last executing test programs:

7.492939225s ago: executing program 4 (id=104):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
syz_clone(0x840000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000004c0))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800}, 0x0, 0x0, 0x4, 0x5, 0x0, 0x2, 0xffbb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@filter={'filter\x00', 0xe, 0x4, 0x13c8, 0xffffffff, 0x0, 0x190, 0xc0, 0xffffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'ip6tnl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, 0xff000000, 0xff000000, 'syzkaller1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x73, 0x3, 0x54}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x6, 0x4, 0x0, 0xbc5c6e8455f233f1, 0x1], 0x1, 0x4}, {0x4, [0x0, 0x6, 0x7, 0x0, 0x4, 0x3], 0x2}}}}, {{@ip={@loopback, @empty, 0xff, 0xff000000, 'geneve1\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x2, 0x82}, 0x0, 0x10a0, 0x11c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00', 0x8039, {0x2}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:wireless_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000640)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61f0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
io_setup(0x5, &(0x7f0000000e80))
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

6.777542929s ago: executing program 4 (id=108):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4050, 0xfd2}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000300)=""/143, 0x8f}], 0x8}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000", @ANYRES32], 0x3c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))

6.420824235s ago: executing program 0 (id=116):
r0 = syz_usb_connect$uac1(0x0, 0x83, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xfe}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81, 0x0, 0x8}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x819}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
pipe2$9p(&(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])

6.327803222s ago: executing program 4 (id=117):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ff9c, 0x0)
ioctl$FIONREAD(r3, 0x541b, 0x0)
write(r0, 0x0, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=<r4=>0x0)
timer_create(0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x3f}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
getpgid(r4)

4.852888011s ago: executing program 2 (id=125):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

4.701300252s ago: executing program 2 (id=128):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
signalfd(r0, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000018000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1e, 0x3, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

3.395852329s ago: executing program 0 (id=136):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
syz_clone(0x840000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000004c0))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800}, 0x0, 0x0, 0x4, 0x5, 0x0, 0x2, 0xffbb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@filter={'filter\x00', 0xe, 0x4, 0x13c8, 0xffffffff, 0x0, 0x190, 0xc0, 0xffffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'ip6tnl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, 0xff000000, 0xff000000, 'syzkaller1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x73, 0x3, 0x54}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x6, 0x4, 0x0, 0xbc5c6e8455f233f1, 0x1], 0x1, 0x4}, {0x4, [0x0, 0x6, 0x7, 0x0, 0x4, 0x3], 0x2}}}}, {{@ip={@loopback, @empty, 0xff, 0xff000000, 'geneve1\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x2, 0x82}, 0x0, 0x10a0, 0x11c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00', 0x8039, {0x2}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:wireless_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000640)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61f0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
io_setup(0x5, &(0x7f0000000e80))
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

2.747876497s ago: executing program 4 (id=118):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
socket$inet6(0xa, 0x3, 0xff)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.747298817s ago: executing program 3 (id=149):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.724974018s ago: executing program 0 (id=140):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fde, 0x80, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r2, &(0x7f0000000180), 0x0}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$USBDEVFS_GETDRIVER(r7, 0x4004550d, 0x0)

2.117640064s ago: executing program 1 (id=141):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500bf18b57900611099000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket(0x1, 0x1, 0x0)
getsockname$packet(r2, 0x0, &(0x7f00000002c0))
r3 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r3, 0x1262, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000034000900000000000000000001000000040000000c00038008000000e0000001ef0fd68c27ae2eb8a1a8b599fbc9062bbd01ad7a3f3ba2007c51009d6c3457aec34f5a009dbb9ecb399496c4c364a08e35fef59db4e5e5fc0669de2805fbb613a5f9a6eee70cc08635d7f28092d70195da8431cc6ba5f062eb020ea9621be40802139773e593a77e1d73e762f7473a7ad933c9ae68633adce6edd37d2b21ed3d44261465b1e58e79fb3f78b13d026efa5a34b51d1217ea4d64eaf744f5adfc5f1913d76ac0f115ccfc80c40f6e567604b9e5b9ce2d1508201044668da27d01d5371cd675cf669ff0a23fd4e86e6544d5688c795898320f8c223a7c94b4bc39b6f1eb405b34df1a015b774c0f283dd651852169f4b17e95e86e26e8df00"/304], 0x24}}, 0x0)
getpgid(0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000180), 0x4)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0)

2.116570284s ago: executing program 3 (id=152):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.090048156s ago: executing program 2 (id=130):
ioperm(0x0, 0x2, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioperm(0x8, 0x4, 0x10000)
socket$kcm(0x2, 0x3, 0x106)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018", @ANYRES32, @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000300000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000680), 0xfe, 0x252, &(0x7f00000003c0)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200), 0xf642e7e)
fallocate(r4, 0x8, 0xc00, 0x1000)

1.993674783s ago: executing program 0 (id=142):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x0, 0x3}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000100), 0x0}, 0x20)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
symlink(0x0, &(0x7f0000000180)='.\x02/file1\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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")
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000007, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x2e00, 0x4000000}, 0x28)
syz_emit_ethernet(0x1aa, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b"], 0x0)

1.993550893s ago: executing program 1 (id=143):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"0e080000000000000000000004000001"}}}}, 0x118)
r2 = syz_io_uring_setup(0x66a3, &(0x7f0000000080)={0x0, 0xe84, 0x10500}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r5}})
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(r2, 0x6ed3, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8)
getpid()
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0xa50003f1)
readv(r7, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

1.993390893s ago: executing program 2 (id=144):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
pipe2$9p(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = inotify_init1(0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = msgget$private(0x0, 0x0)
setreuid(0x0, 0xee00)
msgctl$MSG_STAT(r3, 0xb, 0x0)
fcntl$lock(r1, 0x26, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x7d02b2701e884fae, 0x0)
msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03dc027b0f84f12f000000000000000000f5d166b5ce7964276420be6e06ce85f3d12675aec7e759127844a50474a93d95eb53b3035829e0ef33228be1bee54f64eef61548b76accea8dae096827d67c18291a08e321b5d1cee567d859afe05c098a432802e0d9752fd08f479c3b61b65ab9c5b5e92331483e7d174538ebf13f68a0b085f1b10f0a6b9a85cfa2ff9e7a7a9fce2d6de766f094f45958954b811354a4c0bc04cbd5f1b60b2e8c25dc2ef1aff32cc8a099a4d835816f737167c48d12459285960436"], 0x11, 0x800)
msgrcv(0x0, &(0x7f0000000480), 0x3c, 0x1, 0x3800)

1.992179083s ago: executing program 3 (id=155):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.840138534s ago: executing program 4 (id=145):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
r3 = getpid()
kcmp(0x0, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mq_notify(r2, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
mremap(&(0x7f0000144000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r4, 0x0)
ftruncate(r4, 0x6)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0})
sync_file_range(r4, 0x0, 0x0, 0x6)
r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

1.839677414s ago: executing program 1 (id=159):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
pipe2$9p(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = inotify_init1(0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = msgget$private(0x0, 0x0)
setreuid(0x0, 0xee00)
msgctl$MSG_STAT(r3, 0xb, 0x0)
fcntl$lock(r1, 0x26, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x7d02b2701e884fae, 0x0)
msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03dc027b0f84f12f000000000000000000f5d166b5ce7964276420be6e06ce85f3d12675aec7e759127844a50474a93d95eb53b3035829e0ef33228be1bee54f64eef61548b76accea8dae096827d67c18291a08e321b5d1cee567d859afe05c098a432802e0d9752fd08f479c3b61b65ab9c5b5e92331483e7d174538ebf13f68a0b085f1b10f0a6b9a85cfa2ff9e7a7a9fce2d6de766f094f45958954b811354a4c0bc04cbd5f1b60b2e8c25dc2ef1aff32cc8a099a4d835816f737167c48d12459285960436"], 0x11, 0x800)
msgrcv(0x0, &(0x7f0000000480), 0x3c, 0x1, 0x3800)

