last executing test programs:

26.100729122s ago: executing program 2 (id=2874):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20)

26.037350853s ago: executing program 2 (id=2875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={0x0, r2}, 0x18)

26.036834933s ago: executing program 2 (id=2877):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

25.968537104s ago: executing program 2 (id=2879):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

25.938552854s ago: executing program 2 (id=2881):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0))

25.857198346s ago: executing program 2 (id=2884):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18)
r1 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}})

25.818736946s ago: executing program 32 (id=2884):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18)
r1 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}})

11.986489411s ago: executing program 5 (id=3265):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11.916895622s ago: executing program 5 (id=3268):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d00), 0x240, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_rx_rwind_change\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4081)
unshare(0x2040600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x54)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000006c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000002c0)=""/176, &(0x7f0000001cc0)=0xffffffffffffff17)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r12, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)

11.828785133s ago: executing program 5 (id=3273):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r0})

11.824938353s ago: executing program 5 (id=3274):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80100)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0)

11.745102265s ago: executing program 5 (id=3276):
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="0104aa00dc00000000"], 0x0)
r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x1000, 0xffffffff, 0x89}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x41, 0x0, @fd_index=0x5, 0x2, 0x0, 0x8e, 0x6, 0x1})
io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0xc, 0x4)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='kfree\x00', r9}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x9, 0x7ff, 0x10000})
r10 = syz_open_dev$usbfs(&(0x7f0000000340), 0x3, 0x200900)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x8000})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r11}, 0x18)
r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r12)
request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000600)='\x00', r12)
write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12)

11.545293788s ago: executing program 5 (id=3284):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d00), 0x240, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_rx_rwind_change\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4081)
unshare(0x2040600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x54)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000006c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000002c0)=""/176, &(0x7f0000001cc0)=0xffffffffffffff17)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r12, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)

11.541732227s ago: executing program 33 (id=3284):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d00), 0x240, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_rx_rwind_change\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4081)
unshare(0x2040600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x54)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000006c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000002c0)=""/176, &(0x7f0000001cc0)=0xffffffffffffff17)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r12, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)

1.848413994s ago: executing program 1 (id=3533):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040))
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.779634155s ago: executing program 1 (id=3537):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000060023"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

1.624461607s ago: executing program 1 (id=3539):
unshare(0x2040400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc)

1.623952207s ago: executing program 1 (id=3540):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000140)={[{@unhide}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@mode={'mode', 0x3d, 0x4}}, {@check_relaxed}, {@check_relaxed}, {@cruft}, {@mode={'mode', 0x3d, 0x6}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@map_normal}, {@map_acorn}, {@session={'session', 0x3d, 0x5}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0xc754ea6}}], 0x2c}, 0x3, 0x9d1, &(0x7f0000000280)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r1, 0x10001, 0x0)

1.593858178s ago: executing program 1 (id=3543):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
io_setup(0x6, &(0x7f0000000300)=<r1=>0x0)
io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)

1.149017013s ago: executing program 0 (id=3557):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]})
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)

1.148457144s ago: executing program 0 (id=3558):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1)
r3 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0x3, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x4000000)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0xf4, 0x9, 0x5}, {0xfff9, 0xb2, 0x4, 0xf613}, {0x4, 0x6, 0xf3, 0x8}, {0x4, 0xde, 0xe, 0x8}]})
splice(r4, 0x0, r6, 0x0, 0x7, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x7, 0x7, 0x1d}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c1234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@hl={{0x28}, {0x3, 0x11}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3fc)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', <r11=>0x0, 0x2f, 0x7, 0x3, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x80, 0x80, 0x2}})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10)
write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
read(r5, &(0x7f0000032440)=""/102364, 0x18fdc)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0)

1.016786406s ago: executing program 3 (id=3564):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400100000002c00128008000100736974002000028014000b00fe8000040000000000000000000000aa08000300e0"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

1.002317186s ago: executing program 3 (id=3566):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040))
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

961.803106ms ago: executing program 4 (id=3567):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)

934.800737ms ago: executing program 3 (id=3568):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000100)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrjquota}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

921.407207ms ago: executing program 4 (id=3569):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000100))

873.340018ms ago: executing program 4 (id=3570):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)

872.415668ms ago: executing program 3 (id=3571):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e788d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea004337"], 0x34}, {&(0x7f0000000780)={0xf0, 0x1b, 0x8, 0x70bd26, 0x25dfdbfb, "", [@nested={0xe0, 0x50, 0x0, 0x1, [@nested={0x4, 0xff}, @nested={0xd5, 0x117, 0x0, 0x1, [@generic="c021c281b32bb8060c215e4453cb7f9693560a8ffef38201ebc8fda1ec148028b64ff3d39cfa53c3b17235fe7e00c7c49d85410c6624b86e53e7d56251f800bceb5c0aa8485c552832710a2b51e909e8e8356f04cbedb5b195da15ebc98ac8c55322f84f98c576fc0bea2886de6a4a79a8e6615533a1c06f315780171433827d78fcd5c71c2aa2cbd0fe9c0add69cc577531c73766", @typed={0x39, 0xcd, 0x0, 0x0, @binary="36edc9d5dbc7f3d47be32a87d2e221035eea9bf2814edae01da16c89f3e2215eb5502e41d18c9ee42a51caf07339c45363866b5dd2"}]}]}]}, 0xf0}], 0x2, 0x0, 0x0, 0x20000080}, 0x4000)

819.483539ms ago: executing program 3 (id=3573):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x28c82)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
mmap(&(0x7f0000301000/0x4000)=nil, 0x4000, 0x0, 0x13012, r0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)

782.894209ms ago: executing program 4 (id=3575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c598700", @ANYRES16=0x0, @ANYBLOB="01000000000000000000120000000800080000000000180001801400020076657468305f6d6163767461700000000800070001"], 0x3c}}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c)

