last executing test programs:

4.682724419s ago: executing program 3 (id=425):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000906000200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004000128009000100626f6e64000000003000028005001500010000000c000880ac1414bbac14141805000c000200000005000c000100000005000d"], 0x68}}, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
socket(0x1e, 0x4, 0x0)
sendmsg$unix(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="3ba3", 0x2}], 0x1}, 0x20000001)
recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x2000000, 0x0}, 0x10002)

3.664669548s ago: executing program 3 (id=436):
r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000bc0)="1a", 0x1, 0x8000, &(0x7f00000004c0)={0xa, 0x4e23, 0x20000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}, 0x4f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x20741, 0x148)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timerfd_settime(r2, 0x2, &(0x7f00000003c0)={{r3, r4+10000000}, {0x0, 0x989680}}, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioprio_set$pid(0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
getgid()
getrlimit(0x1, &(0x7f0000000440))
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x34)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "5bf95f503ca455a41d360fdd141e3c5069d21520"}, 0x15, 0x1)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)

3.573347126s ago: executing program 3 (id=437):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000000)=<r2=>0x0)
sendto$inet6(r0, &(0x7f0000000bc0)="1a", 0x1, 0x8000, &(0x7f00000004c0)={0xa, 0x4e23, 0x20000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}, 0x4f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x20741, 0x148)
timerfd_settime(r3, 0x2, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioprio_set$pid(0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
getgid()
getrlimit(0x1, &(0x7f0000000440))
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x34)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "5bf95f503ca455a41d360fdd141e3c5069d21520"}, 0x15, 0x1)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

3.478590824s ago: executing program 3 (id=439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000002a001000cdee540e0000000000"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110100, 0x32}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
close(0xffffffffffffffff)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000180), &(0x7f0000000200)='%-5lx  \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.612255291s ago: executing program 1 (id=447):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f0000000800)=[{&(0x7f0000000240)='7', 0x1}, {&(0x7f0000000780)}], 0x2)
syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x400)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0xb, 0x10}, {0xe, 0x2}, 0x9, 0x2, 0xfb})
close(r4)
r5 = socket$inet6(0xa, 0x800, 0x9)
sendto$inet6(r5, 0x0, 0x810, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x6200, 0x0)
ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000000080)=0x9)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r10}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
listen(r6, 0x0)

2.569589114s ago: executing program 0 (id=448):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000f00)=ANY=[], 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="89100000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004fc0)={0x38, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4, 0x2}]}]}]}]}, 0x38}}, 0x0)

2.455775044s ago: executing program 1 (id=451):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x798, &(0x7f0000000100), 0xfe, 0x46a, &(0x7f0000000b40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000410000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c000100626974776973650034000280080003400000000108000140000000160c000480050001003f00000008000240000000160c000580060001009ed900000900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x9c}}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
setresuid(0x0, 0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x80000010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x29)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$setsig(r5, 0xa, 0x21)
r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_getsetattr(r6, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)
mq_timedreceive(r6, &(0x7f0000001740)=""/207, 0xcf, 0x0, 0x0)
mq_timedreceive(r6, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0)

2.080250377s ago: executing program 1 (id=467):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
pipe2$9p(&(0x7f0000000400), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sched_switch\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100000005000000000000000000", @ANYRES32=r4], 0x20}}, 0x0)

1.907096453s ago: executing program 1 (id=457):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='ext4_mballoc_alloc\x00'}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
io_getevents(0x0, 0x100, 0x0, &(0x7f0000000300), &(0x7f0000000340))
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
open_tree(r3, &(0x7f0000000440)='./file0\x00', 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$getflags(r4, 0x401)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000040))
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000020301010000000a000004080005400000002209000200fffffff901000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x880)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$TCXONC(r5, 0x540a, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10)

1.868546756s ago: executing program 2 (id=458):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r1, r1, 0x0)
getegid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x81)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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")
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$inet6(0xa, 0x6, 0x0)
listen(r3, 0x83)
r4 = syz_io_uring_setup(0x4491, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x5c, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_uring_setup(0x5463, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x18, 0x20000000, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1.650658795s ago: executing program 0 (id=460):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'veth1_to_batadv\x00'}}, 0x1e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x40440, 0x3)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84041}, 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r3}, 0x10)
pause()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1480026e6261746164765f556c6176655f31", @ANYRES16=r7, @ANYBLOB="01000000000022000000010000002000018008000100", @ANYBLOB="f1f57c5e6d68d983bdf65cc76b037240b706f611f13cb7d0ec9add3402be4721a32d0bb7e7d345b101188fa03b66c8e80292554e104fc6e3bf0ea2ba6da35ee5d2dd500f60bae44fa3e2ec4b8fb911d23418f82a58ab51ed0c0fe6ceff2ae8a1101754bff1a6481ad738103f1f15c92be2fab163c5e4a1d4079312743224ec063fc4e52136ca408176080c2d8275ac5180d136007869b3a4e623368fac4d73fa90e678e7bb4f51", @ANYRESHEX=r5], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)

1.47910911s ago: executing program 4 (id=462):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f0000000800)=[{&(0x7f0000000240)='7', 0x1}, {&(0x7f0000000780)}], 0x2)
syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x400)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0xb, 0x10}, {0xe, 0x2}, 0x9, 0x2, 0xfb})
close(r4)
r5 = socket$inet6(0xa, 0x800, 0x9)
sendto$inet6(r5, 0x0, 0x810, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x6200, 0x0)
ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000000080)=0x9)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r10}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
listen(r6, 0x0)

1.328829923s ago: executing program 2 (id=464):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000000)=<r2=>0x0)
sendto$inet6(r0, &(0x7f0000000bc0)="1a", 0x1, 0x8000, &(0x7f00000004c0)={0xa, 0x4e23, 0x20000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}, 0x4f)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x20741, 0x148)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x2, &(0x7f00000003c0)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioprio_set$pid(0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
getgid()
getrlimit(0x1, &(0x7f0000000440))
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x34)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "5bf95f503ca455a41d360fdd141e3c5069d21520"}, 0x15, 0x1)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

1.200981774s ago: executing program 4 (id=465):
sched_setscheduler(0x0, 0x2, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff0000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
getrlimit(0x1, &(0x7f0000000440))

1.13914474s ago: executing program 4 (id=466):
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008015}, 0x4000080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000200ffffdfff080003ce", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0xffffffb4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}, 0x78}}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_POLICE={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12344}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0x5}}]}}]}, 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'geneve0\x00', <r11=>0x0})
sendto$packet(r9, &(0x7f0000000180)="0b051000daff030006004788aa96a13bb1000000000088a8400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14)
r12 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', <r14=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={<r15=>0x0, @broadcast, @empty}, &(0x7f0000000200)=0xc)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1f0, 0x0, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40000c2}, 0x8010)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r16 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$binfmt_script(r16, &(0x7f0000001b80)={'#! ', './file0'}, 0xb)

1.134342271s ago: executing program 2 (id=468):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x798, &(0x7f0000000100), 0xfe, 0x46a, &(0x7f0000000b40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000410000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c000100626974776973650034000280080003400000000108000140000000160c000480050001003f00000008000240000000160c000580060001009ed900000900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x9c}}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x80000010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x29)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$setsig(r5, 0xa, 0x21)
r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_getsetattr(r6, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)
mq_timedreceive(r6, &(0x7f0000001740)=""/207, 0xcf, 0x0, 0x0)
mq_timedreceive(r6, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0)

1.123879321s ago: executing program 4 (id=470):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000300)=""/76, 0x4c, <r1=>0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)
sendmmsg$inet(r9, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0)

727.610106ms ago: executing program 3 (id=471):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@noinit_itable}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00')
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1001f0)
fallocate(r2, 0x3, 0x8, 0x8002)
pread64(r1, &(0x7f0000004640)=""/4086, 0xff6, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x10000000000000f2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x71)
syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00')
pipe2(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x1d0, 0x11, 0x148, 0x1d0, 0x0, 0x2f0, 0x2a8, 0x2a8, 0x2f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1f, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8)

727.223996ms ago: executing program 4 (id=472):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000007000000000000001fafd859a451b17d4954d5d5bcd2fcaa680ab22e0a6469d789c8e55f3720fb074f81be29fc859a57d6122f940d740a419bddf496ad7fb4f70f9f6f000a04433d1353cb8bbf1e84d06266337c4c9983909d73ccc95dc279254251c1f42dc21dc63f34e7e15c65eb981d43fe380b1787e9d27455039b2d1687c67a33ac51081d5366c6c02dfd9b34c5eea36046a245c28625f6f59d18584300003ebeef9c61be3fd45b4b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x2050a0c)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b)
read(r2, 0x0, 0x0)
close(r2)
close(r1)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10)
semop(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

724.527316ms ago: executing program 0 (id=481):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x798, &(0x7f0000000100), 0xfe, 0x46a, &(0x7f0000000b40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000410000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c000100626974776973650034000280080003400000000108000140000000160c000480050001003f00000008000240000000160c000580060001009ed900000900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x9c}}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x80000010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x29)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$setsig(r5, 0xa, 0x21)
r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_getsetattr(r6, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)
mq_timedreceive(r6, &(0x7f0000001740)=""/207, 0xcf, 0x0, 0x0)
mq_timedreceive(r6, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0)

723.774326ms ago: executing program 1 (id=473):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
pipe2$9p(&(0x7f0000000400), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sched_switch\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100000005000000000000000000", @ANYRES32=r4], 0x20}}, 0x0)

723.376906ms ago: executing program 2 (id=482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000300)=""/76, 0x4c, <r1=>0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)
sendmmsg$inet(r9, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0)

681.45788ms ago: executing program 1 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getnexthop={0x20, 0x6a, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r7, 0x0)
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
socket(0x2, 0x80805, 0x0)

580.671219ms ago: executing program 0 (id=475):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), &(0x7f0000000000)=<r2=>0x0)
sendto$inet6(r0, &(0x7f0000000bc0)="1a", 0x1, 0x8000, &(0x7f00000004c0)={0xa, 0x4e23, 0x20000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}, 0x4f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x20741, 0x148)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x2, &(0x7f00000003c0)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioprio_set$pid(0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
getgid()
getrlimit(0x1, &(0x7f0000000440))
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x34)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "5bf95f503ca455a41d360fdd141e3c5069d21520"}, 0x15, 0x1)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

