last executing test programs:

2.808820836s ago: executing program 1 (id=3470):
r0 = getpid()
sched_setscheduler(0x0, 0x2, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
syz_clone(0x50840080, 0x0, 0x0, 0x0, 0x0, 0x0)

2.644072729s ago: executing program 1 (id=3472):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811e1102111c80000416970b88efc3e39197e50d5784d5f93beb7b991eb1171a10af6dc31632a6c2d4c6ff451c92e82ee7ddaafeb03baf7f365e320d3a49cf20f8de8217cb42f232a492729ace392ca710f6de43e0ba16df0b5e85a35c24dd9020000000000000004fa126b86ab3293848f28d3a553678efae18c4a4783910bc0883e30f71e8cd5ed0682676652b9b65265fe7c1b01b54885f68678bdb1bd4e4e706c54b018fef883882855839401838abfd277299edd609288cf84cb92c6e6bc1fb8cd61130c776aed0c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x209, &(0x7f0000000200)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
write$snapshot(r4, &(0x7f0000001980)="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", 0x681)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811e1102111c80000416970b88efc3e39197e50d5784d5f93beb7b991eb1171a10af6dc31632a6c2d4c6ff451c92e82ee7ddaafeb03baf7f365e320d3a49cf20f8de8217cb42f232a492729ace392ca710f6de43e0ba16df0b5e85a35c24dd9020000000000000004fa126b86ab3293848f28d3a553678efae18c4a4783910bc0883e30f71e8cd5ed0682676652b9b65265fe7c1b01b54885f68678bdb1bd4e4e706c54b018fef883882855839401838abfd277299edd609288cf84cb92c6e6bc1fb8cd61130c776aed0c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
dup(r2) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) (async)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x209, &(0x7f0000000200)="$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") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) (async)
write$snapshot(r4, &(0x7f0000001980)="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", 0x681) (async)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)

2.480455002s ago: executing program 4 (id=3480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0x40044583, 0x0)

2.323511564s ago: executing program 1 (id=3483):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18)
sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4000000)
fchdir(0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @loopback, 0x6324}, 0x1c)
sendto$inet6(r5, 0x0, 0x2, 0x0, 0x0, 0x0)

2.25776237s ago: executing program 4 (id=3486):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07e, 0x42, 0x2, 0x2f1})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000004c40)=[@ioring_restriction_sqe_op={0x1, 0x54}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000004c80)={0xe4a, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone3(0x0, 0x0)
r5 = syz_io_uring_setup(0x33fc, &(0x7f00000003c0)={0x0, 0xc2ab, 0x20, 0x1, 0x14e, 0x0, r2}, &(0x7f0000000440), &(0x7f0000000480))
io_uring_enter(r5, 0x2495, 0x79eb, 0x32, &(0x7f0000000500)={[0x3ff]}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000005c0)={0xfff, 0x28, '\x00', 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00', @ANYRES16, @ANYBLOB="8b332cbd7000000000000500000008000300", @ANYBLOB="10001d800c018004000000"], 0x2c}}, 0x4c002)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48)
r8 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r9=>0x0, &(0x7f0000000580))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
setsockopt$inet_int(r6, 0x0, 0x8a2a4b46fca5ea70, &(0x7f0000000200)=0x6, 0x4)
io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000))

2.2511374s ago: executing program 3 (id=3488):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00"/38], 0x38}}, 0x0)

2.222908653s ago: executing program 3 (id=3490):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x6}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xffffff6a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
fchmodat(r4, &(0x7f0000000100)='./file0\x00', 0x4)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

2.157660118s ago: executing program 2 (id=3492):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0)

2.120662401s ago: executing program 2 (id=3493):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

2.086287973s ago: executing program 2 (id=3495):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000040)}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup, 0x11, 0x1, 0x4, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @random="56460a7cef90", @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='module_load\x00'}, 0xfffffffffffffeec)
kexec_load(0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="b0", 0x1, 0xc000000000, 0x80000000}], 0x0)

1.87872959s ago: executing program 0 (id=3497):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5707081196f37538e486dd6372ce22fd892f"], 0xffbf)

1.815236216s ago: executing program 0 (id=3498):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200)

1.815101695s ago: executing program 0 (id=3499):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

1.814631786s ago: executing program 0 (id=3500):
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x8906, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
memfd_create(&(0x7f0000000000)='\x00', 0x6)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
set_mempolicy(0x2, &(0x7f0000000080), 0x6)
syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000680)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x1a)
r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10021, 0x0, {0x0, r9}})
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x24, 0x0, r3, 0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x400, 0x12345, {0x0, r9}})
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xffffffff, 0x10}, 0xc)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', r10}, 0x18)

1.75959791s ago: executing program 0 (id=3501):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYBLOB="ff55ec3a3891629ea30d2920dad150f1de5857559e30653bb541445f1bda5c3b33b9da9d94ef0616039d9ee526cf65967aae87e8cfe5", @ANYBLOB="ac8e1d38d00e50c85ef791afbd4942e4ca761749d44fc20ab40e45bb2c3b56ee08e528683383d29f70e923d97ad71f94b9598e0f7bd457ea7aaea3202dc92d820bc6ac5864f4cdfecf1b645c4811a403dcdb7cc15dbc82b86d12864bfe59575e7b78b599b108d54fecdb81574b70cbb639ad444c62e2bc74f9c3bec1933708135881ab634a2b200c7f334f52efac5f5faccc4244bc71985ad9"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(0x0, 0x2)
acct(&(0x7f0000000080)='./file1\x00')
acct(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7fffeffd)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b8, &(0x7f0000000cc0)="$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")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000008800000010073797a314009260003000000000600"/35], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040)

1.486376131s ago: executing program 1 (id=3502):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = syz_io_uring_setup(0x28d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x0, 0xfffffffe}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x30, 0x40400d1}}], 0x1, 0x814)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@nogrpid}, {@debug}, {@errors_remount}]}, 0x1, 0x600, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x6}, 0x8)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCSMRU(r7, 0x40047452, &(0x7f0000000240)=0xfffffff9)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r8 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x18)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x130)

1.366267021s ago: executing program 4 (id=3503):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r0}, './file1\x00'})
utimensat(r2, &(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000680), 0x100)
socket$kcm(0x2, 0xa, 0x2)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880)
ioctl$TCFLSH(r3, 0x5608, 0x0)
write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9, 0x0, @val=0x80}}}}}}}}, 0x27)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r10, @ANYBLOB="040025bd7000001000001100000008003a000dff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0)
copy_file_range(r9, 0x0, r9, 0x0, 0x863, 0x0)

1.072157255s ago: executing program 4 (id=3504):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

1.053829806s ago: executing program 3 (id=3505):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5393)

1.043795237s ago: executing program 2 (id=3506):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
syz_emit_ethernet(0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd60f7d8ff003c3c00fe8000000000000000000000000000aaff0200"/50], 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="8cff7cf908000000530b00000000000000c2274e000000000000000000"], 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x2)
syz_open_procfs(0x0, &(0x7f0000000400)='net/rt6_stats\x00')
syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x0, 0x1}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={<r6=>r0, 0x76, 0x1, 0x80000001})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x10, @remote, 0x3}, 0x1c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c77d0000f4ffffff92b046480100000080000000", @ANYRES32=r6, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(0x0, r7)
sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000200)=<r9=>0x0)
recvfrom$inet_nvme(r6, &(0x7f0000000180)=""/118, 0x76, 0x2, &(0x7f0000000240)=@nfc_llcp={0x27, r9, 0x1, 0x4, 0x4, 0x9, "d7b5806e737170170ee83099d995b1e5aaaa96566e87b21105a7a5f9ce5c877390178efb0fa82b40973e5934c9bc24344554b2fd9d78b3d8e4ee3b238127bf", 0x17}, 0x80)

982.320062ms ago: executing program 3 (id=3507):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15)
openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000380)=0x8)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = dup2(r2, r2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r6, 0xda90)
accept4(r1, 0x0, 0x0, 0x400)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
write$selinux_load(r3, &(0x7f0000000580)=ANY=[], 0x77)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000140)={{0x58, 0x6}, 'port0\x00', 0xb0, 0x20000, 0x5, 0x1, 0x1, 0x800, 0x6, 0x0, 0x6})
r7 = dup(r0)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)

956.429274ms ago: executing program 4 (id=3508):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

932.375896ms ago: executing program 4 (id=3509):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES8, @ANYBLOB="ff55ec3a3891629ea30d2920dad150f1de5857559e30653bb541445f1bda5c3b33b9da9d94ef0616039d9ee526cf65967aae87e8cfe5", @ANYBLOB="ac8e1d38d00e50c85ef791afbd4942e4ca761749d44fc20ab40e45bb2c3b56ee08e528683383d29f70e923d97ad71f94b9598e0f7bd457ea7aaea3202dc92d820bc6ac5864f4cdfecf1b645c4811a403dcdb7cc15dbc82b86d12864bfe59575e7b78b599b108d54fecdb81574b70cbb639ad444c62e2bc74f9c3bec1933708135881ab634a2b200c7f334f52efac5f5faccc4244bc71985ad9"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(0x0, 0x2)
acct(&(0x7f0000000080)='./file1\x00')
acct(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7fffeffd)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b8, &(0x7f0000000cc0)="$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")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000008800000010073797a31400926"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040)

772.733299ms ago: executing program 0 (id=3510):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES8, @ANYBLOB="ff55ec3a3891629ea30d2920dad150f1de5857559e30653bb541445f1bda5c3b33b9da9d94ef0616039d9ee526cf65967aae87e8cfe5", @ANYBLOB="ac8e1d38d00e50c85ef791afbd4942e4ca761749d44fc20ab40e45bb2c3b56ee08e528683383d29f70e923d97ad71f94b9598e0f7bd457ea7aaea3202dc92d820bc6ac5864f4cdfecf1b645c4811a403dcdb7cc15dbc82b86d12864bfe59575e7b78b599b108d54fecdb81574b70cbb639ad444c62e2bc74f9c3bec1933708135881ab634a2b200c7f334f52efac5f5faccc4244bc71985ad9"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(0x0, 0x2)
acct(&(0x7f0000000080)='./file1\x00')
acct(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7fffeffd)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b8, &(0x7f0000000cc0)="$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")
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000008800000010073797a31400926"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040)

558.292196ms ago: executing program 1 (id=3511):
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x8906, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
memfd_create(&(0x7f0000000000)='\x00', 0x6)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
set_mempolicy(0x2, &(0x7f0000000080), 0x6)
syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000680)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x1a)
r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10021, 0x0, {0x0, r9}})
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x24, 0x0, r3, 0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x400, 0x12345, {0x0, r9}})
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xffffffff, 0x10}, 0xc)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', r10}, 0x18)

472.363072ms ago: executing program 1 (id=3512):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18)
sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4000000)
fchdir(0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @loopback, 0x6324}, 0x1c)
sendto$inet6(r5, 0x0, 0x2, 0x0, 0x0, 0x0)

175.377036ms ago: executing program 2 (id=3513):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")

150.042978ms ago: executing program 3 (id=3514):
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x8906, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
memfd_create(&(0x7f0000000000)='\x00', 0x6)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
set_mempolicy(0x2, &(0x7f0000000080), 0x6)
syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000680)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x1a)
r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10021, 0x0, {0x0, r10}})
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x24, 0x0, r3, 0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x400, 0x12345, {0x0, r10}})
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xffffffff, 0x10}, 0xc)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', r11}, 0x18)

