cannot turn on quotas: error -117
[   64.163720][ T5541] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.554: bg 0: block 40: padding at end of block bitmap is not set
[   64.178708][ T5541] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   64.189035][ T5541] EXT4-fs (loop5): 1 truncate cleaned up
[   64.199924][ T5541] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.554: corrupted xattr block 31: invalid header
[   64.213726][ T5541] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=16
[   64.223367][ T5541] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.554: corrupted xattr block 31: invalid header
[   64.238669][ T5541] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=16
[   64.248131][ T5541] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.554: bad symlink.
[   64.259186][ T5553] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.554: corrupted xattr block 31: invalid header
[   64.273112][ T5553] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=16
[   64.283015][ T5553] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.554: bad symlink.
[   64.894731][ T5588] tipc: Started in network mode
[   64.899816][ T5588] tipc: Node identity ac14140f, cluster identity 4711
[   64.899880][ T5586] loop5: detected capacity change from 0 to 512
[   64.913669][ T5588] tipc: New replicast peer: 10.1.1.2
[   64.919136][ T5588] tipc: Enabled bearer <udp:syz0>, priority 10
[   64.920470][ T5586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   64.947381][ T5586] EXT4-fs (loop5): 1 truncate cleaned up
[   65.000877][ T5596] bridge_slave_1: left allmulticast mode
[   65.006766][ T5596] bridge_slave_1: left promiscuous mode
[   65.012656][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.012943][ T5598] loop5: detected capacity change from 0 to 512
[   65.026492][ T5598] EXT4-fs: inline encryption not supported
[   65.033066][ T5596] bridge_slave_0: left allmulticast mode
[   65.038823][ T5596] bridge_slave_0: left promiscuous mode
[   65.044547][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.052586][ T5598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   65.082721][ T5598] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.329160][ T5609] loop1: detected capacity change from 0 to 1024
[   65.361431][ T5609] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.574: Failed to acquire dquot type 0
[   65.389962][ T5609] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   65.439510][ T5609] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.574: corrupted inode contents
[   65.457083][ T5609] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.574: mark_inode_dirty error
[   65.468706][ T5609] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.574: corrupted inode contents
[   65.481425][ T5609] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.574: mark_inode_dirty error
[   65.493386][ T5609] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.574: corrupted inode contents
[   65.533236][ T5609] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   65.540746][ T5626] loop5: detected capacity change from 0 to 256
[   65.545252][ T5609] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.574: corrupted inode contents
[   65.571785][ T5609] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.574: mark_inode_dirty error
[   65.624008][ T5635] smc: net device bond0 erased user defined pnetid SYZ2
[   65.631352][ T5609] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   65.665705][ T5609] EXT4-fs (loop1): 1 truncate cleaned up
[   65.686907][ T5609] EXT4-fs: Ignoring removed orlov option
[   65.692664][ T5609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.711603][ T5609] EXT4-fs (loop1): can't enable nombcache during remount
[   65.871457][ T5669] netlink: 'syz.5.585': attribute type 1 has an invalid length.
[   65.913021][ T5669] bond0: entered promiscuous mode
[   65.918223][ T5669] bond_slave_0: entered promiscuous mode
[   65.924027][ T5669] bond_slave_1: entered promiscuous mode
[   65.938767][ T5669] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   65.952518][ T5669] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   65.984520][ T5682] loop3: detected capacity change from 0 to 512
[   65.991463][ T5682] EXT4-fs: Ignoring removed orlov option
[   65.999531][ T5682] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.587: corrupted in-inode xattr: invalid ea_ino
[   66.014902][ T5682] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.587: couldn't read orphan inode 15 (err -117)
[   66.029459][ T5687] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   66.029459][ T5687]    program syz.5.588 not setting count and/or reply_len properly
[   66.037961][ T3559] tipc: Node number set to 2886997007
[   66.066328][ T5682] netlink: 'syz.3.587': attribute type 10 has an invalid length.
[   66.078182][ T5691] loop5: detected capacity change from 0 to 1024
[   66.085259][ T5691] EXT4-fs: Ignoring removed orlov option
[   66.158607][ T5700] loop3: detected capacity change from 0 to 1024
[   66.166041][ T5700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   66.177642][ T5700] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   66.194076][ T5700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   66.208295][ T5700] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1)
[   66.227145][ T5700] EXT4-fs (loop3): Remounting filesystem read-only
[   66.242354][ T5700] EXT4-fs (loop3): 1 orphan inode deleted
[   66.276225][ T5700] loop3: detected capacity change from 0 to 512
[   66.287980][ T5700] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1
[   66.384265][ T5700] EXT4-fs (loop3): 1 truncate cleaned up
[   66.396193][ T5700] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.450547][ T5730] loop3: detected capacity change from 0 to 1024
[   66.460654][ T5730] EXT4-fs: Ignoring removed orlov option
[   66.466445][ T5730] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.930723][ T5774] loop6: detected capacity change from 0 to 512
[   66.974084][ T5774] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[   67.208657][ T5788] loop5: detected capacity change from 0 to 512
[   67.239292][ T5788] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   67.246519][ T5797] netlink: 'syz.6.599': attribute type 1 has an invalid length.