324.188391ms ago: executing program 0 (id=476):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48)
fcntl$setsig(r1, 0xa, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.effective_mems\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018}, './file0\x00'})
r6 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000900)={0xc, "c33cd6ae1298a6d9176914ab849c60de8aa7e41e28458de266b2ac60e003aa1bb863de106102910c3975a100d7e30e1c172010964257b321f9f1d9243907a7505fb587cbfa103bea87d4dc33caa3102922edd260aa2d31faaab5e5b076521ec505a2b0b3bc10c526eefd0c8013dfb80c08e0a6f1bcade3087199f703dc5e815f"})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000060a965a9b6bd0f89c6af23c6fbe0c2657173dec9846a59b2a18b5b9c5ac968439e1102030093b9556713dc48facf572ca6ef00157d0d4935d5352a7786e4cb49b20958ea31766f804051c73fa49664feb2b8ae39312c52662de7de8a8b5c116dcf4df2ca23f8f886c681054f0a813fa872af0ea92d594c1ed4531937f591bc621e43a7b4033ba9180bf4607b881420b9b80971f59e5cf76b1607bb3c4200"/187, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@debug}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d0, &(0x7f00000002c0)="$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")

321.502471ms ago: executing program 2 (id=488):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), &(0x7f0000000000)=<r2=>0x0)
sendto$inet6(r0, &(0x7f0000000bc0)="1a", 0x1, 0x8000, &(0x7f00000004c0)={0xa, 0x4e23, 0x20000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}, 0x4f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x20741, 0x148)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x2, &(0x7f00000003c0)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioprio_set$pid(0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
getgid()
getrlimit(0x1, &(0x7f0000000440))
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x34)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "5bf95f503ca455a41d360fdd141e3c5069d21520"}, 0x15, 0x1)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

6.188359ms ago: executing program 3 (id=477):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r1, r1, 0x0)
getegid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x81)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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")
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$inet6(0xa, 0x6, 0x0)
listen(r3, 0x83)
r4 = syz_io_uring_setup(0x4491, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x5c, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_uring_setup(0x5463, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x18, 0x20000000, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

5.916139ms ago: executing program 4 (id=478):
sched_setscheduler(0x0, 0x2, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff00000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
getrlimit(0x1, &(0x7f0000000440))

2.828119ms ago: executing program 0 (id=490):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, 0x0, &(0x7f0000000000)=<r2=>0x0)
sendto$inet6(r0, &(0x7f0000000bc0)="1a", 0x1, 0x8000, &(0x7f00000004c0)={0xa, 0x4e23, 0x20000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}, 0x4f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x20741, 0x148)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x2, &(0x7f00000003c0)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioprio_set$pid(0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
getgid()
getrlimit(0x1, &(0x7f0000000440))
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x34)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "5bf95f503ca455a41d360fdd141e3c5069d21520"}, 0x15, 0x1)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

0s ago: executing program 2 (id=479):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000000)=<r2=>0x0)
sendto$inet6(r0, &(0x7f0000000bc0)="1a", 0x1, 0x8000, &(0x7f00000004c0)={0xa, 0x4e23, 0x20000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}, 0x4f)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x20741, 0x148)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x2, &(0x7f00000003c0)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000400))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioprio_set$pid(0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
getgid()
getrlimit(0x1, &(0x7f0000000440))
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x34)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "5bf95f503ca455a41d360fdd141e3c5069d21520"}, 0x15, 0x1)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

kernel console output (not intermixed with test programs):