1.839265644s ago: executing program 2 (id=146):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4403156e, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)

1.839112644s ago: executing program 3 (id=148):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.730851572s ago: executing program 0 (id=150):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6(0xa, 0x4, 0xfffffffe)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000700)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$kcm(0x2, 0x2, 0x73)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
write$9p(r3, &(0x7f0000001400)="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", 0x200)
sendfile(r3, r4, 0x0, 0xe065)

1.686818656s ago: executing program 1 (id=151):
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='rcu_utilization\x00', r4}, 0x10)
read$msr(0xffffffffffffffff, &(0x7f0000000240)=""/20, 0x14)
openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

960.039169ms ago: executing program 3 (id=153):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4050, 0xfd2}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000300)=""/143, 0x8f}], 0x8}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000", @ANYRES32], 0x3c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))

807.522471ms ago: executing program 0 (id=154):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
syz_clone(0x840000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000004c0))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800}, 0x0, 0x0, 0x4, 0x5, 0x0, 0x2, 0xffbb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@filter={'filter\x00', 0xe, 0x4, 0x13c8, 0xffffffff, 0x0, 0x190, 0xc0, 0xffffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'ip6tnl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, 0xff000000, 0xff000000, 'syzkaller1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x73, 0x3, 0x54}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x6, 0x4, 0x0, 0xbc5c6e8455f233f1, 0x1], 0x1, 0x4}, {0x4, [0x0, 0x6, 0x7, 0x0, 0x4, 0x3], 0x2}}}}, {{@ip={@loopback, @empty, 0xff, 0xff000000, 'geneve1\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x2, 0x82}, 0x0, 0x10a0, 0x11c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00', 0x8039, {0x2}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:wireless_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000640)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61f0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
io_setup(0x5, &(0x7f0000000e80))
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

803.715441ms ago: executing program 1 (id=156):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"b9322b534f61cd1848a76d94f0ba2078"}}}}, 0x118)
socket(0x200000000000011, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001500)={{0xff, @rand_addr=0x64010102, 0x4e22, 0x3, 'dh\x00', 0xa, 0x9, 0x78}, {@multicast1, 0x4e22, 0x2, 0x1, 0x9, 0xc}}, 0x44)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800714, &(0x7f0000000500), 0xfd, 0x485, &(0x7f0000001040)="$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")
r3 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0)
creat(0x0, 0x0)
ftruncate(r3, 0x2007ffc)
r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)

713.894968ms ago: executing program 4 (id=157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), 0x0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x10000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x90e, &(0x7f0000000e40)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@grpjquota}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000280)="$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")

676.7153ms ago: executing program 2 (id=158):
getpid()
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x80000000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
listen(0xffffffffffffffff, 0xeeb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)

5.33278ms ago: executing program 1 (id=160):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

0s ago: executing program 3 (id=161):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"0e080000000000000000000004000001"}}}}, 0x118)
r2 = syz_io_uring_setup(0x66a3, &(0x7f0000000080)={0x0, 0xe84, 0x10500}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r5}})
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(r2, 0x6ed3, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8)
getpid()
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0xa50003f1)
readv(r7, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