[   67.247286][ T5788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   67.263347][ T5788] System zones: 0-1, 15-15, 18-18, 34-34
[   67.269772][ T5788] EXT4-fs (loop5): orphan cleanup on readonly fs
[   67.276249][ T5788] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   67.290949][ T5788] EXT4-fs (loop5): Cannot turn on quotas: error -22
[   67.303057][ T5797] bond0: entered promiscuous mode
[   67.308256][ T5797] bond_slave_0: entered promiscuous mode
[   67.314029][ T5797] bond_slave_1: entered promiscuous mode
[   67.331397][ T5797] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   67.355658][ T5788] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.608: bg 0: block 40: padding at end of block bitmap is not set
[   67.371336][ T5797] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   67.430648][ T5788] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   67.466345][ T5788] EXT4-fs (loop5): 1 truncate cleaned up
[   67.881684][ T5833] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   68.182884][ T5840] loop3: detected capacity change from 0 to 8192
[   68.208099][ T5840] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ÎÆ°*Æìì#Ë'
[   68.338733][ T5843] hub 2-0:1.0: USB hub found
[   68.346867][ T5843] hub 2-0:1.0: 8 ports detected
[   68.513464][   T29] kauditd_printk_skb: 107 callbacks suppressed
[   68.513482][   T29] audit: type=1400 audit(1746736131.392:1212): avc:  denied  { mount } for  pid=5850 comm="syz.3.613" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   68.542148][   T29] audit: type=1400 audit(1746736131.392:1213): avc:  denied  { write } for  pid=5850 comm="syz.3.613" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   68.562881][   T29] audit: type=1400 audit(1746736131.392:1214): avc:  denied  { open } for  pid=5850 comm="syz.3.613" path="/129/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   68.581639][ T5849] syzkaller0: entered promiscuous mode
[   68.590599][ T5849] syzkaller0: entered allmulticast mode
[   68.915075][   T29] audit: type=1400 audit(1746736131.432:1215): avc:  denied  { unmount } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   68.958464][ T5864] __nla_validate_parse: 6 callbacks suppressed
[   68.958479][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'.
[   68.989404][   T29] audit: type=1400 audit(1746736131.842:1216): avc:  denied  { setopt } for  pid=5859 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   69.009136][   T29] audit: type=1400 audit(1746736131.862:1217): avc:  denied  { firmware_load } for  pid=5859 comm="syz.3.615" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   69.126986][   T29] audit: type=1400 audit(1746736132.012:1218): avc:  denied  { mount } for  pid=5870 comm="syz.5.619" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   69.132982][ T5871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.169223][ T5871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.242303][   T29] audit: type=1400 audit(1746736132.012:1219): avc:  denied  { read write } for  pid=5870 comm="syz.5.619" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.265772][   T29] audit: type=1400 audit(1746736132.012:1220): avc:  denied  { open } for  pid=5870 comm="syz.5.619" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.289175][   T29] audit: type=1400 audit(1746736132.012:1221): avc:  denied  { ioctl } for  pid=5870 comm="syz.5.619" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.561054][ T5891] netlink: 71 bytes leftover after parsing attributes in process `syz.3.625'.
[   69.764613][ T5901] loop1: detected capacity change from 0 to 512
[   69.776585][ T5901] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.785393][ T5901] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   69.795493][ T5899] loop5: detected capacity change from 0 to 2048
[   69.815937][ T5901] EXT4-fs (loop1): 1 truncate cleaned up
[   69.822369][ T5901] EXT4-fs mount: 29 callbacks suppressed
[   69.822427][ T5901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.829927][ T5899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.841818][ T5901] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.868265][ T5907] pim6reg1: entered promiscuous mode
[   69.873641][ T5907] pim6reg1: entered allmulticast mode
[   69.972133][ T5915] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   69.987509][ T5916] loop3: detected capacity change from 0 to 8192
[   69.999703][ T5915] vhci_hcd: default hub control req: 6011 v8001 i0001 l0
[   70.070172][ T5924] netlink: 71 bytes leftover after parsing attributes in process `syz.6.638'.