28:1220): avc:  denied  { bind } for  pid=4370 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   62.794366][   T29] audit: type=1400 audit(1726141803.528:1221): avc:  denied  { name_bind } for  pid=4370 comm="syz.1.169" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   62.816529][   T29] audit: type=1400 audit(1726141803.528:1222): avc:  denied  { node_bind } for  pid=4370 comm="syz.1.169" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   62.841033][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'.
[   62.851670][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.858804][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.867101][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.874183][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.881526][ T4350] bridge_slave_0: entered allmulticast mode
[   62.888104][ T4350] bridge_slave_0: entered promiscuous mode
[   62.905057][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.912167][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.920705][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.927886][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.935098][ T4350] bridge_slave_1: entered allmulticast mode
[   62.942964][ T4350] bridge_slave_1: entered promiscuous mode
[   62.972560][ T4372] netlink: 830 bytes leftover after parsing attributes in process `syz.3.168'.
[   62.998867][ T4350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.023435][ T4350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.039610][ T4375] netlink: 'syz.1.170': attribute type 10 has an invalid length.
[   63.052423][ T4375] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   63.107562][ T4375] xt_NFQUEUE: number of total queues is 0
[   63.127950][ T4350] team0: Port device team_slave_0 added
[   63.146862][ T4350] team0: Port device team_slave_1 added
[   63.187648][ T4350] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.194727][ T4350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.220899][ T4350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.241277][ T4350] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.248384][ T4350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.274587][ T4350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.331723][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.333730][ T4381] loop1: detected capacity change from 0 to 512
[   63.349004][ T4350] hsr_slave_0: entered promiscuous mode
[   63.388075][ T4350] hsr_slave_1: entered promiscuous mode
[   63.394127][ T4381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   63.404448][ T4350] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.427361][ T4350] Cannot create hsr debugfs directory
[   63.438582][ T4381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   63.447126][ T4381] System zones: 1-12
[   63.468561][ T4381] EXT4-fs (loop1): 1 truncate cleaned up
[   63.681254][ T4350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.830055][ T4302] veth0_vlan: entered promiscuous mode
[   63.862330][ T4302] veth1_vlan: entered promiscuous mode
[   63.920669][ T4302] veth0_macvtap: entered promiscuous mode
[   63.945979][ T4302] veth1_macvtap: entered promiscuous mode
[   63.983638][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.994443][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.004375][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.014827][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.024680][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.035132][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.276169][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.297948][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.308888][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.318987][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.329440][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.339273][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.349885][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.436307][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.457872][ T4302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.466954][ T4302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.475706][ T4302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.484597][ T4302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.653800][ T4399] loop2: detected capacity change from 0 to 512
[   64.682585][ T4399] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.710367][ T4399] EXT4-fs (loop2): 1 orphan inode deleted
[   64.716281][ T4399] EXT4-fs (loop2): 1 truncate cleaned up
[   64.968219][ T4350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.989454][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'.
[   65.039781][ T4350] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode
[   65.048434][ T4350] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode
[   65.069325][ T4350] team0: Port device netdevsim1 removed
[   65.077402][ T4350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.094043][ T4410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'.
[   65.132775][ T4411] futex_wake_op: syz.0.176 tries to shift op by 32; fix this program
[   65.157204][ T4350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.271173][ T4350] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.281079][ T4350] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   65.291987][ T4350] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.302173][ T4350] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.331769][ T4420] loop3: detected capacity change from 0 to 128
[   65.373172][ T4350] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.402456][ T4350] 8021q: adding VLAN 0 to HW filter on device team0
[   65.418513][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.425630][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.441860][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.449038][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.472703][ T4350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.483259][ T4350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.496078][ T3258] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   65.524895][ T3258] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   65.552754][ T3258] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   65.575620][ T3258] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   65.607012][ T3258] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   65.630858][ T3258] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   65.660221][ T4350] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.672477][ T3258] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   65.696464][ T3258] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   65.718369][ T3258] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /43/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   65.756388][ T3258] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   65.909816][ T4350] veth0_vlan: entered promiscuous mode
[   65.928699][ T4281] bond0: (slave syz_tun): Releasing backup interface
[   65.942794][ T4350] veth1_vlan: entered promiscuous mode
[   65.980846][ T3267] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.013160][ T4350] veth0_macvtap: entered promiscuous mode
[   66.038402][ T3267] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.064433][ T4350] veth1_macvtap: entered promiscuous mode
[   66.106348][ T3267] bond0: (slave netdevsim1): Releasing backup interface
[   66.113456][ T3267] bond0: (slave netdevsim1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   66.138915][ T3267] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.153302][ T4445] loop3: detected capacity change from 0 to 128
[   66.194900][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.205501][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.215453][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.225990][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.235981][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.246428][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.256272][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.266789][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.312266][ T4409] syz.0.176 (4409) used greatest stack depth: 7528 bytes left
[   66.348597][ T4350] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.395226][ T3267] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.449561][ T4454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'.
[   66.465847][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.476511][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.486350][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.496884][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.506733][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.517160][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.527049][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.537494][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.642028][ T4350] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.663310][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'.
[   66.889372][ T3267] bond0 (unregistering): (slave geneve1): Releasing backup interface
[   66.900658][ T3267] bond0 (unregistering): Released all slaves
[   66.917811][ T4350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.926800][ T4350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.935587][ T4350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.944635][ T4350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.137106][ T3267] hsr_slave_0: left promiscuous mode
[   67.142917][ T3267] hsr_slave_1: left promiscuous mode
[   67.150583][ T3267] veth1_macvtap: left promiscuous mode
[   67.156080][ T3267] veth0_macvtap: left promiscuous mode
[   67.161642][ T3267] veth1_vlan: left promiscuous mode
[   67.167034][ T3267] veth0_vlan: left promiscuous mode
[   67.553547][ T4492] loop4: detected capacity change from 0 to 128
[   67.588754][   T29] kauditd_printk_skb: 102 callbacks suppressed
[   67.588771][   T29] audit: type=1400 audit(1726141808.250:1325): avc:  denied  { associate } for  pid=4491 comm="syz.4.166" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   67.618135][ T4496] loop3: detected capacity change from 0 to 512
[   67.658053][ T4496] EXT4-fs mount: 5 callbacks suppressed
[   67.658071][ T4496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.660232][   T29] audit: type=1400 audit(1726141808.250:1326): avc:  denied  { mounton } for  pid=4491 comm="syz.4.166" path="/0/file0/bus" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   67.670467][ T4496] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.734429][   T29] audit: type=1400 audit(1726141808.390:1327): avc:  denied  { unmount } for  pid=4350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   67.751357][ T4442] chnl_net:caif_netlink_parms(): no params data found
[   67.758282][   T29] audit: type=1400 audit(1726141808.420:1328): avc:  denied  { read } for  pid=4495 comm="syz.3.188" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.788063][ T4350] VFS: Lookup of '.  ' in vfat loop4 would have caused loop
[   67.801349][ T4350] VFS: Lookup of '.  ' in vfat loop4 would have caused loop
[   67.836288][   T29] audit: type=1326 audit(1726141808.490:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935f1bdef9 code=0x7ffc0000
[   67.859725][   T29] audit: type=1326 audit(1726141808.490:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935f1bdef9 code=0x7ffc0000
[   67.883036][   T29] audit: type=1326 audit(1726141808.490:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f935f1bdef9 code=0x7ffc0000
[   67.906372][   T29] audit: type=1326 audit(1726141808.490:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935f1bdef9 code=0x7ffc0000
[   67.929853][   T29] audit: type=1326 audit(1726141808.490:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f935f1bdef9 code=0x7ffc0000
[   67.967759][   T29] audit: type=1326 audit(1726141808.620:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935f1bdef9 code=0x7ffc0000
[   68.033809][ T4510] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.188: corrupted inode contents
[   68.047295][ T4510] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #19: comm syz.3.188: mark_inode_dirty error
[   68.059659][ T4510] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.188: corrupted inode contents
[   68.097052][ T4514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'.
[   68.124297][ T4515] netlink: 'syz.3.188': attribute type 10 has an invalid length.
[   68.145741][ T4520] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.188: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 772(4), depth 0(0)
[   68.165250][ T4510] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3007: inode #19: comm syz.3.188: mark_inode_dirty error
[   68.179239][ T4510] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3010: inode #19: comm syz.3.188: mark inode dirty (error -117)
[   68.192449][ T4515] geneve1: entered promiscuous mode
[   68.226239][ T4510] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117)
[   68.249413][ T4515] bond0: (slave geneve1): Enslaving as an active interface with an up link
[   68.302841][ T4523] gretap0: entered promiscuous mode
[   68.311830][ T4525] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.188: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 772(4), depth 0(0)
[   68.351428][ T4523] netlink: 'syz.0.191': attribute type 2 has an invalid length.
[   68.359182][ T4523] netlink: 9 bytes leftover after parsing attributes in process `syz.0.191'.
[   68.417538][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.424665][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.448114][ T4442] bridge_slave_0: entered allmulticast mode
[   68.464826][ T4442] bridge_slave_0: entered promiscuous mode
[   68.471858][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.478982][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.489049][ T4442] bridge_slave_1: entered allmulticast mode
[   68.495538][ T4442] bridge_slave_1: entered promiscuous mode
[   68.574249][ T4539] can0: slcan on ttyS3.
[   68.576169][ T4442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.598836][ T4442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.637924][ T4442] team0: Port device team_slave_0 added
[   68.644767][ T4442] team0: Port device team_slave_1 added
[   68.689692][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.696708][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.722841][ T4442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.750882][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.757914][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.783874][ T4442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.799295][ T4212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.831210][ T4442] hsr_slave_0: entered promiscuous mode
[   68.841174][ T4442] hsr_slave_1: entered promiscuous mode
[   68.847375][ T4442] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.855481][ T4442] Cannot create hsr debugfs directory
[   69.427920][ T4581] netlink: 68 bytes leftover after parsing attributes in process `syz.2.195'.
[   69.436985][ T4539] can0 (unregistered): slcan off ttyS3.
[   69.460181][ T4442] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.488998][ T4442] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.498057][ T4442] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.507848][ T4442] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.539399][ T4588] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   69.547730][ T4588] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   69.573814][ T4442] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.594723][ T4442] 8021q: adding VLAN 0 to HW filter on device team0
[   69.613193][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.620428][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.633545][ T4594] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512
[   69.644718][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.651824][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.736518][ T4594] loop2: detected capacity change from 0 to 1024
[   69.745491][ T4607] loop3: detected capacity change from 0 to 128
