last executing test programs:

2m4.075387145s ago: executing program 32 (id=361):
syz_emit_ethernet(0x86, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x50, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2, '\x00', [@generic={0xf}, @jumbo={0xc2, 0x4, 0x6}, @generic, @ra, @generic]}]}}}}}}}, 0x0)
unshare(0x2000400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

2m1.458343226s ago: executing program 33 (id=390):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0)
munlockall()
keyctl$chown(0x4, 0x0, 0x0, 0x0)

1m49.482109662s ago: executing program 34 (id=635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0)

1m14.469401845s ago: executing program 35 (id=1278):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

59.980581613s ago: executing program 8 (id=1409):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffff9c, 0x0, 0x4101, 0x1a1)
r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0))

59.810670537s ago: executing program 8 (id=1412):
io_setup(0x2, &(0x7f0000000040))
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x1d6}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

59.621228502s ago: executing program 36 (id=1416):
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0f5, 0x0, 0x3, 0x12}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000005c0)}, 0x20)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x2)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x1000004}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

57.973555795s ago: executing program 9 (id=1417):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=")
syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(0x0, 0x64842, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)

57.967782846s ago: executing program 8 (id=1429):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
listen(r0, 0x3)

57.111647645s ago: executing program 9 (id=1418):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680))

57.106109015s ago: executing program 8 (id=1420):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@nojournal_checksum}], [{@seclabel}]}, 0x1, 0x45f, &(0x7f0000000c80)="$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")
syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)

56.204810228s ago: executing program 8 (id=1425):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, 0x0, 0x0)

55.511368904s ago: executing program 8 (id=1442):
socket$nl_route(0x10, 0x3, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x248)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = syz_io_uring_setup(0x1458, &(0x7f0000000540)={0x0, 0x3, 0x10000, 0x2000, 0x147, 0x0, r0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x33, 0x0, @fd_index=0x9, 0x0, 0x0, 0x4000007, 0x8, 0x1, {0x0, 0x0, r1}})
io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0)

55.511146583s ago: executing program 37 (id=1442):
socket$nl_route(0x10, 0x3, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x248)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = syz_io_uring_setup(0x1458, &(0x7f0000000540)={0x0, 0x3, 0x10000, 0x2000, 0x147, 0x0, r0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x33, 0x0, @fd_index=0x9, 0x0, 0x0, 0x4000007, 0x8, 0x1, {0x0, 0x0, r1}})
io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0)

53.963767099s ago: executing program 9 (id=1463):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
inotify_init()
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
kexec_load(0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

53.963309929s ago: executing program 38 (id=1463):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
inotify_init()
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
kexec_load(0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

52.477374388s ago: executing program 0 (id=1482):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x172}, 0x18)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

52.347613759s ago: executing program 0 (id=1485):
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

52.252204746s ago: executing program 0 (id=1491):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4081, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

50.791747524s ago: executing program 4 (id=1510):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x7ecae788a6630e8, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

49.999705458s ago: executing program 0 (id=1511):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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")
syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(0x0, 0x64842, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)

49.999374428s ago: executing program 4 (id=1513):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
close(r2)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)

49.871709758s ago: executing program 4 (id=1516):
bpf$MAP_CREATE(0x0, 0x0, 0x9a)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0xffffffffffffff0f)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)

49.127933438s ago: executing program 0 (id=1526):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmsg(0xffffffffffffffff, 0x0, 0x40000140)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8994, &(0x7f0000000080))
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

49.034977206s ago: executing program 4 (id=1528):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@nojournal_checksum}], [{@seclabel}]}, 0x1, 0x45f, &(0x7f0000000c80)="$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")
syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)

48.385318098s ago: executing program 0 (id=1541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

48.345951371s ago: executing program 39 (id=1541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0)
writev(r1, &(0x7f0000000440)=[{0x0}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

48.158547936s ago: executing program 4 (id=1548):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x172}, 0x18)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

47.518863818s ago: executing program 4 (id=1549):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4081, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

47.50001172s ago: executing program 40 (id=1549):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4081, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

42.351307065s ago: executing program 1 (id=1636):
r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8e3453a7b706369d, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0)

42.16823228s ago: executing program 1 (id=1639):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xf7}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

42.106645195s ago: executing program 1 (id=1640):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x200)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3, 0x0, 0x2000000}, 0x38)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4)

41.689406368s ago: executing program 1 (id=1643):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

41.584805646s ago: executing program 1 (id=1648):
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0)

41.42509777s ago: executing program 1 (id=1653):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
close_range(r1, 0xffffffffffffffff, 0x0)

41.408764941s ago: executing program 41 (id=1653):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
close_range(r1, 0xffffffffffffffff, 0x0)

3.459642461s ago: executing program 5 (id=2303):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

3.200448702s ago: executing program 7 (id=2311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10)
close(r0)

2.830373312s ago: executing program 3 (id=2314):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")

2.619133169s ago: executing program 7 (id=2315):
r0 = gettid()
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
setuid(0xee01)
semop(0x0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x2, 0x1}, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffb})
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400020007000000ac1414aa00000000200000000000000084"], 0x38, 0x4855}, 0x24000052)

2.572668883s ago: executing program 5 (id=2316):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0)

2.390159557s ago: executing program 2 (id=2320):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r0)

2.34794911s ago: executing program 6 (id=2321):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

2.291233435s ago: executing program 2 (id=2322):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

1.951751553s ago: executing program 3 (id=2323):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00')
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x78b, &(0x7f0000001440)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFRQqLkSwUNC17TCZhppJpmQmpQlZtIjgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjrT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxPnKxHx1y+rB69//Pqz35z4570nrn74UxIn4mB9fnMcO2UiJuqfyVD6Ed7jtZ2urM+SfjeAh5JumgO1rTwOxVgMVHNtjPSyZQBAt2wAAHtQYgwAAHtM43uAW+tr+Ubq7zcSvXXj1YjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV373yVpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3n3y7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs442XPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/J2Nb+vPu1irlJZmo7Yl7y5efrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF0xEBH7+90IAKDnHP8BYO/Z3vF/pGvtAAB64nI4/weAPanj4/+Z7rYDAOgd5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02amTJ9O08ff6Wj4tz15YWZ4vXTgyWyjPZxeW89l8ael8dq5UmisWsvnSQtt/dKn2UiyVzs/E4vLFqUqhXJkqr6yeXigtL1ZOn1vIzRVOF4Z6FhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdK68sjqfKxYLSzJbZkZ2RzN2TWYwdkUzZLqWad5LjPRvBwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwy/0XAAD//9WLLt8=")
io_uring_setup(0x38dc, &(0x7f0000000600)={0x0, 0xffffffff, 0x40})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x4b, &(0x7f0000000580)="b9ff0307680a500649f587b3d033", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)

1.951580853s ago: executing program 2 (id=2324):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$eJzs3M9rHGUYB/Bn2/wyNdmotdqC9EUvehmbHDx5CZKCdEFpm0IrCFMz0WU3uyGzBLaI7c2rf4d49CaI/0AuXjwL3nLx2IM40p1gTUiRFNrdhs/nsg8775d9ZncZ2OF9dv/D77Y6m2W2mQ/iTKMRU9sR6WGKFGfibNQexHu3fvv9rRu371xbbbXWrqd0dfXm8gcppcXLP3/29Q9v/zI4d+vHxZ9mY2/p8/0/V/7Yu7B3cf/vm1+1y9QuU68/SHm62+8P8rvdIm20y06W0qfdIi+L1O6Vxc6h45vd/vb2MOW9jYX57Z2iLFPeG6ZOMUyDfhrsDFP+Zd7upSzL0sJ88PRmYv37h1VVRVTVdMxEVVXVSzEf5+LlWIjFaMbSdMSr8Vqcj9fjQrwRb8bF0apxdw4AAAAAAAAAAAAAAAAAAACny//M/8cr5v8BAAAAAAAAAAAAAAAAAADgmTP/DwAAAAAAAAAAAAAAAAAAAONn/h8AAAAAAAAAAAAAAAAAAADG78btO9dWW6216ynNRWx9u7u+u14/1sdXN6Md3SjiSjTjrxhN/9fq+urHrbUraWQp3t+6f5C/v7t+9nB+efR3Asfml+t8Opyfjfn/5leiGeePz68cm5+Ld9+p841H+Sya8esX0Y9ubMSj7OP8N8spffRJ60j+0mgdAAAAnAZZ+texv9+zLDUa9dIjx+snn3x/oGoeuT/QOJyfiktTYzxxRsrhvU7e7RY7L1Zx8JWMe5388iT08+Ri5qDTSelnAoqDd+TBpPTzghbTEfEMX+LIhWIuImaf44WJ5+Lxhz7uTgAAAAAAAAAAADiJE2wMnKr32558O+G4zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcFQAA//8my+RP")
statfs(0x0, 0x0)
setrlimit(0x9, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r1, 0x400, 0x1)
fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

1.874291169s ago: executing program 3 (id=2326):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r1)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

1.840114221s ago: executing program 3 (id=2327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

1.768402917s ago: executing program 7 (id=2328):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

1.767843477s ago: executing program 2 (id=2338):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00')

1.708544202s ago: executing program 3 (id=2329):
r0 = socket(0x2b, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
keyctl$negate(0xd, 0x0, 0x800, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @loopback, 0x0, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x4, 0x1, 0x7e, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)

1.679832174s ago: executing program 5 (id=2330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={<r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)

1.633871668s ago: executing program 2 (id=2331):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

1.327185183s ago: executing program 6 (id=2332):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
close(r1)
accept4(r0, 0x0, 0x0, 0x400000000000000)

1.268438157s ago: executing program 6 (id=2333):
creat(0x0, 0xd9)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)
unshare(0x22020600)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
socket$packet(0x11, 0x3, 0x300)
r0 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r0, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0)

934.863824ms ago: executing program 3 (id=2334):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @broadcast})
mlockall(0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
mlockall(0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x2)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0})

934.250895ms ago: executing program 5 (id=2345):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x2a)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

933.776685ms ago: executing program 6 (id=2335):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000006c0)=<r3=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5)

896.099977ms ago: executing program 7 (id=2336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000027c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x88bc9fd0c368d368, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x1, 0x0, [0x7ff, 0x7, 0x53a2, 0x4, 0x5, 0x2, 0x4, 0x0, 0x9, 0x9, 0xfffd, 0x8, 0x1746, 0x1, 0x4, 0xf893], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffff81}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

704.729733ms ago: executing program 5 (id=2337):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00')
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x78b, &(0x7f0000001440)="$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")
io_uring_setup(0x38dc, &(0x7f0000000600)={0x0, 0xffffffff, 0x40})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x4b, &(0x7f0000000580)="b9ff0307680a500649f587b3d033", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)

544.110836ms ago: executing program 5 (id=2339):
r0 = gettid()
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
setuid(0xee01)
semop(0x0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x2, 0x1}, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffb})
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400020007000000ac1414aa00000000200000000000000084"], 0x38, 0x4855}, 0x24000052)

543.890766ms ago: executing program 2 (id=2340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
socket$inet6(0xa, 0x2, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)

499.537809ms ago: executing program 7 (id=2341):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d0300470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b720000000000000000000000000000005214e7febdbc0033d6402c34aa96940474", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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")
statfs(0x0, 0x0)
setrlimit(0x9, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r1, 0x400, 0x1)
fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

338.768562ms ago: executing program 7 (id=2342):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

57.962795ms ago: executing program 6 (id=2343):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