769.009979ms ago: executing program 6 (id=3576):
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="0104aa00dc00000000"], 0x0)
r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x1000, 0xffffffff, 0x89}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x41, 0x0, @fd_index=0x5, 0x2, 0x0, 0x8e, 0x6, 0x1})
io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0xc, 0x4)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r9}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x9, 0x7ff, 0x10000})
r10 = syz_open_dev$usbfs(&(0x7f0000000340), 0x3, 0x200900)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x8000})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r11}, 0x18)
r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r12)
request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000600)='\x00', r12)
write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12)

735.91692ms ago: executing program 4 (id=3577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

735.3165ms ago: executing program 3 (id=3578):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1)
r3 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0x3, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x4000000)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0xf4, 0x9, 0x5}, {0xfff9, 0xb2, 0x4, 0xf613}, {0x4, 0x6, 0xf3, 0x8}, {0x4, 0xde, 0xe, 0x8}]})
splice(r4, 0x0, r6, 0x0, 0x7, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x7, 0x7, 0x1d}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c1234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@hl={{0x28}, {0x3, 0x11}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3fc)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', <r11=>0x0, 0x2f, 0x7, 0x3, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x80, 0x80, 0x2}})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10)
write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
read(r5, &(0x7f0000032440)=""/102364, 0x18fdc)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0)

734.88851ms ago: executing program 4 (id=3579):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

642.528811ms ago: executing program 1 (id=3580):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1)
r3 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0x3, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x4000000)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0xf4, 0x9, 0x5}, {0xfff9, 0xb2, 0x4, 0xf613}, {0x4, 0x6, 0xf3, 0x8}, {0x4, 0xde, 0xe, 0x8}]})
splice(r4, 0x0, r6, 0x0, 0x7, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x7, 0x7, 0x1d}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c1234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@hl={{0x28}, {0x3, 0x11}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3fc)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', <r11=>0x0, 0x2f, 0x7, 0x3, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x80, 0x80, 0x2}})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10)
write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
read(r5, &(0x7f0000032440)=""/102364, 0x18fdc)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0)

554.540982ms ago: executing program 6 (id=3581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

499.861873ms ago: executing program 6 (id=3582):
r0 = syz_io_uring_setup(0x103b, &(0x7f0000000600)={0x0, 0x1078, 0x1100, 0x2, 0xffffffff}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000680)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x100, 0x0, {0x0, r3}})
io_uring_enter(r0, 0x3516, 0x483, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x18)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200"/521], 0x290)
close_range(r6, 0xffffffffffffffff, 0x0)
r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r8)
open(0x0, 0x0, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
write$selinux_load(0xffffffffffffffff, 0x0, 0x603f)
futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x1ffffff)
syz_read_part_table(0x1059, &(0x7f0000001700)="$eJzsz7FNA0EQBdC/B3d7ZJRAREekCIlCOJGQ0AgU5HI81p1syW7AdvBesqs/mhlNuLHnno/0tHz+tIxr0pbhVBxSVbWv6sdgzvp7Ssb6fn/NlKSfDas2be9D8lWPl4uqtv6/+aVakiW/u7f/a1wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfuEAAA//9nABRm")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f00000002c0)={0x1800, 0x1, "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"})
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214"], 0xe4}}, 0x200000d4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000500)=0x104, 0x4)
sendmsg$inet(r12, &(0x7f00000023c0)={&(0x7f0000002300)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002380)=[@ip_retopts={{0x10}}], 0x10}, 0x20048000)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110004", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10)

329.409275ms ago: executing program 6 (id=3583):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

261.319686ms ago: executing program 6 (id=3584):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

260.646136ms ago: executing program 0 (id=3585):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = epoll_create(0x3ff)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000})

185.310417ms ago: executing program 0 (id=3586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x74, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0)

180.981848ms ago: executing program 0 (id=3587):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c)

146.621958ms ago: executing program 0 (id=3588):
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=<r1=>0x0)
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timer_gettime(r1, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000340)={[0x41b]}, 0x8)

0s ago: executing program 6 (id=3589):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10)
r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x2004000, 0x0)

kernel console output (not intermixed with test programs):