[   17.973758][   T29] audit: type=1400 audit(1725241634.254:81): avc:  denied  { read } for  pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts.
[   24.326743][   T29] audit: type=1400 audit(1725241640.604:82): avc:  denied  { mounton } for  pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.327715][ T3249] cgroup: Unknown subsys name 'net'
[   24.349442][   T29] audit: type=1400 audit(1725241640.604:83): avc:  denied  { mount } for  pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.376784][   T29] audit: type=1400 audit(1725241640.634:84): avc:  denied  { unmount } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.577072][ T3249] cgroup: Unknown subsys name 'rlimit'
[   24.739441][   T29] audit: type=1400 audit(1725241641.014:85): avc:  denied  { setattr } for  pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.762738][   T29] audit: type=1400 audit(1725241641.014:86): avc:  denied  { create } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.778030][ T3253] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.783228][   T29] audit: type=1400 audit(1725241641.014:87): avc:  denied  { write } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.812091][   T29] audit: type=1400 audit(1725241641.014:88): avc:  denied  { read } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.832373][   T29] audit: type=1400 audit(1725241641.014:89): avc:  denied  { mounton } for  pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.852068][ T3249] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.857183][   T29] audit: type=1400 audit(1725241641.014:90): avc:  denied  { mount } for  pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   24.889150][   T29] audit: type=1400 audit(1725241641.074:91): avc:  denied  { relabelto } for  pid=3253 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.891180][ T3259] chnl_net:caif_netlink_parms(): no params data found
[   25.947571][ T3265] chnl_net:caif_netlink_parms(): no params data found
[   25.964700][ T3263] chnl_net:caif_netlink_parms(): no params data found
[   25.998074][ T3266] chnl_net:caif_netlink_parms(): no params data found
[   26.028233][ T3260] chnl_net:caif_netlink_parms(): no params data found
[   26.043287][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.050449][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.057777][ T3259] bridge_slave_0: entered allmulticast mode
[   26.064064][ T3259] bridge_slave_0: entered promiscuous mode
[   26.084911][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.091998][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.099177][ T3259] bridge_slave_1: entered allmulticast mode
[   26.105526][ T3259] bridge_slave_1: entered promiscuous mode
[   26.116436][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.123470][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.130641][ T3265] bridge_slave_0: entered allmulticast mode
[   26.136996][ T3265] bridge_slave_0: entered promiscuous mode
[   26.159919][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.167088][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.174814][ T3265] bridge_slave_1: entered allmulticast mode
[   26.181179][ T3265] bridge_slave_1: entered promiscuous mode
[   26.211887][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.218975][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.226253][ T3263] bridge_slave_0: entered allmulticast mode
[   26.232535][ T3263] bridge_slave_0: entered promiscuous mode
[   26.240096][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.249177][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.256280][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.263554][ T3263] bridge_slave_1: entered allmulticast mode
[   26.269953][ T3263] bridge_slave_1: entered promiscuous mode
[   26.282703][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.291806][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.298971][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.306202][ T3266] bridge_slave_0: entered allmulticast mode
[   26.312422][ T3266] bridge_slave_0: entered promiscuous mode
[   26.319710][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.341954][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.351147][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.358303][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.365666][ T3266] bridge_slave_1: entered allmulticast mode
[   26.371801][ T3266] bridge_slave_1: entered promiscuous mode
[   26.387249][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.396356][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.403402][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.410623][ T3260] bridge_slave_0: entered allmulticast mode
[   26.416869][ T3260] bridge_slave_0: entered promiscuous mode
[   26.437477][ T3259] team0: Port device team_slave_0 added
[   26.444039][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.453736][ T3259] team0: Port device team_slave_1 added
[   26.459603][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.466730][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.473996][ T3260] bridge_slave_1: entered allmulticast mode
[   26.480329][ T3260] bridge_slave_1: entered promiscuous mode
[   26.491667][ T3265] team0: Port device team_slave_0 added
[   26.516483][ T3265] team0: Port device team_slave_1 added
[   26.523105][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.554959][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.564231][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.571181][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.597242][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.608491][ T3263] team0: Port device team_slave_0 added
[   26.614355][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.621325][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.647315][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.659246][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.673271][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.680248][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.706292][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.717615][ T3263] team0: Port device team_slave_1 added
[   26.725884][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.732899][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.758839][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.770407][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.796799][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.803742][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.829684][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.848573][ T3266] team0: Port device team_slave_0 added
[   26.854458][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.861403][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.887442][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.911096][ T3260] team0: Port device team_slave_0 added
[   26.921253][ T3266] team0: Port device team_slave_1 added
[   26.937102][ T3260] team0: Port device team_slave_1 added
[   26.944567][ T3259] hsr_slave_0: entered promiscuous mode
[   26.950646][ T3259] hsr_slave_1: entered promiscuous mode
[   26.958461][ T3265] hsr_slave_0: entered promiscuous mode
[   26.964365][ T3265] hsr_slave_1: entered promiscuous mode
[   26.970332][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   26.977905][ T3265] Cannot create hsr debugfs directory
[   26.994242][ T3263] hsr_slave_0: entered promiscuous mode
[   27.000151][ T3263] hsr_slave_1: entered promiscuous mode
[   27.006039][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.013575][ T3263] Cannot create hsr debugfs directory
[   27.034561][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.041518][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.067454][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.078577][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.085560][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.111449][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.126702][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.133641][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.159674][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.183281][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.190270][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.216176][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.258419][ T3260] hsr_slave_0: entered promiscuous mode
[   27.264229][ T3260] hsr_slave_1: entered promiscuous mode
[   27.270318][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.277933][ T3260] Cannot create hsr debugfs directory
[   27.312729][ T3266] hsr_slave_0: entered promiscuous mode
[   27.318592][ T3266] hsr_slave_1: entered promiscuous mode
[   27.324608][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.332216][ T3266] Cannot create hsr debugfs directory
[   27.471969][ T3263] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   27.482454][ T3263] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   27.490812][ T3263] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   27.501598][ T3263] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   27.527450][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   27.543787][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   27.553900][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   27.562758][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   27.570976][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   27.579860][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   27.588370][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   27.603871][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   27.639757][ T3259] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   27.649724][ T3259] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   27.663927][ T3259] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   27.672422][ T3259] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   27.682659][ T3260] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   27.696701][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.704451][ T3260] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   27.712813][ T3260] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   27.724003][ T3260] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   27.744574][ T3263] 8021q: adding VLAN 0 to HW filter on device team0
[   27.763403][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.770565][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.795804][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.803034][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.852570][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.867038][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.882132][ T3266] 8021q: adding VLAN 0 to HW filter on device team0
[   27.898631][ T3265] 8021q: adding VLAN 0 to HW filter on device team0
[   27.909824][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.916916][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.938625][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.945758][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.954130][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.961250][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.970933][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.978014][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.005325][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.021525][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.039416][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.052076][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.060876][ T3259] 8021q: adding VLAN 0 to HW filter on device team0
[   28.085734][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.092820][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.102513][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.109601][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.124291][ T3260] 8021q: adding VLAN 0 to HW filter on device team0