[   69.773501][ T4607] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.787232][ T4607] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   69.788509][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.868910][ T4594] EXT4-fs (loop2): shut down requested (0)
[   69.896138][ T4442] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.913675][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.927960][ T4212] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.004828][ T4631] loop2: detected capacity change from 0 to 2048
[   70.031530][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.066309][ T4631] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   70.129901][ T4442] veth0_vlan: entered promiscuous mode
[   70.139536][ T4442] veth1_vlan: entered promiscuous mode
[   70.153940][ T4442] veth0_macvtap: entered promiscuous mode
[   70.172861][ T4442] veth1_macvtap: entered promiscuous mode
[   70.183754][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.194394][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.204630][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.215172][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.225140][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.235761][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.245642][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.256169][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.266019][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.276526][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.288124][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.303264][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.313906][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.323857][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.334320][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.344186][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.354722][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.364582][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.375041][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.384894][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.395572][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.407888][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.408173][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.428559][ T4442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.437433][ T4442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.446217][ T4442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.455101][ T4442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.539170][ T4677] SELinux:  Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped).
[   70.628548][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   70.658495][ T4690] loop0: detected capacity change from 0 to 512
[   70.661817][ T4690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   70.662835][ T4690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002]
[   70.662860][ T4690] System zones: 1-12
[   70.663202][ T4690] EXT4-fs (loop0): 1 truncate cleaned up
[   70.670345][ T4690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.911318][ T3895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.008008][ T4724] can0: slcan on ttyS3.
[   71.022291][ T4725] tipc: Started in network mode
[   71.027411][ T4725] tipc: Node identity , cluster identity 4711
[   71.033513][ T4725] tipc: Failed to set node id, please configure manually
[   71.040863][ T4725] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   71.063615][ T4725] syz.3.206[4725] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   71.063834][ T4725] syz.3.206[4725] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   71.114467][ T4723] netlink: 140 bytes leftover after parsing attributes in process `syz.1.208'.
[   71.179850][ T4723] caif0 speed is unknown, defaulting to 1000
[   71.199432][ T4723] caif0 speed is unknown, defaulting to 1000
[   71.234521][ T4723] caif0 speed is unknown, defaulting to 1000
[   71.315468][ T4723] infiniband syz1: set down
[   71.320068][ T4723] infiniband syz1: added caif0
[   71.335400][    T9] caif0 speed is unknown, defaulting to 1000
[   71.362923][ T4723] RDS/IB: syz1: added
[   71.370373][ T4723] smc: adding ib device syz1 with port count 1
[   71.383611][ T4723] smc:    ib device syz1 port 1 has pnetid 
[   71.410736][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'.
[   71.420805][    T9] caif0 speed is unknown, defaulting to 1000
[   71.479393][ T4723] caif0 speed is unknown, defaulting to 1000
[   71.505500][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'.
[   71.608499][ T4723] caif0 speed is unknown, defaulting to 1000
[   71.611292][ T4750] loop2: detected capacity change from 0 to 1024
[   71.673295][ T4750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.696797][ T4750] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.738137][ T4723] caif0 speed is unknown, defaulting to 1000
[   71.756845][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.853409][ T4756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.866798][ T4724] can0 (unregistered): slcan off ttyS3.
[   71.928126][ T4771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'.
[   71.954329][ T4768] loop0: detected capacity change from 0 to 512
[   71.977888][ T4756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.015577][ T4768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.036934][ T4768] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.060004][ T4723] caif0 speed is unknown, defaulting to 1000
[   72.079343][ T4756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.144372][ T4756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.203686][ T4768] bond1: entered promiscuous mode
[   72.208977][ T4768] bond1: entered allmulticast mode
[   72.215316][ T4768] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.240317][ T4768] bond1 (unregistering): Released all slaves
[   72.254387][ T4723] caif0 speed is unknown, defaulting to 1000
[   72.269831][ T4756] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.295720][ T4756] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.320002][ T4756] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.332270][ T3895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.365672][ T4756] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.376415][ T4723] caif0 speed is unknown, defaulting to 1000
[   72.392643][ T4802] sctp: [Deprecated]: syz.0.216 (pid 4802) Use of int in max_burst socket option.
[   72.392643][ T4802] Use struct sctp_assoc_value instead
[   72.451934][ T4806] loop3: detected capacity change from 0 to 512
[   72.484052][ T4806] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.217: corrupted in-inode xattr: e_value size too large
[   72.496533][ T4802] loop0: detected capacity change from 0 to 2048
[   72.510083][ T4723] caif0 speed is unknown, defaulting to 1000
[   72.518030][ T4806] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.217: couldn't read orphan inode 15 (err -117)
[   72.536616][ T4806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.548243][ T4802]  loop0: p3 < > p4 < >
[   72.552936][ T4802] loop0: partition table partially beyond EOD, truncated
[   72.562139][ T4723] caif0 speed is unknown, defaulting to 1000
[   72.563044][ T4802] loop0: p3 start 4284289 is beyond EOD, truncated
[   72.588885][ T4806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'.
[   72.602192][ T4723] caif0 speed is unknown, defaulting to 1000
[   72.614033][ T4802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'.
[   72.622957][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'.
[   72.646061][ T4212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.663202][   T29] kauditd_printk_skb: 212 callbacks suppressed
[   72.663218][   T29] audit: type=1400 audit(1726141813.320:1547): avc:  denied  { setopt } for  pid=4808 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.700093][ T4809] loop2: detected capacity change from 0 to 1024
[   72.705904][ T4812] loop3: detected capacity change from 0 to 1024
[   72.713187][   T29] audit: type=1400 audit(1726141813.360:1548): avc:  denied  { write } for  pid=4811 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   72.714921][ T4723] caif0 speed is unknown, defaulting to 1000
[   72.734185][ T4812] EXT4-fs: Ignoring removed i_version option
[   72.749921][ T4813] loop0: detected capacity change from 0 to 512
[   72.758046][ T4809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.775645][ T4809] (unnamed net_device) (uninitialized): option mode: invalid value (37)
[   72.785153][   T29] audit: type=1400 audit(1726141813.440:1549): avc:  denied  { write } for  pid=4808 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   72.788970][ T4813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.817524][ T4812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.838593][ T4809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.220'.
[   72.872935][   T29] audit: type=1400 audit(1726141813.520:1550): avc:  denied  { write } for  pid=4811 comm="syz.3.218" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   72.890693][ T4813] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.913389][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.931330][ T4822] loop1: detected capacity change from 0 to 1024
[   72.944163][ T4822] EXT4-fs: Ignoring removed orlov option
[   72.951901][ T4822] EXT4-fs: Ignoring removed nobh option
[   72.962608][   T29] audit: type=1400 audit(1726141813.620:1551): avc:  denied  { setattr } for  pid=4810 comm="syz.0.219" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   72.998628][ T4212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.008422][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.024711][   T29] audit: type=1400 audit(1726141813.680:1552): avc:  denied  { ioctl } for  pid=4823 comm="syz.2.221" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   73.093789][ T4830] loop2: detected capacity change from 0 to 512
[   73.135792][ T4830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.169354][ T4830] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.203470][   T29] audit: type=1326 audit(1726141813.830:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4833 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df409def9 code=0x7ffc0000
[   73.227086][   T29] audit: type=1326 audit(1726141813.830:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4833 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3df409def9 code=0x7ffc0000
[   73.250411][   T29] audit: type=1326 audit(1726141813.830:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4833 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df409def9 code=0x7ffc0000
[   73.275615][   T29] audit: type=1326 audit(1726141813.830:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4833 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3df409def9 code=0x7ffc0000
[   73.334118][ T4844] caif0 speed is unknown, defaulting to 1000
[   73.517695][ T3267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.546411][ T4830] caif0 speed is unknown, defaulting to 1000
[   73.569116][ T4789] chnl_net:caif_netlink_parms(): no params data found
[   73.584470][ T3895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.627441][ T3267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.630775][ T4857] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[   73.648542][ T4847] can0: slcan on pts0.
[   73.688922][ T3267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.707040][ T4858] can0 (unregistered): slcan off pts0.
[   73.730371][ T4857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'.
[   73.730903][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.746359][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.754260][ T4789] bridge_slave_0: entered allmulticast mode
[   73.800966][ T4789] bridge_slave_0: entered promiscuous mode
[   73.813128][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.845901][ T3267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.872129][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.879358][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.911627][ T4789] bridge_slave_1: entered allmulticast mode
[   73.920500][ T4789] bridge_slave_1: entered promiscuous mode
[   73.945877][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.023972][ T4894] loop2: detected capacity change from 0 to 512
[   74.039832][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.049458][ T4884] tipc: Started in network mode
[   74.054357][ T4884] tipc: Node identity ac1414aa, cluster identity 4711
[   74.063930][ T4895] loop3: detected capacity change from 0 to 512
[   74.088234][ T4894] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.228: corrupted in-inode xattr: e_value size too large
[   74.106916][ T4884] tipc: New replicast peer: 100.1.1.1
[   74.112376][ T4884] tipc: Enabled bearer <udp:s>, priority 10
[   74.115271][ T4895] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.229: invalid indirect mapped block 4294967295 (level 1)
[   74.126577][ T4891] loop0: detected capacity change from 0 to 8192
[   74.136705][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.151478][ T4894] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.228: couldn't read orphan inode 15 (err -117)
[   74.153024][ T4895] EXT4-fs (loop3): Remounting filesystem read-only
[   74.171602][ T4895] EXT4-fs (loop3): 2 truncates cleaned up
[   74.191829][ T4895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.213761][ T4894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.261198][ T4789] team0: Port device team_slave_0 added
[   74.277908][ T4895] SELinux: (dev loop3, type ext4) getxattr errno 5
[   74.285965][ T4789] team0: Port device team_slave_1 added
[   74.311436][ T4895] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.339683][ T3267] bridge_slave_1: left allmulticast mode
[   74.345441][ T3267] bridge_slave_1: left promiscuous mode
[   74.351291][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.406382][ T4909] loop0: detected capacity change from 0 to 2048
[   74.415499][ T3267] bridge_slave_0: left allmulticast mode
[   74.421200][ T3267] bridge_slave_0: left promiscuous mode
[   74.427046][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.488471][ T4909] Alternate GPT is invalid, using primary GPT.
[   74.494958][ T4909]  loop0: p1 p2 p3
[   74.594090][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.779008][ T3267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.803377][ T3267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.855642][ T3267] bond0 (unregistering): Released all slaves
[   75.054615][ T4921] caif0 speed is unknown, defaulting to 1000
[   75.191039][ T3334] tipc: Node number set to 2886997162
[   75.195675][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.203447][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.229414][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.523649][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.530678][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.556803][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.617339][ T4929] loop0: detected capacity change from 0 to 512
[   75.643449][ T4929] EXT4-fs: Ignoring removed i_version option
[   75.649516][ T4929] EXT4-fs: Ignoring removed nobh option
[   75.682555][ T4929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   75.696404][ T3267] hsr_slave_0: left promiscuous mode
[   75.700208][ T4929] EXT4-fs (loop0): 1 truncate cleaned up
[   75.708678][ T3267] hsr_slave_1: left promiscuous mode
[   75.714731][ T3267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.722294][ T3267] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.784639][ T4929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.954814][ T4934] syz.1.234[4934] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.954895][ T4934] syz.1.234[4934] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.995732][ T3267] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.014573][ T3267] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.023426][ T4935] syz.1.234[4935] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.023509][ T4935] syz.1.234[4935] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.116668][ T4938] loop3: detected capacity change from 0 to 164
[   76.259261][ T3267] veth1_macvtap: left promiscuous mode
[   76.264798][ T3267] veth0_macvtap: left promiscuous mode
[   76.264915][ T3267] veth1_vlan: left promiscuous mode
[   76.275601][ T3267] veth0_vlan: left promiscuous mode