143.960199ms ago: executing program 2 (id=3515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF")
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1, 0x0, 0x1}, 0x0, 0xff}], 0x60)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x216c, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x1fe4, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}, @TCA_U32_POLICE={0x28, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x92}, @TCA_POLICE_RESULT={0x8, 0x5, 0x22}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xac}]}, @TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_DIVISOR={0x8, 0x4, 0x7f}, @TCA_U32_POLICE={0xc5c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe4d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0xfffffffa, 0x4, 0x6, 0x2, 0x4, 0x7, 0x2, 0xfffff2e4, 0x7, 0x9, 0x2, 0x476, 0xa, 0x1, 0x9, 0x3, 0x3, 0xd, 0x6, 0x0, 0x7, 0x6, 0x4000000, 0x1, 0x7, 0xa, 0x3, 0xfffffffc, 0x5, 0x6, 0x58, 0xcdb, 0x5, 0x8, 0x2e, 0x8001, 0x4, 0xbc73, 0x4, 0xfff, 0xffff, 0x1, 0xfff5, 0xff, 0x2, 0x8, 0xfffffff8, 0x7ff, 0x4, 0x0, 0x0, 0x6, 0xfffffff7, 0x7, 0x10, 0x6, 0x29a2, 0x8b6, 0x1, 0xc8, 0x6, 0x4, 0x3, 0x6, 0x8, 0x2, 0x1, 0x401, 0xfffffff7, 0x1, 0x9, 0x4, 0x7f, 0x4, 0x1c3d, 0x3ff, 0xb233, 0x7, 0x2000, 0x1, 0x2, 0x6, 0x5, 0x62b, 0xffff, 0x9, 0xb, 0x457e, 0xc99e, 0x6, 0xefc4, 0x7, 0xf, 0x3, 0x1, 0x3, 0x400, 0x1, 0x9, 0x9, 0x8, 0x8001, 0x8, 0x1, 0xb9, 0xf, 0x9, 0x7, 0x3, 0xc, 0x6f27, 0x0, 0x1, 0x401, 0x9, 0x6, 0x4, 0x7fff, 0x2, 0x8000, 0x4, 0xfffffffb, 0x3, 0xfffffff9, 0x6, 0x100, 0x7, 0x7ff, 0x8, 0x7, 0x1, 0x98b, 0x7f, 0x4cb2, 0x4, 0x10000, 0xd, 0x3, 0xba4a, 0x26c, 0x1000, 0x9, 0x5, 0x4, 0xffcc, 0x8, 0x3, 0x3, 0x8, 0x6, 0xd, 0x1, 0x7, 0x4, 0x9, 0x1, 0x2, 0x7fffffff, 0xffffffb3, 0x4, 0x3ff, 0x0, 0x9c6e, 0x9, 0x9c2, 0x40, 0xb, 0xe, 0x3, 0x10001, 0x6, 0x0, 0xf9b0, 0x8, 0x1, 0x4, 0x9, 0x10001, 0x8, 0x7, 0xd, 0x9, 0x401, 0x6, 0x1, 0xeddf, 0xc1a, 0x5, 0x100, 0xffff, 0x2, 0x8, 0x2, 0x5, 0x3, 0x10, 0x1, 0x400, 0x0, 0x800, 0x4, 0x200, 0xf6, 0x7d, 0x3, 0x2, 0x3f4, 0x0, 0x1, 0x0, 0x8, 0x1000, 0x4, 0x8000, 0xffff, 0x6, 0xfdf0, 0x3ff, 0x0, 0x3, 0xfffffff8, 0x81, 0xfffffff7, 0xffff, 0x9, 0x7, 0x8, 0x3, 0x405, 0x7, 0x7f, 0x8, 0x6, 0xf, 0x9, 0x80, 0x3ff, 0x2, 0x200, 0x17a, 0x81, 0x5, 0xfffffcdb, 0x5, 0x6, 0x0, 0x3, 0x8, 0x0, 0x1, 0x9, 0x7, 0x3, 0xc6a]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x8ca, 0x800, 0x0, 0x10001, 0x2, 0x7, 0x650, 0x7721, 0x2, 0x401, 0x8, 0x100, 0x2, 0xbb0, 0xff, 0x2, 0xfffffff1, 0x6ce7, 0x10000, 0xee91, 0x5, 0xffffffde, 0x800, 0x1, 0x9, 0x9eb, 0x3694, 0x7, 0xfffffff7, 0x6, 0x0, 0x636e, 0x5, 0x1, 0x4, 0x8001, 0x0, 0x6, 0x2, 0x1, 0x8, 0x2, 0x7, 0xb1, 0x1, 0x7, 0x0, 0x5, 0x2, 0x89a, 0x101, 0x0, 0x6, 0x3, 0x9, 0x5, 0xc, 0x3, 0x8000, 0x4, 0x8, 0x5, 0x1, 0x200, 0x7, 0x3, 0x120, 0x6, 0x8, 0x2, 0xe3, 0x8000, 0x7ff, 0x1, 0x8c2f, 0x1, 0x8, 0xdf4, 0xab, 0x8, 0x7fffffff, 0xffffffff, 0x1, 0x9, 0xefb, 0x2, 0x6, 0x4, 0x3, 0xffffffff, 0x1, 0x8, 0x1, 0x4, 0x4, 0x5, 0x8, 0x9, 0x6, 0x3, 0x7, 0x9, 0x80000001, 0x8001, 0x4, 0x5, 0x2, 0x7, 0x9, 0x100, 0x8, 0x10, 0xff, 0x7fff, 0x400, 0x0, 0x9, 0x400, 0x0, 0x2, 0x862e, 0x3, 0x4, 0x1ff, 0x9, 0x7fff, 0x7f, 0x1, 0x8, 0x0, 0x8000, 0x8, 0x4, 0x2, 0x4, 0x3, 0xfffffff1, 0x9, 0x5, 0x4, 0x2, 0x1, 0x1, 0xf, 0x80, 0x1, 0x1, 0x8001, 0x8, 0x10001, 0x9, 0xd, 0xffff, 0x3, 0x8, 0x5, 0x5, 0x3, 0x7, 0x2, 0x87, 0x9, 0x1, 0x9, 0x9, 0x2, 0x6, 0x4, 0x53, 0x9, 0x2, 0x8, 0x3, 0x81, 0x9a4e, 0x9, 0x2, 0xc, 0x1, 0x1895b248, 0x2, 0x401, 0xdd2, 0x2e, 0x7ce, 0x8b1, 0x0, 0x1000, 0x8, 0x6, 0x70c, 0x4, 0x1, 0x2, 0x800, 0x9, 0x10000, 0x1c00000, 0xfffffff8, 0x8, 0xb, 0x4, 0x10000, 0x8, 0x4, 0xce, 0x8, 0x4, 0x0, 0x7, 0x4, 0x5, 0x4, 0x4, 0xfff, 0xffffffff, 0x8000, 0x81, 0x5, 0x7, 0x1, 0x3, 0x95, 0x200, 0x0, 0xffffff54, 0x3, 0x4, 0x80000001, 0xc, 0x4, 0xe83, 0x101, 0x5, 0x5, 0x1, 0x10000, 0x4, 0x0, 0x6, 0x4, 0x5, 0x104, 0xa96, 0x9a, 0x3348, 0xc7, 0x9, 0x0, 0x1, 0x0, 0x7f, 0x6, 0x8, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6cb0, 0xe, 0x1, 0x4, 0x1000, 0x5, 0x0, 0x2, 0x6, 0x100, 0x9, 0x1ff, 0x6, 0x17, 0x3b, 0x3, 0x4, 0x7fffffff, 0x4, 0x5, 0x6c, 0xfffffff1, 0x2, 0x1, 0x6c, 0x7, 0x3dca, 0x8, 0xfff, 0x3, 0x6, 0xb, 0x3, 0x7, 0x7, 0x8, 0xffffffff, 0x40, 0x3, 0x81, 0x9, 0xec, 0x4, 0xcf, 0xb368, 0x5, 0x9, 0xf2d1, 0xd99, 0x7, 0xd6d3, 0x9, 0x100, 0x3, 0xa8b, 0xfff, 0x401, 0xfffffff7, 0x9, 0x9964, 0x8000, 0x8, 0x2, 0x100, 0x0, 0x100, 0xfa8, 0x800, 0x2, 0xfffffeff, 0x7, 0x9, 0x6, 0xfffff0c6, 0x7, 0xa, 0x7, 0xe4, 0x1, 0x0, 0x6, 0x8, 0x7f, 0x6, 0x8, 0x3, 0x7d, 0x6cd, 0x2, 0x3, 0x1, 0x6, 0x9, 0x0, 0x10, 0xeb, 0x1, 0x0, 0x0, 0x4, 0x5, 0x3, 0x28a5e7e, 0x3, 0x7, 0x2, 0x7, 0x7ff, 0x5, 0x9, 0x0, 0x3, 0xf, 0x2, 0x0, 0x0, 0xf, 0xb, 0x0, 0x8, 0x5d, 0x7, 0x7, 0x1, 0x2, 0x8001, 0x3ff, 0x2, 0x6, 0xfff, 0xf, 0x9, 0x7, 0x6d41, 0xffffffdd, 0x7, 0x200, 0x2, 0x6, 0x4, 0x8000, 0x7, 0x7, 0xc3, 0x80000000, 0xf, 0x5, 0x9bb, 0x7ff, 0x8, 0x6, 0x8001, 0x7f, 0xa8c, 0x9, 0x6973, 0xfffffffa, 0x9, 0x9, 0x7f, 0x7da, 0x3, 0x9, 0x7, 0x7, 0x2, 0x6, 0x39fa, 0x1000, 0xeb31, 0x3, 0x9, 0x1, 0xe6c, 0x5, 0x4, 0x7f, 0x99, 0xfffffffd, 0x1, 0x6, 0x401, 0x6, 0x9, 0xff, 0xf7, 0x3, 0x7ff, 0xbd3, 0x1, 0x5, 0x4, 0x1c9b, 0xff, 0x40, 0x8, 0xa03e, 0x2, 0x5, 0x1, 0x6, 0xe, 0x1, 0x7, 0x0, 0x8, 0x0, 0x9, 0x3fc0000, 0x5, 0x0, 0x1ff, 0x3, 0x2, 0x8000, 0x80, 0x80000000, 0x80, 0x401, 0x40, 0x92c, 0x7, 0x1000, 0x1, 0x747, 0x7, 0x8, 0xff, 0x7a6, 0xa02, 0xfff, 0x7, 0x100, 0xfffffffb, 0x2000, 0x0, 0x4, 0xffffffff, 0x6, 0x3ff, 0x1, 0x6, 0x3, 0x8, 0x0, 0x800, 0x8, 0x4, 0x7, 0x100000, 0x6, 0x9, 0xc, 0x4, 0x1, 0x10000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x67cf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}]}, @TCA_U32_HASH={0x8, 0x2, 0x10001}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0xa82d}}, @TCA_U32_LINK={0x8, 0x3, 0x50000}, @TCA_U32_HASH={0x8, 0x2, 0xffff}, @TCA_U32_ACT={0x131c, 0x7, [@m_ife={0xc0, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_SMAC={0xa, 0x4, @random="7e4f48be84c1"}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xb}]}]}, {0x46, 0x6, "62b8a123e0561df94d71185e96b63a6e6efe8dd68bb1915f51f8f17572e8900b89ad51151e23f12799c2277db31b477132a9970dfe32a5c3e65578eadeeb1ab1a2b7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0xd0, 0x14, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x9e, 0x6, "6c7735c0e8f6b5ed82c747d01151aa67c39ca8a015f0c10c7e47eb5fb1050c743f99b4c27a26a273ad568e27ab81fd21047b964441dec8e346f9091039d919b6d7fca7050573ae90a9b8a26bbd72d2ee69fa6ec833887bb2d12ce5bc440a85a1a4414a1b902b77002b469d0b893191b1df7e67a7a18e5f1d5a7a8dba6a3d48850af5c24e2ac60da4a59273e6a66823a145b9d2edb5dea3a2af78"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xd8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xaa, 0x6, "d4f365c5920880d96f643ffa7991df3ac3001d3e113ae1844b8d183b5eada8f8d9575ef1535a9e980cba9224236a40e73162e49de5244a71c081cf53fb35f2a2e93176ce37ffde1ccf665e98eb051baf1e4f457db9c29190cde18ace6355912bdd7a0ab5a59bb755299375b880157237b3a49fc2da565127e5017ae012e90d1e51fa0a1a507f3c3141404f54bd5ef597df9094e55172e40819546cf075503452d2f5f46dcffa"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x128, 0x8, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000001}]}, {0xb5, 0x6, "7cc21c64264808927b82c6ac9f1d1113161f28a86ac6eeb30b9c607e72351ee8873d00ffc9b0be9b360d00274a23762aac0ab0ba02479b86902fb59470fa37be5061b01ec93cfc0ffb812b9624b721b0773c6ba677b2b2dc41683ec8ed7b12990f41fdbe36fa49ffc31f8d9c6fd38d27a5144149dc9ec39ac637e146cde45fcdd249a82b6b172043bbc4646cc219720661a2ceefade55eb1dca1b8914d63f19439d36102d27f5e857531f6f553baa82d16"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xf88, 0x5, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x0, 0xdc, 0xffffffffffffffff, 0x1, 0x7}, 0x88, 0xd, [{0x1, 0x7, 0x0, 0x8, 0xffffffff, 0x2}, {0x9, 0x8001, 0x5, 0x4, 0x7c38, 0xfffffffe}, {0x9, 0xa6, 0x8000, 0x7, 0x8, 0x1}, {0x4, 0xa5, 0x7d1adf97, 0x188, 0x7096, 0xfffffffd}, {0x4, 0x0, 0x2, 0x1, 0x4, 0xf}]}, [{0x7ff, 0x10001, 0x8000, 0x1ff, 0x5, 0x1}, {0x7ff, 0x4a, 0x5, 0x800, 0x1000, 0x9d}, {0x6, 0x1e, 0xc84e, 0x8000, 0x2, 0x6}, {0x6, 0xf8, 0x8, 0x0, 0x3, 0xec4}, {0x7, 0x1, 0x10000, 0x60, 0x1, 0xa}, {0x1, 0x0, 0x6, 0x200, 0x4db, 0x9}, {0x6b, 0x4, 0x0, 0x949, 0x4, 0x100}, {0x9, 0x7, 0x0, 0xa, 0x7}, {0x9, 0x1, 0x9, 0x7, 0x9, 0xc}, {0x61, 0xfbbb, 0x1000, 0x9, 0x1, 0x1}, {0x1ff, 0x3, 0x0, 0x7, 0xffffffff, 0x8}, {0x3, 0x7, 0xfe0, 0x7fffffff, 0xd1, 0x7}, {0x74fabdfa, 0x390, 0x9, 0x5, 0x0, 0x101}, {0xffff92b0, 0x8, 0xcd9d, 0x1, 0xd557, 0x1}, {0x6, 0x9, 0x1, 0x9, 0xcae2, 0xf}, {0x6, 0x81, 0x80000000, 0x8, 0xffff7fff, 0x49f}, {0x8, 0x5, 0xfffff8ce, 0x2, 0x6, 0x1}, {0xffff, 0x10, 0x6, 0x2, 0x0, 0x2c}, {0x0, 0x3, 0x3, 0x3, 0x8ec1, 0x6}, {0x57af, 0x200, 0x9, 0x401, 0x1, 0xfffff4ce}, {0x4, 0x5, 0x81, 0x4336, 0xab23, 0x8bd5}, {0x8, 0x5, 0x9, 0x3, 0x7, 0x2e}, {0x0, 0x4, 0x7, 0x3, 0x5, 0x7ff}, {0x2, 0x1, 0xa, 0x7, 0x4, 0x8}, {0x4, 0x5, 0x0, 0x9, 0x8000, 0x1}, {0x7, 0xa941, 0x3ff, 0x7f4, 0x40, 0x5}, {0x5, 0x7f, 0x0, 0x2, 0x80000000, 0x1}, {0xc, 0x200, 0x1ff, 0x7, 0x1, 0x9}, {0x2, 0xfffff800, 0xfffffffe, 0x8, 0x53, 0xf}, {0x4, 0x44a, 0x6, 0x1, 0x9, 0x8}, {0x607, 0x3, 0xfffffff8, 0xd, 0x2, 0x6}, {0x5, 0x9, 0x6, 0x3, 0xe2c, 0xc64}, {0x5, 0x4, 0x2, 0x9, 0xfffffffc, 0x9c7}, {0x3, 0xfffffff7, 0x7, 0x2, 0xf, 0x2e}, {0x2, 0x4, 0x6, 0x7, 0x7, 0x4}, {0x99c, 0xfff, 0x1, 0x8, 0x12c, 0x2}, {0x8f94f353, 0x4, 0x9, 0x8, 0x0, 0xffff}, {0x4, 0xffffff7f, 0xfffffff9, 0x4, 0x3, 0xa4}, {0x3, 0x1, 0x7, 0x7, 0xe2, 0xb}, {0xa, 0x2, 0x0, 0x1, 0x3, 0x2}, {0xa, 0x101, 0x80000000, 0xb59c, 0xfffffffb, 0x10}, {0xe, 0x5, 0x3, 0xfffeffff, 0x2, 0xffff}, {0x1, 0x1ff, 0x373a, 0xffff7fff, 0x70, 0x1}, {0x9, 0x400, 0x9, 0x4, 0x8, 0xd8}, {0x7ff, 0x0, 0x2, 0x7, 0x5, 0x1}, {0x2, 0x3, 0x4, 0x0, 0x14bc99c7, 0x6}, {0xd1db, 0x6, 0x7, 0x9, 0xfff, 0x9}, {0x4, 0x1, 0x4, 0x4, 0xfffeffff, 0xfffffffc}, {0x88f, 0xece, 0x10, 0x7fff, 0x8, 0x5}, {0x7ff, 0xf36784d, 0x5, 0x2, 0x40, 0x5d}, {0xc, 0xffffff7f, 0xffff0001, 0xbf9, 0x9000000, 0x9}, {0x9, 0x4, 0x6, 0x0, 0x3, 0x2}, {0x1ffc, 0x9, 0x6, 0x8, 0x7fff, 0x12}, {0x1, 0x1, 0x9, 0x86, 0x9, 0x10001}, {0x3, 0x2, 0x7fff, 0x10001, 0x1df, 0x4}, {0x9f, 0xc3, 0x3, 0x4a1, 0x2, 0x46f8fe75}, {0x200, 0x2, 0x80000000, 0x7, 0x9, 0x40}, {0xca1, 0x1b27, 0x6, 0x4, 0xf9, 0x4}, {0x1, 0x56e, 0xfffffe00, 0x711, 0x6, 0x9}, {0x3, 0x10001, 0x5, 0x8, 0x3b4, 0x4}, {0x6, 0x1, 0xa0, 0x4, 0xab, 0x5e9f}, {0x0, 0x5, 0x3, 0x8000, 0x1, 0x1a8}, {0x2, 0x4, 0x1, 0xe312, 0x9, 0x80000001}, {0x3, 0x6, 0x3, 0x80000000, 0x2, 0x4}, {0x2, 0x79fc, 0x5, 0x4, 0xb66, 0x5}, {0x7, 0x6, 0x40, 0x6, 0x81, 0x7fffffff}, {0x954, 0x4, 0x9, 0x596, 0xa87e}, {0x52, 0x9, 0x6bf6, 0x57bd, 0x9, 0x7}, {0xffff26b2, 0x9, 0x3ff, 0x5, 0x8, 0xd595}, {0x6, 0xee, 0x2, 0x918, 0x7, 0x9}, {0xe, 0x8001, 0x59, 0x3, 0x7, 0xae7}, {0x0, 0x3a, 0x1, 0xa5f, 0x3, 0x6}, {0x8a, 0x23c29936, 0xd, 0x4, 0x0, 0x9}, {0x6, 0x8, 0x400, 0x7, 0x1, 0x9}, {0xfff, 0xffffff19, 0x4d, 0x1, 0x9, 0x3}, {0x6, 0x9c85, 0x78ca, 0x4, 0x5, 0x23011d9a}, {0x5, 0x401, 0x11ae, 0x16e4, 0x10000, 0x1}, {0x6, 0x6e2b9013, 0x100, 0x0, 0x2, 0x1}, {0x5, 0xfffffff8, 0xa, 0x4, 0x2, 0xff000000}, {0xaeea, 0x6, 0x5dd6, 0xffff7fff, 0x1, 0x6}, {0x9, 0x3, 0x6, 0xa623, 0x8, 0x1}, {0x5, 0x0, 0x8, 0x7fffffff, 0xffffffff, 0x6}, {0x8f70, 0x7, 0x8, 0xce65, 0x4, 0x5868}, {0x200, 0x6, 0x6, 0x10000, 0xfb, 0x7}, {0x10, 0x8, 0x7, 0x0, 0x800, 0x1}, {0x5551, 0x2769, 0x1, 0xf5, 0x0, 0x8}, {0xd, 0x9, 0x3a, 0x0, 0x5, 0xfffffffc}, {0x401, 0x6, 0xb, 0x7c03, 0x0, 0x7}, {0x1, 0x5, 0x5, 0x8, 0x3, 0x6}, {0x0, 0x6, 0x7fff, 0x6, 0x7, 0x2}, {0x80000001, 0x0, 0x5, 0x803, 0x0, 0x7}, {0x6, 0x74a, 0x1bb5, 0x9, 0xa6, 0x7}, {0x4, 0x1, 0x4, 0x5, 0x6, 0xffff}, {0x6, 0x60000, 0x7, 0x2, 0x7, 0xe}, {0x6, 0x2, 0xe, 0x8, 0x2, 0x81}, {0x5, 0x80000000, 0x2, 0xf22, 0x9, 0x7}, {0x47f, 0xfffffff9, 0x7fff, 0x2, 0x80, 0x8}, {0xc, 0x8cdd, 0x3, 0x81, 0xffffff7f, 0x8000}, {0x0, 0x0, 0x6, 0x8, 0x8, 0x8001}, {0x7f, 0x5, 0xf2f8, 0x63, 0x4, 0x4}, {0x7, 0x8, 0x3d7, 0x6, 0xfffffffd, 0xfe}, {0x0, 0x624512f4, 0xffff, 0x3, 0x283, 0x1ff}, {0x9, 0x6ea22531, 0xe7, 0xffffffff, 0x5, 0x4}, {0x200, 0x5, 0x800, 0x8, 0x4}, {0xd, 0xa20c, 0xb11, 0x2, 0x3ff, 0x7}, {0xcd0, 0x8, 0xe3d0, 0xf, 0x2467}, {0x200, 0x2, 0x9, 0x4, 0x7, 0x40}, {0x2, 0x3ff, 0x1, 0x2, 0x3, 0x9}, {0xff, 0x2, 0x3, 0x7626a0b1, 0x3c, 0xfffffffc}, {0x4, 0x9, 0x10, 0x800, 0xb14c, 0x5}, {0x9, 0x2, 0xb, 0x7, 0x7fff, 0xafdc}, {0xcf, 0x1ff, 0x8, 0x1, 0x8000, 0x58c0116c}, {0xfffffff9, 0x0, 0x2, 0x3, 0x2, 0x4}, {0x0, 0x9, 0x5, 0x820, 0x1, 0x9753}, {0x1, 0x7, 0x380, 0xfffffff9, 0x913, 0x101}, {0x2, 0xabc, 0x2, 0x4, 0x8000000, 0x3}, {0x0, 0x10000, 0x6, 0x5, 0x1, 0x4}, {0x6, 0xa, 0x5, 0x3, 0x10, 0x6a}, {0xf46e, 0x401, 0x5, 0x3ff, 0xd6b, 0x5}, {0x1000, 0xfffffff8, 0xc, 0x10, 0x3, 0x5b}, {0x4000, 0x3, 0x2, 0x7c4c, 0x7ff, 0x1}, {0x46ae329e, 0x0, 0x7fff, 0x6, 0x3, 0x3}, {0x26c9, 0x8, 0x40, 0x3ff, 0x1, 0x494}, {0x6, 0x5, 0x791, 0xa, 0x4, 0x1860}, {0x9, 0xa0, 0x4, 0x8, 0x989, 0x1086}, {0x9, 0x6, 0x2, 0x7, 0x7fffffff}, {0x2, 0x8001, 0x9, 0x3, 0x6, 0x1}, {0x7, 0x100, 0x4, 0x13, 0x7, 0x8}], [{0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0xcf9c8c94a5d76b71, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x2}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x5}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0xe8e6b780eda299d}, {0x4}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x1, 0xd402ad707b65e09a}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x3, 0x1}], 0x1}}]}, {0xc1, 0x6, "ea438e2a0255c5e0c3aa66945ee4c8fdf8f0d0e075adec38b7c89f176d6d4321dfa86c2e98f9ebaea1b62f42078aa83f2d7fd9fb8bf67dc2cf33254b91c9a6b08bb48cb10458a4bc6b3e5b559d9c0da77ad133b46c81d8fb5322de2edd7ec6c1d68c98685ca63bb0e4ca6294302d4e84861bd554ab04da68c749e9e388ea7e40efe2b3a5ca7f4342497581fc71763886d51a81dfaa287103693bf5cf9513c6359b317a88de0ae42ff0c237f85a5177b96550e701435a9b8e099a2b66e5"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe4, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0xdc, 0x1, [@m_mirred={0x70, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4, 0x4, 0x73, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x5, 0x8, 0xff}, 0x3, r1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x68, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xf0, 0x3, 0x7, 0x7}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7a17, 0x5, 0x300, 0x6}, 0x55}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa4, 0x88}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x3d}]}}, @filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bond\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}]}}]}, 0x216c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)