0s ago: executing program 6 (id=2344):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T7879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.058819][ T7879] veth0_vlan: entered promiscuous mode
[  128.067903][ T7879] veth1_vlan: entered promiscuous mode
[  128.091372][ T7879] veth0_macvtap: entered promiscuous mode
[  128.099341][ T7879] veth1_macvtap: entered promiscuous mode
[  128.111101][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.120432][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.133442][ T3642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.150801][ T3642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.162482][ T3642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.176865][ T3642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.529650][ T8038] infiniband syz!: set active
[  128.534367][ T8038] infiniband syz!: added team_slave_0
[  128.545315][ T8038] RDS/IB: syz!: added
[  128.550439][ T8038] smc: adding ib device syz! with port count 1
[  128.556631][ T8038] smc:    ib device syz! port 1 has pnetid 
[  128.624897][   T29] audit: type=1326 audit(1755730777.763:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  128.648413][   T29] audit: type=1326 audit(1755730777.763:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  128.672352][   T29] audit: type=1326 audit(1755730777.763:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  128.695895][   T29] audit: type=1326 audit(1755730777.763:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  128.719481][   T29] audit: type=1326 audit(1755730777.773:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  128.743113][   T29] audit: type=1326 audit(1755730777.773:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  128.824148][   T29] audit: type=1326 audit(1755730777.943:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d5cfebe9 code=0x7ffc0000
[  128.847706][   T29] audit: type=1326 audit(1755730777.943:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d5cfebe9 code=0x7ffc0000
[  128.871133][   T29] audit: type=1326 audit(1755730777.943:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f30d5cfebe9 code=0x7ffc0000
[  128.894713][   T29] audit: type=1326 audit(1755730777.943:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.7.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d5cfebe9 code=0x7ffc0000
[  129.693288][ T8052] loop0: detected capacity change from 0 to 512
[  129.715707][ T8052] EXT4-fs: Ignoring removed mblk_io_submit option
[  129.726658][ T8052] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  129.744018][ T8052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002]
[  129.752145][ T8052] System zones: 1-12
[  129.766135][ T8052] EXT4-fs (loop0): 1 truncate cleaned up
[  129.772935][ T8052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.171634][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1523'.
[  130.190054][ T8079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8079 comm=syz.7.1523
[  130.313691][ T8084] pim6reg1: entered promiscuous mode
[  130.319188][ T8084] pim6reg1: entered allmulticast mode
[  130.536024][ T7808] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  130.561362][ T7808] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  130.592330][ T7808] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  130.597479][ T8086] bond_slave_1: mtu less than device minimum
[  130.618668][ T7808] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  130.651901][ T7808] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  130.679927][ T8088] loop4: detected capacity change from 0 to 512
[  130.683993][ T7808] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  130.687490][ T8088] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.712461][ T8088] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.720707][ T8088] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  130.733547][ T8088] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  130.749623][ T8088] EXT4-fs (loop4): 1 truncate cleaned up
[  130.749704][ T8091] wg2: entered promiscuous mode
[  130.758800][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.760218][ T8091] wg2: entered allmulticast mode
[  130.781407][ T7808] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  130.830477][ T7808] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  130.893646][ T7808] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  130.959283][ T7808] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  130.982551][ T8101] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  130.993954][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.009800][ T8103] bridge: RTM_NEWNEIGH with invalid ether address
[  131.057633][ T8106] 9pnet: p9_errstr2errno: server reported unknown error 
[  131.279283][ T8069] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.301984][ T3627] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.354854][ T8124] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1543'.
[  131.369019][ T3627] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.453957][ T3627] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.466278][ T8132] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1547'.
[  131.490143][ T8132] $Hÿ (unregistering): Released all slaves
[  131.510605][ T3627] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.529449][ T7879] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  131.562231][ T7879] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  131.603619][ T7879] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  131.628740][ T7879] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  131.651146][ T7879] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  131.693082][ T3627] bridge_slave_1: left allmulticast mode
[  131.698869][ T3627] bridge_slave_1: left promiscuous mode
[  131.704614][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.714644][ T7879] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  131.737445][ T7879] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  131.761405][ T3627] bridge_slave_0: left allmulticast mode
[  131.767401][ T3627] bridge_slave_0: left promiscuous mode
[  131.773155][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.783152][ T7879] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  131.805773][ T7879] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  131.830124][ T7879] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  131.959153][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.969613][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.979280][ T3627] bond0 (unregistering): Released all slaves
[  132.051778][ T3627] hsr_slave_0: left promiscuous mode
[  132.057445][ T3627] hsr_slave_1: left promiscuous mode
[  132.063110][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.070591][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.078453][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.085865][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.096712][ T3627] veth1_macvtap: left promiscuous mode
[  132.102259][ T3627] veth0_macvtap: left promiscuous mode
[  132.107956][ T3627] veth1_vlan: left promiscuous mode
[  132.113261][ T3627] veth0_vlan: left promiscuous mode
[  132.148458][ T8095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.209858][ T3627] team0 (unregistering): Port device team_slave_1 removed
[  132.221856][ T3627] team0 (unregistering): Port device team_slave_0 removed
[  132.273052][ T8128] chnl_net:caif_netlink_parms(): no params data found
[  132.346352][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.353677][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.366616][ T8128] bridge_slave_0: entered allmulticast mode
[  132.373700][ T8128] bridge_slave_0: entered promiscuous mode
[  132.380721][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.388005][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.395275][ T8128] bridge_slave_1: entered allmulticast mode
[  132.402224][ T8128] bridge_slave_1: entered promiscuous mode
[  132.426013][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.448256][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.488910][ T8128] team0: Port device team_slave_0 added
[  132.500205][ T8128] team0: Port device team_slave_1 added
[  132.534020][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.541076][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.567271][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.581147][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.588244][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.614460][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.660972][ T8128] hsr_slave_0: entered promiscuous mode
[  132.669005][ T8128] hsr_slave_1: entered promiscuous mode
[  132.674989][ T8128] debugfs: 'hsr0' already exists in 'hsr'
[  132.680794][ T8128] Cannot create hsr debugfs directory
[  132.763401][ T3627] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.801697][ T8155] chnl_net:caif_netlink_parms(): no params data found
[  132.833270][ T3627] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.886231][ T3627] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.929404][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.936509][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.944466][ T8155] bridge_slave_0: entered allmulticast mode
[  132.951300][ T8155] bridge_slave_0: entered promiscuous mode
[  132.960418][ T3627] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.973634][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.980831][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.988411][ T8155] bridge_slave_1: entered allmulticast mode
[  132.994979][ T8155] bridge_slave_1: entered promiscuous mode
[  133.046021][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.069134][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.086218][ T8201] netlink: 'syz.1.1566': attribute type 3 has an invalid length.
[  133.105457][ T8155] team0: Port device team_slave_0 added
[  133.114958][ T8155] team0: Port device team_slave_1 added
[  133.147921][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.154926][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.183210][ T8155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.201555][ T8205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=8205 comm=syz.1.1568
[  133.214806][ T8205] netlink: 'syz.1.1568': attribute type 13 has an invalid length.
[  133.230299][ T3627] bridge_slave_1: left allmulticast mode
[  133.236142][ T3627] bridge_slave_1: left promiscuous mode
[  133.241931][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.250358][ T3627] bridge_slave_0: left allmulticast mode
[  133.256095][ T3627] bridge_slave_0: left promiscuous mode
[  133.261860][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.369659][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.381788][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.391960][ T3627] bond0 (unregistering): Released all slaves
[  133.446186][ T8205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.462380][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.469463][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.495526][ T8155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.553863][ T8155] hsr_slave_0: entered promiscuous mode
[  133.573257][ T8155] hsr_slave_1: entered promiscuous mode
[  133.580081][ T8155] debugfs: 'hsr0' already exists in 'hsr'
[  133.585832][ T8155] Cannot create hsr debugfs directory
[  133.643249][ T8128] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  133.672012][ T3627] hsr_slave_0: left promiscuous mode
[  133.680109][ T3627] hsr_slave_1: left promiscuous mode
[  133.686026][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.693485][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.703511][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.711029][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.731081][ T3627] veth1_macvtap: left promiscuous mode
[  133.736632][ T3627] veth0_macvtap: left promiscuous mode
[  133.742596][ T3627] veth1_vlan: left promiscuous mode
[  133.753207][ T3627] veth0_vlan: left promiscuous mode
[  133.833552][ T3627] team0 (unregistering): Port device team_slave_1 removed
[  133.843852][ T3627] team0 (unregistering): Port device team_slave_0 removed
[  133.851687][ T3642] smc: removing ib device syz!
[  133.886402][ T8128] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  133.944264][ T8237] syzkaller0: entered promiscuous mode
[  133.949822][ T8237] syzkaller0: entered allmulticast mode
[  133.989670][ T8128] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  134.001241][ T8128] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  134.069265][   T29] kauditd_printk_skb: 431 callbacks suppressed
[  134.069283][   T29] audit: type=1326 audit(1755730783.213:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20aad3ebe9 code=0x7ffc0000
[  134.136139][   T29] audit: type=1326 audit(1755730783.213:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20aad3ebe9 code=0x7ffc0000
[  134.159760][   T29] audit: type=1326 audit(1755730783.213:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f20aad3ebe9 code=0x7ffc0000
[  134.185216][   T29] audit: type=1326 audit(1755730783.213:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20aad3ebe9 code=0x7ffc0000
[  134.208975][   T29] audit: type=1326 audit(1755730783.213:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20aad3ebe9 code=0x7ffc0000
[  134.271589][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1582'.
[  134.284408][ T8256] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  134.301334][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.329355][ T8128] 8021q: adding VLAN 0 to HW filter on device team0
[  134.357186][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.364321][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.376081][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.383197][ T3642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.482105][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.525021][ T8155] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  134.535118][ T8155] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  134.545163][ T8155] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  134.563521][ T8155] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  134.621115][ T8128] veth0_vlan: entered promiscuous mode
[  134.635189][ T8128] veth1_vlan: entered promiscuous mode