[   76.315189][ T4946] x_tables: ip_tables: CT target: only valid in raw table, not 
[   76.325836][ T3895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.409343][ T4950] loop0: detected capacity change from 0 to 128
[   76.484051][ T3267] team0 (unregistering): Port device team_slave_1 removed
[   76.492117][ T4950] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.510752][ T3267] team0 (unregistering): Port device team_slave_0 removed
[   76.519834][ T4950] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   76.582600][ T4789] hsr_slave_0: entered promiscuous mode
[   76.589188][ T4789] hsr_slave_1: entered promiscuous mode
[   76.595331][ T4789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.602930][ T4789] Cannot create hsr debugfs directory
[   76.740121][ T4961] loop1: detected capacity change from 0 to 512
[   76.758741][ T4961] EXT4-fs: Ignoring removed mblk_io_submit option
[   76.779790][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.794970][ T4961] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.829572][ T4961] syz.1.243[4961] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.829656][ T4961] syz.1.243[4961] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.847930][ T4961] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   77.144492][ T5000] macsec1: entered allmulticast mode
[   77.302131][ T3895] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.325437][ T4789] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.366102][ T4789] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.431429][ T4789] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.465544][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.482829][ T4789] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.564209][ T5021] can0: slcan on ttyS3.
[   77.568530][ T5020] loop1: detected capacity change from 0 to 512
[   77.589898][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.595636][ T5020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846c028, mo2=0002]
[   77.606875][ T5020] System zones: 1-12
[   77.610973][ T5020] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.247: Attempting to read directory block (0) that is past i_size (256)
[   77.616824][ T4789] 8021q: adding VLAN 0 to HW filter on device team0
[   77.636677][ T5026] bridge_slave_1: left allmulticast mode
[   77.642424][ T5026] bridge_slave_1: left promiscuous mode
[   77.648121][ T5026] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.660265][ T5020] EXT4-fs (loop1): Remounting filesystem read-only
[   77.667582][ T5026] bridge_slave_0: left allmulticast mode
[   77.673267][ T5026] bridge_slave_0: left promiscuous mode
[   77.676881][ T5020] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   77.679117][ T5026] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.694482][ T5020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.707750][ T5020] SELinux: (dev loop1, type ext4) getxattr errno 5
[   77.717844][ T5020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.771033][   T29] kauditd_printk_skb: 193 callbacks suppressed
[   77.771107][   T29] audit: type=1400 audit(1726141818.430:1750): avc:  denied  { ioctl } for  pid=5019 comm="syz.1.247" path="socket:[9432]" dev="sockfs" ino=9432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   77.802051][   T29] audit: type=1400 audit(1726141818.430:1751): avc:  denied  { bind } for  pid=5019 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   77.850363][   T29] audit: type=1400 audit(1726141818.490:1752): avc:  denied  { create } for  pid=5038 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   77.869811][   T29] audit: type=1400 audit(1726141818.500:1753): avc:  denied  { lock } for  pid=5038 comm="syz.2.249" path="socket:[9434]" dev="sockfs" ino=9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   77.892866][   T29] audit: type=1400 audit(1726141818.500:1754): avc:  denied  { create } for  pid=5038 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.912215][   T29] audit: type=1400 audit(1726141818.500:1755): avc:  denied  { ioctl } for  pid=5038 comm="syz.2.249" path="socket:[9436]" dev="sockfs" ino=9436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.936723][   T29] audit: type=1400 audit(1726141818.500:1756): avc:  denied  { bind } for  pid=5038 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.956213][   T29] audit: type=1400 audit(1726141818.500:1757): avc:  denied  { write } for  pid=5038 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.958054][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.982689][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.992793][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.999958][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.012373][   T29] audit: type=1400 audit(1726141818.670:1758): avc:  denied  { write } for  pid=5044 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   78.031581][ T5042] loop1: detected capacity change from 0 to 2048
[   78.057999][   T29] audit: type=1326 audit(1726141818.670:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   78.059046][ T5042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.094396][ T5042] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.140661][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.173718][ T5061] loop1: detected capacity change from 0 to 256
[   78.198401][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.457236][ T5014] can0 (unregistered): slcan off ttyS3.
[   78.719797][ T5088] pim6reg1: entered promiscuous mode
[   78.725171][ T5088] pim6reg1: entered allmulticast mode
[   78.751279][ T4789] veth0_vlan: entered promiscuous mode
[   78.760854][ T4789] veth1_vlan: entered promiscuous mode
[   78.786069][ T4789] veth0_macvtap: entered promiscuous mode
[   78.794876][ T4789] veth1_macvtap: entered promiscuous mode
[   78.809174][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.819711][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.829619][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.840175][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.850184][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.860646][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.870539][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.881245][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.891123][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.901771][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.914364][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.928988][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.939582][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.949795][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.955080][ T5103] random: crng reseeded on system resumption
[   78.960357][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.960375][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.986959][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.996894][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.007339][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.017215][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.028062][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.044578][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.070529][ T5103] SELinux:  Context target default is not valid (left unmapped).
[   79.126284][ T4789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.135179][ T4789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.144029][ T4789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.153005][ T4789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.378938][ T5114] loop4: detected capacity change from 0 to 512
[   79.413148][ T5114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.444594][ T5114] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.470692][ T5114] __nla_validate_parse: 1 callbacks suppressed
[   79.470709][ T5114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'.
[   79.488001][ T5114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'.
[   79.496963][ T5114] netlink: 56 bytes leftover after parsing attributes in process `syz.4.215'.
[   79.505852][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'.
[   79.525546][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   79.547538][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   79.569062][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   79.569382][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   79.569673][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   79.569927][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   79.570253][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   79.682919][ T4789] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1)
[   79.697958][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   79.698211][ T4789] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[   79.764997][ T5130] bond1: entered promiscuous mode
[   79.770193][ T5130] bond1: entered allmulticast mode
[   79.775641][ T5130] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.796421][ T5130] bond1 (unregistering): Released all slaves
[   79.822839][ T5134] loop2: detected capacity change from 0 to 1024
[   79.830181][ T5134] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   79.872258][ T5134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.930685][ T5130] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.2.262: corrupted in-inode xattr: bad e_name length
[   79.964961][ T5137] loop3: detected capacity change from 0 to 2048
[   79.975920][ T5130] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #2: comm syz.2.262: corrupted in-inode xattr: bad e_name length
[   80.037053][ T5137] Alternate GPT is invalid, using primary GPT.
[   80.043404][ T5137]  loop3: p1 p2 p3
[   80.053591][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.073121][ T5140] veth0_vlan: entered allmulticast mode
[   80.085621][ T5137] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[   80.157246][ T5142] sctp: [Deprecated]: syz.2.266 (pid 5142) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.157246][ T5142] Use struct sctp_sack_info instead
[   80.227047][ T5140] veth0_vlan: left promiscuous mode
[   80.262392][ T5140] veth0_vlan: entered promiscuous mode
[   80.293051][ T5146] loop3: detected capacity change from 0 to 512
[   80.328250][ T5146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.342640][ T5146] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   80.409601][ T5153] caif0 speed is unknown, defaulting to 1000
[   80.494196][ T4212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.850509][ T5159] Cannot find del_set index 4 as target
[   81.031028][ T5161] loop2: detected capacity change from 0 to 2048
[   81.062032][ T5161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.171912][ T5159] loop3: detected capacity change from 0 to 2048
[   81.217672][ T5159]  loop3: p1 < > p4
[   81.222214][ T5159] loop3: p4 size 8388608 extends beyond EOD, truncated
[   81.265663][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'.
[   81.296471][ T5182] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[   81.476109][ T5198] loop3: detected capacity change from 0 to 512
[   81.499936][ T5198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.525150][ T5198] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.682211][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.723182][ T5215] capability: warning: `syz.2.276' uses 32-bit capabilities (legacy support in use)
[   82.199301][ T5226] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.299906][ T4212] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /26/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   82.426059][ T5230] can0: slcan on ttyS3.
[   82.663644][ T5247] loop2: detected capacity change from 0 to 1024
[   82.679896][ T5247] EXT4-fs: Ignoring removed i_version option
[   82.688354][ T5247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.845668][   T29] kauditd_printk_skb: 466 callbacks suppressed
[   82.845682][   T29] audit: type=1400 audit(1726141823.500:2226): avc:  denied  { name_bind } for  pid=5252 comm="syz.0.284" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   83.067975][ T5247] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   83.093293][ T5247] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   83.105648][ T5247] EXT4-fs (loop2): This should not happen!! Data will be lost
[   83.105648][ T5247] 
[   83.115342][ T5247] EXT4-fs (loop2): Total free blocks count 0
[   83.121383][ T5247] EXT4-fs (loop2): Free/Dirty block details
[   83.127407][ T5247] EXT4-fs (loop2): free_blocks=68451041280
[   83.130058][   T29] audit: type=1400 audit(1726141823.790:2227): avc:  denied  { create } for  pid=5254 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   83.133212][ T5247] EXT4-fs (loop2): dirty_blocks=16
[   83.133230][ T5247] EXT4-fs (loop2): Block reservation details
[   83.163710][ T5247] EXT4-fs (loop2): i_reserved_data_blocks=1
[   83.232417][   T29] audit: type=1400 audit(1726141823.890:2228): avc:  denied  { listen } for  pid=5254 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   83.256855][ T5230] can0 (unregistered): slcan off ttyS3.
[   83.295053][   T29] audit: type=1326 audit(1726141823.950:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.1.286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x0
[   83.440916][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.622798][ T5291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5291 comm=syz.1.286
[   83.637625][ T5292] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   83.729670][ T5271] loop1: detected capacity change from 0 to 2048
[   83.980992][ T5298] netlink: 376 bytes leftover after parsing attributes in process `syz.0.288'.
[   84.027142][ T5298] netlink: 68 bytes leftover after parsing attributes in process `syz.0.288'.
[   84.055525][ T5298] €: renamed from bond0 (while UP)
[   84.084558][ T5298] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   84.092796][ T5298] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   84.176141][ T5302] loop0: detected capacity change from 0 to 512
[   84.197821][ T5300] siw: device registration error -23
[   84.206702][   T29] audit: type=1400 audit(1726141824.860:2230): avc:  denied  { ioctl } for  pid=5299 comm="syz.2.289" path="socket:[10937]" dev="sockfs" ino=10937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   84.232121][ T5302] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.291: corrupted in-inode xattr: e_value size too large
[   84.274249][ T5302] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.291: couldn't read orphan inode 15 (err -117)
[   84.319008][ T5302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.352617][ T5302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'.
[   84.398901][   T29] audit: type=1326 audit(1726141825.060:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   84.422471][   T29] audit: type=1326 audit(1726141825.060:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   84.462142][   T29] audit: type=1326 audit(1726141825.060:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   84.485625][   T29] audit: type=1326 audit(1726141825.060:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   84.508996][   T29] audit: type=1326 audit(1726141825.060:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   84.563284][ T3895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.615063][ T5321] loop0: detected capacity change from 0 to 512
[   84.638719][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.670569][ T5321] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.698559][ T5321] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.295: corrupted inode contents
[   84.730773][ T5321] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.295: mark_inode_dirty error
[   84.744225][ T5325] caif0 speed is unknown, defaulting to 1000
[   84.760444][ T5321] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.295: corrupted inode contents
[   84.819981][ T5321] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.295: Directory hole found for htree leaf block 0
[   84.886115][ T3895] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.917683][ T5327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.937542][ T5327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.959976][ T5327] loop0: detected capacity change from 0 to 512
[   84.976707][ T5327] ext4: Unknown parameter 'subj_user'