0s ago: executing program 3 (id=3516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000040)}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup, 0x11, 0x1, 0x4, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @random="56460a7cef90", @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
kexec_load(0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="b0", 0x1, 0xc000000000, 0x80000000}], 0x0)

kernel console output (not intermixed with test programs):

 all slaves
[  277.975084][   T51] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  277.990384][   T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  278.003645][   T51] EXT4-fs (loop3): This should not happen!! Data will be lost
[  278.003645][   T51] 
[  278.048735][T12638] loop3: detected capacity change from 0 to 512
[  278.082477][T12638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  278.093852][T12638] EXT4-fs (loop3): orphan cleanup on readonly fs
[  278.101335][T12638] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2862: Failed to acquire dquot type 1
[  278.114646][T12638] EXT4-fs (loop3): 1 truncate cleaned up
[  278.211650][T12641] bond14: entered promiscuous mode
[  278.217028][T12641] bond14: entered allmulticast mode
[  278.261845][T12641] 8021q: adding VLAN 0 to HW filter on device bond14
[  278.302427][T12641] bond14 (unregistering): Released all slaves
[  278.446138][T12487] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  278.480648][T12670] loop2: detected capacity change from 0 to 4096
[  278.492699][T12487] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  278.589585][T12487] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  278.609338][T12487] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  278.734402][T12487] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.750409][T12487] 8021q: adding VLAN 0 to HW filter on device team0
[  278.764691][  T371] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.772174][  T371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.795320][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.802645][  T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.822515][T12703] loop2: detected capacity change from 0 to 1024
[  278.906445][T12707] lo speed is unknown, defaulting to 1000
[  278.945224][T12707] lo speed is unknown, defaulting to 1000
[  279.031301][ T3403] Process accounting resumed
[  279.123654][T12487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.664314][T12729] loop0: detected capacity change from 0 to 8192
[  279.691166][T12487] veth0_vlan: entered promiscuous mode
[  279.708568][T12487] veth1_vlan: entered promiscuous mode
[  279.735734][T12487] veth0_macvtap: entered promiscuous mode
[  279.751892][T12487] veth1_macvtap: entered promiscuous mode
[  279.774746][T12487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.876850][T12729] netlink: 8524 bytes leftover after parsing attributes in process `syz.0.2876'.
[  279.915192][T12734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2874'.
[  279.924273][T12734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2874'.
[  279.933372][T12734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2874'.
[  279.951793][T12734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2874'.
[  279.976596][T12739] bond19: entered promiscuous mode
[  279.981750][T12739] bond19: entered allmulticast mode
[  279.987524][T12739] 8021q: adding VLAN 0 to HW filter on device bond19
[  280.011389][T12739] bond19 (unregistering): Released all slaves
[  280.259839][T12746] SELinux:  policydb string S does not match my string SE Linux
[  280.268394][T12746] SELinux: failed to load policy
[  280.444370][T12487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.454231][T12751] lo speed is unknown, defaulting to 1000
[  280.464584][ T3863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.509947][ T3863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.523593][T12751] lo speed is unknown, defaulting to 1000
[  280.537890][ T3863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.548293][T12758] loop0: detected capacity change from 0 to 1024
[  280.568293][T12758] EXT4-fs mount: 28 callbacks suppressed
[  280.568307][T12758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.646831][ T3863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.702739][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.846688][T12778] bond1: entered promiscuous mode
[  280.851834][T12778] bond1: entered allmulticast mode
[  280.858808][T12778] 8021q: adding VLAN 0 to HW filter on device bond1
[  280.867224][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'.
[  280.877966][T12778] bond1 (unregistering): Released all slaves
[  280.892174][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'.
[  281.020360][T12790] loop4: detected capacity change from 0 to 8192
[  281.211951][T12799] lo speed is unknown, defaulting to 1000
[  281.248702][T12799] lo speed is unknown, defaulting to 1000
[  281.341620][T12790] netlink: 8524 bytes leftover after parsing attributes in process `syz.4.2892'.
[  281.422291][T12797] lo speed is unknown, defaulting to 1000
[  281.480185][T12797] lo speed is unknown, defaulting to 1000
[  281.583351][T12797] chnl_net:caif_netlink_parms(): no params data found
[  281.642905][T12797] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.650026][T12797] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.658546][T12797] bridge_slave_0: entered allmulticast mode
[  281.666425][T12797] bridge_slave_0: entered promiscuous mode
[  281.673849][T12797] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.681256][T12797] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.689746][T12797] bridge_slave_1: entered allmulticast mode
[  281.696936][T12797] bridge_slave_1: entered promiscuous mode
[  281.722158][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.739645][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.767705][T12797] team0: Port device team_slave_0 added
[  281.775923][T12797] team0: Port device team_slave_1 added
[  281.840520][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.847729][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.874413][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.890672][T12815] netlink: 'syz.1.2896': attribute type 1 has an invalid length.
[  281.910665][T12796] loop0: detected capacity change from 0 to 1024
[  281.927375][T12796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.956117][T12815] 8021q: adding VLAN 0 to HW filter on device bond19
[  281.974780][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.982156][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.008266][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.029570][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.099404][T12797] hsr_slave_0: entered promiscuous mode
[  282.122594][T12797] hsr_slave_1: entered promiscuous mode
[  282.133035][T12797] debugfs: 'hsr0' already exists in 'hsr'
[  282.138897][T12797] Cannot create hsr debugfs directory
[  282.161022][ T3863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.210698][T12823] loop0: detected capacity change from 0 to 4096
[  282.253889][T12823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.287288][T12823] EXT4-fs (loop0): shut down requested (0)
[  282.297883][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  282.297896][   T29] audit: type=1400 audit(1756202188.498:7409): avc:  denied  { read } for  pid=2974 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  282.327564][   T29] audit: type=1400 audit(1756202188.498:7410): avc:  denied  { search } for  pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  282.349693][   T29] audit: type=1400 audit(1756202188.498:7411): avc:  denied  { append } for  pid=2974 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  282.372108][   T29] audit: type=1400 audit(1756202188.498:7412): avc:  denied  { open } for  pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  282.394908][   T29] audit: type=1400 audit(1756202188.498:7413): avc:  denied  { getattr } for  pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  282.440903][ T3863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.457101][T12828] FAULT_INJECTION: forcing a failure.
[  282.457101][T12828] name failslab, interval 1, probability 0, space 0, times 0
[  282.470057][T12828] CPU: 1 UID: 0 PID: 12828 Comm: syz.3.2899 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  282.470192][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  282.470206][T12828] Call Trace:
[  282.470212][T12828]  <TASK>
[  282.470221][T12828]  __dump_stack+0x1d/0x30
[  282.470242][T12828]  dump_stack_lvl+0xe8/0x140
[  282.470261][T12828]  dump_stack+0x15/0x1b
[  282.470329][T12828]  should_fail_ex+0x265/0x280
[  282.470363][T12828]  ? sctp_association_new+0x71/0x1200
[  282.470393][T12828]  should_failslab+0x8c/0xb0
[  282.470413][T12828]  __kmalloc_cache_noprof+0x4c/0x320
[  282.470503][T12828]  sctp_association_new+0x71/0x1200
[  282.470532][T12828]  ? __ipv6_addr_type+0x1ed/0x210
[  282.470556][T12828]  sctp_connect_new_asoc+0x1a8/0x3a0
[  282.470592][T12828]  sctp_sendmsg+0xf10/0x18d0
[  282.470647][T12828]  ? selinux_socket_sendmsg+0xa1/0x1b0
[  282.470679][T12828]  ? __pfx_sctp_sendmsg+0x10/0x10
[  282.470766][T12828]  inet_sendmsg+0xc5/0xd0
[  282.470806][T12828]  __sock_sendmsg+0x102/0x180
[  282.470831][T12828]  __sys_sendto+0x268/0x330
[  282.470858][T12828]  __x64_sys_sendto+0x76/0x90
[  282.470878][T12828]  x64_sys_call+0x2d05/0x2ff0
[  282.470899][T12828]  do_syscall_64+0xd2/0x200
[  282.470968][T12828]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  282.470992][T12828]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  282.471012][T12828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.471030][T12828] RIP: 0033:0x7fe318beebe9
[  282.471110][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.471125][T12828] RSP: 002b:00007fe317657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  282.471142][T12828] RAX: ffffffffffffffda RBX: 00007fe318e15fa0 RCX: 00007fe318beebe9
[  282.471153][T12828] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000004
[  282.471163][T12828] RBP: 00007fe317657090 R08: 0000200000000140 R09: 000000000000001c
[  282.471174][T12828] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001
[  282.471186][T12828] R13: 00007fe318e16038 R14: 00007fe318e15fa0 R15: 00007ffdd18d33a8
[  282.471204][T12828]  </TASK>
[  282.707460][   T29] audit: type=1400 audit(1756202188.908:7414): avc:  denied  { lock } for  pid=12822 comm="syz.0.2898" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=39735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  282.747786][ T3863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.761283][T12830] FAULT_INJECTION: forcing a failure.
[  282.761283][T12830] name failslab, interval 1, probability 0, space 0, times 0
[  282.774331][T12830] CPU: 0 UID: 0 PID: 12830 Comm: syz.3.2900 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  282.774396][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  282.774408][T12830] Call Trace:
[  282.774414][T12830]  <TASK>
[  282.774422][T12830]  __dump_stack+0x1d/0x30
[  282.774440][T12830]  dump_stack_lvl+0xe8/0x140
[  282.774457][T12830]  dump_stack+0x15/0x1b
[  282.774473][T12830]  should_fail_ex+0x265/0x280
[  282.774555][T12830]  ? do_kimage_alloc_init+0x2f/0x170
[  282.774642][T12830]  should_failslab+0x8c/0xb0
[  282.774667][T12830]  __kmalloc_cache_noprof+0x4c/0x320
[  282.774697][T12830]  do_kimage_alloc_init+0x2f/0x170
[  282.774726][T12830]  do_kexec_load+0x8b/0x500
[  282.774787][T12830]  __se_sys_kexec_load+0x134/0x160
[  282.774807][T12830]  __x64_sys_kexec_load+0x55/0x70
[  282.774825][T12830]  x64_sys_call+0x2898/0x2ff0
[  282.774893][T12830]  do_syscall_64+0xd2/0x200
[  282.774919][T12830]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  282.774964][T12830]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  282.774987][T12830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.775071][T12830] RIP: 0033:0x7fe318beebe9
[  282.775086][T12830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.775101][T12830] RSP: 002b:00007fe317657038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  282.775120][T12830] RAX: ffffffffffffffda RBX: 00007fe318e15fa0 RCX: 00007fe318beebe9
[  282.775182][T12830] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000
[  282.775196][T12830] RBP: 00007fe317657090 R08: 0000000000000000 R09: 0000000000000000
[  282.775209][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.775220][T12830] R13: 00007fe318e16038 R14: 00007fe318e15fa0 R15: 00007ffdd18d33a8
[  282.775237][T12830]  </TASK>
[  282.985819][T12834] bond20: entered promiscuous mode
[  282.991037][T12834] bond20: entered allmulticast mode
[  282.997541][T12834] 8021q: adding VLAN 0 to HW filter on device bond20
[  283.013019][T12834] bond20 (unregistering): Released all slaves
[  283.021908][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'.
[  283.043301][ T3863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.054791][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.069411][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'.
[  283.229077][ T3863] bridge_slave_1: left allmulticast mode
[  283.235021][ T3863] bridge_slave_1: left promiscuous mode
[  283.240942][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.252146][ T3863] bridge_slave_0: left allmulticast mode
[  283.257894][ T3863] bridge_slave_0: left promiscuous mode
[  283.263673][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.122504][ T3863] bridge0 (unregistering): left allmulticast mode
[  285.233973][ T3863] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.246772][ T3863] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.262084][ T3863] 
 (unregistering): (slave dummy0): Releasing backup interface
[  285.276218][ T3863] 
 (unregistering): Released all slaves
[  285.286013][ T3863] bond0 (unregistering): Released all slaves
[  285.293134][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'.
[  285.296373][ T3863] bond1 (unregistering): Released all slaves
[  285.311687][ T3863] bond2 (unregistering): Released all slaves
[  285.322077][ T3863] bond3 (unregistering): Released all slaves
[  285.354324][T12863] lo speed is unknown, defaulting to 1000
[  285.361691][T12875] lo speed is unknown, defaulting to 1000
[  285.394142][T12863] lo speed is unknown, defaulting to 1000
[  285.422865][T12875] lo speed is unknown, defaulting to 1000
[  285.508495][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'.
[  285.581425][T12902] loop0: detected capacity change from 0 to 512
[  285.619050][T12902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  285.649476][T12902] EXT4-fs (loop0): orphan cleanup on readonly fs
[  285.664363][T12902] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[  285.673895][T12902] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  285.683386][T12902] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2918: Failed to acquire dquot type 1
[  285.714133][T12902] EXT4-fs (loop0): 1 truncate cleaned up
[  285.721603][ T3863] hsr_slave_0: left promiscuous mode
[  285.723476][T12902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  285.745236][ T3863] hsr_slave_1: left promiscuous mode
[  285.764370][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.785544][ T3863] veth1_macvtap: left promiscuous mode
[  285.791205][ T3863] veth0_macvtap: left promiscuous mode
[  285.797674][ T3863] veth1_vlan: left promiscuous mode
[  285.804643][ T3863] veth0_vlan: left promiscuous mode
[  285.875748][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2921'.
[  285.928310][   T29] audit: type=1400 audit(1756202192.128:7415): avc:  denied  { map } for  pid=12927 comm="syz.3.2925" path="socket:[39924]" dev="sockfs" ino=39924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  285.952439][   T29] audit: type=1400 audit(1756202192.128:7416): avc:  denied  { read } for  pid=12927 comm="syz.3.2925" path="socket:[39924]" dev="sockfs" ino=39924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  285.987142][T12929] netlink: 'syz.4.2924': attribute type 10 has an invalid length.
[  286.002140][ T3863] team0 (unregistering): Port device team_slave_1 removed
[  286.013578][ T3863] team0 (unregistering): Port device team_slave_0 removed
[  286.023547][   T12] smc: removing ib device syz!
[  286.046301][T12931] loop3: detected capacity change from 0 to 512
[  286.068553][T12931] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  286.080326][T12931] System zones: 0-2, 18-18, 34-34
[  286.090423][T12931] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2926: bg 0: block 248: padding at end of block bitmap is not set
[  286.112232][T12931] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2926: Failed to acquire dquot type 1
[  286.127658][T12931] EXT4-fs (loop3): 1 truncate cleaned up
[  286.133846][T12931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.147804][T12931] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.161788][T12929] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  286.183496][T12931] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.187152][T12797] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  286.221993][T12797] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  286.258355][T12797] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  286.382710][T12797] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  286.598653][T12957] lo speed is unknown, defaulting to 1000
[  286.899404][T12797] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.057741][T12797] 8021q: adding VLAN 0 to HW filter on device team0
[  287.192501][T11089] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.199729][T11089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.274868][T11089] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.282048][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.374464][T12797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.384920][T12797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.400668][T12969] loop0: detected capacity change from 0 to 8192