[3657]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   99.457066][ T7830] EXT4-fs: Ignoring removed orlov option
[   99.468665][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   99.483421][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   99.503991][ T7832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.522921][ T7832] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.537192][ T7830] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[   99.551215][ T7830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.567197][ T7832] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1648: bg 0: block 217: padding at end of block bitmap is not set
[   99.573001][ T7846] loop3: detected capacity change from 0 to 512
[   99.637707][ T7846] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.646129][ T7846] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.659956][ T7846] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   99.671554][ T7846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002]
[   99.684482][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.696833][ T7846] System zones: 1-12
[   99.708761][ T7846] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1650: corrupted in-inode xattr: e_value size too large
[   99.736917][ T7846] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1650: couldn't read orphan inode 15 (err -117)
[   99.773944][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.787855][ T7846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.850997][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.881515][ T7870] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1657'.
[  100.015214][ T7883] loop2: detected capacity change from 0 to 1024
[  100.029433][ T7883] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.050396][ T7883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.081273][ T7883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.138163][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.216883][ T3502] printk: udevd: 22 output lines suppressed due to ratelimiting
[  100.293464][ T7893] loop2: detected capacity change from 0 to 8192
[  100.433537][ T7904] random: crng reseeded on system resumption
[  100.540327][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1676'.
[  100.617534][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'.
[  100.626863][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'.
[  101.194364][ T7939] netlink: 'syz.0.1686': attribute type 6 has an invalid length.
[  101.399877][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1690'.
[  101.423759][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  101.508451][ T7956] loop4: detected capacity change from 0 to 512
[  101.612440][ T7958] loop2: detected capacity change from 0 to 4096
[  101.644821][ T7958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.669527][ T7952] bridge0: entered promiscuous mode
[  101.674887][ T7952] macsec1: entered allmulticast mode
[  101.680356][ T7952] bridge0: entered allmulticast mode
[  101.687758][ T7952] bridge0: port 3(macsec1) entered blocking state
[  101.694272][ T7952] bridge0: port 3(macsec1) entered disabled state
[  101.702486][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.720343][ T7952] bridge0: left allmulticast mode
[  101.725423][ T7952] bridge0: left promiscuous mode
[  101.734959][ T7973] binfmt_misc: register: failed to install interpreter file ./file0
[  101.844496][ T7987] loop2: detected capacity change from 0 to 512
[  101.853909][ T7987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  101.873758][ T7987] EXT4-fs (loop2): 1 truncate cleaned up
[  101.884019][ T7987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.905219][ T7996] loop3: detected capacity change from 0 to 1024
[  101.913977][ T7997] netlink: 'syz.1.1710': attribute type 1 has an invalid length.
[  101.933357][ T7996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.959376][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.975415][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.065014][ T8017] vhci_hcd: default hub control req: 4001 v0008 i0003 l0
[  102.100776][ T8021] ipvlan2: entered promiscuous mode
[  102.123289][ T8023] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  102.137845][ T8025] geneve0: entered allmulticast mode
[  102.156617][ T8028] loop4: detected capacity change from 0 to 256
[  102.489675][ T8067] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  102.506118][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.506356][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.785026][ T8083] bridge0: entered promiscuous mode
[  102.785064][ T8083] macsec1: entered allmulticast mode
[  102.785079][ T8083] bridge0: entered allmulticast mode
[  102.785790][ T8083] bridge0: port 1(macsec1) entered blocking state
[  102.785831][ T8083] bridge0: port 1(macsec1) entered disabled state
[  102.817398][ T8083] bridge0: left allmulticast mode
[  102.817425][ T8083] bridge0: left promiscuous mode
[  103.029944][ T8118] loop2: detected capacity change from 0 to 1024
[  103.030421][ T8118] EXT4-fs: Ignoring removed bh option
[  103.056836][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.081317][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.119674][ T8114] loop4: detected capacity change from 0 to 8192
[  103.122348][ T8123] __nla_validate_parse: 3 callbacks suppressed
[  103.122365][ T8123] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1766'.
[  103.154365][ T8114]  loop4: p2 p3 p4
[  103.154412][ T8114] loop4: p2 size 327551 extends beyond EOD, truncated
[  103.158645][ T8114] loop4: p3 size 16776960 extends beyond EOD, truncated
[  103.168824][ T8114] loop4: p4 size 3599499392 extends beyond EOD, truncated
[  103.246867][ T8135] loop4: detected capacity change from 0 to 512
[  103.255516][   T29] kauditd_printk_skb: 965 callbacks suppressed
[  103.255533][   T29] audit: type=1400 audit(1749362210.207:12638): avc:  denied  { validate_trans } for  pid=8130 comm="syz.0.1771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  103.261374][ T8135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.261470][ T8135] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.266982][   T29] audit: type=1326 audit(1749362210.217:12639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  103.335914][   T29] audit: type=1326 audit(1749362210.227:12640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  103.336025][   T29] audit: type=1326 audit(1749362210.227:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  103.336134][   T29] audit: type=1400 audit(1749362210.237:12642): avc:  denied  { setattr } for  pid=8134 comm="syz.4.1769" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  103.336161][   T29] audit: type=1400 audit(1749362210.247:12643): avc:  denied  { write } for  pid=8131 comm="syz.2.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  103.337253][   T29] audit: type=1326 audit(1749362210.287:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  103.337283][   T29] audit: type=1326 audit(1749362210.287:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  103.358202][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.525568][   T29] audit: type=1326 audit(1749362210.457:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  103.549292][   T29] audit: type=1326 audit(1749362210.457:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  103.628295][ T8164] loop2: detected capacity change from 0 to 736
[  103.679216][ T8164] rock: directory entry would overflow storage
[  103.685438][ T8164] rock: sig=0x5850, size=36, remaining=14