[   85.200199][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.378983][ T5332] loop4: detected capacity change from 0 to 8192
[   85.625339][ T5332] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[   85.634072][ T5332] FAT-fs (loop4): Filesystem has been set read-only
[   85.746395][ T5332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5332 comm=syz.4.260
[   85.782955][ T5332] netlink: 'syz.4.260': attribute type 29 has an invalid length.
[   87.111882][ T5361] loop4: detected capacity change from 0 to 2048
[   87.129172][ T5361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.213750][ T5368] loop2: detected capacity change from 0 to 512
[   87.237274][ T5368] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.306: corrupted in-inode xattr: e_value size too large
[   87.275034][ T5368] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.306: couldn't read orphan inode 15 (err -117)
[   87.300311][ T5368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.363472][ T5368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.306'.
[   87.419846][ T4302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.534637][ T5374] caif0 speed is unknown, defaulting to 1000
[   87.635415][ T5381] loop1: detected capacity change from 0 to 512
[   87.654420][ T5381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.682009][   T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   87.690556][ T5381] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.726975][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   87.739532][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[   87.739532][   T11] 
[   87.749271][   T11] EXT4-fs (loop4): Total free blocks count 0
[   87.755283][   T11] EXT4-fs (loop4): Free/Dirty block details
[   87.761300][   T11] EXT4-fs (loop4): free_blocks=2415919104
[   87.767126][   T11] EXT4-fs (loop4): dirty_blocks=8192
[   87.772428][   T11] EXT4-fs (loop4): Block reservation details
[   87.778503][   T11] EXT4-fs (loop4): i_reserved_data_blocks=512
[   87.855250][ T3267] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   87.883011][ T5385] loop2: detected capacity change from 0 to 256
[   87.889571][ T5386] netlink: 'syz.1.309': attribute type 10 has an invalid length.
[   87.924306][ T5385] vfat: Unknown parameter 'u€f8'
[   87.929390][ T5386] geneve1: entered promiscuous mode
[   87.988931][ T5386] bond0: (slave geneve1): Enslaving as an active interface with an up link
[   87.994500][ T5389] loop4: detected capacity change from 0 to 256
[   88.004255][   T29] kauditd_printk_skb: 228 callbacks suppressed
[   88.004270][   T29] audit: type=1400 audit(1726141828.650:2464): avc:  denied  { name_bind } for  pid=5387 comm="syz.4.310" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   88.011718][ T5389] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   88.046096][   T29] audit: type=1400 audit(1726141828.680:2465): avc:  denied  { setattr } for  pid=5380 comm="syz.1.309" path="/23/bus/blkio.bfq.time" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   88.081577][ T5386] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.309: corrupted inode contents
[   88.108508][ T5385] loop2: detected capacity change from 0 to 128
[   88.109427][ T5386] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #19: comm syz.1.309: mark_inode_dirty error
[   88.134341][ T5386] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.309: corrupted inode contents
[   88.151921][ T5389] Process accounting resumed
[   88.153898][ T5393] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.309: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 772(4), depth 0(0)
[   88.176418][ T5386] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #19: comm syz.1.309: mark_inode_dirty error
[   88.204199][ T5386] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #19: comm syz.1.309: mark inode dirty (error -117)
[   88.224967][ T5386] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117)
[   88.260770][   T29] audit: type=1400 audit(1726141828.920:2466): avc:  denied  { getopt } for  pid=5399 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   88.292645][ T5386] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.309: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 772(4), depth 0(0)
[   88.416794][ T5406] netlink: 256 bytes leftover after parsing attributes in process `syz.2.314'.
[   88.526206][   T29] audit: type=1326 audit(1726141829.180:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   88.549671][   T29] audit: type=1326 audit(1726141829.180:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   88.572998][   T29] audit: type=1326 audit(1726141829.180:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   88.596354][   T29] audit: type=1326 audit(1726141829.180:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   88.619801][   T29] audit: type=1326 audit(1726141829.180:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   88.644165][   T29] audit: type=1326 audit(1726141829.180:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   88.667523][   T29] audit: type=1326 audit(1726141829.180:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c01def9 code=0x7ffc0000
[   88.724672][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.836396][ T5414] bridge1: entered promiscuous mode
[   88.841843][ T5414] bridge1: entered allmulticast mode
[   88.885376][ T5416] loop1: detected capacity change from 0 to 256
[   88.893778][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'.
[   88.903230][ T5418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.910495][ T5418] IPv6: NLM_F_CREATE should be set when creating new route
[   88.921890][ T5418] netlink: 'syz.2.318': attribute type 27 has an invalid length.
[   88.934697][ T5422] loop4: detected capacity change from 0 to 512
[   88.995231][ T5426] loop2: detected capacity change from 0 to 512
[   89.014196][ T5422] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.319: corrupted in-inode xattr: e_value size too large
[   89.044289][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.051534][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.066988][ T5429] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5429 comm=syz.1.317
[   89.097179][ T5426] EXT4-fs: Ignoring removed oldalloc option
[   89.103313][ T5422] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.319: couldn't read orphan inode 15 (err -117)
[   89.125835][ T5426] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.318: Parent and EA inode have the same ino 15
[   89.147431][ T5422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.182613][ T5426] EXT4-fs (loop2): Remounting filesystem read-only
[   89.189241][ T5426] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5)
[   89.224984][ T5426] EXT4-fs (loop2): 1 orphan inode deleted
[   89.231581][ T5434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.319'.
[   89.236050][ T5426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.258867][ T5426] SELinux: (dev loop2, type ext4) getxattr errno 5
[   89.274705][ T5426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.312987][ T5418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.333608][ T5418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.496538][ T5418] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.505475][ T5418] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.514403][ T5418] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.523294][ T5418] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.594028][ T5416] netlink: 'syz.1.317': attribute type 10 has an invalid length.
[   89.635166][ T5416] team0: Port device netdevsim1 added
[   89.676262][ T5427] netlink: 'syz.1.317': attribute type 10 has an invalid length.
[   89.750287][ T5427] team0: Port device netdevsim1 removed
[   89.797581][ T5427] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   89.821501][ T5453] loop2: detected capacity change from 0 to 1024
[   89.858502][ T5453] EXT4-fs: Ignoring removed orlov option
[   89.864222][ T5453] EXT4-fs: Ignoring removed nomblk_io_submit option
[   90.857702][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'.
[   90.868015][ T5475] delete_channel: no stack
[   90.988739][ T5494] loop4: detected capacity change from 0 to 1024
[   90.999604][ T5494] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   91.020727][ T5494] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   91.032904][ T5494] EXT4-fs (loop4): orphan cleanup on readonly fs
[   91.039526][ T5494] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.330: Freeing blocks not in datazone - block = 0, count = 4096
[   91.054429][ T5494] EXT4-fs (loop4): 1 orphan inode deleted
[   91.062787][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.330: path /11/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   91.117279][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.330: path /11/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.194661][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 18: comm syz.4.330: path /11/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.222336][ T5511] loop1: detected capacity change from 0 to 512
[   91.234721][ T5511] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.332: corrupted in-inode xattr: e_value size too large
[   91.257184][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz.4.330: path /11/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.282619][ T5511] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.332: couldn't read orphan inode 15 (err -117)
[   91.295301][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz.4.330: path /11/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.326681][ T5516] siw: device registration error -23
[   91.331429][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 21: comm syz.4.330: path /11/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.353645][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 22: comm syz.4.330: path /11/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.375304][ T5494] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 23: comm syz.4.330: path /11/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.397565][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.332'.
[   91.544185][ T5535] loop4: detected capacity change from 0 to 512
[   91.566723][ T5535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   91.594326][ T5535] EXT4-fs (loop4): 1 truncate cleaned up
[   91.833236][   T55] bridge_slave_1: left allmulticast mode
[   91.840693][   T55] bridge_slave_1: left promiscuous mode
[   91.846441][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.858336][   T55] bridge_slave_0: left allmulticast mode
[   91.864091][   T55] bridge_slave_0: left promiscuous mode
[   91.869999][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.969950][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.979440][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.989976][   T55] bond0 (unregistering): Released all slaves
[   92.010237][ T5555] caif0 speed is unknown, defaulting to 1000
[   92.135175][   T55] hsr_slave_0: left promiscuous mode
[   92.148284][   T55] hsr_slave_1: left promiscuous mode
[   92.157295][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.168533][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.238616][   T55] team0 (unregistering): Port device team_slave_1 removed
[   92.257097][   T55] team0 (unregistering): Port device team_slave_0 removed
[   92.309390][ T5555] chnl_net:caif_netlink_parms(): no params data found
[   92.386667][ T5601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'.
[   92.440040][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.447187][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.463772][ T5609] loop4: detected capacity change from 0 to 2048
[   92.481365][ T5555] bridge_slave_0: entered allmulticast mode
[   92.490202][ T5555] bridge_slave_0: entered promiscuous mode
[   92.505110][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.512513][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.521773][ T5555] bridge_slave_1: entered allmulticast mode
[   92.532034][ T5555] bridge_slave_1: entered promiscuous mode
[   92.540791][ T5609]  loop4: p1 < > p4
[   92.560632][ T5609] loop4: p4 size 8388608 extends beyond EOD, truncated
[   92.606821][ T2960]  loop4: p1 < > p4
[   92.612681][ T2960] loop4: p4 size 8388608 extends beyond EOD, truncated
[   92.615536][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.344'.
[   92.631855][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.344'.
[   92.645586][ T5627] siw: device registration error -23
[   92.679007][ T5622] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   92.701668][ T5622] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   92.721347][ T5632] 9pnet_fd: p9_fd_create_tcp (5632): problem connecting socket to 127.0.0.1
[   92.765564][ T5555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.780332][ T5555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.877282][ T5555] team0: Port device team_slave_0 added
[   92.883987][ T5555] team0: Port device team_slave_1 added
[   92.894698][ T5639] loop4: detected capacity change from 0 to 512
[   92.923800][ T5639] EXT4-fs (loop4): orphan cleanup on readonly fs
[   92.932419][ T5646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.347'.
[   92.944296][ T5605] caif0 speed is unknown, defaulting to 1000
[   92.952881][ T5639] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.346: Failed to acquire dquot type 1
[   92.969264][   T55] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.985971][ T5639] EXT4-fs (loop4): 1 truncate cleaned up
[   92.996221][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.003222][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.029335][ T5555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.060508][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.067655][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.090198][   T29] kauditd_printk_skb: 132 callbacks suppressed
[   93.090273][   T29] audit: type=1400 audit(1726141833.750:2604): avc:  denied  { read } for  pid=5665 comm="syz.1.351" path="socket:[11435]" dev="sockfs" ino=11435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   93.093561][ T5555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.150559][   T55] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.215993][ T5670] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   93.248444][   T55] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.249061][ T5666] loop1: detected capacity change from 0 to 512
[   93.270005][ T5555] hsr_slave_0: entered promiscuous mode
[   93.277053][ T5555] hsr_slave_1: entered promiscuous mode
[   93.277770][ T5666] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[   93.290745][ T5555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.291290][ T5666] System zones: 0-2, 18-18, 34-35
[   93.300299][ T5555] Cannot create hsr debugfs directory
[   93.338752][ T5666] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.444499][   T55] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.522615][ T5668] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.351'.
[   93.578326][   T29] audit: type=1326 audit(1726141834.230:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   93.640307][ T5666] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.351'.
[   93.667089][   T29] audit: type=1326 audit(1726141834.270:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   93.671916][ T5679] netlink: 160 bytes leftover after parsing attributes in process `syz.0.352'.
[   93.690438][   T29] audit: type=1326 audit(1726141834.270:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3ba3fc890 code=0x7ffc0000
[   93.690472][   T29] audit: type=1326 audit(1726141834.280:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   93.746107][   T29] audit: type=1326 audit(1726141834.280:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   93.746135][   T29] audit: type=1326 audit(1726141834.280:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   93.746158][   T29] audit: type=1326 audit(1726141834.280:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   93.746246][   T29] audit: type=1326 audit(1726141834.280:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   93.782733][   T29] audit: type=1400 audit(1726141834.390:2613): avc:  denied  { connect } for  pid=5678 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.785428][ T5605] chnl_net:caif_netlink_parms(): no params data found