[  287.414607][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  287.414623][   T29] audit: type=1400 audit(1756202193.608:7419): avc:  denied  { connect } for  pid=12949 comm="syz.1.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  287.570605][T12980] netlink: 8524 bytes leftover after parsing attributes in process `syz.0.2933'.
[  287.653696][T12978] loop4: detected capacity change from 0 to 4096
[  287.672336][T12989] 9pnet: Could not find request transport: fd½ö?‰—ùd6àþoý¿GÿóS°†«Ô£�kþ>)žlȃæï®npïžÑ$±°˜‡¥Œ™";
[  287.685498][T12978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.737393][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.757979][T12797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.845842][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'.
[  287.866840][T13011] siw: device registration error -23
[  287.894486][   T29] audit: type=1326 audit(1756202194.088:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  287.918568][   T29] audit: type=1326 audit(1756202194.088:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  287.922332][T13011] netlink: 'syz.4.2939': attribute type 10 has an invalid length.
[  287.942487][   T29] audit: type=1326 audit(1756202194.088:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  287.974148][   T29] audit: type=1326 audit(1756202194.088:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  287.976445][T13012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2941'.
[  287.998097][   T29] audit: type=1326 audit(1756202194.088:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  287.998178][   T29] audit: type=1326 audit(1756202194.088:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  288.054985][   T29] audit: type=1326 audit(1756202194.088:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  288.079075][   T29] audit: type=1326 audit(1756202194.088:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  288.103856][T13011] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  288.114422][   T29] audit: type=1326 audit(1756202194.088:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257998ebe9 code=0x7ffc0000
[  288.260721][T12797] veth0_vlan: entered promiscuous mode
[  288.278525][T12797] veth1_vlan: entered promiscuous mode
[  288.306374][T12797] veth0_macvtap: entered promiscuous mode
[  288.327334][T12797] veth1_macvtap: entered promiscuous mode
[  288.348735][T13052] loop4: detected capacity change from 0 to 512
[  288.380445][T13052] journal_path: Non-blockdev passed as './bus'
[  288.386811][T13052] EXT4-fs: error: could not find journal device path
[  288.402010][T12797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.421228][T13054] loop0: detected capacity change from 0 to 4096
[  288.449201][T12797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.490719][T13054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.515417][ T3863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.532285][ T3863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.544152][ T3863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.566004][ T3863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.620525][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.681538][T13071] loop4: detected capacity change from 0 to 8192
[  288.694062][T13080] loop0: detected capacity change from 0 to 512
[  288.705981][T13080] EXT4-fs: Ignoring removed mblk_io_submit option
[  288.731022][T13071] netlink: 8524 bytes leftover after parsing attributes in process `syz.4.2952'.
[  288.770620][T13080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  288.816466][T13080] EXT4-fs (loop0): 1 truncate cleaned up
[  288.826067][T13080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.983753][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'.
[  289.147438][T13107] loop4: detected capacity change from 0 to 2048
[  289.196597][T13089] lo speed is unknown, defaulting to 1000
[  289.207755][T13107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.236827][ T3863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.316275][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.332917][ T3863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.520197][ T3863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.618251][ T3863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.687759][T13089] chnl_net:caif_netlink_parms(): no params data found
[  289.819048][T13131] sd 0:0:1:0: device reset
[  289.836399][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.893674][T13089] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.901228][T13089] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.928887][T13089] bridge_slave_0: entered allmulticast mode
[  289.936629][T13137] loop2: detected capacity change from 0 to 4096
[  289.944963][T13089] bridge_slave_0: entered promiscuous mode
[  289.955670][T13137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.970069][ T3863] bridge_slave_1: left allmulticast mode
[  289.975905][ T3863] bridge_slave_1: left promiscuous mode
[  289.981755][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.998967][ T3863] bridge_slave_0: left allmulticast mode
[  290.004781][ T3863] bridge_slave_0: left promiscuous mode
[  290.009900][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'.
[  290.010466][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.020238][T13145] loop3: detected capacity change from 0 to 512
[  290.046104][T12797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.057306][T13145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  290.076184][T13145] EXT4-fs (loop3): orphan cleanup on readonly fs
[  290.103786][T13145] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2974: Failed to acquire dquot type 1
[  290.120611][T13151] loop2: detected capacity change from 0 to 512
[  290.129184][T13151] journal_path: Non-blockdev passed as './bus'
[  290.135965][T13151] EXT4-fs: error: could not find journal device path
[  290.139592][T13145] EXT4-fs (loop3): 1 truncate cleaned up
[  290.152955][T13145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  290.183030][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.220791][ T3863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.233007][ T3863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.243072][ T3863] bond0 (unregistering): Released all slaves
[  290.253344][ T3863] bond1 (unregistering): Released all slaves
[  290.263262][ T3863] bond2 (unregistering): Released all slaves
[  290.273566][ T3863] bond3 (unregistering): Released all slaves
[  290.283380][ T3863] bond4 (unregistering): Released all slaves
[  290.293186][ T3863] bond5 (unregistering): Released all slaves
[  290.304984][ T3863] bond6 (unregistering): Released all slaves
[  290.321325][ T3863] bond7 (unregistering): Released all slaves
[  290.327425][T13161] loop3: detected capacity change from 0 to 512
[  290.330864][ T3863] bond8 (unregistering): Released all slaves
[  290.335816][T13161] EXT4-fs: Ignoring removed mblk_io_submit option
[  290.343551][ T3863] bond9 (unregistering): Released all slaves
[  290.354041][T13161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  290.356799][ T3863] bond10 (unregistering): Released all slaves
[  290.365872][T13161] EXT4-fs (loop3): 1 truncate cleaned up
[  290.373955][ T3863] bond11 (unregistering): Released all slaves
[  290.379214][T13161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.385860][ T3863] bond12 (unregistering): Released all slaves
[  290.404066][ T3863] bond13 (unregistering): Released all slaves
[  290.414580][ T3863] bond14 (unregistering): Released all slaves
[  290.425031][ T3863] bond15 (unregistering): Released all slaves
[  290.434458][ T3863] bond16 (unregistering): Released all slaves
[  290.444598][ T3863] bond17 (unregistering): Released all slaves
[  290.456276][ T3863] bond18 (unregistering): Released all slaves
[  290.465543][ T3863] bond19 (unregistering): Released all slaves
[  290.476373][T13089] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.483757][T13089] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.492920][T13089] bridge_slave_1: entered allmulticast mode
[  290.499677][T13089] bridge_slave_1: entered promiscuous mode
[  290.556156][ T3863] IPVS: stopping master sync thread 9449 ...
[  290.576144][T13089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.592042][ T3863] hsr_slave_0: left promiscuous mode
[  290.592060][T13167] sd 0:0:1:0: device reset
[  290.605801][ T3863] hsr_slave_1: left promiscuous mode
[  290.619331][ T3863] veth1_macvtap: left promiscuous mode
[  290.641497][ T3863] veth0_macvtap: left promiscuous mode
[  290.654199][ T3863] veth1_vlan: left promiscuous mode
[  290.668590][ T3863] veth0_vlan: left promiscuous mode
[  290.713313][T13171] loop2: detected capacity change from 0 to 2048
[  290.739622][T13171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.817025][T12797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.828242][ T3863] team0 (unregistering): Port device team_slave_1 removed
[  290.862894][ T3863] team0 (unregistering): Port device team_slave_0 removed
[  290.883258][T13178] loop0: detected capacity change from 0 to 4096
[  290.907861][T13178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.926811][T13180] loop2: detected capacity change from 0 to 2048
[  290.941713][ T3863] team0 (unregistering): Port device dummy0 removed
[  290.959440][T13180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.990847][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.001565][T13089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.039405][T13185] loop4: detected capacity change from 0 to 512
[  291.060070][T12797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.071637][T13185] journal_path: Non-blockdev passed as './bus'
[  291.078032][T13185] EXT4-fs: error: could not find journal device path
[  291.147275][T13089] team0: Port device team_slave_0 added
[  291.176960][T13197] SELinux:  policydb string S does not match my string SE Linux
[  291.188137][T13089] team0: Port device team_slave_1 added
[  291.203122][T13197] SELinux: failed to load policy
[  291.219798][T13089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.226986][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.253630][T13089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.273540][T13206] sd 0:0:1:0: device reset
[  291.279359][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.302432][T13089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.308753][T13193] loop2: detected capacity change from 0 to 8192
[  291.309658][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.341861][T13089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.376307][T13205] lo speed is unknown, defaulting to 1000
[  291.491068][T13219] loop0: detected capacity change from 0 to 4096
[  291.523341][T13227] netlink: 8524 bytes leftover after parsing attributes in process `syz.2.2988'.
[  291.544795][T13219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.585996][T13089] hsr_slave_0: entered promiscuous mode
[  291.622023][T13089] hsr_slave_1: entered promiscuous mode
[  291.648167][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.721327][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'.
[  291.738814][T13238] loop0: detected capacity change from 0 to 2048
[  291.778266][T13238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.837026][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.910722][T13249] loop3: detected capacity change from 0 to 4096
[  291.924155][T13249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.962886][T13249] EXT4-fs (loop3): shut down requested (0)
[  291.998603][T13249] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  292.011043][T13249] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  292.190510][T13089] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  292.228767][T13089] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  292.253439][T13089] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  292.275662][T13089] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  292.366390][T13089] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.395009][T13089] 8021q: adding VLAN 0 to HW filter on device team0
[  292.414872][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.422177][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.451162][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.458779][  T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.576963][T13089] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.651131][T13089] veth0_vlan: entered promiscuous mode
[  292.659775][T13089] veth1_vlan: entered promiscuous mode
[  292.678218][T13089] veth0_macvtap: entered promiscuous mode
[  292.686439][T13089] veth1_macvtap: entered promiscuous mode
[  292.698905][T13089] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.709711][T13089] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.731008][ T3863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.749994][ T3863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.771595][ T3863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.789302][ T3863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.803059][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.861630][T13353] loop3: detected capacity change from 0 to 2048
[  292.870662][T13352] netlink: 'syz.0.3011': attribute type 10 has an invalid length.
[  292.884441][T13352] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  292.897441][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'.
[  292.933937][T13353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.954075][T13358] Falling back ldisc for ptm0.
[  293.013719][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.110238][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'.
[  293.133590][T13370] bond1: entered promiscuous mode
[  293.138912][T13370] bond1: entered allmulticast mode
[  293.145143][T13370] 8021q: adding VLAN 0 to HW filter on device bond1
[  293.158252][T13370] bond1 (unregistering): Released all slaves
[  293.174384][T13364] loop3: detected capacity change from 0 to 8192
[  293.183157][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'.
[  293.233418][T13364] netlink: 8524 bytes leftover after parsing attributes in process `syz.3.3015'.
[  293.243155][T13381] loop4: detected capacity change from 0 to 4096
[  293.260688][T13385] FAULT_INJECTION: forcing a failure.
[  293.260688][T13385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.274158][T13385] CPU: 0 UID: 0 PID: 13385 Comm: syz.1.3023 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  293.274182][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.274193][T13385] Call Trace:
[  293.274201][T13385]  <TASK>
[  293.274209][T13385]  __dump_stack+0x1d/0x30
[  293.274228][T13385]  dump_stack_lvl+0xe8/0x140
[  293.274317][T13385]  dump_stack+0x15/0x1b
[  293.274333][T13385]  should_fail_ex+0x265/0x280
[  293.274355][T13385]  should_fail+0xb/0x20
[  293.274373][T13385]  should_fail_usercopy+0x1a/0x20
[  293.274394][T13385]  strncpy_from_user+0x25/0x230
[  293.274432][T13385]  ? kmem_cache_alloc_noprof+0x186/0x310
[  293.274456][T13385]  ? getname_flags+0x80/0x3b0
[  293.274480][T13385]  getname_flags+0xae/0x3b0
[  293.274580][T13385]  user_path_at+0x28/0x130
[  293.274604][T13385]  do_faccessat+0x380/0x800
[  293.274619][T13385]  ? __bpf_trace_sys_enter+0x10/0x30
[  293.274701][T13385]  __x64_sys_faccessat+0x41/0x50
[  293.274722][T13385]  x64_sys_call+0x950/0x2ff0
[  293.274738][T13385]  do_syscall_64+0xd2/0x200
[  293.274819][T13385]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  293.274839][T13385]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  293.274859][T13385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.274879][T13385] RIP: 0033:0x7f732b7febe9
[  293.274919][T13385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.274936][T13385] RSP: 002b:00007f732a267038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d
[  293.274956][T13385] RAX: ffffffffffffffda RBX: 00007f732ba25fa0 RCX: 00007f732b7febe9
[  293.274967][T13385] RDX: 0000000000000007 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  293.274978][T13385] RBP: 00007f732a267090 R08: 0000000000000000 R09: 0000000000000000
[  293.274993][T13385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.275006][T13385] R13: 00007f732ba26038 R14: 00007f732ba25fa0 R15: 00007ffe105ae368
[  293.275022][T13385]  </TASK>
[  293.279623][T13381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.385551][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'.
[  293.515675][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  293.515718][   T29] audit: type=1400 audit(1756202199.708:7518): avc:  denied  { append } for  pid=13388 comm="syz.1.3024" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  293.564185][T13393] netlink: 'syz.3.3025': attribute type 10 has an invalid length.
[  293.573301][T13393] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  293.591036][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.691488][T13405] loop4: detected capacity change from 0 to 128
[  293.706300][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'.
[  293.723856][T13405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  293.760716][T13405] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  293.783375][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'.
[  293.824680][   T29] audit: type=1400 audit(1756202200.018:7519): avc:  denied  { remove_name } for  pid=13404 comm="syz.4.3026" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  293.847798][   T29] audit: type=1400 audit(1756202200.018:7520): avc:  denied  { rename } for  pid=13404 comm="syz.4.3026" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  293.871099][   T29] audit: type=1400 audit(1756202200.018:7521): avc:  denied  { reparent } for  pid=13404 comm="syz.4.3026" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  293.908316][T13414] loop3: detected capacity change from 0 to 2048