[  103.706077][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'.
[  103.810209][ T8175] loop3: detected capacity change from 0 to 8192
[  103.850624][ T8175]  loop3: p2 p3 p4
[  103.860856][ T8175] loop3: p2 size 327551 extends beyond EOD, truncated
[  103.890061][ T8175] loop3: p3 size 16776960 extends beyond EOD, truncated
[  103.906206][ T8175] loop3: p4 size 3599499392 extends beyond EOD, truncated
[  103.984203][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'.
[  104.094519][ T8178] bridge0: entered promiscuous mode
[  104.099947][ T8178] macsec1: entered allmulticast mode
[  104.105271][ T8178] bridge0: entered allmulticast mode
[  104.119687][ T8178] bridge0: port 1(macsec1) entered blocking state
[  104.126190][ T8178] bridge0: port 1(macsec1) entered disabled state
[  104.136813][ T8178] bridge0: left allmulticast mode
[  104.141979][ T8178] bridge0: left promiscuous mode
[  104.412276][ T8248] ipvlan0: entered promiscuous mode
[  104.426883][ T8248] ipvlan0: left promiscuous mode
[  104.523971][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'.
[  104.608584][ T8241] bridge0: entered promiscuous mode
[  104.615602][ T8241] macsec1: entered allmulticast mode
[  104.621075][ T8241] bridge0: entered allmulticast mode
[  104.629446][ T8241] bridge0: port 1(macsec1) entered blocking state
[  104.635939][ T8241] bridge0: port 1(macsec1) entered disabled state
[  104.649988][ T8241] bridge0: left allmulticast mode
[  104.655072][ T8241] bridge0: left promiscuous mode
[  104.730505][ T8286] set match dimension is over the limit!
[  104.758764][ T8290] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1839'.
[  104.811288][ T8298] netlink: 'syz.2.1843': attribute type 7 has an invalid length.
[  105.140485][ T8314] bridge: RTM_NEWNEIGH with invalid ether address
[  105.144817][ T8314] bridge0: entered promiscuous mode
[  105.144854][ T8314] macsec1: entered allmulticast mode
[  105.144870][ T8314] bridge0: entered allmulticast mode
[  105.145505][ T8314] bridge0: port 1(macsec1) entered blocking state
[  105.145615][ T8314] bridge0: port 1(macsec1) entered disabled state
[  105.160544][ T8314] bridge0: left allmulticast mode
[  105.160568][ T8314] bridge0: left promiscuous mode
[  105.307751][ T8338] loop4: detected capacity change from 0 to 2048
[  105.332630][ T8338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.339552][ T8338] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  105.339701][ T8338] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  105.339730][ T8338] EXT4-fs (loop4): This should not happen!! Data will be lost
[  105.339730][ T8338] 
[  105.339745][ T8338] EXT4-fs (loop4): Total free blocks count 0
[  105.339757][ T8338] EXT4-fs (loop4): Free/Dirty block details
[  105.339767][ T8338] EXT4-fs (loop4): free_blocks=2415919504
[  105.339792][ T8338] EXT4-fs (loop4): dirty_blocks=16
[  105.339807][ T8338] EXT4-fs (loop4): Block reservation details
[  105.339820][ T8338] EXT4-fs (loop4): i_reserved_data_blocks=1
[  105.373138][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.418111][ T8348] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  105.418111][ T8348]    program syz.2.1865 not setting count and/or reply_len properly
[  105.519798][ T8350] loop3: detected capacity change from 0 to 8192
[  105.521259][ T8350] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.712293][ T8377] SELinux:  policydb version 0 does not match my version range 15-34
[  105.712426][ T8377] SELinux: failed to load policy
[  105.759025][ T8380] loop3: detected capacity change from 0 to 1024
[  105.778137][ T8380] EXT4-fs: Ignoring removed bh option
[  105.806122][ T8380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  105.863249][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  105.910573][ T8414] loop3: detected capacity change from 0 to 512
[  105.938307][ T8414] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.957104][ T8414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.957197][ T8414] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.963971][ T8420] loop4: detected capacity change from 0 to 512
[  105.964610][ T8420] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  105.979275][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.980669][ T8420] EXT4-fs (loop4): 1 truncate cleaned up
[  106.021108][ T8420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.030050][ T8420] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 7: comm syz.4.1894: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0
[  106.066586][ T8420] EXT4-fs (loop4): Remounting filesystem read-only
[  106.069938][ T8424] netlink: 'syz.3.1895': attribute type 1 has an invalid length.
[  106.081682][ T8424] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1895'.
[  106.151825][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.171048][ T8428] random: crng reseeded on system resumption
[  106.270439][ T8441] loop4: detected capacity change from 0 to 764
[  106.277935][ T8441] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  106.452533][ T8464] SELinux:  Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped).
[  106.481409][ T8466] SELinux: syz.0.1913 (8466) set checkreqprot to 1. This is no longer supported.
[  106.495757][ T8468] loop2: detected capacity change from 0 to 512
[  106.522014][ T8468] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1914: Failed to acquire dquot type 1
[  106.522667][ T8468] EXT4-fs (loop2): 1 truncate cleaned up
[  106.523113][ T8468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.553151][ T8468] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.557653][ T8468] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1914: Failed to acquire dquot type 1
[  106.648689][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.696864][ T8486] loop2: detected capacity change from 0 to 512
[  106.706634][ T8486] EXT4-fs (loop2): orphan cleanup on readonly fs
[  106.708006][ T8486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1920: bg 0: block 248: padding at end of block bitmap is not set
[  106.731453][ T8486] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1920: Failed to acquire dquot type 1
[  106.758701][ T8486] EXT4-fs (loop2): 1 truncate cleaned up
[  106.759750][ T8486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.794994][ T8494] loop4: detected capacity change from 0 to 512
[  106.804610][ T8486] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  106.818502][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.833434][ T8498] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1926'.
[  106.844679][ T8494] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.845034][ T8486] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  106.898071][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.908483][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.941073][ T8508] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  107.034843][ T8523] random: crng reseeded on system resumption
[  107.071395][ T8527] loop3: detected capacity change from 0 to 128
[  107.089442][ T8527] EXT4-fs: Ignoring removed nobh option
[  107.121430][ T8527] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.149311][ T8527] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.179736][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.296949][ T8541] loop3: detected capacity change from 0 to 512
[  107.300248][ T8529] bridge: RTM_NEWNEIGH with invalid ether address
[  107.321802][ T8541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.339054][ T8541] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.354823][ T8540] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  107.397107][ T8529] bridge0: entered promiscuous mode