[   28.138507][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.145577][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.164459][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.171600][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.182461][ T3259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.210604][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.235292][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.294467][ T3263] veth0_vlan: entered promiscuous mode
[   28.306764][ T3263] veth1_vlan: entered promiscuous mode
[   28.322140][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.370337][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.383803][ T3265] veth0_vlan: entered promiscuous mode
[   28.396072][ T3263] veth0_macvtap: entered promiscuous mode
[   28.410913][ T3265] veth1_vlan: entered promiscuous mode
[   28.427809][ T3263] veth1_macvtap: entered promiscuous mode
[   28.450018][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.469515][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.478138][ T3265] veth0_macvtap: entered promiscuous mode
[   28.487708][ T3265] veth1_macvtap: entered promiscuous mode
[   28.497583][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.506387][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.515175][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.524011][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.548533][ T3266] veth0_vlan: entered promiscuous mode
[   28.559199][ T3259] veth0_vlan: entered promiscuous mode
[   28.569406][ T3266] veth1_vlan: entered promiscuous mode
[   28.584204][ T3259] veth1_vlan: entered promiscuous mode
[   28.594567][ T3260] veth0_vlan: entered promiscuous mode
[   28.604223][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.614789][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.626341][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.640270][ T3260] veth1_vlan: entered promiscuous mode
[   28.655208][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.665880][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.677090][ T3400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   28.678066][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.700991][ T3266] veth0_macvtap: entered promiscuous mode
[   28.702772][ T3400] syz.2.3 (3400) used greatest stack depth: 11400 bytes left
[   28.722027][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.730782][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.739548][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.748312][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.760929][ T3266] veth1_macvtap: entered promiscuous mode
[   28.767523][ T3403] loop2: detected capacity change from 0 to 1024
[   28.770150][ T3259] veth0_macvtap: entered promiscuous mode
[   28.777089][ T3403] =======================================================
[   28.777089][ T3403] WARNING: The mand mount option has been deprecated and
[   28.777089][ T3403]          and is ignored by this kernel. Remove the mand
[   28.777089][ T3403]          option from the mount to silence this warning.
[   28.777089][ T3403] =======================================================
[   28.823924][ T3260] veth0_macvtap: entered promiscuous mode
[   28.831713][ T3403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   28.831907][ T3259] veth1_macvtap: entered promiscuous mode
[   28.849725][ T3403] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.859149][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.870433][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.880363][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.890951][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.904378][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.912987][ T3260] veth1_macvtap: entered promiscuous mode
[   28.926046][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.936552][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.946510][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.957026][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.966838][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.977303][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.988155][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.996743][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.996838][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.007231][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.007240][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.036849][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.048379][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.069482][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.080050][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.090021][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.100457][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.110255][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.120822][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.130622][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.141057][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.154877][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.163951][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.172719][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.181680][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.190386][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.203007][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.213513][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.223450][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.233868][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.243667][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.254094][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.266082][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.266994][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.283791][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.283800][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.283863][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.283944][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.283954][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.283963][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.283974][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.284540][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.285929][ T3260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.371321][ T3260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.371353][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.388806][ T3260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.408811][ T3259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.410571][   T29] kauditd_printk_skb: 53 callbacks suppressed
[   29.410582][   T29] audit: type=1400 audit(1725241645.684:145): avc:  denied  { read } for  pid=3412 comm="syz.0.1" name="usbmon7" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.417535][ T3259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.424056][   T29] audit: type=1400 audit(1725241645.694:146): avc:  denied  { open } for  pid=3412 comm="syz.0.1" path="/dev/usbmon7" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.446649][ T3259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.446681][ T3259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.498936][   T29] audit: type=1400 audit(1725241645.744:147): avc:  denied  { map_create } for  pid=3412 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   29.498957][   T29] audit: type=1400 audit(1725241645.744:148): avc:  denied  { map_read map_write } for  pid=3412 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   29.575831][ T3413] syzkaller0: entered promiscuous mode
[   29.581370][ T3413] syzkaller0: entered allmulticast mode
[   29.636048][   T29] audit: type=1400 audit(1725241645.914:149): avc:  denied  { create } for  pid=3418 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   29.661535][ T3419] loop3: detected capacity change from 0 to 512
[   29.674596][ T3420] loop4: detected capacity change from 0 to 1024
[   29.684042][ T3420] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   29.685803][ T3419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.695039][ T3420] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   29.707676][ T3419] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.724833][ T3420] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   29.737282][ T3420] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   29.746072][ T3420] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[   29.783203][   T29] audit: type=1400 audit(1725241646.051:150): avc:  denied  { bind } for  pid=3417 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.784780][ T3420] netlink: 'syz.4.5': attribute type 10 has an invalid length.
[   29.804817][   T29] audit: type=1400 audit(1725241646.051:151): avc:  denied  { setopt } for  pid=3417 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.820096][ T3419] SELinux:  Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped).
[   29.840538][   T29] audit: type=1400 audit(1725241646.121:152): avc:  denied  { relabelto } for  pid=3418 comm="syz.3.4" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   29.868121][   T29] audit: type=1400 audit(1725241646.121:153): avc:  denied  { setattr } for  pid=3418 comm="syz.3.4" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   29.870421][ T3420] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   29.893976][   T29] audit: type=1400 audit(1725241646.121:154): avc:  denied  { ioctl } for  pid=3418 comm="syz.3.4" path="socket:[2749]" dev="sockfs" ino=2749 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   29.936459][ T3428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.952736][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.996093][    C0] hrtimer: interrupt took 48222 ns
[   30.031158][ T3438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.067307][ T3438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.160815][ T3434] loop4: detected capacity change from 0 to 512
[   30.173702][ T3434] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   30.195175][ T3434] EXT4-fs (loop4): invalid journal inode
[   30.201959][ T3434] EXT4-fs (loop4): can't get journal size
[   30.212516][ T3434] EXT4-fs (loop4): 1 truncate cleaned up
[   30.223107][ T3434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.412898][ T3446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   30.463462][ T3446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'.
[   30.559164][ T3446] ebt_among: dst integrity fail: 1ad
[   30.591326][ T3448] loop1: detected capacity change from 0 to 1024
[   30.599182][ T3448] ext3: Bad value for 'sb'
[   30.632561][ T3448] syz.1.15 (3448) used greatest stack depth: 11280 bytes left
[   30.691323][ T3434] syz.4.11 (3434) used greatest stack depth: 11120 bytes left
[   30.713210][ T3457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   30.724623][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.734265][ T3457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   31.458990][ T3471] loop2: detected capacity change from 0 to 128
[   31.470410][ T3471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   31.490980][ T3471] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   31.582358][ T3479] loop0: detected capacity change from 0 to 1024
[   31.589533][ T3479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   31.605575][ T3479] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003]
[   31.613694][ T3479] System zones: 0-1, 3-36
[   31.619997][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.633486][ T3263] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   31.638326][ T3479] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23'.
[   31.651465][ T3479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'.
[   31.660365][ T3479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'.