[  293.941695][T13405] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  293.981171][T13414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.004813][T13416] netlink: 8524 bytes leftover after parsing attributes in process `syz.1.3035'.
[  294.009762][T13418] loop0: detected capacity change from 0 to 4096
[  294.059536][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.078191][T13422] FAULT_INJECTION: forcing a failure.
[  294.078191][T13422] name failslab, interval 1, probability 0, space 0, times 0
[  294.091002][T13422] CPU: 1 UID: 0 PID: 13422 Comm: syz.4.3037 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  294.091026][T13422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.091036][T13422] Call Trace:
[  294.091042][T13422]  <TASK>
[  294.091118][T13422]  __dump_stack+0x1d/0x30
[  294.091140][T13422]  dump_stack_lvl+0xe8/0x140
[  294.091160][T13422]  dump_stack+0x15/0x1b
[  294.091242][T13422]  should_fail_ex+0x265/0x280
[  294.091275][T13422]  should_failslab+0x8c/0xb0
[  294.091297][T13422]  kmem_cache_alloc_noprof+0x50/0x310
[  294.091403][T13422]  ? __anon_vma_prepare+0xcd/0x2f0
[  294.091452][T13422]  __anon_vma_prepare+0xcd/0x2f0
[  294.091472][T13422]  handle_mm_fault+0x1d58/0x2c20
[  294.091500][T13422]  ? check_vma_flags+0x26e/0x340
[  294.091521][T13422]  __get_user_pages+0x102e/0x1fa0
[  294.091557][T13422]  __gup_longterm_locked+0x8f4/0xe60
[  294.091584][T13422]  ? security_ptrace_access_check+0x69/0x80
[  294.091650][T13422]  ? __ptrace_may_access+0x2c3/0x340
[  294.091744][T13422]  pin_user_pages_remote+0x7e/0xb0
[  294.091768][T13422]  process_vm_rw+0x484/0x960
[  294.091804][T13422]  ? __bpf_trace_sys_enter+0x10/0x30
[  294.091823][T13422]  __x64_sys_process_vm_writev+0x78/0x90
[  294.091921][T13422]  x64_sys_call+0x2a7c/0x2ff0
[  294.091939][T13422]  do_syscall_64+0xd2/0x200
[  294.091995][T13422]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  294.092013][T13422]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  294.092082][T13422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.092100][T13422] RIP: 0033:0x7ff3ea91ebe9
[  294.092113][T13422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.092127][T13422] RSP: 002b:00007ff3e9387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  294.092144][T13422] RAX: ffffffffffffffda RBX: 00007ff3eab45fa0 RCX: 00007ff3ea91ebe9
[  294.092185][T13422] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 000000000000004b
[  294.092198][T13422] RBP: 00007ff3e9387090 R08: 0000000000000001 R09: 0000000000000000
[  294.092210][T13422] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001
[  294.092223][T13422] R13: 00007ff3eab46038 R14: 00007ff3eab45fa0 R15: 00007ffd0ab4c4a8
[  294.092244][T13422]  </TASK>
[  294.353344][   T29] audit: type=1326 audit(1756202200.548:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318beebe9 code=0x7ffc0000
[  294.377416][   T29] audit: type=1326 audit(1756202200.548:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318beebe9 code=0x7ffc0000
[  294.437117][T13418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.509259][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.530028][T13434] netlink: 'syz.3.3041': attribute type 10 has an invalid length.
[  294.559082][T13434] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  294.572090][   T29] audit: type=1326 audit(1756202200.558:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe318beebe9 code=0x7ffc0000
[  294.596473][   T29] audit: type=1326 audit(1756202200.558:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318beebe9 code=0x7ffc0000
[  294.620460][   T29] audit: type=1326 audit(1756202200.558:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe318beebe9 code=0x7ffc0000
[  294.644564][   T29] audit: type=1326 audit(1756202200.558:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318beebe9 code=0x7ffc0000
[  294.709487][T13446] loop0: detected capacity change from 0 to 512
[  294.723464][T13450] FAULT_INJECTION: forcing a failure.
[  294.723464][T13450] name failslab, interval 1, probability 0, space 0, times 0
[  294.737174][T13450] CPU: 1 UID: 0 PID: 13450 Comm: syz.4.3048 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  294.737264][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.737276][T13450] Call Trace:
[  294.737313][T13450]  <TASK>
[  294.737322][T13450]  __dump_stack+0x1d/0x30
[  294.737351][T13450]  dump_stack_lvl+0xe8/0x140
[  294.737371][T13450]  dump_stack+0x15/0x1b
[  294.737395][T13450]  should_fail_ex+0x265/0x280
[  294.737416][T13450]  should_failslab+0x8c/0xb0
[  294.737514][T13450]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  294.737601][T13450]  ? ethnl_default_set_doit+0x3a0/0x6c0
[  294.737633][T13450]  kmemdup_noprof+0x2b/0x70
[  294.737660][T13450]  ethnl_default_set_doit+0x3a0/0x6c0
[  294.737683][T13450]  ? genl_family_rcv_msg_attrs_parse+0x184/0x190
[  294.737730][T13450]  genl_family_rcv_msg_doit+0x143/0x1b0
[  294.737763][T13450]  genl_rcv_msg+0x422/0x460
[  294.737856][T13450]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  294.737881][T13450]  netlink_rcv_skb+0x120/0x220
[  294.737964][T13450]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.737995][T13450]  genl_rcv+0x28/0x40
[  294.738097][T13450]  netlink_unicast+0x5c0/0x690
[  294.738129][T13450]  netlink_sendmsg+0x58b/0x6b0
[  294.738194][T13450]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.738214][T13450]  __sock_sendmsg+0x142/0x180
[  294.738243][T13450]  ____sys_sendmsg+0x31e/0x4e0
[  294.738345][T13450]  ___sys_sendmsg+0x17b/0x1d0
[  294.738386][T13450]  __x64_sys_sendmsg+0xd4/0x160
[  294.738407][T13450]  x64_sys_call+0x191e/0x2ff0
[  294.738425][T13450]  do_syscall_64+0xd2/0x200
[  294.738458][T13450]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  294.738482][T13450]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  294.738507][T13450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.738582][T13450] RIP: 0033:0x7ff3ea91ebe9
[  294.738598][T13450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.738613][T13450] RSP: 002b:00007ff3e9387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.738630][T13450] RAX: ffffffffffffffda RBX: 00007ff3eab45fa0 RCX: 00007ff3ea91ebe9
[  294.738664][T13450] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000a
[  294.738674][T13450] RBP: 00007ff3e9387090 R08: 0000000000000000 R09: 0000000000000000
[  294.738685][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.738697][T13450] R13: 00007ff3eab46038 R14: 00007ff3eab45fa0 R15: 00007ffd0ab4c4a8
[  294.738717][T13450]  </TASK>
[  295.181860][T13453] loop4: detected capacity change from 0 to 512
[  295.205762][T13453] EXT4-fs: Ignoring removed mblk_io_submit option
[  295.219347][T13453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  295.241146][T13453] EXT4-fs (loop4): 1 truncate cleaned up
[  295.289398][T13446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.312985][T13453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.345966][T13446] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.497511][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.644652][T13472] loop0: detected capacity change from 0 to 4096
[  295.674463][T13472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.683319][T13479] netlink: 'syz.2.3057': attribute type 10 has an invalid length.
[  295.698078][T13479] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  295.736590][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.807486][T13492] loop0: detected capacity change from 0 to 2048
[  295.840952][T13492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.844387][T13473] lo speed is unknown, defaulting to 1000
[  295.894793][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.009388][T13505] bridge0: entered promiscuous mode
[  296.014945][T13505] macvtap1: entered allmulticast mode
[  296.020508][T13505] bridge0: entered allmulticast mode
[  296.027332][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.027940][T13505] bridge0: port 3(macvtap1) entered blocking state
[  296.043128][T13505] bridge0: port 3(macvtap1) entered disabled state
[  296.051300][T13505] bridge0: left allmulticast mode
[  296.056436][T13505] bridge0: left promiscuous mode
[  296.077343][T13473] chnl_net:caif_netlink_parms(): no params data found
[  296.097410][T13511] bond1: entered promiscuous mode
[  296.102453][T13511] bond1: entered allmulticast mode
[  296.108552][T13511] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.118892][T13511] bond1 (unregistering): Released all slaves
[  296.182185][T13473] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.189629][T13473] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.197501][T13521] FAULT_INJECTION: forcing a failure.
[  296.197501][T13521] name failslab, interval 1, probability 0, space 0, times 0
[  296.198504][T13473] bridge_slave_0: entered allmulticast mode
[  296.210666][T13521] CPU: 1 UID: 0 PID: 13521 Comm: syz.4.3068 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  296.210691][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  296.210703][T13521] Call Trace:
[  296.210709][T13521]  <TASK>
[  296.210717][T13521]  __dump_stack+0x1d/0x30
[  296.210754][T13521]  dump_stack_lvl+0xe8/0x140
[  296.210774][T13521]  dump_stack+0x15/0x1b
[  296.210791][T13521]  should_fail_ex+0x265/0x280
[  296.210858][T13521]  should_failslab+0x8c/0xb0
[  296.210881][T13521]  __kmalloc_noprof+0xa5/0x3e0
[  296.210969][T13521]  ? kernfs_fop_write_iter+0xe1/0x2d0
[  296.210999][T13521]  kernfs_fop_write_iter+0xe1/0x2d0
[  296.211025][T13521]  ? rw_verify_area+0x8d/0x160
[  296.211057][T13521]  aio_write+0x2e5/0x410
[  296.211089][T13521]  io_submit_one+0xacd/0x11d0
[  296.211120][T13521]  __se_sys_io_submit+0xfb/0x280
[  296.211147][T13521]  __x64_sys_io_submit+0x43/0x50
[  296.211178][T13521]  x64_sys_call+0x2d5d/0x2ff0
[  296.211198][T13521]  do_syscall_64+0xd2/0x200
[  296.211224][T13521]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  296.211246][T13521]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  296.211276][T13521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.211297][T13521] RIP: 0033:0x7ff3ea91ebe9
[  296.211313][T13521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.211330][T13521] RSP: 002b:00007ff3e9387038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  296.211348][T13521] RAX: ffffffffffffffda RBX: 00007ff3eab45fa0 RCX: 00007ff3ea91ebe9
[  296.211381][T13521] RDX: 0000200000000500 RSI: 0000000000000001 RDI: 00007ff3eb680000
[  296.211394][T13521] RBP: 00007ff3e9387090 R08: 0000000000000000 R09: 0000000000000000
[  296.211407][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.211419][T13521] R13: 00007ff3eab46038 R14: 00007ff3eab45fa0 R15: 00007ffd0ab4c4a8
[  296.211439][T13521]  </TASK>
[  296.411271][T13473] bridge_slave_0: entered promiscuous mode
[  296.420060][T13473] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.427180][T13473] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.434876][T13473] bridge_slave_1: entered allmulticast mode
[  296.441720][T13473] bridge_slave_1: entered promiscuous mode
[  296.459878][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.470989][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.498083][T13473] team0: Port device team_slave_0 added
[  296.508266][T13473] team0: Port device team_slave_1 added
[  296.528317][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.535332][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.561780][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.606801][T13535] bond1: entered promiscuous mode
[  296.612125][T13535] bond1: entered allmulticast mode
[  296.617653][T13535] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.627449][T13535] bond1 (unregistering): Released all slaves
[  296.637613][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.644585][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.670889][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.686726][T13541] siw: device registration error -23
[  296.694061][T13541] netlink: 'syz.2.3074': attribute type 10 has an invalid length.
[  296.706621][T13541] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  296.749982][T13473] hsr_slave_0: entered promiscuous mode
[  296.756475][T13473] hsr_slave_1: entered promiscuous mode
[  296.763418][T13473] debugfs: 'hsr0' already exists in 'hsr'
[  296.769235][T13473] Cannot create hsr debugfs directory
[  296.769379][T13547] loop4: detected capacity change from 0 to 2048
[  296.811283][T13547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.864942][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.873247][T13555] FAULT_INJECTION: forcing a failure.
[  296.873247][T13555] name failslab, interval 1, probability 0, space 0, times 0
[  296.887416][T13555] CPU: 0 UID: 0 PID: 13555 Comm: syz.2.3080 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  296.887441][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  296.887457][T13555] Call Trace:
[  296.887464][T13555]  <TASK>
[  296.887471][T13555]  __dump_stack+0x1d/0x30
[  296.887492][T13555]  dump_stack_lvl+0xe8/0x140
[  296.887511][T13555]  dump_stack+0x15/0x1b
[  296.887589][T13555]  should_fail_ex+0x265/0x280
[  296.887609][T13555]  should_failslab+0x8c/0xb0
[  296.887630][T13555]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  296.887735][T13555]  ? ethnl_default_set_doit+0x3a0/0x6c0
[  296.887759][T13555]  kmemdup_noprof+0x2b/0x70
[  296.887781][T13555]  ethnl_default_set_doit+0x3a0/0x6c0
[  296.887881][T13555]  ? genl_family_rcv_msg_attrs_parse+0x184/0x190
[  296.887914][T13555]  genl_family_rcv_msg_doit+0x143/0x1b0
[  296.887948][T13555]  genl_rcv_msg+0x422/0x460
[  296.888046][T13555]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  296.888075][T13555]  netlink_rcv_skb+0x120/0x220
[  296.888091][T13555]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.888124][T13555]  genl_rcv+0x28/0x40
[  296.888184][T13555]  netlink_unicast+0x5c0/0x690
[  296.888214][T13555]  netlink_sendmsg+0x58b/0x6b0
[  296.888240][T13555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.888258][T13555]  __sock_sendmsg+0x142/0x180
[  296.888284][T13555]  ____sys_sendmsg+0x31e/0x4e0
[  296.888307][T13555]  ___sys_sendmsg+0x17b/0x1d0
[  296.888357][T13555]  __x64_sys_sendmsg+0xd4/0x160
[  296.888379][T13555]  x64_sys_call+0x191e/0x2ff0
[  296.888398][T13555]  do_syscall_64+0xd2/0x200
[  296.888456][T13555]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  296.888527][T13555]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  296.888549][T13555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.888567][T13555] RIP: 0033:0x7f93613cebe9
[  296.888581][T13555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.888596][T13555] RSP: 002b:00007f935fe37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.888627][T13555] RAX: ffffffffffffffda RBX: 00007f93615f5fa0 RCX: 00007f93613cebe9
[  296.888638][T13555] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000005
[  296.888648][T13555] RBP: 00007f935fe37090 R08: 0000000000000000 R09: 0000000000000000
[  296.888659][T13555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.888681][T13555] R13: 00007f93615f6038 R14: 00007f93615f5fa0 R15: 00007ffde0ca2fe8
[  296.888699][T13555]  </TASK>
[  297.278580][T13566] team0: Device ipip0 is of different type
[  297.299318][T13571] loop4: detected capacity change from 0 to 2048
[  297.320698][T13571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.342951][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.399323][T13581] siw: device registration error -23
[  297.408334][T13581] netlink: 'syz.1.3090': attribute type 10 has an invalid length.
[  297.418833][T13581] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  297.526218][T13589] __nla_validate_parse: 1 callbacks suppressed
[  297.526230][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3094'.
[  297.543691][T13589] tipc: Started in network mode
[  297.548717][T13589] tipc: Node identity ac141413, cluster identity 4711
[  297.555906][T13589] tipc: New replicast peer: 10.1.1.2
[  297.561431][T13589] tipc: Enabled bearer <udp:syz2>, priority 10
[  297.615224][   T41] bridge_slave_1: left allmulticast mode
[  297.621064][   T41] bridge_slave_1: left promiscuous mode
[  297.627078][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.641837][   T41] bridge_slave_0: left allmulticast mode
[  297.647620][   T41] bridge_slave_0: left promiscuous mode
[  297.653464][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.700457][T13595] netlink: 'syz.1.3097': attribute type 10 has an invalid length.
[  297.747599][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.757574][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.766878][   T41] bond0 (unregistering): Released all slaves
[  297.775361][   T41] bond1 (unregistering): Released all slaves
[  297.783984][   T41] bond2 (unregistering): Released all slaves
[  297.793085][   T41] bond3 (unregistering): Released all slaves
[  297.801225][   T41] bond4 (unregistering): Released all slaves
[  297.810279][   T41] bond5 (unregistering): Released all slaves
[  297.818955][   T41] bond6 (unregistering): Released all slaves
[  297.828960][   T41] bond7 (unregistering): Released all slaves
[  297.839637][T13595] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  297.899440][T13604] netlink: 'syz.1.3100': attribute type 10 has an invalid length.
[  297.927493][   T41] hsr_slave_0: left promiscuous mode
[  297.933967][   T41] hsr_slave_1: left promiscuous mode
[  297.995360][   T41] team0 (unregistering): Port device team_slave_1 removed
[  298.016365][   T41] team0 (unregistering): Port device team_slave_0 removed
[  298.061338][   T41] team0 (unregistering): Port device dummy0 removed
[  298.078707][T13604] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  298.110873][T13622] lo speed is unknown, defaulting to 1000
[  298.116970][T13622] lo speed is unknown, defaulting to 1000
[  298.123071][T13622] lo speed is unknown, defaulting to 1000
[  298.152950][T13622] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  298.165277][T13623] netlink: 'syz.2.3102': attribute type 10 has an invalid length.
[  298.175593][T13622] lo speed is unknown, defaulting to 1000