[   93.906716][ T5663] rtc_cmos 00:00: Alarms can be up to one day in the future
[   93.988721][ T5705] loop4: detected capacity change from 0 to 512
[   94.006555][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.013769][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.019614][ T5705] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.357: corrupted in-inode xattr: e_value size too large
[   94.021325][ T5605] bridge_slave_0: entered allmulticast mode
[   94.041096][ T5705] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.357: couldn't read orphan inode 15 (err -117)
[   94.053416][ T5605] bridge_slave_0: entered promiscuous mode
[   94.082088][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.089204][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.096434][ T5605] bridge_slave_1: entered allmulticast mode
[   94.102792][ T5705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.357'.
[   94.103103][ T5605] bridge_slave_1: entered promiscuous mode
[   94.186524][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.194319][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.202051][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.209815][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.217304][    T9] rtc rtc0: __rtc_set_alarm: err=-22
[   94.232846][   T55] bond0 (unregistering): (slave geneve1): Releasing backup interface
[   94.247474][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.271595][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.289568][   T55] bond0 (unregistering): Released all slaves
[   94.293994][ T5717] loop4: detected capacity change from 0 to 2048
[   94.363492][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.375005][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.385835][   T55] tipc: Disabling bearer <udp:s>
[   94.391278][   T55] tipc: Left network mode
[   94.476904][ T5605] team0: Port device team_slave_0 added
[   94.487531][ T5605] team0: Port device team_slave_1 added
[   94.626484][   T55] hsr_slave_0: left promiscuous mode
[   94.647049][   T55] hsr_slave_1: left promiscuous mode
[   94.664896][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.672392][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.700667][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.708436][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.728976][   T55] veth1_macvtap: left promiscuous mode
[   94.734550][   T55] veth0_macvtap: left promiscuous mode
[   94.740137][   T55] veth1_vlan: left promiscuous mode
[   94.745513][   T55] veth0_vlan: left promiscuous mode
[   94.811610][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'.
[   94.893833][ T5741] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   94.918634][   T55] team0 (unregistering): Port device team_slave_1 removed
[   94.930364][   T55] team0 (unregistering): Port device team_slave_0 removed
[   94.983294][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.990462][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.016461][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.029530][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.036530][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.062733][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.116832][ T5605] hsr_slave_0: entered promiscuous mode
[   95.122900][ T5605] hsr_slave_1: entered promiscuous mode
[   95.129886][ T5605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.136068][ T5759] loop1: detected capacity change from 0 to 512
[   95.146870][ T5605] Cannot create hsr debugfs directory
[   95.158981][ T5759] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.368: corrupted in-inode xattr: e_value size too large
[   95.211594][ T5759] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.368: couldn't read orphan inode 15 (err -117)
[   95.230514][ T5555] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.259697][ T5555] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.269040][ T5555] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.278804][ T5765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'.
[   95.298752][ T5765] vlan0: entered allmulticast mode
[   95.303890][ T5765] veth0_vlan: entered allmulticast mode
[   95.348710][ T5555] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.560310][ T5555] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.583152][ T5555] 8021q: adding VLAN 0 to HW filter on device team0
[   95.604848][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.612076][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.642898][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.650074][ T4936] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.673177][ T5555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   95.683829][ T5555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.711394][ T5790] syz.4.377[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.711474][ T5790] syz.4.377[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.986812][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.012460][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.025054][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.034972][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.083321][ T5555] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.117213][   T55] hsr_slave_0: left promiscuous mode
[   96.130053][   T55] hsr_slave_1: left promiscuous mode
[   96.137470][   T55] veth1_macvtap: left promiscuous mode
[   96.142989][   T55] veth0_macvtap: left promiscuous mode
[   96.262174][   T55] team0 (unregistering): Port device team_slave_1 removed
[   96.275346][   T55] team0 (unregistering): Port device team_slave_0 removed
[   96.340094][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.370535][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   96.383061][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.390156][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.418744][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.425845][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.525487][ T5555] veth0_vlan: entered promiscuous mode
[   96.543062][ T5555] veth1_vlan: entered promiscuous mode
[   96.586318][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.608296][ T5555] veth0_macvtap: entered promiscuous mode
[   96.626619][ T5555] veth1_macvtap: entered promiscuous mode
[   96.649029][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.659729][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.669729][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.680287][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.690218][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.700682][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.710635][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.721078][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.749282][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.769440][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.780055][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.789950][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.800516][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.810451][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.820949][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.830997][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.841459][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.866198][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.884445][ T5877] loop4: detected capacity change from 0 to 512
[   96.891488][ T5555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.900346][ T5555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.909159][ T5555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.917936][ T5555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.948439][ T5605] veth0_vlan: entered promiscuous mode
[   96.958176][ T5877] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.964522][ T5605] veth1_vlan: entered promiscuous mode
[   96.991189][ T5605] veth0_macvtap: entered promiscuous mode
[   97.005952][ T5605] veth1_macvtap: entered promiscuous mode
[   97.046876][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.057398][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.067290][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.077803][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.087652][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.098103][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.107963][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.118514][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.128435][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.138973][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.158508][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.172690][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.183351][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.193286][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.203814][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.213728][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.224175][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.234018][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.244469][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.254378][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.264812][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.303117][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.348196][ T5605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.357034][ T5605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.365859][ T5605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.374612][ T5605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.456726][ T5932] __nla_validate_parse: 9 callbacks suppressed
[   97.456800][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'.
[   97.466067][ T5938] siw: device registration error -23
[   97.584646][ T5949] loop1: detected capacity change from 0 to 512
[   97.602293][ T5949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   97.628227][ T5949] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   97.682848][ T5949] EXT4-fs (loop1): 1 truncate cleaned up
[   97.692318][ T5962] loop2: detected capacity change from 0 to 256
[   97.707111][ T5949] EXT4-fs mount: 22 callbacks suppressed
[   97.707127][ T5949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.876662][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.987391][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.397'.
[   98.023948][ T5984] loop3: detected capacity change from 0 to 512
[   98.068056][ T5986] Invalid ELF header magic: != ELF
[   98.125479][ T5984] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.404: corrupted in-inode xattr: e_value size too large
[   98.273195][ T5984] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.404: couldn't read orphan inode 15 (err -117)
[   98.297623][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.356006][ T5997] siw: device registration error -23
[   98.371717][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.404'.
[   98.480428][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.574196][   T29] kauditd_printk_skb: 337 callbacks suppressed
[   98.574211][   T29] audit: type=1400 audit(1726141839.230:2951): avc:  denied  { unmount } for  pid=5555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   98.636318][ T6016] loop1: detected capacity change from 0 to 256
[   98.653475][ T6018] loop3: detected capacity change from 0 to 512
[   98.683441][ T6018] EXT4-fs (loop3): filesystem is read-only
[   98.695999][ T6016] vfat: Bad value for 'time_offset'
[   98.848092][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   98.858800][ T6029] loop3: detected capacity change from 0 to 128
[   98.999259][   T29] audit: type=1326 audit(1726141839.660:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.042293][ T6036] loop1: detected capacity change from 0 to 1024
[   99.078366][ T6038] siw: device registration error -23
[   99.090136][ T6036] EXT4-fs: Ignoring removed nobh option
[   99.095770][ T6036] EXT4-fs: Ignoring removed orlov option
[   99.132523][   T29] audit: type=1326 audit(1726141839.690:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.155992][   T29] audit: type=1326 audit(1726141839.690:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.179437][   T29] audit: type=1326 audit(1726141839.690:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.202937][   T29] audit: type=1326 audit(1726141839.690:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.226290][   T29] audit: type=1326 audit(1726141839.690:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.249630][   T29] audit: type=1326 audit(1726141839.690:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.273068][   T29] audit: type=1326 audit(1726141839.690:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd3ba3fdef9 code=0x7ffc0000
[   99.296580][   T29] audit: type=1326 audit(1726141839.690:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3ba3fdf33 code=0x7ffc0000
[   99.323576][ T5959] nfs: Unknown parameter ''
[   99.494358][ T6040] loop3: detected capacity change from 0 to 512
[   99.602886][ T6040] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.419: corrupted in-inode xattr: e_value size too large
[   99.637123][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.651929][ T6040] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.419: couldn't read orphan inode 15 (err -117)
[   99.693439][ T6040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.773652][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'.
[   99.813669][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.845283][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.885947][ T6045] bond0 (unregistering): (slave geneve1): Releasing backup interface
[   99.909861][ T6045] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[   99.949627][ T6045] bond0 (unregistering): Released all slaves
[   99.987061][ T6049] netlink: 'syz.0.420': attribute type 10 has an invalid length.
[   99.994925][ T6049] netlink: 2 bytes leftover after parsing attributes in process `syz.0.420'.
[  100.003810][ T6049] team0: entered promiscuous mode
[  100.008868][ T6049] team_slave_0: entered promiscuous mode
[  100.014615][ T6049] team_slave_1: entered promiscuous mode
[  100.020350][ T6049] geneve0: entered promiscuous mode
[  100.027713][ T6049] bridge0: port 3(team0) entered blocking state
[  100.034083][ T6049] bridge0: port 3(team0) entered disabled state
[  100.041573][ T6049] team0: entered allmulticast mode
[  100.046819][ T6049] team_slave_0: entered allmulticast mode
[  100.052620][ T6049] team_slave_1: entered allmulticast mode
[  100.058396][ T6049] geneve0: entered allmulticast mode
[  100.067739][ T6049] bridge0: port 3(team0) entered blocking state
[  100.074054][ T6049] bridge0: port 3(team0) entered forwarding state
[  100.082428][ T6050] netlink: 'syz.0.420': attribute type 10 has an invalid length.
[  100.114760][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.137358][ T6050] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  100.144744][ T6050] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  100.156797][ T6050] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  100.165964][ T6050] team0: Failed to send options change via netlink (err -105)
[  100.173551][ T6050] team0: Port device netdevsim1 added
[  100.232617][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.340902][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'.
[  100.366775][ T6059] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  100.551756][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  100.598929][ T6071] loop1: detected capacity change from 0 to 8192
[  100.614721][ T6074] siw: device registration error -23
[  100.663863][ T6071]  loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22
[  100.674446][ T6071] loop1: p4 start 3388997632 is beyond EOD, truncated
[  101.152292][ T6085] loop4: detected capacity change from 0 to 512
[  101.178258][ T6085] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  101.188537][ T6085] EXT4-fs (loop4): group descriptors corrupted!
[  101.240188][ T6087] loop4: detected capacity change from 0 to 512
[  101.257689][ T6087] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.434: corrupted in-inode xattr: e_value size too large