[  134.643862][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.666503][ T8155] 8021q: adding VLAN 0 to HW filter on device team0
[  134.674198][ T8128] veth0_macvtap: entered promiscuous mode
[  134.683235][ T8128] veth1_macvtap: entered promiscuous mode
[  134.692920][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.700008][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.719671][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.729794][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.736920][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.756503][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.772834][ T3647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.789499][ T3647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.808476][ T3647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.821783][ T3647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.892809][   T29] audit: type=1400 audit(1755730784.033:3078): avc:  denied  { setopt } for  pid=8292 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  134.921438][ T8293] netlink: 'syz.5.1588': attribute type 1 has an invalid length.
[  134.926870][ T8155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.979855][ T8293] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.000847][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1589'.
[  135.034310][ T8296] bond1: (slave geneve2): making interface the new active one
[  135.048690][ T8296] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  135.075866][ T8298] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.111385][   T29] audit: type=1326 audit(1755730784.233:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  135.134917][   T29] audit: type=1326 audit(1755730784.233:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  135.158480][   T29] audit: type=1326 audit(1755730784.253:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  135.181955][   T29] audit: type=1326 audit(1755730784.253:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  135.241503][ T8303] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1590'.
[  135.263899][ T8303] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1590'.
[  135.357561][ T8155] veth0_vlan: entered promiscuous mode
[  135.373940][ T8155] veth1_vlan: entered promiscuous mode
[  135.400276][ T8155] veth0_macvtap: entered promiscuous mode
[  135.415746][ T8155] veth1_macvtap: entered promiscuous mode
[  135.440160][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.464601][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.490827][ T3647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.516022][ T3647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.527995][ T8321] sd 0:0:1:0: device reset
[  135.543740][ T3647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.560455][ T3647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.710942][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'.
[  135.720112][ T8331] netlink: 'syz.2.1598': attribute type 20 has an invalid length.
[  135.765080][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'.
[  135.769184][ T3642] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.774226][ T8331] netlink: 'syz.2.1598': attribute type 20 has an invalid length.
[  135.822218][ T3642] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.850623][ T3642] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.870590][ T3642] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.086863][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'.
[  136.095929][ T8337] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1600'.
[  136.129017][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'.
[  136.155429][ T8337] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1600'.
[  136.553895][ T8367] vlan2: entered allmulticast mode
[  136.822520][ T8395] bridge_slave_0: left allmulticast mode
[  136.828281][ T8395] bridge_slave_0: left promiscuous mode
[  136.834031][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.863833][ T8395] bridge_slave_1: left allmulticast mode
[  136.869709][ T8395] bridge_slave_1: left promiscuous mode
[  136.875542][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.890110][ T8395] bond0: (slave bond_slave_0): Releasing backup interface
[  136.900835][ T8395] bond0: (slave bond_slave_1): Releasing backup interface
[  136.914998][ T8395] team0: Port device team_slave_0 removed
[  136.926921][ T8395] team0: Port device team_slave_1 removed
[  136.934114][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.941624][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.956424][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.964048][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.019173][ T8395] bond1: (slave geneve2): Releasing active interface
[  137.134093][ T8402] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  138.107444][ T8454] netlink: 'syz.5.1647': attribute type 2 has an invalid length.
[  138.115337][ T8454] netlink: 'syz.5.1647': attribute type 1 has an invalid length.
[  138.123135][ T8454] netlink: 'syz.5.1647': attribute type 2 has an invalid length.
[  138.485714][ T8466] chnl_net:caif_netlink_parms(): no params data found
[  138.591763][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.598903][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.613993][ T8466] bridge_slave_0: entered allmulticast mode
[  138.631717][ T8466] bridge_slave_0: entered promiscuous mode
[  138.653364][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.660871][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.678478][ T8466] bridge_slave_1: entered allmulticast mode
[  138.685273][ T8466] bridge_slave_1: entered promiscuous mode
[  138.728922][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.741080][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.778523][ T8466] team0: Port device team_slave_0 added
[  138.796092][ T8466] team0: Port device team_slave_1 added
[  138.821884][ T8507] pim6reg1: entered promiscuous mode
[  138.827368][ T8507] pim6reg1: entered allmulticast mode
[  138.850362][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.857410][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.883507][ T8466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.900540][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.907633][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.933604][ T8466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.957580][ T8512] bridge0: entered promiscuous mode
[  138.964350][ T8512] bridge0: port 3(macvlan2) entered blocking state
[  138.971113][ T8512] bridge0: port 3(macvlan2) entered disabled state
[  138.978325][ T8512] macvlan2: entered allmulticast mode
[  138.983728][ T8512] bridge0: entered allmulticast mode
[  138.990217][ T8512] macvlan2: left allmulticast mode
[  138.995374][ T8512] bridge0: left allmulticast mode
[  139.013877][ T8512] bridge0: left promiscuous mode
[  139.041077][ T8466] hsr_slave_0: entered promiscuous mode
[  139.049646][ T8466] hsr_slave_1: entered promiscuous mode
[  139.204987][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  139.205001][   T29] audit: type=1326 audit(1755730788.343:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.252900][   T29] audit: type=1326 audit(1755730788.383:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.276472][   T29] audit: type=1326 audit(1755730788.383:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.300026][   T29] audit: type=1326 audit(1755730788.383:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.323607][   T29] audit: type=1326 audit(1755730788.383:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.347135][   T29] audit: type=1326 audit(1755730788.383:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.370693][   T29] audit: type=1326 audit(1755730788.383:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.394261][   T29] audit: type=1326 audit(1755730788.383:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  139.442315][ T3642] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.452340][ T3642] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.538514][ T8537] tmpfs: Bad value for 'mpol'
[  139.715405][ T3642] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.725677][ T3642] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.729995][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  139.747624][   T10] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  139.829543][ T3642] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.839394][ T3642] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.865884][ T8542] pim6reg1: entered promiscuous mode
[  139.871306][ T8542] pim6reg1: entered allmulticast mode
[  139.884401][ T8466] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  139.899766][ T8466] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  139.933263][ T3642] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.943122][ T3642] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.974195][ T8554] vlan2: entered allmulticast mode
[  139.994582][ T8466] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  140.072020][ T8466] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  140.203958][ T3642] bond1 (unregistering): Released all slaves
[  140.237659][   T29] audit: type=1400 audit(1755730789.353:3209): avc:  denied  { create } for  pid=8568 comm="syz.5.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  140.249864][ T3642] bond2 (unregistering): Released all slaves
[  140.289972][ T8576] netlink: 'syz.5.1689': attribute type 1 has an invalid length.
[  140.333093][ T8576] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.346769][ T8564] __nla_validate_parse: 9 callbacks suppressed
[  140.346784][ T8564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1686'.
[  140.359325][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1689'.
[  140.383998][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.391716][ T3642] tipc: Left network mode
[  140.414740][ T8576] vlan2: entered promiscuous mode
[  140.419974][ T8576] bond2: entered promiscuous mode
[  140.433619][ T8466] 8021q: adding VLAN 0 to HW filter on device team0
[  140.447672][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.454802][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.469916][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.477167][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.486973][ T8585] dummy0: entered promiscuous mode
[  140.496166][ T8585] bond2: (slave dummy0): making interface the new active one
[  140.505220][ T8585] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  140.521327][ T3642] veth1_vlan: left promiscuous mode
[  140.526619][ T3642] veth0_vlan: left promiscuous mode
[  140.702687][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.862742][ T8466] veth0_vlan: entered promiscuous mode
[  140.877745][ T3642] IPVS: stop unused estimator thread 0...
[  140.887480][ T8466] veth1_vlan: entered promiscuous mode
[  140.943393][ T8466] veth0_macvtap: entered promiscuous mode
[  140.957804][ T8466] veth1_macvtap: entered promiscuous mode
[  140.981542][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.005365][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.035528][ T3647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.045199][ T3647] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.061029][ T3647] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.078297][ T3647] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.176778][   T29] audit: type=1326 audit(1755730790.313:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.6.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bca5ebe9 code=0x7ffc0000
[  141.214138][ T8640] loop6: detected capacity change from 0 to 1024
[  141.240699][ T8644] loop2: detected capacity change from 0 to 512
[  141.249081][ T8640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.269984][ T8644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.283265][ T8644] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.301042][ T8640] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1704: Allocating blocks 449-513 which overlap fs metadata
[  141.303157][ T8644] EXT4-fs (loop2): shut down requested (0)
[  141.335138][ T8639] EXT4-fs (loop6): pa ffff888106d865b0: logic 48, phys. 177, len 21
[  141.343237][ T8639] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  141.380469][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.400420][ T8466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.515643][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1712'.
[  141.553368][ T8663] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.565814][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1712'.
[  141.577673][ T8663] bond2 (unregistering): Released all slaves
[  141.786136][ T8688] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  141.974127][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1732'.
[  141.990912][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'.
[  142.459488][ T8754] loop6: detected capacity change from 0 to 128
[  142.479439][ T8754] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.495493][ T8754] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  142.520686][ T8466] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.776413][ T8767] pim6reg1: entered promiscuous mode
[  142.781799][ T8767] pim6reg1: entered allmulticast mode
[  143.774112][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'.
[  143.915111][ T8784] netlink: 'syz.2.1759': attribute type 5 has an invalid length.
[  143.975969][ T8793] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  144.046842][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1764'.
[  144.056128][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1764'.
[  144.193518][ T8815] netlink: 'syz.7.1772': attribute type 10 has an invalid length.
[  144.223022][ T8815] 8021q: adding VLAN 0 to HW filter on device team0
[  144.223873][   T29] kauditd_printk_skb: 59 callbacks suppressed
[  144.223885][   T29] audit: type=1400 audit(1755730793.363:3270): avc:  denied  { read } for  pid=8817 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  144.260217][ T8815] bond0: (slave team0): Enslaving as an active interface with an up link