[  298.182706][T13623] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  298.217730][T13632] loop0: detected capacity change from 0 to 2048
[  298.242037][T13622] lo speed is unknown, defaulting to 1000
[  298.242455][T13622] lo speed is unknown, defaulting to 1000
[  298.242799][T13622] lo speed is unknown, defaulting to 1000
[  298.243137][T13622] lo speed is unknown, defaulting to 1000
[  298.243835][T13632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.290428][T13473] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  298.292554][T13473] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  298.294845][T13473] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  298.297910][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.341549][T13473] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  298.418747][T13653] bond1: entered promiscuous mode
[  298.423879][T13653] bond1: entered allmulticast mode
[  298.429708][T13653] 8021q: adding VLAN 0 to HW filter on device bond1
[  298.442437][T13653] bond1 (unregistering): Released all slaves
[  298.543946][T13670] loop2: detected capacity change from 0 to 2048
[  298.562561][   T29] kauditd_printk_skb: 96 callbacks suppressed
[  298.562575][   T29] audit: type=1400 audit(1756202204.758:7624): avc:  denied  { accept } for  pid=13649 comm="syz.0.3108" lport=58316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  298.614766][T13670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.630523][   T29] audit: type=1400 audit(1756202204.788:7625): avc:  denied  { create } for  pid=13649 comm="syz.0.3108" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  298.652201][   T29] audit: type=1400 audit(1756202204.828:7626): avc:  denied  { read write execute } for  pid=13649 comm="syz.0.3108" name="file0" dev="tmpfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  298.676780][    T9] tipc: Node number set to 2886997011
[  298.727015][T12797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.742993][T13473] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.767818][T13473] 8021q: adding VLAN 0 to HW filter on device team0
[  298.781996][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'.
[  298.790158][T10887] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.798170][T10887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.824681][   T29] audit: type=1400 audit(1756202205.018:7627): avc:  denied  { firmware_load } for  pid=13679 comm="syz.4.3114" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  298.854279][T13473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  298.865380][T13473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  298.886901][T10887] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.894029][T10887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.894169][T13686] loop2: detected capacity change from 0 to 4096
[  298.902449][   T29] audit: type=1400 audit(1756202205.038:7628): avc:  denied  { read } for  pid=13685 comm="syz.2.3117" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.931488][   T29] audit: type=1400 audit(1756202205.038:7629): avc:  denied  { open } for  pid=13685 comm="syz.2.3117" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.956224][   T29] audit: type=1400 audit(1756202205.038:7630): avc:  denied  { ioctl } for  pid=13685 comm="syz.2.3117" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.986862][T13686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.053808][T13693] siw: device registration error -23
[  299.071294][T13693] netlink: 'syz.1.3119': attribute type 10 has an invalid length.
[  299.088216][T13693] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  299.122664][T12797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.146989][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.159619][   T29] audit: type=1400 audit(1756202205.348:7631): avc:  denied  { read write } for  pid=13700 comm="syz.2.3121" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  299.184421][   T29] audit: type=1400 audit(1756202205.348:7632): avc:  denied  { open } for  pid=13700 comm="syz.2.3121" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  299.246062][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  299.269300][T13709] loop4: detected capacity change from 0 to 512
[  299.278695][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  299.282359][   T29] audit: type=1400 audit(1756202205.468:7633): avc:  denied  { unlink } for  pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  299.329627][T13711] loop0: detected capacity change from 0 to 2048
[  299.363428][T13473] veth0_vlan: entered promiscuous mode
[  299.372557][T13709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  299.375656][T13473] veth1_vlan: entered promiscuous mode
[  299.395216][T13709] System zones: 0-2, 18-18, 34-34
[  299.401816][T13473] veth0_macvtap: entered promiscuous mode
[  299.408725][T13709] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3123: bg 0: block 248: padding at end of block bitmap is not set
[  299.419273][T13473] veth1_macvtap: entered promiscuous mode
[  299.427049][ T3155] Process accounting resumed
[  299.435510][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.443994][T13709] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3123: Failed to acquire dquot type 1
[  299.462794][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.478525][T13709] EXT4-fs (loop4): 1 truncate cleaned up
[  299.495161][T13709] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.507836][T13724] loop0: detected capacity change from 0 to 512
[  299.518583][T11089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.539359][T13724] EXT4-fs: Ignoring removed mblk_io_submit option
[  299.553918][T13724] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  299.564841][   T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.579952][   T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.592543][   T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.596567][T13724] EXT4-fs (loop0): 1 truncate cleaned up
[  300.043143][T13760] loop3: detected capacity change from 0 to 2048
[  300.119290][ T3155] Process accounting resumed
[  300.127046][T13767] loop4: detected capacity change from 0 to 2048
[  300.142969][T13770] loop3: detected capacity change from 0 to 512
[  300.171642][T13770] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.207322][T13770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  300.246173][T13770] EXT4-fs (loop3): 1 truncate cleaned up
[  300.331184][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'.
[  300.497566][T13793] loop4: detected capacity change from 0 to 512
[  300.512004][T13793] journal_path: Non-blockdev passed as './bus'
[  300.516835][T13791] netlink: 'syz.2.3152': attribute type 10 has an invalid length.
[  300.518448][T13793] EXT4-fs: error: could not find journal device path
[  300.533504][T13791] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  300.693772][ T3155] Process accounting resumed
[  300.752393][T13807] loop4: detected capacity change from 0 to 512
[  300.764014][T13808] netlink: 'syz.0.3160': attribute type 1 has an invalid length.
[  300.783467][T13807] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.811385][T13808] 8021q: adding VLAN 0 to HW filter on device bond14
[  300.819069][T13807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  300.820088][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'.
[  300.848368][T13807] EXT4-fs (loop4): 1 truncate cleaned up
[  300.974267][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'.
[  301.322330][T13827] FAULT_INJECTION: forcing a failure.
[  301.322330][T13827] name failslab, interval 1, probability 0, space 0, times 0
[  301.335173][T13827] CPU: 1 UID: 0 PID: 13827 Comm: syz.3.3165 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  301.335311][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  301.335323][T13827] Call Trace:
[  301.335377][T13827]  <TASK>
[  301.335440][T13827]  __dump_stack+0x1d/0x30
[  301.335463][T13827]  dump_stack_lvl+0xe8/0x140
[  301.335483][T13827]  dump_stack+0x15/0x1b
[  301.335498][T13827]  should_fail_ex+0x265/0x280
[  301.335520][T13827]  should_failslab+0x8c/0xb0
[  301.335545][T13827]  kmem_cache_alloc_node_noprof+0x57/0x320
[  301.335600][T13827]  ? __alloc_skb+0x101/0x320
[  301.335615][T13827]  ? __account_obj_stock+0x211/0x350
[  301.335636][T13827]  __alloc_skb+0x101/0x320
[  301.335654][T13827]  _sctp_make_chunk+0x59/0x210
[  301.335679][T13827]  sctp_make_abort_user+0x4c/0x3a0
[  301.335794][T13827]  sctp_sendmsg_check_sflags+0x17e/0x1e0
[  301.335823][T13827]  sctp_sendmsg+0x10bb/0x18d0
[  301.335853][T13827]  ? __pfx_sctp_sendmsg+0x10/0x10
[  301.335880][T13827]  inet_sendmsg+0xc5/0xd0
[  301.335947][T13827]  __sock_sendmsg+0x102/0x180
[  301.335976][T13827]  ____sys_sendmsg+0x31e/0x4e0
[  301.336003][T13827]  ___sys_sendmsg+0x17b/0x1d0
[  301.336153][T13827]  __x64_sys_sendmsg+0xd4/0x160
[  301.336253][T13827]  x64_sys_call+0x191e/0x2ff0
[  301.336304][T13827]  do_syscall_64+0xd2/0x200
[  301.336366][T13827]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  301.336403][T13827]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  301.336445][T13827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.336540][T13827] RIP: 0033:0x7fc6a872ebe9
[  301.336554][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.336570][T13827] RSP: 002b:00007fc6a7176038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.336589][T13827] RAX: ffffffffffffffda RBX: 00007fc6a8956090 RCX: 00007fc6a872ebe9
[  301.336600][T13827] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  301.336612][T13827] RBP: 00007fc6a7176090 R08: 0000000000000000 R09: 0000000000000000
[  301.336646][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.336660][T13827] R13: 00007fc6a8956128 R14: 00007fc6a8956090 R15: 00007ffd032671f8
[  301.336678][T13827]  </TASK>
[  301.653312][T13829] loop0: detected capacity change from 0 to 512
[  301.694413][T13829] journal_path: Non-blockdev passed as './bus'
[  301.700953][T13829] EXT4-fs: error: could not find journal device path
[  302.081644][T13840] lo speed is unknown, defaulting to 1000
[  302.111564][T13842] loop0: detected capacity change from 0 to 2048
[  302.155562][T13844] loop3: detected capacity change from 0 to 164
[  302.196574][T13844] rock: directory entry would overflow storage
[  302.202891][T13844] rock: sig=0x66, size=4, remaining=3
[  302.319239][T13858] netlink: 'syz.0.3176': attribute type 1 has an invalid length.
[  302.339302][T13859] netlink: 'syz.3.3177': attribute type 1 has an invalid length.
[  302.385041][T13858] 8021q: adding VLAN 0 to HW filter on device bond15
[  302.432116][T13859] 8021q: adding VLAN 0 to HW filter on device bond1
[  302.621866][T13878] loop4: detected capacity change from 0 to 512
[  302.647340][T13878] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  302.660280][T13878] System zones: 0-2, 18-18, 34-34
[  302.667744][T13878] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3183: bg 0: block 248: padding at end of block bitmap is not set
[  302.688421][T13878] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3183: Failed to acquire dquot type 1
[  302.689032][T13878] EXT4-fs (loop4): 1 truncate cleaned up
[  302.689552][T13878] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.744180][T13888] netlink: 'syz.3.3185': attribute type 10 has an invalid length.
[  302.747936][T13888] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  302.857012][    T9] Process accounting resumed
[  303.208772][T13921] loop0: detected capacity change from 0 to 2048
[  303.340752][T13929] bond16: entered promiscuous mode
[  303.346091][T13929] bond16: entered allmulticast mode
[  303.366889][T13929] 8021q: adding VLAN 0 to HW filter on device bond16
[  303.380254][T13929] bond16 (unregistering): Released all slaves
[  303.703889][   T29] kauditd_printk_skb: 160 callbacks suppressed
[  303.703903][   T29] audit: type=1400 audit(1756202209.898:7790): avc:  denied  { create } for  pid=13940 comm="syz.0.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  303.790297][T13946] loop4: detected capacity change from 0 to 512
[  303.811853][T13949] netlink: 'syz.2.3212': attribute type 1 has an invalid length.
[  303.821848][T13941] loop0: detected capacity change from 0 to 8192
[  303.845257][T13949] 8021q: adding VLAN 0 to HW filter on device bond1
[  303.854007][T13946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  303.865204][T13946] System zones: 0-2, 18-18, 34-34
[  303.879475][T13946] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3211: bg 0: block 248: padding at end of block bitmap is not set
[  303.928136][   T29] audit: type=1400 audit(1756202210.108:7791): avc:  denied  { bind } for  pid=13940 comm="syz.0.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  303.948099][   T29] audit: type=1400 audit(1756202210.108:7792): avc:  denied  { write } for  pid=13940 comm="syz.0.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  303.968166][   T29] audit: type=1400 audit(1756202210.108:7793): avc:  denied  { setopt } for  pid=13940 comm="syz.0.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  303.997512][T13941] netlink: 8524 bytes leftover after parsing attributes in process `syz.0.3209'.
[  304.014417][T13946] Quota error (device loop4): write_blk: dquota write failed
[  304.022289][T13946] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  304.033245][T13946] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3211: Failed to acquire dquot type 1
[  304.057126][T13946] EXT4-fs (loop4): 1 truncate cleaned up
[  304.063443][T13963] bond1: entered promiscuous mode
[  304.068655][T13963] bond1: entered allmulticast mode
[  304.074728][T13946] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.086825][T13963] 8021q: adding VLAN 0 to HW filter on device bond1
[  304.104562][T13963] bond1 (unregistering): Released all slaves
[  304.111186][T13968] loop3: detected capacity change from 0 to 512
[  304.127807][T13968] journal_path: Non-blockdev passed as './bus'
[  304.134033][T13968] EXT4-fs: error: could not find journal device path
[  304.162078][ T1033] Process accounting resumed
[  304.170883][    T9] Process accounting resumed
[  304.182567][T13970] loop0: detected capacity change from 0 to 512
[  304.182699][T13972] loop4: detected capacity change from 0 to 512
[  304.204091][T13972] EXT4-fs: Ignoring removed mblk_io_submit option
[  304.207870][T13970] EXT4-fs: Ignoring removed mblk_io_submit option
[  304.220344][T13970] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  304.232177][T13972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  304.248214][T13970] EXT4-fs (loop0): 1 truncate cleaned up
[  304.262879][T13972] EXT4-fs (loop4): 1 truncate cleaned up
[  304.344179][T13983] siw: device registration error -23
[  304.359288][T13983] netlink: 'syz.3.3224': attribute type 10 has an invalid length.
[  304.373913][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'.
[  304.391171][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'.
[  304.400450][T13989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.408280][T13989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.423156][T13989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.430994][T13989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.457290][T13983] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  304.593146][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'.
[  304.733863][   T29] audit: type=1326 audit(1756202210.928:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  304.790813][   T29] audit: type=1326 audit(1756202210.928:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  304.814659][   T29] audit: type=1326 audit(1756202210.928:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  304.836879][T14006] bond2: entered promiscuous mode
[  304.839074][   T29] audit: type=1326 audit(1756202210.958:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  304.844084][T14006] bond2: entered allmulticast mode
[  304.873903][T14006] 8021q: adding VLAN 0 to HW filter on device bond2
[  304.890967][T14009] loop3: detected capacity change from 0 to 512
[  304.897988][T14009] journal_path: Non-blockdev passed as './bus'
[  304.904195][T14009] EXT4-fs: error: could not find journal device path
[  304.919102][T14006] bond2 (unregistering): Released all slaves
[  305.079854][T14017] netlink: 'syz.2.3237': attribute type 10 has an invalid length.
[  305.098676][T14026] netlink: 'syz.4.3239': attribute type 1 has an invalid length.
[  305.132581][T14028] loop3: detected capacity change from 0 to 512
[  305.132934][T14028] journal_path: Non-blockdev passed as './bus'
[  305.132951][T14028] EXT4-fs: error: could not find journal device path
[  305.135426][T14026] 8021q: adding VLAN 0 to HW filter on device bond1
[  305.141138][T14017] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  305.185637][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3241'.
[  305.212357][T14024] tipc: Started in network mode
[  305.217534][T14024] tipc: Node identity ac141413, cluster identity 4711
[  305.238473][T14024] tipc: New replicast peer: 10.1.1.2
[  305.243950][T14024] tipc: Enabled bearer <udp:syz2>, priority 10
[  305.325820][T14044] bond2: entered promiscuous mode
[  305.330985][T14044] bond2: entered allmulticast mode
[  305.344427][T14042] loop3: detected capacity change from 0 to 128
[  305.352148][T14044] 8021q: adding VLAN 0 to HW filter on device bond2
[  305.365561][T14044] bond2 (unregistering): Released all slaves
[  305.376244][ T3155] Process accounting resumed
[  305.381964][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'.
[  305.384440][T14042] syz.3.3246: attempt to access beyond end of device
[  305.384440][T14042] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  305.401111][T14051] loop0: detected capacity change from 0 to 512
[  305.412125][T14042] syz.3.3246: attempt to access beyond end of device
[  305.412125][T14042] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128
[  305.426126][T14042] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  305.426489][T14051] EXT4-fs: Ignoring removed mblk_io_submit option