[   31.661011][ T3462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   31.675749][ T3479] netlink: 'syz.0.23': attribute type 10 has an invalid length.
[   31.685575][ T3479] netem: change failed
[   31.703744][ T3482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.721197][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.733507][ T3482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.792356][ T3484] loop1: detected capacity change from 0 to 8192
[   31.834107][ T3482] loop2: detected capacity change from 0 to 2048
[   31.882758][ T3482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.079926][ T3497] can0: slcan on ttyS3.
[   32.700645][ T3514] loop0: detected capacity change from 0 to 2048
[   32.723003][ T3514] EXT4-fs: Ignoring removed orlov option
[   32.758498][ T3514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.766934][ T3485] syz.4.27 (3485) used greatest stack depth: 11048 bytes left
[   32.792431][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   32.815493][ T3494] can0 (unregistered): slcan off ttyS3.
[   32.817716][ T3514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.032169][ T3491] syz.1.25 (3491) used greatest stack depth: 10448 bytes left
[   33.099794][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.106996][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.548329][ T3550] loop3: detected capacity change from 0 to 256
[   33.563512][ T3550] FAT-fs (loop3): IO charset cp1250 not found
[   33.741534][ T3557] loop4: detected capacity change from 0 to 512
[   33.749062][ T3557] EXT4-fs: Ignoring removed bh option
[   33.758768][ T3557] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   33.768201][ T3557] EXT4-fs (loop4): 1 truncate cleaned up
[   33.774548][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.817734][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.909897][ T3561] loop3: detected capacity change from 0 to 2048
[   33.966282][ T3561]  loop3: p1 < > p4
[   33.983758][ T3565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.001557][ T3565] hub 9-0:1.0: USB hub found
[   34.006776][ T3565] hub 9-0:1.0: 8 ports detected
[   34.037223][ T3561] loop3: p4 size 8388608 extends beyond EOD, truncated
[   34.616055][ T3477] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   34.641290][ T3477] EXT4-fs (loop0): Remounting filesystem read-only
[   34.866511][ T3514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.890990][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.937201][ T3572] loop4: detected capacity change from 0 to 2048
[   34.994556][ T3514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.018486][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.044487][   T29] kauditd_printk_skb: 68 callbacks suppressed
[   35.044501][   T29] audit: type=1400 audit(1725241651.311:223): avc:  denied  { create } for  pid=3575 comm="syz.2.36" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   35.082578][   T29] audit: type=1400 audit(1725241651.331:224): avc:  denied  { write } for  pid=3575 comm="syz.2.36" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   35.104950][   T29] audit: type=1400 audit(1725241651.331:225): avc:  denied  { open } for  pid=3575 comm="syz.2.36" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   35.127281][   T29] audit: type=1400 audit(1725241651.331:226): avc:  denied  { ioctl } for  pid=3575 comm="syz.2.36" path="/7/file0" dev="tmpfs" ino=56 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   35.157834][   T29] audit: type=1400 audit(1725241651.411:227): avc:  denied  { unlink } for  pid=3263 comm="syz-executor" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   35.172529][ T3578] loop2: detected capacity change from 0 to 256
[   35.194717][   T29] audit: type=1400 audit(1725241651.461:228): avc:  denied  { mount } for  pid=3577 comm="syz.2.38" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   35.194894][ T3514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.285544][ T3514] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.298639][ T3581] EXT4-fs error (device loop4): __ext4_new_inode:1070: comm syz.4.37: reserved inode found cleared - inode=1
[   35.314379][   T29] audit: type=1400 audit(1725241651.571:229): avc:  denied  { remove_name } for  pid=3571 comm="syz.4.37" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.336943][   T29] audit: type=1400 audit(1725241651.571:230): avc:  denied  { rename } for  pid=3571 comm="syz.4.37" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   35.367228][ T3514] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.381628][ T3514] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.523022][ T3514] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.551579][   T29] audit: type=1400 audit(1725241651.821:231): avc:  denied  { getopt } for  pid=3582 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.569027][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.617134][   T29] audit: type=1400 audit(1725241651.891:232): avc:  denied  { unmount } for  pid=3263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   35.707602][ T3587] loop0: detected capacity change from 0 to 2048
[   35.714555][ T3587] EXT4-fs: Ignoring removed orlov option
[   35.727602][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.732164][ T3592] loop2: detected capacity change from 0 to 512
[   35.873504][ T3592] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   35.943039][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.007007][   T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.084929][ T3587] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   36.104958][ T3587] EXT4-fs (loop0): Remounting filesystem read-only
[   36.105578][ T3602] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET)
[   36.138688][ T3602] syzkaller1: entered promiscuous mode
[   36.144211][ T3602] syzkaller1: entered allmulticast mode
[   36.157849][   T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.163886][ T3602] loop2: detected capacity change from 0 to 1764
[   36.175784][ T3602] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   36.192962][ T3606] loop4: detected capacity change from 0 to 512
[   36.205810][ T3602] ISOFS: unable to read i-node block
[   36.211126][ T3602] isofs_fill_super: get root inode failed
[   36.219125][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.220790][ T3606] loop4: detected capacity change from 0 to 512
[   36.243545][   T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.266305][ T3606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.289009][ T3606] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.313080][ T3617] loop0: detected capacity change from 0 to 128
[   36.324001][ T3617] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.336276][ T3617] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.347452][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.371391][   T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.404074][ T3265] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.600140][   T56] bridge_slave_1: left allmulticast mode
[   36.605885][   T56] bridge_slave_1: left promiscuous mode
[   36.611684][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.622481][   T56] bridge_slave_0: left allmulticast mode
[   36.628225][   T56] bridge_slave_0: left promiscuous mode
[   36.633884][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.827475][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   36.843136][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   36.857956][   T56] bond0 (unregistering): Released all slaves
[   36.897542][ T3627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.50'.
[   36.906387][ T3627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.50'.
[   36.944503][ T3639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'.
[   36.957986][ T3639] dummy0: entered promiscuous mode
[   37.000166][ T3599] chnl_net:caif_netlink_parms(): no params data found
[   37.092369][   T56] hsr_slave_0: left promiscuous mode
[   37.121979][   T56] hsr_slave_1: left promiscuous mode
[   37.165177][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.172691][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.205881][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.213299][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.219946][ T3641] loop0: detected capacity change from 0 to 2048
[   37.305774][   T56] veth1_macvtap: left promiscuous mode
[   37.311409][   T56] veth0_macvtap: left promiscuous mode
[   37.316952][   T56] veth1_vlan: left promiscuous mode
[   37.322162][   T56] veth0_vlan: left promiscuous mode
[   37.330714][ T3641] EXT4-fs: Ignoring removed mblk_io_submit option
[   37.447239][ T3643] loop2: detected capacity change from 0 to 2048
[   37.461170][ T3643] EXT4-fs: test_dummy_encryption option not supported
[   37.578638][ T3641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.592473][ T3643] loop2: detected capacity change from 0 to 256
[   37.604229][ T3648] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   37.676404][ T3654] EXT4-fs (loop0): shut down requested (0)
[   37.691036][   T56] team0 (unregistering): Port device team_slave_1 removed
[   37.701633][   T56] team0 (unregistering): Port device team_slave_0 removed
[   37.736247][ T3655] loop2: detected capacity change from 0 to 2048
[   37.743215][ T3641] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.53: bg 0: block 234: padding at end of block bitmap is not set
[   37.758716][ T3641] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   37.771225][ T3641] EXT4-fs (loop0): This should not happen!! Data will be lost
[   37.771225][ T3641] 
[   37.776522][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.780882][ T3641] EXT4-fs (loop0): Total free blocks count 0
[   37.798846][ T3641] EXT4-fs (loop0): Free/Dirty block details
[   37.804740][ T3641] EXT4-fs (loop0): free_blocks=0
[   37.809698][ T3641] EXT4-fs (loop0): dirty_blocks=4544
[   37.815043][ T3641] EXT4-fs (loop0): Block reservation details
[   37.818989][ T3655] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   37.821129][ T3641] EXT4-fs (loop0): i_reserved_data_blocks=284
[   37.842745][ T3655] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[   37.855022][ T3655] EXT4-fs (loop2): This should not happen!! Data will be lost
[   37.855022][ T3655] 
[   37.864675][ T3655] EXT4-fs (loop2): Total free blocks count 0
[   37.870664][ T3655] EXT4-fs (loop2): Free/Dirty block details
[   37.876571][ T3655] EXT4-fs (loop2): free_blocks=2415919104
[   37.882287][ T3655] EXT4-fs (loop2): dirty_blocks=32
[   37.887419][ T3655] EXT4-fs (loop2): Block reservation details
[   37.893396][ T3655] EXT4-fs (loop2): i_reserved_data_blocks=2
[   37.947745][ T3641] syz.0.53 (3641) used greatest stack depth: 10192 bytes left
[   37.966932][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.974017][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.998181][ T3599] bridge_slave_0: entered allmulticast mode
[   38.006218][ T3599] bridge_slave_0: entered promiscuous mode
[   38.031648][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.038799][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.052425][ T3599] bridge_slave_1: entered allmulticast mode
[   38.060047][ T3263] EXT4-fs error (device loop2): __ext4_iget:4985: inode #13: block 127754: comm syz-executor: invalid block
[   38.060437][ T3599] bridge_slave_1: entered promiscuous mode
[   38.080385][ T3263] EXT4-fs error (device loop2): __ext4_iget:4985: inode #13: block 127754: comm syz-executor: invalid block
[   38.117296][ T3599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.145750][ T3683] netlink: 'syz.4.62': attribute type 32 has an invalid length.
[   38.154365][ T3599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.191775][ T3599] team0: Port device team_slave_0 added
[   38.199631][ T3599] team0: Port device team_slave_1 added