[  144.271400][ T8819] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  144.530896][   T29] audit: type=1400 audit(1755730793.673:3271): avc:  denied  { mount } for  pid=8830 comm="syz.3.1778" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  144.659580][   T29] audit: type=1326 audit(1755730793.803:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.683179][   T29] audit: type=1326 audit(1755730793.803:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.718469][ T8845] cgroup: Invalid name
[  144.738841][   T29] audit: type=1326 audit(1755730793.803:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.762328][   T29] audit: type=1326 audit(1755730793.803:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.786595][   T29] audit: type=1326 audit(1755730793.803:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.810636][   T29] audit: type=1326 audit(1755730793.853:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.834652][   T29] audit: type=1326 audit(1755730793.853:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.858543][   T29] audit: type=1326 audit(1755730793.853:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23f939ebe9 code=0x7ffc0000
[  144.973777][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1785'.
[  145.095809][ T8864] loop6: detected capacity change from 0 to 128
[  145.106092][ T8864] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  145.132302][ T8864] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.157666][ T8871] lo: entered allmulticast mode
[  145.164753][ T8871] tunl0: entered allmulticast mode
[  145.185887][ T8871] gre0: entered allmulticast mode
[  145.191315][ T3627] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.206130][ T8871] gretap0: entered allmulticast mode
[  145.221762][ T8871] erspan0: entered allmulticast mode
[  145.246848][ T8871] ip_vti0: entered allmulticast mode
[  145.253979][ T8871] ip6_vti0: entered allmulticast mode
[  145.261331][ T8871] sit0: entered allmulticast mode
[  145.269339][ T8871] ip6tnl0: entered allmulticast mode
[  145.276163][ T8871] ip6gre0: entered allmulticast mode
[  145.282968][ T8871] syz_tun: entered allmulticast mode
[  145.290973][ T8871] ip6gretap0: entered allmulticast mode
[  145.298987][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.306334][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.314295][ T8871] bridge0: entered allmulticast mode
[  145.321598][ T8871] vcan0: entered allmulticast mode
[  145.327597][ T8871] bond0: entered allmulticast mode
[  145.332795][ T8871] bond_slave_0: entered allmulticast mode
[  145.338649][ T8871] bond_slave_1: entered allmulticast mode
[  145.345956][ T8871] team0: entered allmulticast mode
[  145.351227][ T8871] team_slave_0: entered allmulticast mode
[  145.357026][ T8871] team_slave_1: entered allmulticast mode
[  145.364240][ T8871] dummy0: entered allmulticast mode
[  145.371197][ T8871] nlmon0: entered allmulticast mode
[  145.377410][ T8871] caif0: entered allmulticast mode
[  145.382764][ T8871] batadv0: entered allmulticast mode
[  145.389527][ T8871] vxcan0: entered allmulticast mode
[  145.395917][ T8871] vxcan1: entered allmulticast mode
[  145.402236][ T8871] veth0: entered allmulticast mode
[  145.409134][ T8871] veth1: entered allmulticast mode
[  145.418120][ T8871] wg0: entered allmulticast mode
[  145.428029][ T8871] wg1: entered allmulticast mode
[  145.435554][ T8871] wg2: entered allmulticast mode
[  145.442357][ T8871] veth0_to_bridge: entered allmulticast mode
[  145.453150][ T8871] veth1_to_bridge: entered allmulticast mode
[  145.471333][ T8871] veth0_to_bond: entered allmulticast mode
[  145.481645][ T8871] veth1_to_bond: entered allmulticast mode
[  145.490609][ T8871] veth0_to_team: entered allmulticast mode
[  145.501495][ T8871] veth1_to_team: entered allmulticast mode
[  145.510779][ T8871] veth0_to_batadv: entered allmulticast mode
[  145.519349][ T8871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.529349][ T8871] batadv_slave_0: entered allmulticast mode
[  145.537498][ T8871] veth1_to_batadv: entered allmulticast mode
[  145.545303][ T8871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.553351][ T8871] batadv_slave_1: entered allmulticast mode
[  145.561326][ T8871] xfrm0: entered allmulticast mode
[  145.568427][ T8871] veth0_to_hsr: entered allmulticast mode
[  145.576365][ T8871] hsr_slave_0: entered allmulticast mode
[  145.590195][ T8871] veth1_to_hsr: entered allmulticast mode
[  145.601484][ T8871] hsr_slave_1: entered allmulticast mode
[  145.616340][ T8871] hsr0: entered allmulticast mode
[  145.623725][ T8871] veth1_virt_wifi: entered allmulticast mode
[  145.632991][ T8871] veth0_virt_wifi: entered allmulticast mode
[  145.641651][ T8871] veth1_vlan: entered allmulticast mode
[  145.649879][ T8871] veth0_vlan: entered allmulticast mode
[  145.659710][ T8871] vlan0: entered allmulticast mode
[  145.664900][ T8871] vlan1: entered allmulticast mode
[  145.673148][ T8871] macvlan0: entered allmulticast mode
[  145.680073][ T8871] macvlan1: entered allmulticast mode
[  145.686506][ T8871] ipvlan0: entered allmulticast mode
[  145.691896][ T8871] ipvlan1: entered allmulticast mode
[  145.699610][ T8871] veth1_macvtap: entered allmulticast mode
[  145.706474][ T8871] veth0_macvtap: entered allmulticast mode
[  145.714236][ T8871] macvtap0: entered allmulticast mode
[  145.722458][ T8871] macsec0: entered allmulticast mode
[  145.729692][ T8871] geneve0: entered allmulticast mode
[  145.736310][ T8871] geneve1: entered allmulticast mode
[  145.745040][ T8871] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  145.756699][ T8871] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  145.767236][ T8871] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  145.776200][ T8871] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  145.786559][ T8871] @: entered allmulticast mode
[  145.792492][ T8871] gre1: entered allmulticast mode
[  145.806570][ T8884] wg2: entered promiscuous mode
[  145.811607][ T8884] wg2: entered allmulticast mode
[  145.835665][ T8911] 
@ÿ: renamed from bond_slave_0 (while UP)
[  145.843133][ T3682] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.852163][ T3682] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.874746][ T3632] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.883748][ T3632] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.900038][ T3632] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.909068][ T3632] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.911574][ T8916] hub 8-0:1.0: USB hub found
[  145.928435][ T8916] hub 8-0:1.0: 8 ports detected
[  145.942114][ T8914] SELinux: ebitmap: truncated map
[  145.951973][ T8914] SELinux: failed to load policy
[  145.983908][ T3632] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.992997][ T3632] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.994549][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1808'.
[  146.040877][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'.
[  146.270054][ T8947] loop2: detected capacity change from 0 to 512
[  146.298851][ T8947] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1818: bad orphan inode 17
[  146.323159][ T8947] ext4_test_bit(bit=16, block=4) = 1
[  146.328702][ T8947] is_bad_inode(inode)=0
[  146.332974][ T8947] NEXT_ORPHAN(inode)=0
[  146.337085][ T8947] max_ino=32
[  146.340289][ T8947] i_nlink=1
[  146.351601][ T8947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.495000][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1823'.
[  146.512792][ T8966] netlink: zone id is out of range
[  146.518032][ T8966] netlink: zone id is out of range
[  146.523168][ T8966] netlink: zone id is out of range
[  146.528438][ T8966] netlink: zone id is out of range
[  146.547791][ T8964] vxlan0: entered promiscuous mode
[  146.555190][ T8966] netlink: zone id is out of range
[  146.556201][ T3632] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.567256][ T8966] netlink: zone id is out of range
[  146.573952][ T8966] netlink: zone id is out of range
[  146.581099][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.583676][ T3632] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.596939][ T8966] netlink: zone id is out of range
[  146.603460][ T8966] netlink: zone id is out of range
[  146.616169][ T3632] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.616534][ T8966] netlink: zone id is out of range
[  146.634695][ T3632] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.698190][ T8970] vlan2: entered allmulticast mode
[  146.703342][ T8970] dummy0: entered allmulticast mode
[  147.207922][ T8989] loop6: detected capacity change from 0 to 512
[  147.221475][ T8989] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  147.231405][ T8989] EXT4-fs (loop6): group descriptors corrupted!
[  147.342421][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1835'.
[  147.413442][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1835'.
[  147.562152][ T9008] loop2: detected capacity change from 0 to 1024
[  147.569294][ T9008] EXT4-fs: Ignoring removed orlov option
[  147.589630][ T9008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.671313][ T9017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1838: bg 0: block 88: padding at end of block bitmap is not set
[  147.751763][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.891846][ T9033] netlink: 'syz.5.1846': attribute type 1 has an invalid length.
[  147.907270][ T9033] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.920837][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1846'.
[  147.932905][ T9033] bond3 (unregistering): Released all slaves
[  148.394277][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1857'.
[  148.637565][ T9072] loop2: detected capacity change from 0 to 2048
[  148.659544][ T9072] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1863: bad orphan inode 61
[  148.673495][ T9072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.791801][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.878060][ T9087] tipc: Started in network mode
[  148.883062][ T9087] tipc: Node identity ac14140f, cluster identity 4711
[  148.927008][ T9087] tipc: New replicast peer: 255.255.255.83
[  148.932985][ T9087] tipc: Enabled bearer <udp:£>, priority 10
[  149.049041][ T9097] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.138202][ T9097] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.190370][ T9108] netlink: 'syz.5.1876': attribute type 1 has an invalid length.
[  149.228415][ T9108] 8021q: adding VLAN 0 to HW filter on device bond3
[  149.259145][ T9097] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.279445][ T9108] bond2: (slave dummy0): Releasing active interface
[  149.308843][ T9108] dummy0: left promiscuous mode
[  149.329455][ T9108] bond3: (slave dummy0): making interface the new active one
[  149.385209][ T9116] hub 9-0:1.0: USB hub found
[  149.418270][ T9108] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  149.439676][ T9097] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.450342][ T9116] hub 9-0:1.0: 8 ports detected
[  149.523639][ T3647] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.563329][ T3647] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.608063][ T3647] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.647064][ T3647] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.975277][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1880'.
[  150.057009][ T1036] tipc: Node number set to 2886997007
[  150.179642][ T9142] loop6: detected capacity change from 0 to 512
[  150.186246][ T9142] EXT4-fs: Ignoring removed nobh option
[  150.203668][ T9142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.1884: corrupted inode contents
[  150.228103][ T3642] bridge_slave_1: left allmulticast mode
[  150.233821][ T3642] bridge_slave_1: left promiscuous mode
[  150.239650][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.248449][ T9142] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.1884: mark_inode_dirty error
[  150.262689][ T3642] bridge_slave_0: left allmulticast mode
[  150.268565][ T3642] bridge_slave_0: left promiscuous mode
[  150.274251][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.287242][ T9142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.1884: corrupted inode contents
[  150.320595][ T9142] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1884: mark_inode_dirty error
[  150.360625][ T9142] __quota_error: 392 callbacks suppressed
[  150.360703][ T9142] Quota error (device loop6): write_blk: dquota write failed
[  150.422530][ T9142] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  150.436219][ T9142] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1884: Failed to acquire dquot type 0
[  150.450987][ T9142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1884: corrupted inode contents
[  150.466092][ T9142] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1884: mark_inode_dirty error
[  150.478677][ T9142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1884: corrupted inode contents
[  150.490963][ T9142] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1884: mark_inode_dirty error
[  150.506833][ T9142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1884: corrupted inode contents
[  150.520737][ T9142] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  150.530736][ T9142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1884: corrupted inode contents
[  150.546499][ T9142] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1884: mark_inode_dirty error
[  150.558365][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.567322][ T9142] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  150.577235][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.587208][ T3642] bond0 (unregistering): Released all slaves
[  150.596611][ T9142] EXT4-fs (loop6): 1 truncate cleaned up
[  150.602969][ T3642] bond1 (unregistering): (slave veth5): Releasing active interface
[  150.611662][ T9142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.624997][ T9142] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.636934][ T3642] bond1 (unregistering): Released all slaves
[  150.690021][ T3642] hsr_slave_0: left promiscuous mode
[  150.696796][ T3642] hsr_slave_1: left promiscuous mode
[  150.705865][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.720269][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.785893][ T3642] team0 (unregistering): Port device team_slave_1 removed
[  150.798778][ T3642] team0 (unregistering): Port device team_slave_0 removed