[   70.138601][ T5930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.145979][ T5930] IPv6: NLM_F_CREATE should be set when creating new route
[   70.154688][ T5930] lo: entered allmulticast mode
[   70.206157][ T5930] tunl0: entered allmulticast mode
[   70.212978][ T5930] gre0: entered allmulticast mode
[   70.221899][ T5930] gretap0: entered allmulticast mode
[   70.232418][ T5930] erspan0: entered allmulticast mode
[   70.240936][ T5934] loop3: detected capacity change from 0 to 512
[   70.250172][ T5930] ip_vti0: entered allmulticast mode
[   70.255757][ T5934] EXT4-fs: Ignoring removed nobh option
[   70.257064][ T5930] ip6_vti0: entered allmulticast mode
[   70.268719][ T5930] sit0: entered allmulticast mode
[   70.274543][ T5934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   70.276683][ T5930] ip6tnl0: entered allmulticast mode
[   70.291850][ T5930] ip6gre0: entered allmulticast mode
[   70.299111][ T5930] syz_tun: entered allmulticast mode
[   70.306219][ T5930] ip6gretap0: entered allmulticast mode
[   70.314095][ T5934] EXT4-fs (loop3): 1 truncate cleaned up
[   70.320486][ T5934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.333235][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.340584][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.363309][ T5930] bridge0: entered allmulticast mode
[   70.370321][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.370338][ T5930] vcan0: entered allmulticast mode
[   70.385970][ T5930] bond0: entered allmulticast mode
[   70.391262][ T5930] bond_slave_0: entered allmulticast mode
[   70.397136][ T5930] bond_slave_1: entered allmulticast mode
[   70.405189][ T5930] dummy0: entered allmulticast mode
[   70.412274][ T5930] nlmon0: entered allmulticast mode
[   70.425639][ T5930] caif0: entered allmulticast mode
[   70.432746][ T5930] vxcan0: entered allmulticast mode
[   70.439138][ T5930] vxcan1: entered allmulticast mode
[   70.445259][ T5930] veth0: entered allmulticast mode
[   70.495291][ T5930] veth1: entered allmulticast mode
[   70.502237][ T5930] wg0: entered allmulticast mode
[   70.508550][ T5930] wg1: entered allmulticast mode
[   70.514963][ T5930] wg2: entered allmulticast mode
[   70.521092][ T5930] veth0_to_bridge: entered allmulticast mode
[   70.530010][ T5930] veth1_to_bridge: entered allmulticast mode
[   70.539106][ T5930] veth0_to_bond: entered allmulticast mode
[   70.550313][ T5930] veth1_to_bond: entered allmulticast mode
[   70.558502][ T5930] veth0_to_team: entered allmulticast mode
[   70.565538][ T5930] team_slave_0: entered allmulticast mode
[   70.571790][ T5930] veth1_to_team: entered allmulticast mode
[   70.578866][ T5930] team_slave_1: entered allmulticast mode
[   70.585013][ T5930] veth0_to_batadv: entered allmulticast mode
[   70.592531][ T5930] batadv_slave_0: entered allmulticast mode
[   70.599105][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'.
[   70.609351][ T5930] veth1_to_batadv: entered allmulticast mode
[   70.616806][ T5930] batadv_slave_1: entered allmulticast mode
[   70.624559][ T5930] xfrm0: entered allmulticast mode
[   70.631434][ T5930] veth0_to_hsr: entered allmulticast mode
[   70.639007][ T5930] hsr_slave_0: entered allmulticast mode
[   70.645663][ T5930] veth1_to_hsr: entered allmulticast mode
[   70.653434][ T5930] hsr_slave_1: entered allmulticast mode
[   70.659996][ T5930] veth1_virt_wifi: entered allmulticast mode
[   70.667468][ T5930] veth0_virt_wifi: entered allmulticast mode
[   70.668216][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.674812][ T5930] veth1_vlan: entered allmulticast mode
[   70.689236][ T5930] veth0_vlan: entered allmulticast mode
[   70.698798][ T5930] vlan0: entered allmulticast mode
[   70.704115][ T5930] vlan1: entered allmulticast mode
[   70.704475][ T5945] loop5: detected capacity change from 0 to 512
[   70.715717][ T5930] macvlan0: entered allmulticast mode
[   70.716278][ T5945] EXT4-fs: Ignoring removed orlov option
[   70.726936][ T5945] EXT4-fs: Ignoring removed oldalloc option
[   70.732894][ T5930] macvlan1: entered allmulticast mode
[   70.734470][ T5945] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters
[   70.739675][ T5930] ipvlan0: entered allmulticast mode
[   70.754294][ T5945] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.646: Parent and EA inode have the same ino 15
[   70.758681][ T5930] ipvlan1: entered allmulticast mode
[   70.772049][ T5945] EXT4-fs (loop5): 1 orphan inode deleted
[   70.782013][ T5930] geneve0: entered allmulticast mode
[   70.782400][ T5945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.799670][ T5930] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.808718][ T5930] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.817665][ T5930] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.826740][ T5930] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.836252][ T5930] geneve1: entered allmulticast mode
[   70.836737][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.850877][ T5930] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[   70.866862][ T5930] netdevsim netdevsim6 netdevsim1: entered allmulticast mode
[   70.877209][ T5930] netdevsim netdevsim6 netdevsim2: entered allmulticast mode
[   70.885463][ T5930] netdevsim netdevsim6 netdevsim3: entered allmulticast mode
[   70.894677][ T5930] bond1: entered allmulticast mode
[   70.899914][ T5930] macvlan2: entered allmulticast mode
[   70.905705][ T5930] bond0: left promiscuous mode
[   70.910578][ T5930] bond_slave_0: left promiscuous mode
[   70.916220][ T5930] bond_slave_1: left promiscuous mode
[   70.921612][ T5952] loop1: detected capacity change from 0 to 512
[   70.929247][ T5952] EXT4-fs (loop1): orphan cleanup on readonly fs
[   70.935932][ T5952] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.649: bad orphan inode 13
[   70.949554][ T5952] ext4_test_bit(bit=12, block=18) = 1
[   70.955054][ T5952] is_bad_inode(inode)=0
[   70.959295][ T5952] NEXT_ORPHAN(inode)=2130706432
[   70.964170][ T5952] max_ino=32
[   70.967422][ T5952] i_nlink=1
[   70.971767][ T5952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.000683][ T5956] loop6: detected capacity change from 0 to 164
[   71.009623][ T5956] ISOFS: unable to read i-node block
[   71.011490][ T5958] sit0: entered promiscuous mode
[   71.015101][ T5956] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   71.023143][ T5958] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[   71.031260][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.036899][ T5958] netlink: 1 bytes leftover after parsing attributes in process `syz.0.651'.