[   38.230933][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.237972][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.263912][ T3599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.278267][ T3702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.280973][ T3700] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   38.287586][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.301233][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.327150][ T3599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.337913][ T3702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.351277][ T3702] loop0: detected capacity change from 0 to 512
[   38.379030][ T3702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.394553][ T3599] hsr_slave_0: entered promiscuous mode
[   38.401291][ T3702] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.403976][ T3705] loop4: detected capacity change from 0 to 2048
[   38.417854][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.427228][ T3705] EXT4-fs: Ignoring removed orlov option
[   38.429845][ T3599] hsr_slave_1: entered promiscuous mode
[   38.447001][ T3705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.462899][   T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.505667][   T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.552596][   T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.585082][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.624702][   T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.762822][   T56] bridge_slave_1: left allmulticast mode
[   38.768531][   T56] bridge_slave_1: left promiscuous mode
[   38.774218][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.795448][   T56] bridge_slave_0: left allmulticast mode
[   38.801150][   T56] bridge_slave_0: left promiscuous mode
[   38.806831][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.917959][ T3760] loop4: detected capacity change from 0 to 1024
[   38.924778][ T3760] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   38.943047][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.953601][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.962968][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.976744][   T56] bond0 (unregistering): Released all slaves
[   39.017333][ T3713] chnl_net:caif_netlink_parms(): no params data found
[   39.052172][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.059320][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.066761][ T3713] bridge_slave_0: entered allmulticast mode
[   39.073081][ T3713] bridge_slave_0: entered promiscuous mode
[   39.080282][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.087462][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.094626][ T3713] bridge_slave_1: entered allmulticast mode
[   39.101102][ T3713] bridge_slave_1: entered promiscuous mode
[   39.123452][   T56] hsr_slave_0: left promiscuous mode
[   39.130219][   T56] hsr_slave_1: left promiscuous mode
[   39.137337][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.144746][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.152578][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.159993][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.168879][   T56] veth1_macvtap: left promiscuous mode
[   39.174346][   T56] veth0_macvtap: left promiscuous mode
[   39.180637][   T56] veth1_vlan: left promiscuous mode
[   39.186328][   T56] veth0_vlan: left promiscuous mode
[   39.259218][   T56] team0 (unregistering): Port device team_slave_1 removed
[   39.270352][   T56] team0 (unregistering): Port device team_slave_0 removed
[   39.306202][ T3713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.333916][ T3773] syzkaller0: entered promiscuous mode
[   39.339656][ T3773] syzkaller0: entered allmulticast mode
[   39.349300][ T3713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.372432][ T3713] team0: Port device team_slave_0 added
[   39.378204][ T3599] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.387272][ T3713] team0: Port device team_slave_1 added
[   39.398906][ T3599] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.412342][ T3599] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.421969][ T3713] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.428948][ T3713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.454932][ T3713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.467028][ T3713] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.473984][ T3713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.499908][ T3713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.512983][ T3599] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.558269][ T3713] hsr_slave_0: entered promiscuous mode
[   39.564928][ T3713] hsr_slave_1: entered promiscuous mode
[   39.572270][ T3713] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.581138][ T3713] Cannot create hsr debugfs directory
[   39.600441][ T3792] loop3: detected capacity change from 0 to 1024
[   39.610763][ T3792] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   39.630062][ T3792] JBD2: no valid journal superblock found
[   39.635867][ T3792] EXT4-fs (loop3): Could not load journal inode
[   39.688655][ T3806] loop3: detected capacity change from 0 to 512
[   39.713458][ T3806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.730773][ T3599] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.738952][ T3806] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.766987][ T3599] 8021q: adding VLAN 0 to HW filter on device team0
[   39.776379][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.783534][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.794764][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.801849][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.810254][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.894956][ T3815] loop0: detected capacity change from 0 to 512
[   39.923393][ T3815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.924896][ T3819] loop3: detected capacity change from 0 to 512
[   39.938696][ T3815] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.954847][ T3713] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.986957][ T3819] loop3: detected capacity change from 0 to 512
[   39.999141][ T3819] EXT4-fs: Ignoring removed bh option
[   40.015165][ T3599] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.022735][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.033034][ T3713] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   40.041977][ T3819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.047004][ T3713] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   40.061779][ T3819] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.076128][ T3713] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   40.195521][ T3847] smc: net device lo applied user defined pnetid SYZ2
[   40.206357][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.218051][ T3713] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.224730][   T29] kauditd_printk_skb: 189 callbacks suppressed
[   40.224740][   T29] audit: type=1400 audit(1725241656.491:422): avc:  denied  { connect } for  pid=3849 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   40.250168][   T29] audit: type=1400 audit(1725241656.491:423): avc:  denied  { write } for  pid=3849 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   40.281007][ T3713] 8021q: adding VLAN 0 to HW filter on device team0
[   40.301061][ T3847] smc: net device lo erased user defined pnetid SYZ2
[   40.314059][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.321148][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.331029][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.338156][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.347139][   T29] audit: type=1400 audit(1725241656.611:424): avc:  denied  { connect } for  pid=3862 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   40.366587][   T29] audit: type=1400 audit(1725241656.611:425): avc:  denied  { ioctl } for  pid=3862 comm="syz.3.79" path="socket:[4965]" dev="sockfs" ino=4965 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   40.399589][ T3863] bond0: entered promiscuous mode
[   40.404712][ T3863] bond_slave_0: entered promiscuous mode
[   40.410542][ T3863] bond_slave_1: entered promiscuous mode
[   40.438692][ T3599] veth0_vlan: entered promiscuous mode
[   40.472353][ T3599] veth1_vlan: entered promiscuous mode
[   40.477887][ T3885] loop3: detected capacity change from 0 to 2048
[   40.511329][ T3599] veth0_macvtap: entered promiscuous mode
[   40.518794][ T3890] loop4: detected capacity change from 0 to 1024
[   40.525360][ T3890] EXT4-fs: dax option not supported
[   40.539180][ T3599] veth1_macvtap: entered promiscuous mode
[   40.607657][   T29] audit: type=1400 audit(1725241656.881:426): avc:  denied  { ioctl } for  pid=3883 comm="syz.3.80" path="socket:[5585]" dev="sockfs" ino=5585 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   40.657939][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.668489][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.678312][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.688839][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.698666][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.709147][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.732417][ T3599] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.764652][ T3713] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.812850][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.823372][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.833290][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.843726][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.853594][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.864098][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.919846][   T29] audit: type=1400 audit(1725241657.181:427): avc:  denied  { read write } for  pid=3925 comm="syz.3.83" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   40.936451][ T3599] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.943072][   T29] audit: type=1400 audit(1725241657.181:428): avc:  denied  { open } for  pid=3925 comm="syz.3.83" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   40.956702][ T3599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.982095][ T3599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.990804][ T3599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.999519][ T3599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.026727][   T29] audit: type=1400 audit(1725241657.291:429): avc:  denied  { mounton } for  pid=3925 comm="syz.3.83" path="/17/bus" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   41.101697][ T3933] loop3: detected capacity change from 0 to 8192
[   41.129760][   T29] audit: type=1400 audit(1725241657.401:430): avc:  denied  { mount } for  pid=3599 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   41.154754][ T3713] veth0_vlan: entered promiscuous mode
[   41.156370][   T29] audit: type=1400 audit(1725241657.431:431): avc:  denied  { mounton } for  pid=3925 comm="syz.3.83" path="/17/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   41.221306][ T3713] veth1_vlan: entered promiscuous mode
[   41.228062][ T3944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   41.249462][ T3944] Illegal XDP return value 65536 on prog  (id 46) dev N/A, expect packet loss!
[   41.261233][ T3713] veth0_macvtap: entered promiscuous mode
[   41.271816][ T3713] veth1_macvtap: entered promiscuous mode
[   41.298663][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.309133][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.318956][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.329399][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.339228][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.349723][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.359650][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.370100][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.387552][ T3713] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.396091][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.406652][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.416524][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.427050][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.436863][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.447296][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.457109][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.467518][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.520350][ T3713] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.532772][ T3713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.541573][ T3713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.550294][ T3713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.559099][ T3713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.586652][ T3948] loop3: detected capacity change from 0 to 512