[  150.882126][   T29] audit: type=1326 audit(1755730800.023:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  150.908941][   T29] audit: type=1326 audit(1755730800.053:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  150.932687][   T29] audit: type=1326 audit(1755730800.053:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  150.956411][   T29] audit: type=1326 audit(1755730800.053:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  150.979995][   T29] audit: type=1326 audit(1755730800.053:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  151.038274][ T8466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.073506][   T29] audit: type=1326 audit(1755730800.083:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  151.097170][   T29] audit: type=1326 audit(1755730800.083:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  151.120878][   T29] audit: type=1326 audit(1755730800.083:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357adebe9 code=0x7ffc0000
[  151.123183][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1897'.
[  151.157391][ T9168] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1898'.
[  151.185250][ T9166] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.207153][ T9174] vlan0: entered allmulticast mode
[  151.212574][ T9174] bond2: entered allmulticast mode
[  151.372915][ T9198] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.970409][ T1036] IPVS: starting estimator thread 0...
[  152.097000][ T9224] IPVS: using max 2352 ests per chain, 117600 per kthread
[  152.453787][ T9235] netlink: 'syz.6.1921': attribute type 10 has an invalid length.
[  152.512245][ T9235] team0: Port device dummy0 added
[  152.537398][ T9235] netlink: 'syz.6.1921': attribute type 10 has an invalid length.
[  152.548896][ T9235] team0: Port device dummy0 removed
[  152.556851][ T9235] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  152.651750][ T9247] vlan3: entered allmulticast mode
[  152.658677][ T9247] dummy0: entered allmulticast mode
[  152.706800][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1928'.
[  152.743518][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1929'.
[  152.831476][ T9259] bond0: (slave dummy0): Releasing backup interface
[  152.846150][ T9259] bridge_slave_0: left allmulticast mode
[  152.851936][ T9259] bridge_slave_0: left promiscuous mode
[  152.857834][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.868657][ T9259] bridge_slave_1: left allmulticast mode
[  152.871414][ T9263] sd 0:0:1:0: device reset
[  152.874337][ T9259] bridge_slave_1: left promiscuous mode
[  152.884482][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.909442][ T9259] bond0: (slave bond_slave_0): Releasing backup interface
[  152.920150][ T9259] bond0: (slave bond_slave_1): Releasing backup interface
[  152.933730][ T9259] team0: Port device team_slave_0 removed
[  152.944341][ T9259] team0: Port device team_slave_1 removed
[  152.951914][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.959697][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.969816][ T9271] netlink: 'syz.5.1936': attribute type 10 has an invalid length.
[  152.971031][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.985312][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.036223][ T9271] bond0 (unregistering): Released all slaves
[  153.294720][ T9280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9280 comm=syz.6.1939
[  153.308005][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1939'.
[  153.461086][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1944'.
[  153.505050][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'.
[  153.522452][ T9302] netlink: 'syz.7.1946': attribute type 1 has an invalid length.
[  153.539094][ T9302] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.551109][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1946'.
[  153.566087][ T9302] bond4 (unregistering): Released all slaves
[  153.642162][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1949'.
[  153.781470][ T9321] lo: left allmulticast mode
[  153.804305][ T9321] tunl0: left allmulticast mode
[  153.814943][ T9321] gre0: left allmulticast mode
[  153.823511][ T9321] gretap0: left allmulticast mode
[  153.847208][ T9321] erspan0: left allmulticast mode
[  153.853522][ T9321] ip_vti0: left allmulticast mode
[  153.860033][ T9321] ip6_vti0: left allmulticast mode
[  153.866159][ T9321] sit0: left allmulticast mode
[  153.908793][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'.
[  153.967998][ T9321] ip6tnl0: left allmulticast mode
[  153.993762][ T9321] ip6gre0: left allmulticast mode
[  154.006374][ T9321] syz_tun: left allmulticast mode
[  154.013968][ T9321] ip6gretap0: left allmulticast mode
[  154.020470][ T9321] bridge0: left allmulticast mode
[  154.032316][ T9321] vcan0: left allmulticast mode
[  154.047404][ T9321] bond0: left allmulticast mode
[  154.053088][ T9321] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.062535][ T9321] team0: left allmulticast mode
[  154.072598][ T9321] 8021q: adding VLAN 0 to HW filter on device team0
[  154.085239][ T9321] dummy0: left allmulticast mode
[  154.093676][ T9321] nlmon0: left allmulticast mode
[  154.102415][ T9321] caif0: left allmulticast mode
[  154.107362][ T9321] net_ratelimit: 2 callbacks suppressed
[  154.107377][ T9321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.734644][ T9348] loop6: detected capacity change from 0 to 8192
[  154.827834][ T9355] loop6: detected capacity change from 0 to 164
[  154.860210][ T9355] bio_check_eod: 890 callbacks suppressed
[  154.860233][ T9355] syz.6.1968: attempt to access beyond end of device
[  154.860233][ T9355] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  154.886974][ T9355] syz.6.1968: attempt to access beyond end of device
[  154.886974][ T9355] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  155.109305][ T9372] syzkaller0: entered promiscuous mode
[  155.114834][ T9372] syzkaller0: entered allmulticast mode
[  155.174930][ T9378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9378 comm=syz.2.1978
[  155.238723][ T9383] ªªªªªª: renamed from vlan0
[  155.349742][ T9397] loop2: detected capacity change from 0 to 2048
[  155.381292][   T29] kauditd_printk_skb: 298 callbacks suppressed
[  155.381310][   T29] audit: type=1400 audit(1755730804.523:3978): avc:  denied  { create } for  pid=9402 comm="syz.6.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  155.410999][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.423139][   T29] audit: type=1400 audit(1755730804.523:3979): avc:  denied  { connect } for  pid=9402 comm="syz.6.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  155.423330][ T9401] bond0 (unregistering): (slave 
5
@ÿ): Releasing backup interface
[  155.442987][   T29] audit: type=1400 audit(1755730804.563:3980): avc:  denied  { write } for  pid=9404 comm="syz.5.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  155.449653][ T9397] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.483880][   T29] audit: type=1400 audit(1755730804.593:3981): avc:  denied  { mount } for  pid=9396 comm="syz.2.1986" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  155.505672][   T29] audit: type=1326 audit(1755730804.613:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.6.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bca5ebe9 code=0x7ffc0000
[  155.506275][ T9401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.529235][   T29] audit: type=1326 audit(1755730804.613:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.6.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f27bca5ebe9 code=0x7ffc0000
[  155.529273][   T29] audit: type=1326 audit(1755730804.613:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.6.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bca5ebe9 code=0x7ffc0000
[  155.529301][   T29] audit: type=1326 audit(1755730804.613:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.6.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f27bca5ebe9 code=0x7ffc0000
[  155.608176][   T29] audit: type=1326 audit(1755730804.613:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.6.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bca5ebe9 code=0x7ffc0000
[  155.631669][   T29] audit: type=1326 audit(1755730804.613:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.6.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f27bca5ebe9 code=0x7ffc0000
[  155.657031][ T9401] bond0 (unregistering): (slave team0): Releasing backup interface
[  155.666519][ T9401] bond0 (unregistering): Released all slaves
[  155.747311][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.796845][ T9425] loop2: detected capacity change from 0 to 2048
[  155.834310][ T9425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.852481][ T9425] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.871546][ T9425] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.1997: bit already cleared for inode 15
[  156.039709][ T9451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=9451 comm=syz.3.2007
[  156.052943][ T9451] netlink: 'syz.3.2007': attribute type 13 has an invalid length.
[  156.101873][ T9451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.121866][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.487198][ T9468] __nla_validate_parse: 3 callbacks suppressed
[  156.487217][ T9468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2012'.
[  156.502750][ T9468] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  156.518776][ T9468] loop2: detected capacity change from 0 to 1024
[  156.526068][ T9468] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  156.538690][ T9468] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  156.547925][ T9468] EXT4-fs (loop2): orphan cleanup on readonly fs
[  156.548462][ T9473] netlink: 'syz.5.2014': attribute type 3 has an invalid length.
[  156.554555][ T9468] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  156.576753][ T9468] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  156.585550][ T9468] EXT4-fs (loop2): 1 truncate cleaned up
[  156.591638][ T9468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  156.619569][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.644076][ T9477] loop2: detected capacity change from 0 to 1024
[  156.650824][ T9477] EXT4-fs: Ignoring removed orlov option
[  156.660842][ T9477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.715833][ T9480] 9pnet: p9_errstr2errno: server reported unknown error 
[  156.845707][ T9488] bridge0: port 1(bond0) entered blocking state
[  156.852078][ T9488] bridge0: port 1(bond0) entered disabled state
[  156.868810][ T9488] bond0: entered allmulticast mode
[  156.875480][ T9488] bond0: entered promiscuous mode
[  156.885237][ T9488] bond0: left allmulticast mode
[  156.890264][ T9488] bond0: left promiscuous mode
[  156.895230][ T9488] bridge0: port 1(bond0) entered disabled state
[  156.967043][ T9492] sd 0:0:1:0: device reset
[  156.992107][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2033'.
[  157.019411][ T9495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9495 comm=syz.7.2033
[  157.106834][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2027'.
[  157.115938][ T9504] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2027'.
[  157.142293][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2027'.
[  157.152489][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.162243][ T9504] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2027'.
[  157.171334][ T9504] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2027'.
[  157.232011][ T9507] netlink: 'syz.6.2029': attribute type 1 has an invalid length.
[  157.280319][ T9507] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.308960][ T9507] bond2: (slave geneve2): making interface the new active one
[  157.318533][ T9507] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  157.363444][ T9514] vlan2: entered allmulticast mode
[  157.368781][ T9514] bridge_slave_0: entered allmulticast mode
[  157.456487][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'.
[  157.465637][ T9520] netlink: 'syz.3.2035': attribute type 20 has an invalid length.
[  157.480975][ T3682] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.497075][ T9521] ip6gre1: entered allmulticast mode
[  157.506655][ T3682] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.518265][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'.
[  157.527337][ T9520] netlink: 'syz.3.2035': attribute type 20 has an invalid length.
[  157.535888][ T3682] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.561484][ T3682] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.983954][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'.
[  158.746357][ T9576] bridge_slave_0: left allmulticast mode
[  158.752284][ T9576] bridge_slave_0: left promiscuous mode
[  158.758041][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.934013][ T9576] bridge_slave_1: left allmulticast mode
[  158.939737][ T9576] bridge_slave_1: left promiscuous mode
[  158.945464][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.962481][ T9576] team0: Port device team_slave_0 removed
[  158.971335][ T9576] team0: Port device team_slave_1 removed
[  158.982578][ T9576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.990071][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.013079][ T9576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.020616][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.517436][ T9612] vlan0: entered allmulticast mode
[  159.522760][ T9612] bridge_slave_0: entered allmulticast mode
[  159.563094][ T9614] bridge0: entered promiscuous mode
[  159.582758][ T9614] bridge0: port 3(macvlan2) entered blocking state
[  159.589439][ T9614] bridge0: port 3(macvlan2) entered disabled state
[  159.627452][ T9614] macvlan2: entered allmulticast mode
[  159.632889][ T9614] bridge0: entered allmulticast mode
[  159.659400][ T9614] macvlan2: left allmulticast mode
[  159.664661][ T9614] bridge0: left allmulticast mode
[  159.685459][ T9614] bridge0: left promiscuous mode
[  160.011314][ T9651] netlink: 'syz.7.2087': attribute type 1 has an invalid length.
[  160.044145][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.094715][ T9651] vlan0: entered promiscuous mode
[  160.099825][ T9651] bond0: entered promiscuous mode
[  160.109474][ T9651] dummy0: entered promiscuous mode
[  160.119179][ T9651] bond0: (slave dummy0): making interface the new active one
[  160.127966][ T9651] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  160.136641][ T9656] pim6reg1: entered promiscuous mode
[  160.142007][ T9656] pim6reg1: entered allmulticast mode