[   71.131935][ T5960] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   71.131953][ T3392] IPVS: starting estimator thread 0...
[   71.150392][ T5965] netlink: 'syz.1.652': attribute type 13 has an invalid length.
[   71.226505][ T5966] IPVS: using max 2448 ests per chain, 122400 per kthread
[   71.278318][ T5965] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.287461][ T5965] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.296723][ T5965] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.305608][ T5965] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.401299][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'.
[   71.419133][ T5978] loop1: detected capacity change from 0 to 164
[   71.436325][ T5978] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   71.544205][ T5985] loop1: detected capacity change from 0 to 512
[   71.550987][ T5985] EXT4-fs: inline encryption not supported
[   71.557534][ T5985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   71.588994][ T5985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   71.601991][ T5985] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.693712][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'.
[   71.722730][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   71.798962][ T5999] loop3: detected capacity change from 0 to 512
[   71.805749][ T5999] EXT4-fs: Ignoring removed nobh option
[   71.812133][ T5999] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.819085][ T5999] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   71.832363][ T5999] EXT4-fs (loop3): 1 truncate cleaned up
[   71.839766][ T6000] netlink: 'syz.1.663': attribute type 4 has an invalid length.
[   71.847284][ T5999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.878577][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.271716][ T6013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'.
[   72.720528][ T6035] loop5: detected capacity change from 0 to 1024
[   72.727464][ T6035] EXT4-fs: Ignoring removed orlov option
[   72.733381][ T6035] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.750660][ T6035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.506307][ T6050] netlink: 4 bytes leftover after parsing attributes in process `gtp'.
[   73.523225][ T6056] loop6: detected capacity change from 0 to 1024
[   73.530784][ T6056] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   73.541986][ T6056] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   73.633603][ T6056] JBD2: no valid journal superblock found
[   73.639520][ T6056] EXT4-fs (loop6): Could not load journal inode
[   73.646328][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.679054][   T29] kauditd_printk_skb: 239 callbacks suppressed
[   73.679071][   T29] audit: type=1400 audit(1746736136.562:1461): avc:  denied  { write } for  pid=6058 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   73.705994][ T6059] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.724745][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.684'.
[   73.728435][ T6059] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   73.741289][   T29] audit: type=1400 audit(1746736136.592:1462): avc:  denied  { write } for  pid=6060 comm="syz.5.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   73.760690][   T29] audit: type=1400 audit(1746736136.592:1463): avc:  denied  { setopt } for  pid=6060 comm="syz.5.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   73.767975][ T6056] netlink: 'syz.6.684': attribute type 13 has an invalid length.
[   73.937111][   T29] audit: type=1400 audit(1746736136.812:1464): avc:  denied  { read } for  pid=6051 comm="syz.1.683" path="socket:[12074]" dev="sockfs" ino=12074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   74.088290][   T29] audit: type=1400 audit(1746736136.972:1465): avc:  denied  { mount } for  pid=6073 comm="syz.3.690" name="/" dev="ramfs" ino=12374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   74.160478][ T6074] loop3: detected capacity change from 0 to 2048
[   74.183405][ T6077] loop6: detected capacity change from 0 to 164
[   74.192397][ T6077] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   74.206051][   T29] audit: type=1400 audit(1746736137.082:1466): avc:  denied  { remount } for  pid=6076 comm="syz.6.691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   74.227421][ T6074]  loop3: p1 < > p4
[   74.231817][ T6077] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   74.265226][ T6074] loop3: p4 size 8388608 extends beyond EOD, truncated
[   74.277287][ T6077] rock: directory entry would overflow storage
[   74.283528][ T6077] rock: sig=0x4f50, size=4, remaining=3
[   74.289261][ T6077] iso9660: Corrupted directory entry in block 4 of inode 1792
[   74.343412][   T29] audit: type=1400 audit(1746736137.202:1467): avc:  denied  { mounton } for  pid=6073 comm="syz.3.690" path="/dev/loop3p1" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   74.459654][   T29] audit: type=1400 audit(1746736137.342:1468): avc:  denied  { read write } for  pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.492291][   T29] audit: type=1400 audit(1746736137.342:1469): avc:  denied  { open } for  pid=3322 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.516679][   T29] audit: type=1400 audit(1746736137.342:1470): avc:  denied  { ioctl } for  pid=3322 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.528551][ T6080] loop3: detected capacity change from 0 to 512
[   74.561287][ T6082] loop6: detected capacity change from 0 to 256
[   74.579635][ T6080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.610355][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.623733][ T6080] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.677252][   T36] hid-generic 0000:0004:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   74.793839][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.881901][ T6091] loop6: detected capacity change from 0 to 8192
[   74.902773][ T6101] 9pnet_fd: Insufficient options for proto=fd
[   75.138128][ T6111] loop5: detected capacity change from 0 to 512
[   75.155650][ T6111] EXT4-fs: Ignoring removed orlov option
[   75.176702][ T6111] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.706: corrupted in-inode xattr: invalid ea_ino
[   75.195915][ T6110] loop3: detected capacity change from 0 to 512
[   75.203310][ T6110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   75.212242][ T6111] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.706: couldn't read orphan inode 15 (err -117)
[   75.229967][ T6111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.243641][ T6110] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm +}[@: invalid block
[   75.336948][ T6110] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 4294967295 (level 1)
[   75.353839][ T6110] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 4294967295 (level 1)
[   75.390813][ T6110] EXT4-fs (loop3): 2 truncates cleaned up
[   75.397115][ T6110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.453495][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.510847][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.701828][ T6129] loop5: detected capacity change from 0 to 512
[   75.731133][ T6129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.766993][ T6129] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.856096][ T6139] __nla_validate_parse: 2 callbacks suppressed
[   75.856137][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.714'.