[  107.402552][ T8529] macsec1: entered allmulticast mode
[  107.407864][ T8529] bridge0: entered allmulticast mode
[  107.416812][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.426664][ T8529] bridge0: port 1(macsec1) entered blocking state
[  107.433271][ T8529] bridge0: port 1(macsec1) entered disabled state
[  107.450617][ T8529] bridge0: left allmulticast mode
[  107.455704][ T8529] bridge0: left promiscuous mode
[  107.628485][ T8558] loop2: detected capacity change from 0 to 512
[  107.641748][ T8558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  107.660890][ T8558] EXT4-fs (loop2): 1 truncate cleaned up
[  107.667244][ T8558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.711817][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.885703][ T8574] loop2: detected capacity change from 0 to 512
[  107.940165][ T8574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.982016][ T8574] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.066620][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.107295][ T8588] loop3: detected capacity change from 0 to 512
[  108.138129][ T8588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  108.160204][ T8588] EXT4-fs (loop3): 1 truncate cleaned up
[  108.172232][ T8588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.266066][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.286849][   T29] kauditd_printk_skb: 1232 callbacks suppressed
[  108.286917][   T29] audit: type=1400 audit(1749362215.237:13873): avc:  denied  { execmem } for  pid=8603 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  108.355772][ T8612] loop3: detected capacity change from 0 to 512
[  108.371200][   T29] audit: type=1326 audit(1749362215.327:13874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  108.396141][ T8612] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  108.416850][   T29] audit: type=1326 audit(1749362215.327:13875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  108.440551][   T29] audit: type=1326 audit(1749362215.327:13876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  108.464242][   T29] audit: type=1326 audit(1749362215.327:13877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  108.487823][   T29] audit: type=1326 audit(1749362215.327:13878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  108.511326][   T29] audit: type=1400 audit(1749362215.327:13879): avc:  denied  { create } for  pid=8603 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  108.532149][   T29] audit: type=1326 audit(1749362215.327:13880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  108.555738][   T29] audit: type=1326 audit(1749362215.327:13881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  108.579212][   T29] audit: type=1400 audit(1749362215.327:13882): avc:  denied  { write } for  pid=8603 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  108.620474][ T8612] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1970: iget: bad i_size value: -67835469387268086
[  108.634701][ T8612] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1970: couldn't read orphan inode 15 (err -117)
[  108.674172][ T8612] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.717316][ T8612] ext2 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.749807][ T8612] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.1970: Directory hole found for htree leaf block 0
[  108.799533][ T3312] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  108.867902][ T8628] loop3: detected capacity change from 0 to 512
[  108.910932][ T8628] EXT4-fs: Ignoring removed oldalloc option
[  108.963487][ T8628] EXT4-fs (loop3): 1 truncate cleaned up
[  108.987374][ T8639] IPv6: Can't replace route, no match found
[  108.987367][ T8628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.074236][ T8643] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  109.103161][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.183665][ T8655] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1990'.
[  109.323860][ T8666] loop2: detected capacity change from 0 to 512
[  109.324382][ T8666] EXT4-fs: Ignoring removed i_version option
[  109.352511][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.418401][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.445175][ T8674] smc: net device bond0 erased user defined pnetid SYZ2
[  109.868603][ T8698] bridge: RTM_NEWNEIGH with invalid ether address
[  109.883502][ T8698] bridge0: entered promiscuous mode
[  109.883560][ T8698] macsec1: entered allmulticast mode
[  109.883577][ T8698] bridge0: entered allmulticast mode
[  109.885880][ T8698] bridge0: port 3(macsec1) entered blocking state
[  109.910104][ T8698] bridge0: port 3(macsec1) entered disabled state
[  109.921358][ T8698] bridge0: left allmulticast mode
[  109.926507][ T8698] bridge0: left promiscuous mode
[  110.051956][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'.
[  110.065371][ T8716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2014'.
[  110.177070][ T8734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2023'.
[  110.370693][ T8751] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  110.430724][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'.
[  110.489634][ T8765] loop4: detected capacity change from 0 to 2048
[  110.521247][ T8765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.556388][ T8773] loop2: detected capacity change from 0 to 4096
[  110.568296][ T8773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.572997][ T8765] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  110.599184][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents
[  110.605560][ T8765] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  110.622818][ T8773] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.2041: mark_inode_dirty error
[  110.623496][ T8765] EXT4-fs (loop4): This should not happen!! Data will be lost
[  110.623496][ T8765] 
[  110.636464][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents
[  110.644520][ T8765] EXT4-fs (loop4): Total free blocks count 0
[  110.658831][ T8773] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.2041: mark_inode_dirty error
[  110.662467][ T8765] EXT4-fs (loop4): Free/Dirty block details
[  110.679736][ T8765] EXT4-fs (loop4): free_blocks=66060288
[  110.685363][ T8765] EXT4-fs (loop4): dirty_blocks=32
[  110.690518][ T8765] EXT4-fs (loop4): Block reservation details
[  110.696728][ T8765] EXT4-fs (loop4): i_reserved_data_blocks=2
[  110.698355][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents
[  110.715336][ T8788] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  110.731732][ T8773] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.2041: mark_inode_dirty error
[  110.751977][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents
[  110.769323][ T8773] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.2041: mark_inode_dirty error
[  110.782292][ T8773] EXT4-fs error (device loop2) in ext4_setattr:5986: Corrupt filesystem
[  110.817364][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.917725][ T8811] SELinux: failed to load policy
[  111.243108][ T8848] loop4: detected capacity change from 0 to 2048
[  111.253730][ T8848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.385635][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.432597][ T8857] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2070'.
[  111.504042][ T8861] loop2: detected capacity change from 0 to 2048