[  160.423512][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  160.423528][   T29] audit: type=1400 audit(1755730809.563:4105): avc:  denied  { write } for  pid=9677 comm="syz.7.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.521916][   T29] audit: type=1400 audit(1755730809.643:4106): avc:  denied  { execute_no_trans } for  pid=9682 comm="syz.7.2099" path="/177/file0" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  160.551132][ T9687] loop2: detected capacity change from 0 to 512
[  160.568629][ T9687] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.589748][ T9687] EXT4-fs (loop2): failed to initialize system zone (-117)
[  160.599590][ T9687] EXT4-fs (loop2): mount failed
[  160.661743][   T29] audit: type=1400 audit(1755730809.803:4107): avc:  denied  { setopt } for  pid=9697 comm="syz.6.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  160.681800][ T9701] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  160.871545][ T9716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.882197][ T9716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.001820][ T9716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.012285][ T9716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.092163][ T9716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.102803][ T9716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.160334][ T9716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.170909][ T9716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.250976][ T3679] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.260002][ T3679] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.288702][ T3679] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.296964][ T3679] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.337285][ T3679] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.345583][ T3679] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.384302][ T3679] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.392717][ T3679] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.846954][   T29] audit: type=1400 audit(1755730810.983:4108): avc:  denied  { write } for  pid=9739 comm="syz.6.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  161.866794][   T29] audit: type=1400 audit(1755730810.993:4109): avc:  denied  { write } for  pid=9741 comm="syz.7.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  161.923079][ T9750] ªªªªªª: renamed from vlan0 (while UP)
[  161.957461][   T29] audit: type=1400 audit(1755730810.993:4110): avc:  denied  { prog_load } for  pid=9741 comm="syz.7.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  161.977116][   T29] audit: type=1400 audit(1755730810.993:4111): avc:  denied  { bpf } for  pid=9741 comm="syz.7.2123" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.998045][   T29] audit: type=1400 audit(1755730810.993:4112): avc:  denied  { perfmon } for  pid=9741 comm="syz.7.2123" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  162.019116][   T29] audit: type=1400 audit(1755730811.013:4113): avc:  denied  { read write } for  pid=8155 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  162.043642][   T29] audit: type=1400 audit(1755730811.013:4114): avc:  denied  { open } for  pid=8155 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  162.311112][ T9773] netlink: 'syz.6.2134': attribute type 5 has an invalid length.
[  162.398221][ T9784] loop6: detected capacity change from 0 to 1024
[  162.461764][ T9784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.486441][ T9791] __nla_validate_parse: 4 callbacks suppressed
[  162.486454][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2139'.
[  162.543918][ T9784] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2137: Allocating blocks 449-513 which overlap fs metadata
[  162.546429][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2139'.
[  162.634286][ T9784] EXT4-fs (loop6): pa ffff888106fc2a10: logic 48, phys. 177, len 21
[  162.642503][ T9784] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  162.692617][ T9801] wg2: entered promiscuous mode
[  162.697598][ T9801] wg2: entered allmulticast mode
[  162.704101][ T8466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.758361][ T9810] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.768702][ T9810] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.832244][ T9810] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.842635][ T9810] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.876739][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2144'.
[  162.898863][ T9810] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.908992][ T9810] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.959220][ T9810] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.969435][ T9810] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.037557][ T1709] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.046728][ T1709] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.068329][ T1709] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.077539][ T1709] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.087811][ T1709] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.096769][ T1709] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.105441][ T1709] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.115397][ T1709] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.156269][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2148'.
[  163.184165][ T9822] netlink: 'syz.5.2159': attribute type 39 has an invalid length.
[  163.599749][ T9836] netlink: 'syz.7.2157': attribute type 1 has an invalid length.
[  163.609254][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2155'.
[  163.616609][ T9836] 8021q: adding VLAN 0 to HW filter on device bond4
[  163.638601][ T9836] bond0: (slave dummy0): Releasing active interface
[  163.645745][ T9836] dummy0: left promiscuous mode
[  163.645865][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2155'.
[  163.665306][ T9836] bond4: (slave dummy0): making interface the new active one
[  163.675685][ T9836] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  163.704852][ T9844] 
@ÿ: renamed from bond_slave_0
[  163.755383][ T9854] loop2: detected capacity change from 0 to 164
[  163.771705][ T9854] syz.2.2164: attempt to access beyond end of device
[  163.771705][ T9854] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  163.796666][ T9854] syz.2.2164: attempt to access beyond end of device
[  163.796666][ T9854] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  163.937885][ T9858] SELinux: ebitmap: truncated map
[  163.941777][ T9862] loop2: detected capacity change from 0 to 512
[  163.959797][ T9858] SELinux: failed to load policy
[  163.971370][ T9862] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  163.981491][ T9862] EXT4-fs (loop2): orphan cleanup on readonly fs
[  164.008830][ T9862] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  164.026037][ T9862] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  164.034009][ T9862] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2167: bg 0: block 40: padding at end of block bitmap is not set
[  164.050094][ T9862] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  164.059701][ T9862] EXT4-fs (loop2): 1 truncate cleaned up
[  164.065964][ T9862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.084718][ T9862] netlink: 'syz.2.2167': attribute type 39 has an invalid length.
[  164.246425][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.383919][ T9878] netlink: 'syz.2.2180': attribute type 1 has an invalid length.
[  164.414120][ T9878] 8021q: adding VLAN 0 to HW filter on device bond2
[  164.432935][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2179'.
[  164.441285][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'.
[  164.464265][ T9883] vxlan0: entered promiscuous mode
[  164.487563][ T3682] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.501520][ T9878] bond2 (unregistering): Released all slaves
[  164.526136][ T3682] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.550280][ T3682] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.583609][ T3682] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  165.474721][   T29] kauditd_printk_skb: 168 callbacks suppressed
[  165.474755][   T29] audit: type=1400 audit(1755730814.613:4282): avc:  denied  { execmem } for  pid=9889 comm="syz.5.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  165.528530][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'.
[  165.538708][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'.
[  165.571241][ T9897] loop6: detected capacity change from 0 to 2048
[  165.589773][ T9897] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2186: bad orphan inode 61
[  165.617886][ T9897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.779300][ T9912] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  165.791386][ T8466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.819336][   T29] audit: type=1326 audit(1755730814.963:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  165.852417][ T9920] loop2: detected capacity change from 0 to 1024
[  165.874931][ T9923] 
@ÿ: renamed from bond_slave_0 (while UP)
[  165.883078][   T29] audit: type=1326 audit(1755730814.983:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  165.906844][   T29] audit: type=1326 audit(1755730814.983:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  165.930539][   T29] audit: type=1326 audit(1755730814.983:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  165.934561][ T9924] loop6: detected capacity change from 0 to 512
[  165.954921][   T29] audit: type=1326 audit(1755730814.983:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  165.984915][   T29] audit: type=1326 audit(1755730814.983:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  166.010276][   T29] audit: type=1326 audit(1755730814.983:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  166.034816][   T29] audit: type=1326 audit(1755730814.983:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  166.058450][   T29] audit: type=1326 audit(1755730814.983:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  166.087572][ T9920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.118431][ T9924] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  166.147917][ T9920] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2184: Allocating blocks 449-513 which overlap fs metadata
[  166.166091][ T9924] EXT4-fs (loop6): orphan cleanup on readonly fs
[  166.197907][ T9919] EXT4-fs (loop2): pa ffff888106d864d0: logic 48, phys. 177, len 21
[  166.206364][ T9919] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  166.217937][ T9924] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  166.247055][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.259183][ T9924] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  166.270113][ T9924] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2178: bg 0: block 40: padding at end of block bitmap is not set
[  166.305168][ T9924] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  166.315392][ T9924] EXT4-fs (loop6): 1 truncate cleaned up
[  166.336407][ T9924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.349877][ T9940] loop2: detected capacity change from 0 to 764
[  166.360273][ T9940] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  166.385126][ T9924] netlink: 'syz.6.2178': attribute type 39 has an invalid length.
[  166.509879][ T8466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.053697][ T9952] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  167.148974][ T9959] loop6: detected capacity change from 0 to 512
[  167.164895][ T9959] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  167.184083][ T9959] EXT4-fs (loop6): orphan cleanup on readonly fs
[  167.195951][ T9959] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2210: Block bitmap for bg 0 marked uninitialized
[  167.215652][ T9959] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  167.235175][ T9959] EXT4-fs (loop6): 1 orphan inode deleted
[  167.241905][ T9959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  167.339856][ T8466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.092841][ T9996] cgroup: Invalid name
[  168.129739][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2224'.
[  168.235501][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2218'.
[  168.257995][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2218'.
[  168.284853][T10013] bridge_slave_0: left promiscuous mode
[  168.291268][T10013] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.309300][T10013] bridge_slave_1: left allmulticast mode
[  168.315641][T10013] bridge_slave_1: left promiscuous mode
[  168.321675][T10013] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.359510][T10013] bond0: (slave 
5
@ÿ): Releasing backup interface
[  168.374310][T10013] bond0: (slave bond_slave_1): Releasing backup interface
[  168.432242][T10013] team0: Port device team_slave_0 removed
[  168.463847][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2220'.
[  168.476311][T10013] team0: Port device team_slave_1 removed
[  168.494006][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.501956][T10013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.562730][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.570240][T10013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.654654][T10025] bridge0: entered promiscuous mode
[  168.667735][T10025] bridge0: port 1(macvlan2) entered blocking state
[  168.674382][T10025] bridge0: port 1(macvlan2) entered disabled state
[  168.722662][T10025] macvlan2: entered allmulticast mode
[  168.729125][T10025] bridge0: entered allmulticast mode
[  168.779960][T10025] macvlan2: left allmulticast mode
[  168.785241][T10025] bridge0: left allmulticast mode
[  168.797094][T10025] bridge0: left promiscuous mode
[  168.907335][T10037] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  168.980809][T10040] cgroup: Invalid name
[  169.031325][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2230'.
[  169.110598][T10045] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.140503][T10045] vlan0: entered allmulticast mode
[  169.145697][T10045] bond1: entered allmulticast mode
[  169.386745][T10060] netlink: 'syz.2.2235': attribute type 10 has an invalid length.
[  169.416274][T10060] team0: Port device dummy0 added
[  169.432977][T10060] netlink: 'syz.2.2235': attribute type 10 has an invalid length.