[   41.611231][ T3948] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   41.826984][ T3954] capability: warning: `syz.2.85' uses deprecated v2 capabilities in a way that may be insecure
[   41.988395][ T3960] loop2: detected capacity change from 0 to 512
[   42.004073][ T3960] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   42.014435][ T3960] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.87: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[   42.034194][ T3960] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.87: couldn't read orphan inode 15 (err -117)
[   42.047229][ T3960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.069478][ T3960] ext2 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.100905][ T3965] syzkaller0: entered promiscuous mode
[   42.106410][ T3965] syzkaller0: entered allmulticast mode
[   42.163499][ T3970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.172123][ T3970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.186314][ T3970] loop1: detected capacity change from 0 to 512
[   42.203035][ T3970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.215655][ T3970] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.400106][ T3976] loop3: detected capacity change from 0 to 8192
[   42.752018][ T3599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.324409][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.353642][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.369666][ T3998] loop0: detected capacity change from 0 to 512
[   43.384139][ T3998] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.397328][ T3998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.408823][ T3998] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   43.423386][ T3998] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   43.437201][ T3998] EXT4-fs (loop0): 1 truncate cleaned up
[   43.443272][ T3998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.472659][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.114646][ T4014] loop3: detected capacity change from 0 to 2048
[   44.121231][ T4014] EXT4-fs: Ignoring removed orlov option
[   44.161508][ T4014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.191310][ T4017] loop4: detected capacity change from 0 to 8192
[   44.196561][ T4014] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   44.222009][ T4014] EXT4-fs (loop3): Remounting filesystem read-only
[   44.644872][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.676458][ T4027] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   44.684148][ T4027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.107'.
[   44.712492][ T4029] syzkaller0: entered promiscuous mode
[   44.718094][ T4029] syzkaller0: entered allmulticast mode
[   44.758891][ T4027] loop0: detected capacity change from 0 to 2048
[   44.833648][ T4027] Alternate GPT is invalid, using primary GPT.
[   44.840014][ T4027]  loop0: p2 p3 p7
[   44.872014][ T2961] Alternate GPT is invalid, using primary GPT.
[   44.878504][ T2961]  loop0: p2 p3 p7
[   44.887123][ T4037] syzkaller1: entered promiscuous mode
[   44.892606][ T4037] syzkaller1: entered allmulticast mode
[   44.894077][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   44.899519][ T3435] udevd[3435]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   44.918949][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   44.941428][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   44.962354][ T4037] loop3: detected capacity change from 0 to 1764
[   44.969611][ T3435] udevd[3435]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   44.982603][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   45.001640][ T4037] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   45.011291][ T4037] ISOFS: unable to read i-node block
[   45.016767][ T4037] isofs_fill_super: get root inode failed
[   45.133897][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.152604][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.162810][ T4049] loop1: detected capacity change from 0 to 2048
[   45.183310][   T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.207858][ T4051] loop0: detected capacity change from 0 to 2048
[   45.226228][ T4049]  loop1: p1 < > p4
[   45.230905][ T4049] loop1: p4 size 8388608 extends beyond EOD, truncated
[   45.240153][ T4051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.258375][ T2961]  loop1: p1 < > p4
[   45.263883][   T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.274436][ T2961] loop1: p4 size 8388608 extends beyond EOD, truncated
[   45.326405][ T4060] syzkaller0: entered promiscuous mode
[   45.331898][ T4060] syzkaller0: entered allmulticast mode
[   45.348088][   T56] bond0: (slave netdevsim1): Releasing backup interface
[   45.366992][   T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.428839][   T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.524127][   T56] bridge_slave_1: left allmulticast mode
[   45.529818][   T56] bridge_slave_1: left promiscuous mode
[   45.535590][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.544445][   T56] bridge_slave_0: left allmulticast mode
[   45.550160][   T56] bridge_slave_0: left promiscuous mode
[   45.555872][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.577870][ T3713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.699832][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.716423][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.728395][ T4070] loop2: detected capacity change from 0 to 2048
[   45.736881][   T56] bond0 (unregistering): Released all slaves
[   45.745276][ T4070] EXT4-fs: Ignoring removed orlov option
[   45.795229][ T4058] chnl_net:caif_netlink_parms(): no params data found
[   45.803891][ T4070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.853279][ T4070] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   45.882263][ T4070] EXT4-fs (loop2): Remounting filesystem read-only
[   45.893751][   T56] hsr_slave_0: left promiscuous mode
[   45.903556][   T56] hsr_slave_1: left promiscuous mode
[   45.911533][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   45.922634][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   45.933926][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.941399][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.950013][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.957493][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.961268][ T4095] loop1: detected capacity change from 0 to 512
[   45.971133][ T4095] EXT4-fs: Ignoring removed bh option
[   45.977096][   T56] dummy0: left promiscuous mode
[   45.982038][   T56] veth1_macvtap: left promiscuous mode
[   45.983965][ T4095] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   45.987679][   T56] veth0_macvtap: left promiscuous mode
[   46.001247][   T56] veth1_vlan: left promiscuous mode
[   46.006614][   T56] veth0_vlan: left promiscuous mode
[   46.013053][ T4095] EXT4-fs (loop1): 1 truncate cleaned up
[   46.019117][ T4095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.019445][ T3713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.038038][   T29] kauditd_printk_skb: 140 callbacks suppressed
[   46.038049][   T29] audit: type=1400 audit(1725241662.311:572): avc:  denied  { write } for  pid=4085 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   46.115258][ T4098] loop2: detected capacity change from 0 to 8192
[   46.179817][   T56] team0 (unregistering): Port device team_slave_1 removed
[   46.196725][   T56] team0 (unregistering): Port device team_slave_0 removed
[   46.236477][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.243559][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.259116][ T4058] bridge_slave_0: entered allmulticast mode
[   46.267840][ T4058] bridge_slave_0: entered promiscuous mode
[   46.275334][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.282450][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.289708][ T4058] bridge_slave_1: entered allmulticast mode
[   46.297319][ T4058] bridge_slave_1: entered promiscuous mode
[   46.304020][ T3599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.365247][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.401588][   T29] audit: type=1326 audit(1725241662.671:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.420998][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.424890][   T29] audit: type=1326 audit(1725241662.671:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.457077][   T29] audit: type=1326 audit(1725241662.671:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.457202][   T29] audit: type=1326 audit(1725241662.671:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.457226][   T29] audit: type=1326 audit(1725241662.671:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.457246][   T29] audit: type=1326 audit(1725241662.671:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.457292][   T29] audit: type=1326 audit(1725241662.671:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.457311][   T29] audit: type=1326 audit(1725241662.671:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.457339][   T29] audit: type=1326 audit(1725241662.671:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273b69eb9 code=0x7ffc0000
[   46.538402][ T4058] team0: Port device team_slave_0 added
[   46.650979][ T4110] loop1: detected capacity change from 0 to 512
[   46.662672][ T4110] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   46.706271][ T4108] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   46.714616][ T4058] team0: Port device team_slave_1 added
[   46.736927][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.743904][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.769895][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.782235][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.789214][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.815177][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.851863][ T4128] syzkaller1: entered promiscuous mode
[   46.857603][ T4128] syzkaller1: entered allmulticast mode
[   46.868970][ T4058] hsr_slave_0: entered promiscuous mode
[   46.884664][ T4128] loop1: detected capacity change from 0 to 1764
[   46.884884][ T4058] hsr_slave_1: entered promiscuous mode
[   46.903778][ T4128] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   46.913090][ T4128] ISOFS: unable to read i-node block
[   46.913897][ T4058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.918401][ T4128] isofs_fill_super: get root inode failed
[   46.933633][ T4058] Cannot create hsr debugfs directory
[   47.152267][ T4130] chnl_net:caif_netlink_parms(): no params data found
[   47.172717][ T4163] loop3: detected capacity change from 0 to 512
[   47.214168][ T4163] EXT4-fs: Ignoring removed bh option
[   47.231226][ T4163] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   47.255963][ T4163] EXT4-fs (loop3): 1 truncate cleaned up
[   47.262195][ T4163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.285884][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.288913][ T4183] loop1: detected capacity change from 0 to 2048
[   47.303249][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.310441][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.317513][ T4183] EXT4-fs: Ignoring removed orlov option
[   47.324633][ T4130] bridge_slave_0: entered allmulticast mode
[   47.331345][ T4130] bridge_slave_0: entered promiscuous mode