[  305.444088][T14051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  305.457643][T14051] EXT4-fs (loop0): 1 truncate cleaned up
[  305.459497][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'.
[  305.539641][ T1033] Process accounting resumed
[  305.730993][T14071] netlink: 'syz.3.3256': attribute type 10 has an invalid length.
[  305.745398][T14071] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  305.938284][T14077] siw: device registration error -23
[  305.980363][T14077] netlink: 'syz.3.3258': attribute type 10 has an invalid length.
[  305.989689][T14077] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  305.990613][T14079] loop4: detected capacity change from 0 to 512
[  306.031751][T14079] journal_path: Non-blockdev passed as './bus'
[  306.038083][T14079] EXT4-fs: error: could not find journal device path
[  306.109134][T14083] SELinux:  policydb string S does not match my string SE Linux
[  306.124652][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'.
[  306.138392][T14083] SELinux: failed to load policy
[  306.150552][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'.
[  306.160964][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.168589][T14085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.176831][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.184308][T14085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.247623][T14086] lo speed is unknown, defaulting to 1000
[  306.343536][T14094] loop0: detected capacity change from 0 to 512
[  306.365176][ T3155] tipc: Node number set to 2886997011
[  306.387539][T14094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  306.398790][T14094] System zones: 0-2, 18-18, 34-34
[  306.409280][T14094] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3266: bg 0: block 248: padding at end of block bitmap is not set
[  306.435602][T14094] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3266: Failed to acquire dquot type 1
[  306.450923][T14094] EXT4-fs (loop0): 1 truncate cleaned up
[  306.457625][T14094] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.471874][T14106] netlink: 'syz.1.3269': attribute type 1 has an invalid length.
[  306.551753][T14106] 8021q: adding VLAN 0 to HW filter on device bond1
[  306.590953][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'.
[  306.613694][T14108] tipc: Started in network mode
[  306.618669][T14108] tipc: Node identity ac141413, cluster identity 4711
[  306.626323][T14108] tipc: New replicast peer: 10.1.1.2
[  306.631733][T14108] tipc: Enabled bearer <udp:syz2>, priority 10
[  306.699731][ T3155] Process accounting resumed
[  306.700289][T14115] lo speed is unknown, defaulting to 1000
[  306.773912][T14115] chnl_net:caif_netlink_parms(): no params data found
[  306.797897][  T371] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.904346][  T371] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.930263][T14115] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.937924][T14115] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.974124][T14115] bridge_slave_0: entered allmulticast mode
[  307.000714][T14115] bridge_slave_0: entered promiscuous mode
[  307.036234][  T371] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.069262][T14115] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.076474][T14115] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.086604][T14115] bridge_slave_1: entered allmulticast mode
[  307.087097][ T3155] Process accounting resumed
[  307.093153][T14115] bridge_slave_1: entered promiscuous mode
[  307.108287][T14140] loop4: detected capacity change from 0 to 512
[  307.108766][  T371] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.125313][T14140] EXT4-fs: Ignoring removed mblk_io_submit option
[  307.135694][T14140] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  307.159254][T14140] EXT4-fs (loop4): 1 truncate cleaned up
[  307.185530][T14115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.233692][T14115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.244795][T14144] netlink: 'syz.3.3278': attribute type 10 has an invalid length.
[  307.266948][T14144] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  307.281103][T14115] team0: Port device team_slave_0 added
[  307.297751][T14115] team0: Port device team_slave_1 added
[  307.304806][  T371] bridge_slave_1: left allmulticast mode
[  307.310630][  T371] bridge_slave_1: left promiscuous mode
[  307.310788][  T371] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.318293][  T371] bridge_slave_0: left allmulticast mode
[  307.318314][  T371] bridge_slave_0: left promiscuous mode
[  307.318499][  T371] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.567905][  T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.616893][  T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.638425][  T371] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  307.664474][  T371] bond0 (unregistering): Released all slaves
[  307.679438][  T371] bond1 (unregistering): Released all slaves
[  307.692351][T14177] SELinux:  policydb string S does not match my string SE Linux
[  307.701308][T14177] SELinux: failed to load policy
[  307.701491][  T371] bond2 (unregistering): Released all slaves
[  307.716742][  T371] bond3 (unregistering): Released all slaves
[  307.729963][  T371] bond4 (unregistering): Released all slaves
[  307.739495][  T371] bond5 (unregistering): Released all slaves
[  307.745131][ T1033] tipc: Node number set to 2886997011
[  307.749277][  T371] bond6 (unregistering): Released all slaves
[  307.763545][  T371] bond7 (unregistering): Released all slaves
[  307.773877][  T371] bond8 (unregistering): Released all slaves
[  307.783683][  T371] bond9 (unregistering): Released all slaves
[  307.793743][  T371] bond10 (unregistering): Released all slaves
[  307.803138][  T371] bond11 (unregistering): Released all slaves
[  307.812702][  T371] bond12 (unregistering): Released all slaves
[  307.824726][  T371] bond13 (unregistering): Released all slaves
[  307.834018][  T371] bond14 (unregistering): Released all slaves
[  307.843379][  T371] bond15 (unregistering): Released all slaves
[  307.878783][T14115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.886159][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.912510][T14115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.926356][T14184] netlink: 'syz.1.3288': attribute type 1 has an invalid length.
[  307.973698][T14184] 8021q: adding VLAN 0 to HW filter on device bond2
[  307.982136][T14115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.989253][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.015569][T14115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.029076][  T371] tipc: Disabling bearer <udp:syz2>
[  308.034871][  T371] tipc: Left network mode
[  308.042677][T14181] lo speed is unknown, defaulting to 1000
[  308.058212][T14115] hsr_slave_0: entered promiscuous mode
[  308.064645][T14115] hsr_slave_1: entered promiscuous mode
[  308.070902][T14115] debugfs: 'hsr0' already exists in 'hsr'
[  308.076695][T14115] Cannot create hsr debugfs directory
[  308.102261][  T371] hsr_slave_0: left promiscuous mode
[  308.109061][  T371] veth1_macvtap: left promiscuous mode
[  308.114601][  T371] veth0_macvtap: left promiscuous mode
[  308.120672][  T371] veth1_vlan: left promiscuous mode
[  308.126438][  T371] veth0_vlan: left promiscuous mode
[  308.179682][  T371] team0 (unregistering): Port device team_slave_1 removed
[  308.189530][  T371] team0 (unregistering): Port device team_slave_0 removed
[  308.219068][T14194] tipc: Started in network mode
[  308.224127][T14194] tipc: Node identity ac141413, cluster identity 4711
[  308.232621][T14194] tipc: New replicast peer: 10.1.1.2
[  308.238042][T14194] tipc: Enabled bearer <udp:syz2>, priority 10
[  308.326200][T14203] loop3: detected capacity change from 0 to 512
[  308.346545][T14203] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  308.354707][T14203] System zones: 0-2, 18-18, 34-34
[  308.364467][T14203] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3292: bg 0: block 248: padding at end of block bitmap is not set
[  308.380487][T14203] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3292: Failed to acquire dquot type 1
[  308.393281][T14203] EXT4-fs (loop3): 1 truncate cleaned up
[  308.400460][T14203] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.563023][T14238] netlink: 'syz.2.3298': attribute type 10 has an invalid length.
[  308.603096][T14238] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  308.666893][T14115] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  308.692325][T14115] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  308.709579][T14115] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  308.729497][T14115] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  308.821841][T14272] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  308.859622][T14115] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.867987][   T29] kauditd_printk_skb: 80 callbacks suppressed
[  308.868000][   T29] audit: type=1400 audit(1756202215.068:7874): avc:  denied  { bind } for  pid=14284 comm="syz.2.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  308.870691][T14285] 9pnet: p9_errstr2errno: server reported unknown error 
[  308.903683][   T29] audit: type=1326 audit(1756202215.108:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  308.928222][T14283] loop4: detected capacity change from 0 to 512
[  308.936174][T14115] 8021q: adding VLAN 0 to HW filter on device team0
[  308.937866][   T29] audit: type=1326 audit(1756202215.108:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  308.966692][   T29] audit: type=1326 audit(1756202215.108:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  308.990713][   T29] audit: type=1326 audit(1756202215.108:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  309.002044][T14115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.014386][   T29] audit: type=1326 audit(1756202215.108:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  309.024849][T14115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.048476][   T29] audit: type=1326 audit(1756202215.108:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  309.082894][   T29] audit: type=1326 audit(1756202215.108:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  309.106590][   T29] audit: type=1326 audit(1756202215.108:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  309.108201][T11089] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.130132][   T29] audit: type=1326 audit(1756202215.108:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff3ea91ebe9 code=0x7ffc0000
[  309.161237][T11089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.182149][T11089] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.189436][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.196306][T14283] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  309.205440][T14283] EXT4-fs (loop4): orphan cleanup on readonly fs
[  309.215688][T14283] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3305: corrupted inode contents
[  309.228795][T14283] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.3305: mark_inode_dirty error
[  309.245896][T14283] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3305: corrupted inode contents
[  309.268308][T14115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.295389][T14283] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3305: mark_inode_dirty error
[  309.306839][ T3608] tipc: Node number set to 2886997011
[  309.332947][T14283] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3305: corrupted inode contents
[  309.346499][T14283] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  309.356163][T14283] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3305: corrupted inode contents
[  309.376584][T14283] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.3305: mark_inode_dirty error
[  309.416388][T14115] veth0_vlan: entered promiscuous mode
[  309.427726][T14317] loop3: detected capacity change from 0 to 512
[  309.436172][T14283] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  309.443901][T14115] veth1_vlan: entered promiscuous mode
[  309.446149][T14317] EXT4-fs: Ignoring removed mblk_io_submit option
[  309.458872][T14283] EXT4-fs (loop4): 1 truncate cleaned up
[  309.466152][   T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1
[  309.472122][T14115] veth0_macvtap: entered promiscuous mode
[  309.484846][T14317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  309.507031][T14115] veth1_macvtap: entered promiscuous mode
[  309.517306][T14317] EXT4-fs (loop3): 1 truncate cleaned up
[  309.523859][T14320] FAULT_INJECTION: forcing a failure.
[  309.523859][T14320] name failslab, interval 1, probability 0, space 0, times 0
[  309.524650][T14115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.536791][T14320] CPU: 1 UID: 0 PID: 14320 Comm: syz.1.3311 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  309.536816][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  309.536828][T14320] Call Trace:
[  309.536858][T14320]  <TASK>
[  309.536866][T14320]  __dump_stack+0x1d/0x30
[  309.536889][T14320]  dump_stack_lvl+0xe8/0x140
[  309.536904][T14320]  dump_stack+0x15/0x1b
[  309.536920][T14320]  should_fail_ex+0x265/0x280
[  309.536943][T14320]  should_failslab+0x8c/0xb0
[  309.536965][T14320]  kmem_cache_alloc_noprof+0x50/0x310
[  309.537047][T14320]  ? security_inode_alloc+0x37/0x100
[  309.537075][T14320]  security_inode_alloc+0x37/0x100
[  309.537099][T14320]  inode_init_always_gfp+0x4b7/0x500
[  309.537142][T14320]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  309.537168][T14320]  alloc_inode+0x58/0x170
[  309.537188][T14320]  new_inode+0x1d/0xe0
[  309.537275][T14320]  hugetlbfs_get_inode+0x7b/0x370
[  309.537299][T14320]  hugetlb_file_setup+0x192/0x3d0
[  309.537354][T14320]  ksys_mmap_pgoff+0x157/0x310
[  309.537446][T14320]  x64_sys_call+0x14a3/0x2ff0
[  309.537479][T14320]  do_syscall_64+0xd2/0x200
[  309.537563][T14320]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  309.537642][T14320]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  309.537726][T14320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.537747][T14320] RIP: 0033:0x7f732b7febe9
[  309.537763][T14320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.537783][T14320] RSP: 002b:00007f732a267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  309.537802][T14320] RAX: ffffffffffffffda RBX: 00007f732ba25fa0 RCX: 00007f732b7febe9
[  309.537815][T14320] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000
[  309.537827][T14320] RBP: 00007f732a267090 R08: ffffffffffffffff R09: 0000000000000000
[  309.537839][T14320] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001
[  309.537886][T14320] R13: 00007f732ba26038 R14: 00007f732ba25fa0 R15: 00007ffe105ae368
[  309.537904][T14320]  </TASK>
[  309.591041][T14322] netlink: 'syz.1.3312': attribute type 1 has an invalid length.
[  309.599927][T14115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.768524][T14325] __nla_validate_parse: 1 callbacks suppressed
[  309.768539][T14325] netlink: 8524 bytes leftover after parsing attributes in process `syz.2.3309'.
[  309.791530][T14322] 8021q: adding VLAN 0 to HW filter on device bond3
[  309.806192][   T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.821317][   T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.846365][   T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.858695][T11089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.984120][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'.
[  309.986367][ T3608] Process accounting resumed
[  310.003595][T14342] loop0: detected capacity change from 0 to 512
[  310.013483][T14342] EXT4-fs: Ignoring removed mblk_io_submit option
[  310.036656][T14342] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  310.059679][T14342] EXT4-fs (loop0): 1 truncate cleaned up
[  310.148774][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'.
[  310.217286][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'.
[  310.230796][T14350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.238344][T14350] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.246931][T14350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.254449][T14350] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.407299][T14358] bond2: entered promiscuous mode
[  310.412946][T14358] bond2: entered allmulticast mode
[  310.418900][T14358] 8021q: adding VLAN 0 to HW filter on device bond2
[  310.464797][T14358] bond2 (unregistering): Released all slaves
[  310.610878][T14371] netlink: 'syz.1.3329': attribute type 10 has an invalid length.
[  310.636439][T14371] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  310.664687][T14383] netlink: 'syz.3.3335': attribute type 1 has an invalid length.
[  310.683166][T14383] 8021q: adding VLAN 0 to HW filter on device bond2
[  310.838299][T14115] EXT4-fs unmount: 39 callbacks suppressed
[  310.838315][T14115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.873251][ T3809] Process accounting resumed
[  310.880788][T14401] loop0: detected capacity change from 0 to 512
[  310.887651][T14401] EXT4-fs: Ignoring removed mblk_io_submit option
[  310.894576][T14401] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  310.906361][T14401] EXT4-fs (loop0): 1 truncate cleaned up
[  310.913223][T14401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.530018][T14412] siw: device registration error -23
[  311.545314][T14412] netlink: 'syz.3.3342': attribute type 10 has an invalid length.
[  311.559296][T14412] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  311.740150][T14419] netlink: 'syz.4.3347': attribute type 10 has an invalid length.
[  311.752417][T14421] lo speed is unknown, defaulting to 1000
[  311.758452][T14419] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  311.919789][   T36] Process accounting resumed
[  311.933036][T14431] loop4: detected capacity change from 0 to 512
[  311.958037][T14431] EXT4-fs: Ignoring removed mblk_io_submit option