[  169.445243][T10060] team0: Port device dummy0 removed
[  169.455254][T10060] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  169.506331][T10059] infiniband syz!: set down
[  169.511044][T10059] infiniband syz!: added team_slave_0
[  169.522882][T10059] RDS/IB: syz!: added
[  169.527193][T10059] smc: adding ib device syz! with port count 1
[  169.533637][T10059] smc:    ib device syz! port 1 has pnetid 
[  169.912430][ T3381] IPVS: starting estimator thread 0...
[  169.950458][T10087] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2243'.
[  170.004132][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2243'.
[  170.037024][T10084] IPVS: using max 2016 ests per chain, 100800 per kthread
[  170.100924][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2244'.
[  170.161740][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2244'.
[  170.671771][   T29] kauditd_printk_skb: 108 callbacks suppressed
[  170.671788][   T29] audit: type=1400 audit(1755730819.813:4399): avc:  denied  { mounton } for  pid=10104 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  170.793506][T10107] bond2: (slave geneve2): Releasing active interface
[  170.870181][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2252'.
[  170.914559][T10107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.939603][T10115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10115 comm=syz.2.2252
[  171.212911][T10104] chnl_net:caif_netlink_parms(): no params data found
[  171.469030][   T29] audit: type=1400 audit(1755730820.603:4400): avc:  denied  { write } for  pid=10133 comm="syz.6.2258" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  171.567601][T10104] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.575168][T10104] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.613259][T10104] bridge_slave_0: entered allmulticast mode
[  171.619882][T10104] bridge_slave_0: entered promiscuous mode
[  171.627016][T10104] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.634098][T10104] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.641417][T10104] bridge_slave_1: entered allmulticast mode
[  171.647971][T10104] bridge_slave_1: entered promiscuous mode
[  171.675450][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.686122][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.733170][T10104] team0: Port device team_slave_0 added
[  171.754494][T10104] team0: Port device team_slave_1 added
[  171.814816][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.821858][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.847891][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.859399][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.866612][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.893178][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.927187][T10104] hsr_slave_0: entered promiscuous mode
[  171.933677][T10104] hsr_slave_1: entered promiscuous mode
[  171.939719][T10104] debugfs: 'hsr0' already exists in 'hsr'
[  171.945793][T10104] Cannot create hsr debugfs directory
[  172.019185][T10104] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.029270][T10104] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.093445][T10148] loop2: detected capacity change from 0 to 128
[  172.101859][T10104] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.111856][T10104] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.131585][T10148] FAT-fs (loop2): Directory bread(block 32) failed
[  172.138292][T10148] FAT-fs (loop2): Directory bread(block 33) failed
[  172.144862][T10148] FAT-fs (loop2): Directory bread(block 34) failed
[  172.157776][T10152] bridge0: entered promiscuous mode
[  172.163362][T10148] FAT-fs (loop2): Directory bread(block 35) failed
[  172.173119][T10152] bridge0: port 1(macvlan0) entered blocking state
[  172.180011][T10152] bridge0: port 1(macvlan0) entered disabled state
[  172.189064][T10148] FAT-fs (loop2): Directory bread(block 36) failed
[  172.195832][T10148] FAT-fs (loop2): Directory bread(block 37) failed
[  172.203032][T10152] macvlan0: entered allmulticast mode
[  172.208548][T10152] bridge0: entered allmulticast mode
[  172.217276][T10148] FAT-fs (loop2): Directory bread(block 38) failed
[  172.224472][T10148] FAT-fs (loop2): Directory bread(block 39) failed
[  172.231603][T10148] FAT-fs (loop2): Directory bread(block 40) failed
[  172.238366][T10148] FAT-fs (loop2): Directory bread(block 41) failed
[  172.238474][T10152] macvlan0: left allmulticast mode
[  172.250080][T10152] bridge0: left allmulticast mode
[  172.261462][T10152] bridge0: left promiscuous mode
[  172.272912][T10104] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.279302][   T29] audit: type=1400 audit(1755730821.413:4401): avc:  denied  { mount } for  pid=10147 comm="syz.2.2261" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  172.282799][T10104] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.357810][   T29] audit: type=1400 audit(1755730821.503:4402): avc:  denied  { unmount } for  pid=8155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  172.390588][T10104] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.401115][T10104] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.487363][T10104] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  172.513728][T10162] bridge0: entered promiscuous mode
[  172.521752][T10162] bridge0: port 1(macvlan2) entered blocking state
[  172.528633][T10162] bridge0: port 1(macvlan2) entered disabled state
[  172.535611][T10162] macvlan2: entered allmulticast mode
[  172.541224][T10162] bridge0: entered allmulticast mode
[  172.549544][T10162] macvlan2: left allmulticast mode
[  172.554816][T10162] bridge0: left allmulticast mode
[  172.561551][T10162] bridge0: left promiscuous mode
[  172.574120][T10167] 9pnet: p9_errstr2errno: server reported unknown error 
[  172.592919][T10104] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  172.602824][T10104] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  172.611917][T10104] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  172.657047][T10104] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.695067][T10104] 8021q: adding VLAN 0 to HW filter on device team0
[  172.704149][   T29] audit: type=1400 audit(1755730821.853:4403): avc:  denied  { create } for  pid=10177 comm="syz.2.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  172.708225][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.732472][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.809116][T10104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  172.820297][T10104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.836338][   T29] audit: type=1326 audit(1755730821.983:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  172.861314][   T29] audit: type=1326 audit(1755730821.983:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  172.885454][   T29] audit: type=1326 audit(1755730821.983:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  172.903056][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.908956][   T29] audit: type=1326 audit(1755730821.983:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  172.916032][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.939439][   T29] audit: type=1326 audit(1755730821.983:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  172.971821][T10183] loop2: detected capacity change from 0 to 1024
[  172.979490][T10183] EXT4-fs: inline encryption not supported
[  173.010005][T10183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.054232][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.159905][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.363575][T10104] veth0_vlan: entered promiscuous mode
[  173.371903][T10104] veth1_vlan: entered promiscuous mode
[  173.392855][T10104] veth0_macvtap: entered promiscuous mode
[  173.402568][T10104] veth1_macvtap: entered promiscuous mode
[  173.414461][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.429537][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.443466][ T3682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.455439][ T3682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.470100][ T3682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.479646][ T3682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.651823][T10227] __nla_validate_parse: 2 callbacks suppressed
[  173.651841][T10227] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2273'.
[  173.680619][T10227] bond0 (unregistering): (slave 
5
@ÿ): Releasing backup interface
[  173.691482][T10227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.702152][T10227] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  173.713138][T10227] bond0 (unregistering): Released all slaves
[  174.126729][T10256] lo: entered allmulticast mode
[  174.133812][T10256] tunl0: entered allmulticast mode
[  174.140986][T10256] gre0: entered allmulticast mode
[  174.152116][T10256] gretap0: entered allmulticast mode
[  174.159452][T10256] erspan0: entered allmulticast mode
[  174.168828][T10256] ip_vti0: entered allmulticast mode
[  174.175702][T10256] ip6_vti0: entered allmulticast mode
[  174.184171][T10256] sit0: entered allmulticast mode
[  174.192085][T10256] ip6tnl0: entered allmulticast mode
[  174.199232][T10256] ip6gre0: entered allmulticast mode
[  174.207133][T10256] syz_tun: entered allmulticast mode
[  174.229237][T10256] ip6gretap0: entered allmulticast mode
[  174.287005][T10256] bridge0: entered allmulticast mode
[  174.311154][T10256] vcan0: entered allmulticast mode
[  174.324002][T10256] bond0: entered allmulticast mode
[  174.341386][T10256] team0: entered allmulticast mode
[  174.355982][T10256] dummy0: entered allmulticast mode
[  174.371958][T10256] nlmon0: entered allmulticast mode
[  174.391019][T10256] caif0: entered allmulticast mode
[  174.401959][T10256] batadv0: entered allmulticast mode
[  174.439550][T10256] vxcan0: entered allmulticast mode
[  174.446319][T10256] vxcan1: entered allmulticast mode
[  174.453485][T10256] veth0: entered allmulticast mode
[  174.463129][T10256] veth1: entered allmulticast mode
[  174.471482][T10256] wg0: entered allmulticast mode
[  174.479820][T10256] wg2: left promiscuous mode
[  174.485876][T10256] veth0_to_bridge: entered allmulticast mode
[  174.503042][T10256] veth1_to_bridge: entered allmulticast mode
[  174.522436][T10256] bridge_slave_1: entered allmulticast mode
[  174.672071][T10256] veth0_to_bond: entered allmulticast mode
[  174.687211][T10256] 
@ÿ: entered allmulticast mode
[  174.708505][T10256] veth1_to_bond: entered allmulticast mode
[  174.729046][T10256] bond_slave_1: entered allmulticast mode
[  174.748814][T10256] veth0_to_team: entered allmulticast mode
[  174.781167][T10256] team_slave_0: entered allmulticast mode
[  174.809571][T10256] veth1_to_team: entered allmulticast mode
[  174.838123][T10256] team_slave_1: entered allmulticast mode
[  174.857653][T10256] veth0_to_batadv: entered allmulticast mode
[  174.865841][T10256] batadv_slave_0: entered allmulticast mode
[  174.897570][T10256] veth1_to_batadv: entered allmulticast mode
[  174.904280][T10272] netlink: 'syz.6.2292': attribute type 1 has an invalid length.
[  174.905564][T10256] batadv_slave_1: entered allmulticast mode
[  174.942815][T10256] xfrm0: entered allmulticast mode
[  174.949325][T10256] veth0_to_hsr: entered allmulticast mode
[  174.955988][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2292'.
[  174.966494][T10256] hsr_slave_0: entered allmulticast mode
[  174.973468][T10256] veth1_to_hsr: entered allmulticast mode
[  174.980620][T10256] hsr_slave_1: entered allmulticast mode
[  174.988424][T10256] hsr0: entered allmulticast mode
[  174.994898][T10256] veth1_virt_wifi: entered allmulticast mode
[  175.002837][T10256] veth0_virt_wifi: entered allmulticast mode
[  175.010491][T10256] veth1_macvtap: entered allmulticast mode
[  175.018260][T10256] veth0_macvtap: entered allmulticast mode
[  175.027370][T10256] macvtap0: entered allmulticast mode
[  175.042765][T10256] macsec0: entered allmulticast mode
[  175.050411][T10256] geneve0: entered allmulticast mode
[  175.059250][T10256] geneve1: entered allmulticast mode
[  175.066709][T10256] @: entered allmulticast mode
[  175.072777][T10256] netdevsim netdevsim3 eth0: entered allmulticast mode
[  175.081297][T10256] netdevsim netdevsim3 eth1: entered allmulticast mode
[  175.088934][T10256] netdevsim netdevsim3 eth2: entered allmulticast mode
[  175.096297][T10256] netdevsim netdevsim3 eth3: entered allmulticast mode
[  175.119044][T10272] 8021q: adding VLAN 0 to HW filter on device bond3
[  175.139923][T10273] bond3 (unregistering): Released all slaves
[  175.151598][ T3673] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.160361][ T3673] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.172199][ T3673] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.180695][ T3673] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.229352][ T3673] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.239012][ T3673] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.255147][ T3673] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.263876][ T3673] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.325014][T10276] loop6: detected capacity change from 0 to 512
[  175.350144][T10276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.373306][T10276] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.486006][ T8466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.716298][   T29] kauditd_printk_skb: 78 callbacks suppressed
[  175.716374][   T29] audit: type=1326 audit(1755730824.853:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.746656][   T29] audit: type=1326 audit(1755730824.853:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.772008][   T29] audit: type=1326 audit(1755730824.923:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.795602][   T29] audit: type=1326 audit(1755730824.923:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.819576][   T29] audit: type=1326 audit(1755730824.923:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.844268][   T29] audit: type=1326 audit(1755730824.923:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.868303][   T29] audit: type=1326 audit(1755730824.923:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.891875][   T29] audit: type=1326 audit(1755730824.923:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.915839][   T29] audit: type=1326 audit(1755730824.923:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  175.939419][   T29] audit: type=1326 audit(1755730824.923:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6124f2ebe9 code=0x7ffc0000