[   75.914363][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.938747][ T6143] loop6: detected capacity change from 0 to 2048
[   75.962581][ T6143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.977267][ T6143] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.521125][ T6165] loop3: detected capacity change from 0 to 256
[   76.566622][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.721010][ T6171] 
@ÿ: renamed from veth0_vlan
[   76.936626][ T6182] loop3: detected capacity change from 0 to 128
[   76.954950][ T6157] Set syz1 is full, maxelem 65536 reached
[   77.052519][ T6190] geneve0: entered allmulticast mode
[   77.786900][ T6203] SELinux: ebitmap: truncated map
[   77.799240][ T6203] SELinux: failed to load policy
[   77.931422][ T6209] loop5: detected capacity change from 0 to 8192
[   78.349728][ T6231] loop6: detected capacity change from 0 to 512
[   78.357988][ T6229] ref_ctr_offset mismatch. inode: 0x3a3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8
[   78.376728][ T6231] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   78.391964][ T6229] syz.0.744 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   78.416501][ T6231] EXT4-fs (loop6): 1 truncate cleaned up
[   78.428590][ T6231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.529566][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'.
[   78.553135][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'.
[   78.735896][   T29] kauditd_printk_skb: 267 callbacks suppressed
[   78.735956][   T29] audit: type=1326 audit(1746736141.612:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   78.765523][   T29] audit: type=1326 audit(1746736141.612:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   78.794120][   T29] audit: type=1326 audit(1746736141.612:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   78.817369][   T29] audit: type=1326 audit(1746736141.612:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   78.871574][   T29] audit: type=1400 audit(1746736141.722:1742): avc:  denied  { write } for  pid=6243 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   78.891081][   T29] audit: type=1400 audit(1746736141.742:1743): avc:  denied  { connect } for  pid=6249 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   78.954878][   T29] audit: type=1326 audit(1746736141.832:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   78.983236][ T6255] loop3: detected capacity change from 0 to 1024
[   78.996998][ T6255] EXT4-fs: Ignoring removed orlov option
[   79.038446][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.106986][   T29] audit: type=1326 audit(1746736141.832:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   79.130599][   T29] audit: type=1326 audit(1746736141.832:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   79.154848][   T29] audit: type=1326 audit(1746736141.832:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f7cde969 code=0x7ffc0000
[   79.184105][ T6257] loop5: detected capacity change from 0 to 8192
[   79.288991][ T6257]  loop5: p1 p2 < > p3 p4 < p5 >
[   79.294148][ T6257] loop5: partition table partially beyond EOD, truncated
[   79.386052][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.401658][ T6257] loop5: p1 size 100663296 extends beyond EOD, truncated
[   79.434600][ T6257] loop5: p2 start 591104 is beyond EOD, truncated
[   79.441218][ T6257] loop5: p3 start 33572980 is beyond EOD, truncated
[   79.461856][ T6257] loop5: p5 size 100663296 extends beyond EOD, truncated
[   79.628127][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'.
[   79.646799][ T6275] netlink: 'syz.1.760': attribute type 4 has an invalid length.
[   80.016965][ T6289] loop5: detected capacity change from 0 to 2048
[   80.050644][ T6289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.105048][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.499434][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.648873][ T6311] loop6: detected capacity change from 0 to 8192
[   80.660043][ T6320] loop5: detected capacity change from 0 to 1024
[   80.711964][ T6320] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.769: Failed to acquire dquot type 0
[   80.752178][ T6320] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   80.766675][ T6329] Driver unsupported XDP return value 0 on prog  (id 570) dev N/A, expect packet loss!
[   80.772122][ T6320] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.769: corrupted inode contents
[   80.788551][ T6320] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.769: mark_inode_dirty error
[   80.923881][ T6335] loop6: detected capacity change from 0 to 1024
[   80.934260][ T6320] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.769: corrupted inode contents
[   80.947156][ T6320] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.769: mark_inode_dirty error
[   80.958776][ T6320] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.769: corrupted inode contents
[   81.016929][ T6320] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[   81.036740][ T6334] wireguard0: entered promiscuous mode
[   81.042275][ T6334] wireguard0: entered allmulticast mode
[   81.051035][ T6335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.074180][ T6320] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.769: corrupted inode contents
[   81.117051][ T6320] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.769: mark_inode_dirty error
[   81.187423][ T6320] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[   81.247534][ T6320] EXT4-fs (loop5): 1 truncate cleaned up
[   81.269593][ T6320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.368058][ T6320] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[   81.893283][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.064970][ T6406] loop6: detected capacity change from 0 to 512
[   82.082670][ T6406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   82.107380][ T6406] EXT4-fs (loop6): 1 truncate cleaned up
[   82.114094][ T6406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.124955][ T6429] loop3: detected capacity change from 0 to 1024
[   83.447880][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.478566][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.523743][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.675456][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.788958][ T6449] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[   83.805186][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'.