[  111.512426][ T8865] loop3: detected capacity change from 0 to 128
[  111.527866][ T8865] FAT-fs (loop3): Directory bread(block 32) failed
[  111.534808][ T8865] FAT-fs (loop3): Directory bread(block 33) failed
[  111.543451][ T8865] FAT-fs (loop3): Directory bread(block 34) failed
[  111.567786][ T8865] FAT-fs (loop3): Directory bread(block 35) failed
[  111.574959][ T8865] FAT-fs (loop3): Directory bread(block 36) failed
[  111.583061][ T8865] FAT-fs (loop3): Directory bread(block 37) failed
[  111.591677][ T8865] FAT-fs (loop3): Directory bread(block 38) failed
[  111.600951][ T8865] FAT-fs (loop3): Directory bread(block 39) failed
[  111.607719][ T8865] FAT-fs (loop3): Directory bread(block 40) failed
[  111.614571][ T8865] FAT-fs (loop3): Directory bread(block 41) failed
[  111.680468][ T8865] syz.3.2075: attempt to access beyond end of device
[  111.680468][ T8865] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128
[  111.714139][ T8865] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196)
[  111.722308][ T8865] FAT-fs (loop3): Filesystem has been set read-only
[  111.737289][ T8865] syz.3.2075: attempt to access beyond end of device
[  111.737289][ T8865] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128
[  111.778934][ T8865] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196)
[  112.029858][ T8884] loop3: detected capacity change from 0 to 8192
[  112.371292][ T8914] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  113.008393][ T8958] loop2: detected capacity change from 0 to 512
[  113.042776][ T8958] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.060100][ T8966] IPv6: Can't replace route, no match found
[  113.150647][ T8979] loop3: detected capacity change from 0 to 256
[  113.217150][ T8986] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2126'.
[  113.263174][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'.
[  113.279028][ T8989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  113.285700][ T8989] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  113.293366][ T8989] vhci_hcd vhci_hcd.0: Device attached
[  113.299108][   T29] kauditd_printk_skb: 1265 callbacks suppressed
[  113.299121][   T29] audit: type=1326 audit(1749362220.227:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  113.309157][ T8992] loop3: detected capacity change from 0 to 2048
[  113.329082][   T29] audit: type=1326 audit(1749362220.227:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  113.359113][   T29] audit: type=1326 audit(1749362220.227:15150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  113.382817][   T29] audit: type=1326 audit(1749362220.227:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  113.406286][   T29] audit: type=1326 audit(1749362220.227:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  113.429864][   T29] audit: type=1326 audit(1749362220.227:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  113.430774][ T8993] vhci_hcd: connection closed
[  113.453625][   T29] audit: type=1326 audit(1749362220.227:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  113.482352][   T29] audit: type=1326 audit(1749362220.227:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x0
[  113.482731][  T381] vhci_hcd: stop threads
[  113.509801][  T381] vhci_hcd: release socket
[  113.514228][  T381] vhci_hcd: disconnect device
[  113.552851][   T29] audit: type=1400 audit(1749362220.337:15156): avc:  denied  { create } for  pid=8996 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  113.572547][   T29] audit: type=1400 audit(1749362220.337:15157): avc:  denied  { create } for  pid=8996 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  113.594859][ T8992] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.839816][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.849139][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.864741][ T9028] program syz.0.2142 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  113.892815][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.904846][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.173355][ T9048] loop2: detected capacity change from 0 to 8192
[  114.465251][ T9061] loop2: detected capacity change from 0 to 8192
[  114.626927][ T9074] serio: Serial port ptm1
[  114.697860][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2164'.
[  114.751138][ T9081] loop3: detected capacity change from 0 to 1024
[  115.149798][ T9101] vhci_hcd: default hub control req: 600c v0001 i0008 l0
[  115.323136][ T9113] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  115.353458][ T9115] qrtr: Invalid version 91
[  115.358377][ T9116] loop4: detected capacity change from 0 to 1024
[  115.365397][ T9116] EXT4-fs: Ignoring removed bh option
[  115.370930][ T9116] EXT4-fs: inline encryption not supported
[  115.377403][ T9116] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  115.389781][ T9116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  115.399719][ T9116] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.2177: lblock 2 mapped to illegal pblock 2 (length 1)
[  115.414038][ T9116] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.2177: lblock 0 mapped to illegal pblock 48 (length 1)
[  115.429515][ T9116] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2177: Failed to acquire dquot type 0
[  115.441707][ T9116] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  115.451331][ T9116] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2177: mark_inode_dirty error
[  115.480053][ T9116] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  115.494755][ T9116] EXT4-fs (loop4): 1 orphan inode deleted
[  115.519907][ T3439] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  115.538016][ T3439] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  115.567557][ T9116] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.2177: Invalid inode table block 1 in block_group 0
[  115.576866][ T9128] loop2: detected capacity change from 0 to 8192
[  115.589304][ T9116] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  115.604993][ T9128] syz.2.2183: attempt to access beyond end of device
[  115.604993][ T9128] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  115.618629][ T9116] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.2177: mark_inode_dirty error
[  115.665595][ T9135] syz.1.2187 uses obsolete (PF_INET,SOCK_PACKET)
[  115.909421][ T9157] loop3: detected capacity change from 0 to 8192
[  115.934675][ T9159] netlink: 'syz.2.2197': attribute type 1 has an invalid length.
[  115.942615][ T9159] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2197'.
[  115.976854][ T9161] loop3: detected capacity change from 0 to 1024
[  116.007281][ T9161] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.035271][ T9171] serio: Serial port ptm0
[  116.299747][ T9190] bridge: RTM_NEWNEIGH with invalid ether address
[  116.494151][ T9227] loop3: detected capacity change from 0 to 1024
[  116.511400][ T9227] EXT4-fs: Ignoring removed orlov option
[  116.530299][ T9227] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  116.553447][ T9227] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2225: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  116.880427][ T9276] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  116.900502][ T9274] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  116.900526][ T9274] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  117.440033][ T9305] bridge: RTM_NEWNEIGH with invalid ether address
[  117.676312][ T9333] loop4: detected capacity change from 0 to 512
[  117.677178][ T9333] EXT4-fs: Ignoring removed orlov option