[  176.008658][T10302] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2310'.
[  176.055714][T10311] netlink: 'syz.2.2300': attribute type 1 has an invalid length.
[  176.082407][T10311] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.177858][T10317] bond0: (slave dummy0): making interface the new active one
[  176.209606][T10317] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  176.297731][T10327] lo: entered allmulticast mode
[  176.307592][T10327] tunl0: entered allmulticast mode
[  176.315419][T10327] gre0: entered allmulticast mode
[  176.354523][T10327] gretap0: entered allmulticast mode
[  176.361785][T10327] erspan0: entered allmulticast mode
[  176.375567][T10327] ip_vti0: entered allmulticast mode
[  176.388653][T10327] ip6_vti0: entered allmulticast mode
[  176.400823][T10327] sit0: entered allmulticast mode
[  176.413722][T10327] ip6tnl0: entered allmulticast mode
[  176.422656][T10327] ip6gre0: entered allmulticast mode
[  176.442804][T10327] syz_tun: entered allmulticast mode
[  176.456267][T10327] ip6gretap0: entered allmulticast mode
[  176.479793][T10327] bridge0: entered allmulticast mode
[  176.489619][T10327] vcan0: entered allmulticast mode
[  176.495632][T10327] team0: entered allmulticast mode
[  176.503469][T10327] nlmon0: entered allmulticast mode
[  176.510067][T10327] caif0: entered allmulticast mode
[  176.515353][T10327] batadv0: entered allmulticast mode
[  176.522889][T10327] vxcan0: entered allmulticast mode
[  176.529408][T10327] vxcan1: entered allmulticast mode
[  176.535593][T10327] veth0: entered allmulticast mode
[  176.542214][T10327] veth1: entered allmulticast mode
[  176.550311][T10327] wg1: entered allmulticast mode
[  176.566788][T10327] wg2: left promiscuous mode
[  176.573073][T10327] veth0_to_bridge: entered allmulticast mode
[  176.583384][T10327] bridge_slave_0: entered allmulticast mode
[  176.592286][T10327] veth1_to_bridge: entered allmulticast mode
[  176.600468][T10327] bridge_slave_1: entered allmulticast mode
[  176.608550][T10327] veth0_to_bond: entered allmulticast mode
[  176.615899][T10327] bond_slave_0: entered allmulticast mode
[  176.622503][T10327] veth1_to_bond: entered allmulticast mode
[  176.631236][T10327] bond_slave_1: entered allmulticast mode
[  176.638055][T10327] veth0_to_team: entered allmulticast mode
[  176.645497][T10327] team_slave_0: entered allmulticast mode
[  176.651924][T10327] veth1_to_team: entered allmulticast mode
[  176.659212][T10327] team_slave_1: entered allmulticast mode
[  176.665502][T10327] veth0_to_batadv: entered allmulticast mode
[  176.673223][T10327] batadv_slave_0: entered allmulticast mode
[  176.680875][T10327] veth1_to_batadv: entered allmulticast mode
[  176.689147][T10327] batadv_slave_1: entered allmulticast mode
[  176.696501][T10327] xfrm0: entered allmulticast mode
[  176.703132][T10327] veth0_to_hsr: entered allmulticast mode
[  176.719205][T10327] hsr_slave_0: entered allmulticast mode
[  176.726381][T10327] veth1_to_hsr: entered allmulticast mode
[  176.734426][T10327] hsr_slave_1: entered allmulticast mode
[  176.741688][T10327] hsr0: entered allmulticast mode
[  176.748906][T10327] veth1_virt_wifi: entered allmulticast mode
[  176.756658][T10327] veth0_virt_wifi: entered allmulticast mode
[  176.764762][T10327] veth1_vlan: entered allmulticast mode
[  176.772081][T10327] veth0_vlan: entered allmulticast mode
[  176.781895][T10327] vlan0: entered allmulticast mode
[  176.788051][T10327] vlan1: entered allmulticast mode
[  176.793745][T10327] macvlan0: entered allmulticast mode
[  176.800902][T10327] macvlan1: entered allmulticast mode
[  176.807773][T10327] ipvlan0: entered allmulticast mode
[  176.813439][T10327] ipvlan1: entered allmulticast mode
[  176.819507][T10327] veth1_macvtap: entered allmulticast mode
[  176.827098][T10327] veth0_macvtap: entered allmulticast mode
[  176.834626][T10327] macvtap0: entered allmulticast mode
[  176.841805][T10327] macsec0: entered allmulticast mode
[  176.848844][T10327] geneve0: entered allmulticast mode
[  176.855530][T10327] geneve1: entered allmulticast mode
[  176.862244][T10327] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  176.870916][T10327] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[  176.879269][T10327] netdevsim netdevsim5 netdevsim2: entered allmulticast mode
[  176.887958][T10327] netdevsim netdevsim5 netdevsim3: entered allmulticast mode
[  176.896134][T10327] bond1: entered allmulticast mode
[  176.902224][T10327] geneve2: entered allmulticast mode
[  176.909432][T10327] bond2: entered allmulticast mode
[  176.915525][T10327] vlan2: left promiscuous mode
[  176.920357][T10327] bond2: left promiscuous mode
[  176.925594][T10327] vlan2: entered allmulticast mode
[  176.932133][T10327] bond3: entered allmulticast mode
[  176.938351][T10327] gre1: entered allmulticast mode
[  176.944899][T10327] vxlan0: left promiscuous mode
[  176.953871][T10327] vxlan0: entered allmulticast mode
[  176.959915][T10327] veth2: entered allmulticast mode
[  176.965128][T10327] veth3: entered allmulticast mode
[  176.970710][T10327] gre2: entered allmulticast mode
[  176.995373][ T3662] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.004820][ T3662] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.027652][ T3662] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.036574][ T3662] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.056980][ T3662] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.066210][ T3662] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.075983][ T3662] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.085042][ T3662] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.095772][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2325'.
[  177.133821][T10360] netlink: 'syz.6.2317': attribute type 1 has an invalid length.
[  177.155247][T10360] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.170328][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2317'.
[  177.182395][T10360] bond3 (unregistering): Released all slaves
[  177.255348][T10365] netlink: 'syz.6.2319': attribute type 1 has an invalid length.
[  177.271123][T10365] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.298582][T10365] bond3: (slave dummy0): making interface the new active one
[  177.307782][T10365] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  177.402880][T10373] loop2: detected capacity change from 0 to 128
[  177.413552][T10373] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  177.426289][T10373] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.566164][ T8155] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.776163][T10380] loop2: detected capacity change from 0 to 8192
[  177.850681][T10385] netlink: 'syz.3.2327': attribute type 1 has an invalid length.
[  177.863751][T10385] 8021q: adding VLAN 0 to HW filter on device bond2
[  177.875603][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'.
[  177.886699][T10385] bond2 (unregistering): Released all slaves
[  177.985559][T10391] lo: entered allmulticast mode
[  178.011307][T10391] tunl0: entered allmulticast mode
[  178.019497][T10391] gre0: entered allmulticast mode
[  178.036846][T10391] gretap0: entered allmulticast mode
[  178.055022][T10391] erspan0: entered allmulticast mode
[  178.072719][T10391] ip_vti0: entered allmulticast mode
[  178.081360][T10391] ip6_vti0: entered allmulticast mode
[  178.102199][T10391] sit0: entered allmulticast mode
[  178.122469][T10391] ip6tnl0: entered allmulticast mode
[  178.130760][T10391] ip6gre0: entered allmulticast mode
[  178.137945][T10391] syz_tun: entered allmulticast mode
[  178.145226][T10391] ip6gretap0: entered allmulticast mode
[  178.172035][T10391] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.179296][T10391] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.206815][T10391] bridge0: entered allmulticast mode
[  178.221810][T10391] vcan0: entered allmulticast mode
[  178.238424][T10391] bond0: entered allmulticast mode
[  178.243611][T10391] bond_slave_0: entered allmulticast mode
[  178.249717][T10391] bond_slave_1: entered allmulticast mode
[  178.276187][T10391] team0: entered allmulticast mode
[  178.281542][T10391] team_slave_0: entered allmulticast mode
[  178.287305][T10391] team_slave_1: entered allmulticast mode
[  178.303562][T10391] dummy0: entered allmulticast mode
[  178.319419][T10391] nlmon0: entered allmulticast mode
[  178.336000][T10391] caif0: entered allmulticast mode
[  178.345171][T10391] batadv0: entered allmulticast mode
[  178.361888][T10391] vxcan0: entered allmulticast mode
[  178.368491][T10391] vxcan1: entered allmulticast mode
[  178.375113][T10391] veth0: entered allmulticast mode
[  178.384422][T10391] veth1: entered allmulticast mode
[  178.392022][T10391] wg0: entered allmulticast mode
[  178.400762][T10391] wg1: entered allmulticast mode
[  178.407597][T10391] wg2: entered allmulticast mode
[  178.419710][T10391] veth0_to_bridge: entered allmulticast mode
[  178.429624][T10391] veth1_to_bridge: entered allmulticast mode
[  178.450168][T10391] veth0_to_bond: entered allmulticast mode
[  178.459112][T10391] veth1_to_bond: entered allmulticast mode
[  178.468175][T10391] veth0_to_team: entered allmulticast mode
[  178.478183][T10391] veth1_to_team: entered allmulticast mode
[  178.488813][T10391] veth0_to_batadv: entered allmulticast mode
[  178.496524][T10391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.504750][T10391] batadv_slave_0: entered allmulticast mode
[  178.512283][T10391] veth1_to_batadv: entered allmulticast mode
[  178.520224][T10391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.528174][T10391] batadv_slave_1: entered allmulticast mode
[  178.535810][T10391] xfrm0: entered allmulticast mode
[  178.542633][T10391] veth0_to_hsr: entered allmulticast mode
[  178.550010][T10391] hsr_slave_0: entered allmulticast mode
[  178.556442][T10391] veth1_to_hsr: entered allmulticast mode
[  178.563241][T10391] hsr_slave_1: entered allmulticast mode
[  178.570818][T10391] hsr0: entered allmulticast mode
[  178.577048][T10391] veth1_virt_wifi: entered allmulticast mode
[  178.584226][T10391] veth0_virt_wifi: entered allmulticast mode
[  178.591736][T10391] veth1_vlan: entered allmulticast mode
[  178.599200][T10391] veth0_vlan: entered allmulticast mode
[  178.608695][T10391] vlan0: entered allmulticast mode
[  178.613939][T10391] vlan1: entered allmulticast mode
[  178.619456][T10391] macvlan0: entered allmulticast mode
[  178.626144][T10391] macvlan1: entered allmulticast mode
[  178.634229][T10391] ipvlan0: entered allmulticast mode
[  178.639907][T10391] ipvlan1: entered allmulticast mode
[  178.645475][T10391] veth1_macvtap: entered allmulticast mode
[  178.652286][T10391] veth0_macvtap: entered allmulticast mode
[  178.659419][T10391] macvtap0: entered allmulticast mode
[  178.665990][T10391] macsec0: entered allmulticast mode
[  178.672811][T10391] geneve0: entered allmulticast mode
[  178.680175][T10391] geneve1: entered allmulticast mode
[  178.686573][T10391] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  178.695189][T10391] netdevsim netdevsim7 netdevsim1: entered allmulticast mode
[  178.703968][T10391] netdevsim netdevsim7 netdevsim2: entered allmulticast mode
[  178.712772][T10391] netdevsim netdevsim7 netdevsim3: entered allmulticast mode
[  178.765633][T10417] netlink: 'syz.5.2345': attribute type 10 has an invalid length.
[  178.819354][T10421] netlink: 'syz.5.2345': attribute type 10 has an invalid length.
[  178.827604][ T3662] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.836742][ T3662] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.848912][ T3662] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.858545][T10417] bond3: (slave dummy0): Releasing active interface
[  178.867309][T10417] team0: Port device dummy0 added
[  178.883824][T10421] team0: Port device dummy0 removed
[  178.922939][ T3662] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.154739][T10426] loop2: detected capacity change from 0 to 128
[  179.638967][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2343'.
[  179.771372][T10426] ==================================================================
[  179.779527][T10426] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[  179.787823][T10426] 
[  179.790165][T10426] write to 0xffff88810a1ff128 of 4 bytes by task 10432 on cpu 0:
[  179.797902][T10426]  writeback_single_inode+0x14a/0x3e0
[  179.803321][T10426]  sync_inode_metadata+0x5b/0x90
[  179.808289][T10426]  __generic_file_fsync+0xf8/0x140
[  179.813706][T10426]  fat_file_fsync+0x49/0x100
[  179.818322][T10426]  vfs_fsync_range+0x10d/0x130
[  179.823227][T10426]  generic_file_write_iter+0x1b8/0x2f0
[  179.828894][T10426]  iter_file_splice_write+0x663/0xa60
[  179.834394][T10426]  direct_splice_actor+0x153/0x2a0
[  179.839843][T10426]  splice_direct_to_actor+0x30f/0x680
[  179.845254][T10426]  do_splice_direct+0xda/0x150
[  179.850061][T10426]  do_sendfile+0x380/0x650
[  179.854524][T10426]  __x64_sys_sendfile64+0x105/0x150
[  179.859779][T10426]  x64_sys_call+0x2bb0/0x2ff0
[  179.864752][T10426]  do_syscall_64+0xd2/0x200
[  179.869305][T10426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.875230][T10426] 
[  179.877600][T10426] read to 0xffff88810a1ff128 of 4 bytes by task 10426 on cpu 1:
[  179.885265][T10426]  vfs_fsync_range+0x9b/0x130
[  179.889974][T10426]  generic_file_write_iter+0x1b8/0x2f0
[  179.895459][T10426]  iter_file_splice_write+0x663/0xa60
[  179.900855][T10426]  direct_splice_actor+0x153/0x2a0
[  179.906001][T10426]  splice_direct_to_actor+0x30f/0x680
[  179.911403][T10426]  do_splice_direct+0xda/0x150
[  179.916201][T10426]  do_sendfile+0x380/0x650
[  179.920657][T10426]  __x64_sys_sendfile64+0x105/0x150
[  179.925891][T10426]  x64_sys_call+0x2bb0/0x2ff0
[  179.930601][T10426]  do_syscall_64+0xd2/0x200
[  179.935152][T10426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.941102][T10426] 
[  179.943439][T10426] value changed: 0x00000038 -> 0x00000022
[  179.949180][T10426] 
[  179.951558][T10426] Reported by Kernel Concurrency Sanitizer on:
[  179.958266][T10426] CPU: 1 UID: 0 PID: 10426 Comm: syz.2.2340 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  179.968276][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  179.978538][T10426] ==================================================================