[   83.836481][   T29] kauditd_printk_skb: 97 callbacks suppressed
[   83.836498][   T29] audit: type=1400 audit(1746736146.682:1843): avc:  denied  { ioctl } for  pid=6446 comm="syz.3.784" path="socket:[12805]" dev="sockfs" ino=12805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   84.002401][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.783'.
[   84.461993][ T6462] loop5: detected capacity change from 0 to 1024
[   84.537245][ T6462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.614777][ T6465] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.787: bg 0: block 88: padding at end of block bitmap is not set
[   84.689391][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.786'.
[   84.830594][ T6469] xt_TCPMSS: Only works on TCP SYN packets
[   84.853918][   T29] audit: type=1400 audit(1746736147.732:1844): avc:  denied  { create } for  pid=6467 comm="syz.6.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   84.938671][   T29] audit: type=1400 audit(1746736147.762:1845): avc:  denied  { bind } for  pid=6470 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   84.957992][   T29] audit: type=1400 audit(1746736147.762:1846): avc:  denied  { write } for  pid=6467 comm="syz.6.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   84.977329][   T29] audit: type=1326 audit(1746736147.762:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   85.000882][   T29] audit: type=1326 audit(1746736147.762:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   85.024283][   T29] audit: type=1326 audit(1746736147.762:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   85.047796][   T29] audit: type=1326 audit(1746736147.762:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   85.071226][   T29] audit: type=1326 audit(1746736147.762:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   85.094615][   T29] audit: type=1326 audit(1746736147.762:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.6.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   85.219766][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.318828][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'.
[   85.425660][ T6486] TCP: out of memory -- consider tuning tcp_mem
[   85.470451][ T6490] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[   85.500231][ T6490] bond0: (slave bond_slave_0): Releasing backup interface
[   85.500631][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.798'.
[   85.663476][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'.
[   85.851210][ T6501] vlan2: entered allmulticast mode
[   86.221485][ T6513] batman_adv: batadv0: Adding interface: dummy0
[   86.228315][ T6513] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.278691][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'.
[   86.287694][ T6513] batman_adv: batadv0: Interface activated: dummy0
[   86.295019][ T6518] netlink: 'syz.3.807': attribute type 4 has an invalid length.
[   86.313812][ T6521] batadv0: mtu less than device minimum
[   86.319896][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.330825][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.341586][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.352363][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.353905][ T6522] netlink: 'syz.3.807': attribute type 4 has an invalid length.
[   86.363116][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.381394][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.392389][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.403156][ T6521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   86.958501][ T6544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.813'.
[   87.142691][ T6546] netlink: 'syz.0.814': attribute type 39 has an invalid length.
[   87.383317][ T6556] 9pnet_virtio: no channels available for device syz
[   87.842392][ T6569] netlink: 4 bytes leftover after parsing attributes in process `M#^(]:[:,]—ì)'.
[   87.995568][ T6583] loop6: detected capacity change from 0 to 512
[   88.045624][ T6583] EXT4-fs (loop6): 1 orphan inode deleted
[   88.052040][ T6583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.065435][ T3339] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1
[   88.089090][ T6583] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.332794][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.846544][   T29] kauditd_printk_skb: 273 callbacks suppressed
[   88.846558][   T29] audit: type=1326 audit(1746736151.732:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   88.916238][   T29] audit: type=1326 audit(1746736151.762:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   88.939845][   T29] audit: type=1326 audit(1746736151.762:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   88.963348][   T29] audit: type=1326 audit(1746736151.762:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   88.986727][   T29] audit: type=1326 audit(1746736151.762:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   89.010170][   T29] audit: type=1326 audit(1746736151.762:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   89.033721][   T29] audit: type=1326 audit(1746736151.762:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   89.057127][   T29] audit: type=1326 audit(1746736151.762:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   89.080441][   T29] audit: type=1326 audit(1746736151.762:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   89.103928][   T29] audit: type=1326 audit(1746736151.762:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17a4d1e969 code=0x7ffc0000
[   89.191303][ T6612] batadv_slave_0: entered promiscuous mode
[   89.208875][ T6612] __nla_validate_parse: 1 callbacks suppressed
[   89.208905][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.836'.
[   89.317039][ T6612] batadv_slave_0 (unregistering): left promiscuous mode
[   89.588329][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.838'.
[   90.095313][ T6631] loop5: detected capacity change from 0 to 512
[   90.136537][ T6631] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.842: bg 0: block 5: invalid block bitmap
[   90.171857][ T6631] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   90.188713][ T6631] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.842: invalid indirect mapped block 3 (level 2)
[   90.236948][ T6631] EXT4-fs (loop5): 2 truncates cleaned up
[   90.243088][ T6631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.267215][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'.