[  117.678732][ T9333] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  117.695691][ T9333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  117.709325][ T9333] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2269: corrupted in-inode xattr: e_value size too large
[  117.740295][ T9333] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2269: couldn't read orphan inode 15 (err -117)
[  118.311166][   T29] kauditd_printk_skb: 1212 callbacks suppressed
[  118.311244][   T29] audit: type=1400 audit(1749362225.267:16367): avc:  denied  { recv } for  pid=9364 comm="syz.0.2282" saddr=10.128.0.163 src=30030 daddr=10.128.1.177 dest=39192 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  118.312308][   T29] audit: type=1400 audit(1749362225.267:16368): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  118.368751][   T29] audit: type=1400 audit(1749362225.267:16369): avc:  denied  { open } for  pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  118.370840][   T29] audit: type=1400 audit(1749362225.277:16370): avc:  denied  { ioctl } for  pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  118.419871][   T29] audit: type=1326 audit(1749362225.307:16371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  118.419918][   T29] audit: type=1326 audit(1749362225.307:16372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  118.419967][   T29] audit: type=1400 audit(1749362225.307:16373): avc:  denied  { create } for  pid=9380 comm="syz.3.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  118.419993][   T29] audit: type=1400 audit(1749362225.307:16374): avc:  denied  { ioctl } for  pid=9380 comm="syz.3.2289" path="socket:[23572]" dev="sockfs" ino=23572 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  118.425222][   T29] audit: type=1326 audit(1749362225.377:16375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  118.536268][   T29] audit: type=1326 audit(1749362225.377:16376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000
[  118.766049][ T9398] loop4: detected capacity change from 0 to 512
[  118.795434][ T9398] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  118.795630][ T9398] EXT4-fs (loop4): orphan cleanup on readonly fs
[  118.795895][ T9398] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  118.796233][ T9398] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  118.796759][ T9398] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2294: bg 0: block 40: padding at end of block bitmap is not set
[  118.867193][ T9398] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  118.873974][ T9398] EXT4-fs (loop4): 1 truncate cleaned up
[  119.122020][ T9430] SELinux: ebitmap start bit (3317329373) is not a multiple of the map unit size (64)
[  119.133132][ T9430] SELinux: failed to load policy
[  119.208420][ T9426] bridge: RTM_NEWNEIGH with invalid ether address
[  119.297233][ T9449] ALSA: seq fatal error: cannot create timer (-19)
[  119.331564][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'.
[  119.426301][ T9465] loop2: detected capacity change from 0 to 1024
[  119.434581][ T9465] EXT4-fs: Ignoring removed nobh option
[  119.440314][ T9465] EXT4-fs: Ignoring removed bh option
[  119.897157][ T9494] usb usb1: usbfs: process 9494 (syz.4.2333) did not claim interface 0 before use
[  119.950653][ T9499] loop3: detected capacity change from 0 to 512
[  119.965713][ T9499] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  120.009353][ T9499] EXT4-fs (loop3): mount failed
[  120.022074][ T9503] loop4: detected capacity change from 0 to 512
[  120.043645][ T9503] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  120.060858][ T9503] EXT4-fs (loop4): invalid journal inode
[  120.065274][ T9490] bridge: RTM_NEWNEIGH with invalid ether address
[  120.083205][ T9503] EXT4-fs (loop4): can't get journal size
[  120.092534][ T9503] EXT4-fs (loop4): 1 truncate cleaned up
[  120.113851][ T9487] loop2: detected capacity change from 0 to 32768
[  120.153709][ T9487]  loop2: p1 p2 p3 < p5 p6 >
[  120.158626][ T9512] xt_CT: You must specify a L4 protocol and not use inversions on it
[  120.167618][ T9487] loop2: p1 size 242222080 extends beyond EOD, truncated
[  120.196019][ T9487] loop2: p2 start 4294967295 is beyond EOD, truncated
[  120.530987][ T9534] bridge: RTM_NEWNEIGH with invalid ether address
[  120.559452][ T9558] syzkaller1: entered promiscuous mode
[  120.559554][ T9558] syzkaller1: entered allmulticast mode
[  120.805392][ T9576] loop3: detected capacity change from 0 to 164
[  120.886042][ T9576] rock: corrupted directory entry. extent=29, offset=956301312, size=3
[  120.888680][ T9576] rock: corrupted directory entry. extent=29, offset=956301312, size=3
[  121.092537][ T9590] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.341671][ T9600] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2374'.
[  121.448303][ T9608] SELinux: failed to load policy
[  121.504024][ T9592] bridge: RTM_NEWNEIGH with invalid ether address
[  121.742142][ T9628] program syz.0.2393 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.830541][ T9637] sd 0:0:1:0: device reset
[  121.980311][ T9640] loop2: detected capacity change from 0 to 8192
[  121.983865][ T9648] 
@ÿ: renamed from bond_slave_0
[  122.005185][ T9640] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  122.013688][ T9640] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  122.030556][ T9640] FAT-fs (loop2): Filesystem has been set read-only
[  122.050151][ T9640] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  122.050193][ T9640] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  122.235328][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2404'.
[  122.244461][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2404'.
[  122.253593][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2404'.
[  122.691857][ T9715] loop3: detected capacity change from 0 to 512
[  122.718648][ T9715] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.080911][ T9737] SELinux: syz.3.2430 (9737) set checkreqprot to 1. This is no longer supported.
[  123.125390][ T9741] loop3: detected capacity change from 0 to 1024
[  123.144969][ T9741] EXT4-fs: Ignoring removed bh option
[  123.162309][ T9741] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.211605][ T9747] IPv6: Can't replace route, no match found
[  123.282844][ T9754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2438'.
[  123.326438][   T29] kauditd_printk_skb: 818 callbacks suppressed
[  123.326457][   T29] audit: type=1400 audit(1749362230.277:17193): avc:  denied  { create } for  pid=9758 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  123.362525][   T29] audit: type=1400 audit(1749362230.317:17194): avc:  denied  { getopt } for  pid=9758 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  123.416496][   T29] audit: type=1400 audit(1749362230.367:17195): avc:  denied  { read write } for  pid=9762 comm="syz.3.2442" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  123.440066][   T29] audit: type=1400 audit(1749362230.367:17196): avc:  denied  { open } for  pid=9762 comm="syz.3.2442" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  123.463400][   T29] audit: type=1400 audit(1749362230.367:17197): avc:  denied  { ioctl } for  pid=9762 comm="syz.3.2442" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  123.493410][ T9764] loop4: detected capacity change from 0 to 2048