[  311.971638][T14115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.982014][T14439] FAULT_INJECTION: forcing a failure.
[  311.982014][T14439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  311.995443][T14439] CPU: 1 UID: 0 PID: 14439 Comm: syz.3.3355 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  311.995551][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  311.995562][T14439] Call Trace:
[  311.995570][T14439]  <TASK>
[  311.995578][T14439]  __dump_stack+0x1d/0x30
[  311.995600][T14439]  dump_stack_lvl+0xe8/0x140
[  311.995615][T14439]  dump_stack+0x15/0x1b
[  311.995627][T14439]  should_fail_ex+0x265/0x280
[  311.995738][T14439]  should_fail+0xb/0x20
[  311.995781][T14439]  should_fail_usercopy+0x1a/0x20
[  311.995800][T14439]  _copy_from_user+0x1c/0xb0
[  311.995824][T14439]  ___sys_recvmsg+0xaa/0x370
[  311.995846][T14439]  ? 0xffffffff81000000
[  311.995917][T14439]  ? __rcu_read_unlock+0x4f/0x70
[  311.995941][T14439]  __x64_sys_recvmsg+0xd1/0x160
[  311.996004][T14439]  x64_sys_call+0x2b42/0x2ff0
[  311.996023][T14439]  do_syscall_64+0xd2/0x200
[  311.996153][T14439]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  311.996178][T14439]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  311.996219][T14439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.996242][T14439] RIP: 0033:0x7fc6a872ebe9
[  311.996258][T14439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.996290][T14439] RSP: 002b:00007fc6a7197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  311.996355][T14439] RAX: ffffffffffffffda RBX: 00007fc6a8955fa0 RCX: 00007fc6a872ebe9
[  311.996368][T14439] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  311.996382][T14439] RBP: 00007fc6a7197090 R08: 0000000000000000 R09: 0000000000000000
[  311.996395][T14439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.996405][T14439] R13: 00007fc6a8956038 R14: 00007fc6a8955fa0 R15: 00007ffd032671f8
[  311.996421][T14439]  </TASK>
[  312.002599][T14431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  312.069472][T14441] netlink: 'syz.2.3357': attribute type 1 has an invalid length.
[  312.101453][T14431] EXT4-fs (loop4): 1 truncate cleaned up
[  312.210780][T14431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.236230][T14441] 8021q: adding VLAN 0 to HW filter on device bond2
[  312.300072][T14454] loop3: detected capacity change from 0 to 512
[  312.307094][T14454] EXT4-fs: Ignoring removed mblk_io_submit option
[  312.314659][T14454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  312.327060][T14454] EXT4-fs (loop3): 1 truncate cleaned up
[  312.333172][T14454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.400787][T14457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3360'.
[  312.410314][T14457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3360'.
[  312.419827][T14457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3360'.
[  312.429352][T14457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3360'.
[  312.445028][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3360'.
[  312.478278][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'.
[  312.562716][T14464] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  312.769004][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.837564][T14485] netlink: 'syz.4.3370': attribute type 1 has an invalid length.
[  312.851970][T14484] bond4: entered promiscuous mode
[  312.857177][T14484] bond4: entered allmulticast mode
[  312.867418][T14484] 8021q: adding VLAN 0 to HW filter on device bond4
[  312.879155][T14484] bond4 (unregistering): Released all slaves
[  312.929702][T14485] 8021q: adding VLAN 0 to HW filter on device bond2
[  312.960900][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.968734][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.978889][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.986458][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.166379][T13473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.240835][T14509] loop4: detected capacity change from 0 to 4096
[  313.251846][T14513] lo speed is unknown, defaulting to 1000
[  313.280714][T14509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.333122][T14522] SELinux:  policydb string S does not match my string SE Linux
[  313.342009][T14522] SELinux: failed to load policy
[  313.367571][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.374475][T14521] loop3: detected capacity change from 0 to 512
[  313.392424][T14521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  313.409612][T14521] EXT4-fs (loop3): 1 truncate cleaned up
[  313.426076][T14521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.431650][T14528] lo speed is unknown, defaulting to 1000
[  313.500408][T13473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.600732][T14548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.608515][T14548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.617236][T14548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.624782][T14548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.758249][T14559] sch_fq: defrate 4294967295 ignored.
[  314.147742][T14586] pim6reg: entered allmulticast mode
[  314.239265][T14592] bond1: entered promiscuous mode
[  314.245239][T14592] bond1: entered allmulticast mode
[  314.266410][T14592] 8021q: adding VLAN 0 to HW filter on device bond1
[  314.282577][T14592] bond1 (unregistering): Released all slaves
[  314.294321][T14586] pim6reg: left allmulticast mode
[  314.306451][   T29] kauditd_printk_skb: 98 callbacks suppressed
[  314.306465][   T29] audit: type=1326 audit(1756202220.508:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732b7febe9 code=0x7ffc0000
[  314.370170][   T29] audit: type=1326 audit(1756202220.538:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f732b7febe9 code=0x7ffc0000
[  314.393981][   T29] audit: type=1326 audit(1756202220.538:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732b7febe9 code=0x7ffc0000
[  314.417887][   T29] audit: type=1326 audit(1756202220.538:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732b7febe9 code=0x7ffc0000
[  314.441915][   T29] audit: type=1326 audit(1756202220.538:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.1.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f732b7febe9 code=0x7ffc0000
[  314.574221][T14615] SELinux:  policydb string S does not match my string SE Linux
[  314.590262][T14615] SELinux: failed to load policy
[  314.594521][T14611] loop0: detected capacity change from 0 to 8192
[  314.697461][T14622] loop3: detected capacity change from 0 to 512
[  314.714368][T14622] EXT4-fs: Ignoring removed mblk_io_submit option
[  314.722601][T14619] netlink: 'syz.2.3424': attribute type 10 has an invalid length.
[  314.737776][T14622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  314.753179][T14622] EXT4-fs (loop3): 1 truncate cleaned up
[  314.765456][T14622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.770170][T14619] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  314.795629][T14620] lo speed is unknown, defaulting to 1000
[  314.905622][T14627] __nla_validate_parse: 15 callbacks suppressed
[  314.905646][T14627] netlink: 8524 bytes leftover after parsing attributes in process `syz.0.3420'.
[  315.147074][T14633] netlink: 'syz.2.3426': attribute type 10 has an invalid length.
[  315.155371][T14633] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  315.257543][   T29] audit: type=1326 audit(1756202221.458:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  315.290801][   T29] audit: type=1326 audit(1756202221.478:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  315.314558][   T29] audit: type=1326 audit(1756202221.478:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  315.332588][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'.
[  315.338344][   T29] audit: type=1326 audit(1756202221.478:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  315.338397][   T29] audit: type=1326 audit(1756202221.478:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93613cebe9 code=0x7ffc0000
[  315.538351][T14648] lo speed is unknown, defaulting to 1000
[  315.538435][ T9285] printk: udevd: 5 output lines suppressed due to ratelimiting
[  315.603047][T13473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.642107][T14655] loop4: detected capacity change from 0 to 512
[  315.670400][T14655] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  315.683291][T14655] System zones: 0-2, 18-18, 34-34
[  315.690536][T14655] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3436: bg 0: block 248: padding at end of block bitmap is not set
[  315.707525][T14655] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3436: Failed to acquire dquot type 1
[  315.720034][T14655] EXT4-fs (loop4): 1 truncate cleaned up
[  315.720370][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'.
[  315.733262][T14655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.749738][T14655] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.761339][T14655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.801957][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3440'.
[  315.823634][    T9] Process accounting resumed
[  315.830886][T14676] loop0: detected capacity change from 0 to 512
[  315.837622][T14669] loop3: detected capacity change from 0 to 512
[  315.837979][T14676] EXT4-fs: Ignoring removed mblk_io_submit option
[  315.844442][T14669] EXT4-fs: Ignoring removed i_version option
[  315.850906][T14676] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  315.856517][T14669] EXT4-fs: Ignoring removed nobh option
[  315.878067][T14669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  315.893201][T14676] EXT4-fs (loop0): 1 truncate cleaned up
[  315.898570][T14669] EXT4-fs (loop3): 1 truncate cleaned up
[  315.911318][T14669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.925935][T14676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.082056][T14689] loop4: detected capacity change from 0 to 512
[  316.090535][T14689] EXT4-fs: Ignoring removed mblk_io_submit option
[  316.098791][T14689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  316.123148][T14689] EXT4-fs (loop4): 1 truncate cleaned up
[  316.129809][T14689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.327103][T13473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.435382][T14695] loop3: detected capacity change from 0 to 8192
[  316.508062][T14695] netlink: 8524 bytes leftover after parsing attributes in process `syz.3.3446'.
[  316.848717][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'.
[  316.886387][T14115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.936863][ T3155] Process accounting resumed
[  316.943581][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.956794][T14716] loop0: detected capacity change from 0 to 512
[  316.968625][T14716] EXT4-fs: Ignoring removed mblk_io_submit option
[  316.977686][T14716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  316.990368][T14716] EXT4-fs (loop0): 1 truncate cleaned up
[  316.996904][T14716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.061703][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3458'.
[  317.070916][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3458'.
[  317.562368][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'.
[  317.571780][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3469'.
[  317.658680][T14757] lo speed is unknown, defaulting to 1000
[  317.700597][T14759] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  317.820829][T14762] lo speed is unknown, defaulting to 1000
[  317.822418][T14115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.966745][ T3809] IPVS: starting estimator thread 0...
[  318.032896][T14786] team0 (unregistering): Port device team_slave_0 removed
[  318.047565][T14786] team0 (unregistering): Port device team_slave_1 removed
[  318.125110][T14787] IPVS: using max 2688 ests per chain, 134400 per kthread
[  318.144733][T14790] netlink: 'syz.1.3483': attribute type 1 has an invalid length.
[  318.175064][T14790] 8021q: adding VLAN 0 to HW filter on device bond4
[  318.212378][T14804] loop0: detected capacity change from 0 to 128
[  318.222539][T14806] pim6reg: entered allmulticast mode
[  318.260736][T14808] bond1: entered promiscuous mode
[  318.266503][T14808] bond1: entered allmulticast mode
[  318.276951][T14808] 8021q: adding VLAN 0 to HW filter on device bond1
[  318.289527][T14808] bond1 (unregistering): Released all slaves
[  318.299275][T14806] pim6reg: left allmulticast mode
[  318.680097][ T1033] Process accounting resumed
[  318.689089][T14834] loop0: detected capacity change from 0 to 512
[  318.695774][T14834] EXT4-fs: Ignoring removed mblk_io_submit option
[  318.702685][T14834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  318.720036][T14834] EXT4-fs (loop0): 1 truncate cleaned up
[  318.726598][T14834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.099055][T14844] netlink: 'syz.4.3503': attribute type 10 has an invalid length.
[  319.099083][T14844] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  319.361549][T14840] IPv6: sit1: Disabled Multicast RS
[  319.367819][T14840] sit1: entered allmulticast mode
[  319.397616][T14854] SELinux:  policydb string S does not match my string SE Linux
[  319.405965][T14854] SELinux: failed to load policy
[  319.437958][   T29] kauditd_printk_skb: 150 callbacks suppressed
[  319.437973][   T29] audit: type=1400 audit(1756202225.638:8137): avc:  denied  { create } for  pid=14855 comm="syz.3.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  319.482942][T14857] lo speed is unknown, defaulting to 1000
[  319.514852][T14861] loop4: detected capacity change from 0 to 512
[  319.523306][T14861] EXT4-fs: Ignoring removed mblk_io_submit option
[  319.532120][T14861] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  319.552338][T14861] EXT4-fs (loop4): 1 truncate cleaned up
[  319.564872][T14861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.578675][   T29] audit: type=1400 audit(1756202225.778:8138): avc:  denied  { write } for  pid=14855 comm="syz.3.3507" path="socket:[50282]" dev="sockfs" ino=50282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  319.632138][   T29] audit: type=1400 audit(1756202225.798:8139): avc:  denied  { ioctl } for  pid=14855 comm="syz.3.3507" path="socket:[50282]" dev="sockfs" ino=50282 ioctlcmd=0x5321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  319.660685][T14115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.679754][T14869] loop0: detected capacity change from 0 to 512
[  319.686565][T14869] EXT4-fs: Ignoring removed mblk_io_submit option
[  319.693315][T14869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  319.705092][T14869] EXT4-fs (loop0): 1 truncate cleaned up
[  319.712068][T14869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.967618][T14878] netlink: 'syz.1.3512': attribute type 1 has an invalid length.
[  319.984063][T14878] 8021q: adding VLAN 0 to HW filter on device bond5
[  320.415757][T14885] __nla_validate_parse: 10 callbacks suppressed
[  320.415800][T14885] netlink: 8524 bytes leftover after parsing attributes in process `syz.2.3515'.
[  320.459542][T14872] ==================================================================
[  320.467663][T14872] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark
[  320.476064][T14872] 
[  320.478392][T14872] write to 0xffff88811a1fe9a4 of 4 bytes by task 14869 on cpu 1:
[  320.486211][T14872]  xas_set_mark+0x12b/0x140
[  320.490728][T14872]  tag_pages_for_writeback+0xc2/0x290
[  320.496380][T14872]  ext4_do_writepages+0x6b2/0x2750
[  320.501537][T14872]  ext4_writepages+0x176/0x300
[  320.506474][T14872]  do_writepages+0x1c3/0x310
[  320.511248][T14872]  file_write_and_wait_range+0x156/0x2c0
[  320.517052][T14872]  generic_buffers_fsync_noflush+0x45/0x120
[  320.523049][T14872]  ext4_sync_file+0x1ab/0x690
[  320.527726][T14872]  vfs_fsync_range+0x10d/0x130
[  320.532930][T14872]  ext4_buffered_write_iter+0x34f/0x3c0
[  320.538565][T14872]  ext4_file_write_iter+0xdbf/0xf00
[  320.543865][T14872]  iter_file_splice_write+0x663/0xa60
[  320.549307][T14872]  direct_splice_actor+0x153/0x2a0
[  320.554415][T14872]  splice_direct_to_actor+0x30f/0x680
[  320.559850][T14872]  do_splice_direct+0xda/0x150
[  320.564879][T14872]  do_sendfile+0x380/0x650
[  320.569388][T14872]  __x64_sys_sendfile64+0x105/0x150
[  320.574595][T14872]  x64_sys_call+0x2bb0/0x2ff0
[  320.579301][T14872]  do_syscall_64+0xd2/0x200
[  320.583892][T14872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.589868][T14872] 
[  320.592178][T14872] read to 0xffff88811a1fe9a4 of 4 bytes by task 14872 on cpu 0:
[  320.599975][T14872]  file_write_and_wait_range+0x10e/0x2c0
[  320.605617][T14872]  generic_buffers_fsync_noflush+0x45/0x120
[  320.611593][T14872]  ext4_sync_file+0x1ab/0x690
[  320.616498][T14872]  vfs_fsync_range+0x10d/0x130
[  320.621304][T14872]  ext4_buffered_write_iter+0x34f/0x3c0
[  320.627113][T14872]  ext4_file_write_iter+0xdbf/0xf00
[  320.632500][T14872]  iter_file_splice_write+0x663/0xa60
[  320.637859][T14872]  direct_splice_actor+0x153/0x2a0
[  320.643044][T14872]  splice_direct_to_actor+0x30f/0x680
[  320.648399][T14872]  do_splice_direct+0xda/0x150
[  320.653323][T14872]  do_sendfile+0x380/0x650
[  320.657739][T14872]  __x64_sys_sendfile64+0x105/0x150
[  320.663110][T14872]  x64_sys_call+0x2bb0/0x2ff0
[  320.667772][T14872]  do_syscall_64+0xd2/0x200
[  320.672271][T14872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.678426][T14872] 
[  320.680831][T14872] value changed: 0x02000021 -> 0x04000021
[  320.686677][T14872] 
[  320.689061][T14872] Reported by Kernel Concurrency Sanitizer on:
[  320.695196][T14872] CPU: 0 UID: 0 PID: 14872 Comm: syz.0.3510 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  320.705087][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  320.715224][T14872] ==================================================================
[  320.778136][T12487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.787993][T14115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.