[   90.354127][ T6642] netlink: 36 bytes leftover after parsing attributes in process `syz.6.846'.
[   90.420558][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.489245][ T6649] loop6: detected capacity change from 0 to 512
[   90.495930][ T6649] EXT4-fs: inline encryption not supported
[   90.502343][ T6649] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   90.529278][ T6649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   90.542011][ T6649] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.834264][ T4029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   90.861915][ T6673] loop3: detected capacity change from 0 to 512
[   90.908271][ T6673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.932028][ T6677] tipc: Started in network mode
[   90.937165][ T6677] tipc: Node identity ac14140f, cluster identity 4711
[   90.945524][ T6677] tipc: New replicast peer: 255.255.255.255
[   90.951873][ T6677] tipc: Enabled bearer <udp:syz2>, priority 10
[   90.974451][ T6673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.002317][ T6673] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.058482][ T6689] batman_adv: batadv0: Adding interface: vxlan0
[   91.064860][ T6689] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.090217][ T6689] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active
[   91.267989][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.279729][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.865'.
[   91.288776][ T6702] netlink: 108 bytes leftover after parsing attributes in process `syz.5.865'.
[   91.300565][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.865'.
[   91.322493][ T6702] netlink: 108 bytes leftover after parsing attributes in process `syz.5.865'.
[   91.331600][ T6702] netlink: 84 bytes leftover after parsing attributes in process `syz.5.865'.
[   91.820495][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.867'.
[   91.863716][ T6708] batman_adv: batadv0: Interface deactivated: dummy0
[   91.870842][ T6708] batman_adv: batadv0: Removing interface: dummy0
[   91.909348][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.916953][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.948721][    T9] tipc: Node number set to 2886997007
[   92.010250][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.017731][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.068818][ T6708] batman_adv: batadv0: Removing interface: vxlan0
[   92.404440][ T6731] loop5: detected capacity change from 0 to 512
[   92.419410][ T6731] EXT4-fs: Ignoring removed oldalloc option
[   92.497660][ T6731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.517298][ T6731] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.662889][ T6744] hub 2-0:1.0: USB hub found
[   92.672302][ T6744] hub 2-0:1.0: 8 ports detected
[   92.697883][ T5417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.828818][ T6746] Falling back ldisc for ttyS3.
[   93.244104][ T6762] batadv1: entered allmulticast mode
[   93.250150][ T6762] 8021q: adding VLAN 0 to HW filter on device batadv1
[   93.767484][ T6773] binfmt_misc: register: failed to install interpreter file ./file2
[   94.356389][   T29] kauditd_printk_skb: 361 callbacks suppressed
[   94.362709][   T29] audit: type=1400 audit(1746736157.232:2496): avc:  denied  { execmem } for  pid=6776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   94.410256][   T29] audit: type=1400 audit(1746736157.262:2497): avc:  denied  { map_create } for  pid=6778 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   94.429584][   T29] audit: type=1400 audit(1746736157.262:2498): avc:  denied  { prog_load } for  pid=6778 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   94.448781][   T29] audit: type=1400 audit(1746736157.262:2499): avc:  denied  { map_create } for  pid=6780 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   94.468020][   T29] audit: type=1400 audit(1746736157.272:2500): avc:  denied  { create } for  pid=6778 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[   94.487450][   T29] audit: type=1400 audit(1746736157.272:2501): avc:  denied  { create } for  pid=6778 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[   94.506962][   T29] audit: type=1400 audit(1746736157.272:2502): avc:  denied  { create } for  pid=6778 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[   94.526428][   T29] audit: type=1400 audit(1746736157.272:2503): avc:  denied  { prog_load } for  pid=6780 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   94.545449][   T29] audit: type=1400 audit(1746736157.272:2504): avc:  denied  { prog_load } for  pid=6780 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   94.564509][   T29] audit: type=1400 audit(1746736157.272:2505): avc:  denied  { create } for  pid=6780 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0
[   97.867728][ T6820] sit0: entered promiscuous mode
[   97.872890][ T6820] netlink: 'syz.1.905': attribute type 1 has an invalid length.
[   97.880611][ T6820] __nla_validate_parse: 3 callbacks suppressed
[   97.880647][ T6820] netlink: 1 bytes leftover after parsing attributes in process `syz.1.905'.
[   98.981727][ T6829] netlink: 'syz.3.911': attribute type 10 has an invalid length.
[   98.989622][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'.