[   47.338098][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.345172][ T4130] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.352628][ T4130] bridge_slave_1: entered allmulticast mode
[   47.356793][ T4183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.359071][ T4130] bridge_slave_1: entered promiscuous mode
[   47.400894][ T4130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.410987][ T4058] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   47.420783][ T4130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.422510][ T4169] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   47.432120][ T4058] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   47.446052][ T4169] EXT4-fs (loop1): Remounting filesystem read-only
[   47.516932][ T4189] syzkaller0: entered promiscuous mode
[   47.522441][ T4189] syzkaller0: entered allmulticast mode
[   47.534038][ T3599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.544341][ T4058] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   47.555936][ T4130] team0: Port device team_slave_0 added
[   47.561662][ T4058] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   47.570797][ T4130] team0: Port device team_slave_1 added
[   47.598990][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.606021][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.632029][ T4130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.643892][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.650900][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.676823][ T4130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.716135][ T4130] hsr_slave_0: entered promiscuous mode
[   47.722432][ T4130] hsr_slave_1: entered promiscuous mode
[   47.728817][ T4130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.736752][ T4130] Cannot create hsr debugfs directory
[   47.789099][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.839147][ T4130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.856964][ T4058] 8021q: adding VLAN 0 to HW filter on device team0
[   47.866789][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.873900][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.898178][ T4130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.913881][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.921062][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.959477][ T4130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.998244][ T4130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.043246][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.092691][ T4130] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.101175][ T4130] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.109609][ T4130] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.119004][ T4130] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.137681][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.213911][ T4130] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.251887][ T4130] 8021q: adding VLAN 0 to HW filter on device team0
[   48.260595][ T4274] loop0: detected capacity change from 0 to 8192
[   48.266030][ T4058] veth0_vlan: entered promiscuous mode
[   48.275841][ T4058] veth1_vlan: entered promiscuous mode
[   48.294185][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.301281][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.317716][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.324832][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.352343][ T4058] veth0_macvtap: entered promiscuous mode
[   48.364106][ T4287] loop3: detected capacity change from 0 to 512
[   48.381332][ T4287] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   48.381827][ T4130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.417564][ T4058] veth1_macvtap: entered promiscuous mode
[   48.459966][ T4288] syzkaller0: entered promiscuous mode
[   48.465526][ T4288] syzkaller0: entered allmulticast mode
[   48.486181][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.496781][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.506592][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.517164][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.527108][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.537553][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.547403][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.557860][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.590426][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.601275][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.611786][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.621614][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.632132][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.642047][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.652484][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.662390][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.672867][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.684915][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.697781][ T4058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.706532][ T4058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.715250][ T4058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.723964][ T4058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.746060][ T4130] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.840467][ T4130] veth0_vlan: entered promiscuous mode
[   48.850460][ T4130] veth1_vlan: entered promiscuous mode
[   48.912212][ T4130] veth0_macvtap: entered promiscuous mode
[   48.921158][ T4130] veth1_macvtap: entered promiscuous mode
[   48.932648][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.943186][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.953029][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.963538][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.973440][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.983855][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.993720][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.004336][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.014294][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.024869][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.048094][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.076594][ T4309] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   49.181626][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.192105][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.201921][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.212411][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.222238][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.232682][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.242562][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.253038][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.262907][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.273337][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.311811][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.365328][ T4130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.374153][ T4130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.382935][ T4130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.391633][ T4130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.467326][ T4318] loop2: detected capacity change from 0 to 128
[   49.477114][ T4318] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.491673][ T4318] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.541943][ T4130] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   49.548931][ T4327] syzkaller1: entered promiscuous mode
[   49.556454][ T4327] syzkaller1: entered allmulticast mode
[   49.589265][ T4327] loop0: detected capacity change from 0 to 1764
[   49.596177][ T4327] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   49.605163][ T4327] ISOFS: unable to read i-node block
[   49.610599][ T4327] isofs_fill_super: get root inode failed
[   49.766780][ T4341] loop4: detected capacity change from 0 to 2048
[   49.773517][ T4341] EXT4-fs: Ignoring removed orlov option
[   49.808678][ T4347] loop0: detected capacity change from 0 to 256
[   49.823726][ T4341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.878685][ T4341] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   50.447318][ T4353] hub 9-0:1.0: USB hub found
[   50.451993][ T4353] hub 9-0:1.0: 8 ports detected
[   50.495045][ T4351] can0: slcan on ttyS3.
[   50.546504][ T4341] EXT4-fs (loop4): Remounting filesystem read-only
[   50.784473][ T4363] syzkaller0: entered promiscuous mode
[   50.790109][ T4363] syzkaller0: entered allmulticast mode
[   50.805541][ T4343] can0 (unregistered): slcan off ttyS3.
[   50.821326][ T4058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.890248][ T4374] loop1: detected capacity change from 0 to 512
[   50.910970][ T4373] loop0: detected capacity change from 0 to 8192
[   50.917998][ T4374] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.156: casefold flag without casefold feature
[   50.936929][ T4395] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   51.007971][ T4401] loop4: detected capacity change from 0 to 512
[   51.098908][ T4374] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.156: couldn't read orphan inode 15 (err -117)
[   51.110834][ T4401] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   51.130234][ T4401] EXT4-fs (loop4): 1 orphan inode deleted
[   51.136047][ T4401] EXT4-fs (loop4): 1 truncate cleaned up
[   51.142546][ T4401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.264529][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.485457][ T3599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.581919][ T4418] ==================================================================
[   51.590038][ T4418] BUG: KCSAN: data-race in dio_bio_end_io / dio_new_bio
[   51.596991][ T4418] 
[   51.599299][ T4418] read-write to 0xffff8881161287d8 of 8 bytes by interrupt on cpu 0:
[   51.607365][ T4418]  dio_bio_end_io+0x53/0xd0
[   51.611878][ T4418]  bio_endio+0x369/0x410
[   51.616133][ T4418]  blk_update_request+0x382/0x880
[   51.621167][ T4418]  blk_mq_end_request+0x26/0x50
[   51.626021][ T4418]  lo_complete_rq+0xce/0x180
[   51.630616][ T4418]  blk_done_softirq+0x74/0xb0
[   51.635293][ T4418]  handle_softirqs+0xc3/0x280
[   51.639977][ T4418]  run_ksoftirqd+0x1c/0x30
[   51.644399][ T4418]  smpboot_thread_fn+0x31c/0x4c0
[   51.649339][ T4418]  kthread+0x1d1/0x210
[   51.653402][ T4418]  ret_from_fork+0x4b/0x60
[   51.657827][ T4418]  ret_from_fork_asm+0x1a/0x30
[   51.662597][ T4418] 
[   51.664909][ T4418] read to 0xffff8881161287d8 of 8 bytes by task 4418 on cpu 1:
[   51.672446][ T4418]  dio_new_bio+0x249/0x460
[   51.676869][ T4418]  dio_send_cur_page+0x1f2/0x7a0
[   51.681818][ T4418]  submit_page_section+0x1a3/0x5b0
[   51.686938][ T4418]  __blockdev_direct_IO+0x11c1/0x1e90
[   51.692317][ T4418]  fat_direct_IO+0x110/0x1e0
[   51.696909][ T4418]  generic_file_direct_write+0xaf/0x200
[   51.702464][ T4418]  __generic_file_write_iter+0xae/0x120
[   51.708008][ T4418]  generic_file_write_iter+0x7d/0x1d0
[   51.713381][ T4418]  do_iter_readv_writev+0x3b0/0x470
[   51.718578][ T4418]  vfs_writev+0x2e0/0x880
[   51.722896][ T4418]  __se_sys_pwritev2+0x10c/0x1d0
[   51.727831][ T4418]  __x64_sys_pwritev2+0x78/0x90
[   51.732683][ T4418]  x64_sys_call+0x271f/0x2d60
[   51.737355][ T4418]  do_syscall_64+0xc9/0x1c0
[   51.741851][ T4418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.747743][ T4418] 
[   51.750052][ T4418] value changed: 0xffff8881143ebcc0 -> 0xffff88810c8dca80
[   51.757140][ T4418] 
[   51.759446][ T4418] Reported by Kernel Concurrency Sanitizer on:
[   51.765597][ T4418] CPU: 1 UID: 0 PID: 4418 Comm: syz.0.154 Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0
[   51.776177][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   51.786222][ T4418] ==================================================================
[   51.833783][ T4058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.