[  101.283176][ T6087] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.434: couldn't read orphan inode 15 (err -117)
[  101.377540][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.445838][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'.
[  101.471888][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.528854][ T6101] loop4: detected capacity change from 0 to 512
[  101.549392][ T6101] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001]
[  101.566701][ T6101] System zones: 0-2, 18-18, 34-34
[  101.574675][ T6101] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.440: Failed to acquire dquot type 0
[  101.597434][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  101.597575][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  101.620374][ T4221] udevd[4221]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  101.620652][ T4248] udevd[4248]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory
[  101.630933][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  101.651015][ T6091] udevd[6091]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  101.651141][ T4242] udevd[4242]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  101.688666][ T6101] EXT4-fs (loop4): Remounting filesystem read-only
[  101.695240][ T6101] EXT4-fs (loop4): 1 orphan inode deleted
[  101.702151][ T6096] udevd[6096]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory
[  101.702224][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[  101.702935][ T6101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.722438][ T4221] udevd[4221]: inotify_add_watch(7, /dev/loop1p19, 10) failed: No such file or directory
[  101.753867][ T6101] SELinux: (dev loop4, type ext4) getxattr errno 5
[  101.762695][ T6101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.777108][ T6108] loop1: detected capacity change from 0 to 256
[  101.811254][ T6108] FAT-fs (loop1): Directory bread(block 64) failed
[  101.819323][ T6108] FAT-fs (loop1): Directory bread(block 65) failed
[  101.830227][ T6108] FAT-fs (loop1): Directory bread(block 66) failed
[  101.868424][ T6108] FAT-fs (loop1): Directory bread(block 67) failed
[  101.889397][ T6108] FAT-fs (loop1): Directory bread(block 68) failed
[  101.919986][ T6108] FAT-fs (loop1): Directory bread(block 69) failed
[  101.932638][ T6108] FAT-fs (loop1): Directory bread(block 70) failed
[  101.943764][ T6108] FAT-fs (loop1): Directory bread(block 71) failed
[  101.957691][ T6108] FAT-fs (loop1): Directory bread(block 72) failed
[  101.964340][ T6108] FAT-fs (loop1): Directory bread(block 73) failed
[  102.125908][ T6108] netlink: 'syz.1.435': attribute type 10 has an invalid length.
[  102.126019][ T6104] caif0 speed is unknown, defaulting to 1000
[  102.133764][ T6108] netlink: 2 bytes leftover after parsing attributes in process `syz.1.435'.
[  102.133794][ T6108] team0: entered promiscuous mode
[  102.133810][ T6108] team_slave_0: entered promiscuous mode
[  102.133908][ T6108] team_slave_1: entered promiscuous mode
[  102.135604][ T6108] bridge0: port 3(team0) entered blocking state
[  102.171976][ T6108] bridge0: port 3(team0) entered disabled state
[  102.187001][ T6108] team0: entered allmulticast mode
[  102.192288][ T6108] team_slave_0: entered allmulticast mode
[  102.198101][ T6108] team_slave_1: entered allmulticast mode
[  102.231980][ T6108] bridge0: port 3(team0) entered blocking state
[  102.238440][ T6108] bridge0: port 3(team0) entered forwarding state
[  102.255732][ T6116] netlink: 'syz.1.435': attribute type 10 has an invalid length.
[  102.288727][ T6116] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  102.296134][ T6116] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  102.306271][ T6116] team0: Failed to send options change via netlink (err -105)
[  102.313966][ T6116] team0: Port device netdevsim1 added
[  102.475195][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  102.549964][ T6136] loop1: detected capacity change from 0 to 512
[  102.611345][ T6136] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.451: corrupted in-inode xattr: e_value size too large
[  102.648986][ T6147] loop4: detected capacity change from 0 to 1024
[  102.655921][ T6147] EXT4-fs: Ignoring removed nobh option
[  102.661628][ T6147] EXT4-fs: Ignoring removed orlov option
[  102.668396][ T6136] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.451: couldn't read orphan inode 15 (err -117)
[  102.730512][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.745472][ T6147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.795772][ T6152] siw: device registration error -23
[  102.806910][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.451'.
[  102.846368][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.903314][ T6155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.914471][ T6155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.939163][ T6157] loop2: detected capacity change from 0 to 512
[  102.948406][ T6155] bond0 (unregistering): Released all slaves
[  102.968749][ T6157] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001]
[  102.976556][ T6157] System zones: 0-2, 18-18, 34-34
[  102.982493][ T6157] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.456: Failed to acquire dquot type 0
[  102.994041][ T6157] EXT4-fs (loop2): Remounting filesystem read-only
[  103.001097][ T6157] EXT4-fs (loop2): 1 orphan inode deleted
[  103.008365][ T6157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.029271][ T6157] SELinux: (dev loop2, type ext4) getxattr errno 5
[  103.046371][ T6157] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.099025][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.139401][ T6168] loop2: detected capacity change from 0 to 256
[  103.163810][ T6168] FAT-fs (loop2): Directory bread(block 64) failed
[  103.171974][ T6168] FAT-fs (loop2): Directory bread(block 65) failed
[  103.179562][ T6168] FAT-fs (loop2): Directory bread(block 66) failed
[  103.186183][ T6168] FAT-fs (loop2): Directory bread(block 67) failed
[  103.194194][ T6168] FAT-fs (loop2): Directory bread(block 68) failed
[  103.200965][ T6168] FAT-fs (loop2): Directory bread(block 69) failed
[  103.208964][ T6168] FAT-fs (loop2): Directory bread(block 70) failed
[  103.215573][ T6168] FAT-fs (loop2): Directory bread(block 71) failed
[  103.222340][ T6168] FAT-fs (loop2): Directory bread(block 72) failed
[  103.248069][ T6168] FAT-fs (loop2): Directory bread(block 73) failed
[  103.279872][ T6174] loop4: detected capacity change from 0 to 1024
[  103.298475][ T6174] journal_path: Lookup failure for './file0'
[  103.304491][ T6174] EXT4-fs: error: could not find journal device path
[  103.416640][ T6168] netlink: 'syz.2.458': attribute type 10 has an invalid length.
[  103.424415][ T6168] netlink: 2 bytes leftover after parsing attributes in process `syz.2.458'.
[  103.433272][ T6168] team0: entered promiscuous mode
[  103.438401][ T6168] team_slave_0: entered promiscuous mode
[  103.444192][ T6168] team_slave_1: entered promiscuous mode
[  103.450229][ T6168] bridge0: port 3(team0) entered blocking state
[  103.456522][ T6168] bridge0: port 3(team0) entered disabled state
[  103.463352][ T6168] team0: entered allmulticast mode
[  103.468510][ T6168] team_slave_0: entered allmulticast mode
[  103.474324][ T6168] team_slave_1: entered allmulticast mode
[  103.489335][ T6168] bridge0: port 3(team0) entered blocking state
[  103.495655][ T6168] bridge0: port 3(team0) entered forwarding state
[  103.504392][ T6179] netlink: 'syz.2.458': attribute type 10 has an invalid length.
[  103.526081][ T6179] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  103.533527][ T6179] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  103.547083][ T6179] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  103.556278][ T6179] team0: Failed to send options change via netlink (err -105)
[  103.563863][ T6179] team0: Port device netdevsim1 added
[  103.582239][   T29] kauditd_printk_skb: 255 callbacks suppressed
[  103.582254][   T29] audit: type=1400 audit(1726141844.240:3212): avc:  denied  { prog_load } for  pid=6184 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  103.607498][   T29] audit: type=1400 audit(1726141844.240:3213): avc:  denied  { bpf } for  pid=6184 comm="syz.4.462" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  103.628125][   T29] audit: type=1400 audit(1726141844.240:3214): avc:  denied  { perfmon } for  pid=6184 comm="syz.4.462" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  103.654395][   T29] audit: type=1400 audit(1726141844.290:3215): avc:  denied  { unmount } for  pid=5555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  103.674594][   T29] audit: type=1400 audit(1726141844.310:3216): avc:  denied  { write } for  pid=6184 comm="syz.4.462" name="pfkey" dev="proc" ino=4026534017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  103.697515][   T29] audit: type=1400 audit(1726141844.310:3217): avc:  denied  { name_bind } for  pid=6184 comm="syz.4.462" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  103.719328][   T29] audit: type=1400 audit(1726141844.310:3218): avc:  denied  { node_bind } for  pid=6184 comm="syz.4.462" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  103.741392][   T29] audit: type=1400 audit(1726141844.310:3219): avc:  denied  { map_create } for  pid=6184 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  103.760681][   T29] audit: type=1400 audit(1726141844.310:3220): avc:  denied  { map_read map_write } for  pid=6184 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  103.795321][   T29] audit: type=1400 audit(1726141844.340:3221): avc:  denied  { read write } for  pid=4789 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.812369][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  103.880737][ T6199] loop2: detected capacity change from 0 to 512
[  103.889833][ T6199] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.468: corrupted in-inode xattr: e_value size too large
[  103.901004][ T6197] siw: device registration error -23
[  103.906239][ T6199] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.468: couldn't read orphan inode 15 (err -117)
[  103.924798][ T6199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.968562][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'.
[  103.992867][ T5555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.287960][ T6204] siw: device registration error -23
[  104.293642][ T6210] loop3: detected capacity change from 0 to 1024
[  104.304187][ T6210] EXT4-fs: Ignoring removed nobh option
[  104.309935][ T6210] EXT4-fs: Ignoring removed orlov option
[  104.362433][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'.
[  104.425663][ T6207] loop4: detected capacity change from 0 to 512
[  104.437901][ T6207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  104.447025][ T6210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.471115][ T6207] EXT4-fs (loop4): orphan cleanup on readonly fs
[  104.591441][ T6207] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.472: bg 0: block 248: padding at end of block bitmap is not set
[  104.633469][ T6207] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.472: Failed to acquire dquot type 1
[  104.646340][ T6207] EXT4-fs (loop4): 1 truncate cleaned up
[  104.753447][ T6227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.833305][ T6227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.842599][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.873413][ T6227] bond0 (unregistering): Released all slaves
[  104.883076][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.985941][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.010003][ T2960] ==================================================================
[  105.018140][ T2960] BUG: KCSAN: data-race in __fsnotify_parent / fsnotify_put_mark
[  105.025913][ T2960] 
[  105.028244][ T2960] write to 0xffff88810142d438 of 4 bytes by task 6089 on cpu 1:
[  105.035877][ T2960]  fsnotify_put_mark+0x2db/0x5d0
[  105.040827][ T2960]  __se_sys_inotify_rm_watch+0x105/0x180
[  105.046458][ T2960]  __x64_sys_inotify_rm_watch+0x31/0x40
[  105.052001][ T2960]  x64_sys_call+0x1ae0/0x2d60
[  105.056686][ T2960]  do_syscall_64+0xc9/0x1c0
[  105.061187][ T2960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.067095][ T2960] 
[  105.069416][ T2960] read to 0xffff88810142d438 of 4 bytes by task 2960 on cpu 0:
[  105.076958][ T2960]  __fsnotify_parent+0xd4/0x380
[  105.081816][ T2960]  vfs_open+0x1be/0x1f0
[  105.085992][ T2960]  path_openat+0x1a26/0x1f10
[  105.090603][ T2960]  do_filp_open+0xf7/0x200
[  105.095045][ T2960]  do_sys_openat2+0xab/0x120
[  105.099637][ T2960]  __x64_sys_openat+0xf3/0x120
[  105.104403][ T2960]  x64_sys_call+0x1025/0x2d60
[  105.109090][ T2960]  do_syscall_64+0xc9/0x1c0
[  105.113603][ T2960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.119513][ T2960] 
[  105.121830][ T2960] value changed: 0x00002008 -> 0x00000000
[  105.127539][ T2960] 
[  105.129866][ T2960] Reported by Kernel Concurrency Sanitizer on:
[  105.136016][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: udevd Not tainted 6.11.0-rc7-syzkaller-00039-g77f587896757 #0
[  105.146254][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  105.156310][ T2960] ==================================================================
[  105.231276][ T6238] loop3: detected capacity change from 0 to 256
[  105.246381][ T6238] FAT-fs (loop3): Directory bread(block 64) failed
[  105.254546][ T6238] FAT-fs (loop3): Directory bread(block 65) failed
[  105.262385][ T6238] FAT-fs (loop3): Directory bread(block 66) failed
[  105.270714][ T6238] FAT-fs (loop3): Directory bread(block 67) failed
[  105.278382][ T6238] FAT-fs (loop3): Directory bread(block 68) failed
[  105.284912][ T6238] FAT-fs (loop3): Directory bread(block 69) failed
[  105.291517][ T6238] FAT-fs (loop3): Directory bread(block 70) failed
[  105.298069][ T6238] FAT-fs (loop3): Directory bread(block 71) failed
[  105.304641][ T6238] FAT-fs (loop3): Directory bread(block 72) failed
[  105.311179][ T6238] FAT-fs (loop3): Directory bread(block 73) failed
[  105.333146][ T6238] netlink: 'syz.3.477': attribute type 10 has an invalid length.
[  105.341106][ T6238] netlink: 2 bytes leftover after parsing attributes in process `syz.3.477'.
[  105.349999][ T6238] team0: entered promiscuous mode
[  105.355084][ T6238] team_slave_0: entered promiscuous mode
[  105.360787][ T6238] team_slave_1: entered promiscuous mode
[  105.367295][ T6238] bridge0: port 3(team0) entered blocking state
[  105.373752][ T6238] bridge0: port 3(team0) entered disabled state
[  105.381242][ T6238] team0: entered allmulticast mode
[  105.386358][ T6238] team_slave_0: entered allmulticast mode
[  105.392135][ T6238] team_slave_1: entered allmulticast mode
[  105.399093][ T6238] bridge0: port 3(team0) entered blocking state
[  105.405393][ T6238] bridge0: port 3(team0) entered forwarding state
[  105.412089][ T6241] netlink: 'syz.3.477': attribute type 10 has an invalid length.
[  105.434920][ T6241] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  105.442323][ T6241] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  105.451573][ T6241] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  105.460650][ T6241] team0: Failed to send options change via netlink (err -105)
[  105.468201][ T6241] team0: Port device netdevsim1 added
[  105.908999][   T11] bridge_slave_1: left allmulticast mode
[  105.914697][   T11] bridge_slave_1: left promiscuous mode
[  105.920526][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.928410][   T11] bridge_slave_0: left allmulticast mode
[  105.934078][   T11] bridge_slave_0: left promiscuous mode
[  105.939867][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.029214][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.040296][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.050361][   T11] bond0 (unregistering): Released all slaves
[  106.191949][   T11] hsr_slave_0: left promiscuous mode
[  106.197544][   T11] hsr_slave_1: left promiscuous mode
[  106.204634][   T11] veth1_macvtap: left promiscuous mode
[  106.210129][   T11] veth0_macvtap: left promiscuous mode
[  106.215790][   T11] veth1_vlan: left promiscuous mode
[  106.221150][   T11] veth0_vlan: left promiscuous mode
[  106.307677][   T11] team0 (unregistering): Port device team_slave_1 removed
[  106.318013][   T11] team0 (unregistering): Port device team_slave_0 removed