[   98.999847][ T6829] dummy0: entered promiscuous mode
[   99.007112][ T6829] net_ratelimit: 11 callbacks suppressed
[   99.007128][ T6829] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   99.861616][   T29] kauditd_printk_skb: 151 callbacks suppressed
[   99.861631][   T29] audit: type=1400 audit(1746736162.742:2657): avc:  denied  { read write } for  pid=4029 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  100.191672][   T29] audit: type=1400 audit(1746736163.072:2658): avc:  denied  { execmem } for  pid=6832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  100.213630][   T29] audit: type=1400 audit(1746736163.092:2659): avc:  denied  { prog_load } for  pid=6833 comm="syz.6.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  100.214508][ T6837] x_tables: duplicate underflow at hook 1
[  100.232680][   T29] audit: type=1400 audit(1746736163.092:2660): avc:  denied  { allowed } for  pid=6835 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  100.259430][   T29] audit: type=1400 audit(1746736163.092:2661): avc:  denied  { execmem } for  pid=6835 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  100.278661][   T29] audit: type=1400 audit(1746736163.092:2662): avc:  denied  { prog_load } for  pid=6833 comm="syz.6.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  100.297803][   T29] audit: type=1400 audit(1746736163.122:2663): avc:  denied  { map_create } for  pid=6834 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  100.316915][   T29] audit: type=1400 audit(1746736163.122:2664): avc:  denied  { prog_load } for  pid=6834 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  100.336026][   T29] audit: type=1400 audit(1746736163.122:2665): avc:  denied  { map_create } for  pid=6834 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  100.355189][   T29] audit: type=1400 audit(1746736163.122:2666): avc:  denied  { prog_load } for  pid=6834 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  101.541026][ T6847] netlink: 'syz.3.925': attribute type 13 has an invalid length.
[  101.812943][ T6847] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.822121][ T6847] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.831404][ T6847] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.840471][ T6847] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.557328][ T6876] ==================================================================
[  103.565478][ T6876] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps
[  103.573849][ T6876] 
[  103.576181][ T6876] write to 0xffff888119b146c4 of 4 bytes by task 6874 on cpu 0:
[  103.583831][ T6876]  inode_update_timestamps+0x147/0x270
[  103.589321][ T6876]  file_update_time+0x20e/0x2b0
[  103.594202][ T6876]  shmem_file_write_iter+0x9c/0xf0
[  103.599343][ T6876]  iter_file_splice_write+0x5ef/0x970
[  103.604738][ T6876]  direct_splice_actor+0x153/0x2a0
[  103.609875][ T6876]  splice_direct_to_actor+0x30f/0x680
[  103.615271][ T6876]  do_splice_direct+0xda/0x150
[  103.620058][ T6876]  do_sendfile+0x380/0x640
[  103.624508][ T6876]  __x64_sys_sendfile64+0x105/0x150
[  103.629744][ T6876]  x64_sys_call+0xb39/0x2fb0
[  103.634363][ T6876]  do_syscall_64+0xd0/0x1a0
[  103.638890][ T6876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.644810][ T6876] 
[  103.647160][ T6876] read to 0xffff888119b146c4 of 4 bytes by task 6876 on cpu 1:
[  103.654709][ T6876]  atime_needs_update+0x2a8/0x3e0
[  103.659759][ T6876]  touch_atime+0x4a/0x330
[  103.664203][ T6876]  shmem_file_splice_read+0x582/0x5d0
[  103.669625][ T6876]  splice_direct_to_actor+0x26c/0x680
[  103.675024][ T6876]  do_splice_direct+0xda/0x150
[  103.679813][ T6876]  do_sendfile+0x380/0x640
[  103.684259][ T6876]  __x64_sys_sendfile64+0x105/0x150
[  103.689576][ T6876]  x64_sys_call+0xb39/0x2fb0
[  103.694195][ T6876]  do_syscall_64+0xd0/0x1a0
[  103.698729][ T6876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.704641][ T6876] 
[  103.706972][ T6876] value changed: 0x19cd9039 -> 0x1a6626ba
[  103.712732][ T6876] 
[  103.715069][ T6876] Reported by Kernel Concurrency Sanitizer on:
[  103.721293][ T6876] CPU: 1 UID: 0 PID: 6876 Comm: syz.1.920 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) 
[  103.733652][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  103.743809][ T6876] ==================================================================
[  104.817828][   T37] tipc: Left network mode
[  104.823305][   T37] IPVS: stopping master sync thread 5233 ...
[  104.847995][   T37] hsr_slave_0: left promiscuous mode
[  104.853670][   T37] hsr_slave_1: left promiscuous mode
[  104.877545][   T56] smc: removing ib device syz!
[  105.061336][   T37] IPVS: stop unused estimator thread 0...
[  105.512324][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.549608][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.598806][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.648936][   T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.710588][   T37] bridge_slave_1: left promiscuous mode
[  105.716549][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.724297][   T37] bridge_slave_0: left promiscuous mode
[  105.730031][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.978243][   T37] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  105.988569][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.997830][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.006704][   T37] bond0 (unregistering): Released all slaves
[  106.014849][   T37] bond1 (unregistering): Released all slaves
[  106.023395][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.032696][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.041752][   T37] bond0 (unregistering): Released all slaves
[  106.050846][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.060323][   T37] bond0 (unregistering): Released all slaves
[  106.138842][   T37] tipc: Disabling bearer <udp:syz2>
[  106.144097][   T37] tipc: Left network mode
[  106.148892][   T37] tipc: Disabling bearer <udp:syz0>
[  106.154201][   T37] tipc: Left network mode
[  106.201243][   T37] hsr_slave_0: left promiscuous mode
[  106.207131][   T37] hsr_slave_1: left promiscuous mode
[  106.214741][   T37] veth1_vlan: left promiscuous mode
[  106.220212][   T37] veth0_vlan: left promiscuous mode
[  106.304621][   T37] team0 (unregistering): Port device team_slave_1 removed
[  106.314212][   T37] team0 (unregistering): Port device team_slave_0 removed