[  123.496075][   T29] audit: type=1400 audit(1749362230.447:17198): avc:  denied  { create } for  pid=9766 comm="syz.2.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  123.519842][   T29] audit: type=1400 audit(1749362230.447:17199): avc:  denied  { ioctl } for  pid=9766 comm="syz.2.2444" path="socket:[24104]" dev="sockfs" ino=24104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  123.544988][   T29] audit: type=1400 audit(1749362230.447:17200): avc:  denied  { write } for  pid=9766 comm="syz.2.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  123.564840][   T29] audit: type=1400 audit(1749362230.457:17201): avc:  denied  { mounton } for  pid=9763 comm="syz.4.2443" path="/437/file1" dev="tmpfs" ino=2278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  123.610956][   T29] audit: type=1400 audit(1749362230.567:17202): avc:  denied  { mount } for  pid=9763 comm="syz.4.2443" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  123.773287][ T9793] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  123.872195][ T9809] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  123.872318][ T9807] IPVS: stopping master sync thread 9809 ...
[  123.960809][ T9816] loop4: detected capacity change from 0 to 1024
[  123.992975][ T9816] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.071671][ T9822] SELinux: security policydb version 18 (MLS) not backwards compatible
[  124.081332][ T9822] SELinux: failed to load policy
[  124.087783][ T9824] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  124.130880][ T9828] loop4: detected capacity change from 0 to 512
[  124.162561][ T9828] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.240337][ T9845] loop4: detected capacity change from 0 to 2048
[  124.461679][ T9877] loop4: detected capacity change from 0 to 512
[  124.480046][ T9877] EXT4-fs (loop4): too many log groups per flexible block group
[  124.487765][ T9877] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  124.494938][ T9877] EXT4-fs (loop4): mount failed
[  124.508820][ T9881] random: crng reseeded on system resumption
[  124.551433][ T9887] SELinux:  policydb version 941535249 does not match my version range 15-34
[  124.561725][ T9887] SELinux: failed to load policy
[  124.693044][ T9906] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  124.699721][ T9906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  124.707289][ T9906] vhci_hcd vhci_hcd.0: Device attached
[  124.716886][ T9908] vhci_hcd: connection closed
[  124.718876][   T12] vhci_hcd: stop threads
[  124.727838][   T12] vhci_hcd: release socket
[  124.732317][   T12] vhci_hcd: disconnect device
[  124.897004][ T9926] netlink: 'syz.3.2512': attribute type 1 has an invalid length.
[  124.904933][ T9926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2512'.
[  124.948475][ T9929] program syz.3.2514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.165510][ T9944] syzkaller1: entered promiscuous mode
[  125.165608][ T9944] syzkaller1: entered allmulticast mode
[  125.550265][ T9959] bridge: RTM_NEWNEIGH with invalid ether address
[  125.560948][ T9959] bridge0: entered promiscuous mode
[  125.560979][ T9959] macsec1: entered allmulticast mode
[  125.560991][ T9959] bridge0: entered allmulticast mode
[  125.751671][ T9984] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2536'.
[  125.751693][ T9984] netlink: 'syz.0.2536': attribute type 9 has an invalid length.
[  125.751706][ T9984] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2536'.
[  125.751720][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2536'.
[  125.820210][ T9986] SELinux: failed to load policy
[  125.940318][ T9995] loop4: detected capacity change from 0 to 512
[  125.958329][ T9995] EXT4-fs: Ignoring removed i_version option
[  125.978602][ T9995] EXT4-fs (loop4): orphan cleanup on readonly fs
[  126.003667][ T9995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2541: bg 0: block 131: padding at end of block bitmap is not set
[  126.021487][T10004] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.029920][ T9995] EXT4-fs (loop4): Remounting filesystem read-only
[  126.040913][ T9995] EXT4-fs (loop4): 1 truncate cleaned up
[  126.091092][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'.
[  126.146344][T10000] bridge: RTM_NEWNEIGH with invalid ether address
[  126.200940][T10025] loop4: detected capacity change from 0 to 1024
[  126.239121][T10025] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.253573][T10025] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.2554: lblock 3 mapped to illegal pblock 3 (length 3)
[  126.316948][T10025] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  126.329356][T10025] EXT4-fs (loop4): This should not happen!! Data will be lost
[  126.329356][T10025] 
[  126.381187][T10043] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 6: comm syz.4.2554: lblock 6 mapped to illegal pblock 6 (length 10)
[  126.417288][T10043] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 6 with max blocks 10 with error 117
[  126.429753][T10043] EXT4-fs (loop4): This should not happen!! Data will be lost
[  126.429753][T10043] 
[  126.891373][T10078] SELinux:  policydb version -71945047 does not match my version range 15-34
[  126.900528][T10078] SELinux: failed to load policy
[  126.920784][T10080] IPVS: stopping master sync thread 3874 ...
[  126.948223][T10084] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in;
[  126.948223][T10084]    program syz.1.2575 not setting count and/or reply_len properly
[  127.076127][T10097] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  127.076127][T10097]    program syz.1.2581 not setting count and/or reply_len properly
[  127.217526][T10108] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in;
[  127.217526][T10108]    program syz.1.2596 not setting count and/or reply_len properly
[  127.246375][T10110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  127.257632][T10109] IPVS: stopping master sync thread 10110 ...
[  127.513954][T10143] xt_connbytes: Forcing CT accounting to be enabled
[  127.514082][T10143] set match dimension is over the limit!
[  127.743018][T10149] bridge: RTM_NEWNEIGH with invalid ether address
[  127.843573][T10169] SELinux: syz.0.2614 (10169) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  128.329916][   T29] kauditd_printk_skb: 1180 callbacks suppressed
[  128.329935][   T29] audit: type=1326 audit(1749362235.277:18383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  128.359993][   T29] audit: type=1326 audit(1749362235.277:18384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  128.383859][   T29] audit: type=1326 audit(1749362235.287:18385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  128.407387][   T29] audit: type=1326 audit(1749362235.287:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  128.433765][   T29] audit: type=1326 audit(1749362235.287:18387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  128.457447][   T29] audit: type=1326 audit(1749362235.287:18388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000
[  128.481272][   T29] audit: type=1326 audit(1749362235.287:18389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000
[  128.504873][   T29] audit: type=1326 audit(1749362235.287:18390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  128.528933][   T29] audit: type=1326 audit(1749362235.287:18391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000
[  128.552623][   T29] audit: type=1326 audit(1749362235.287:18392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000
[  128.606727][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'.
[  128.672088][T10217] hub 9-0:1.0: USB hub found
[  128.676847][T10217] hub 9-0:1.0: 8 ports detected
[  128.712181][T10228] ref_ctr_offset mismatch. inode: 0xaa4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000
[  129.031594][T10249] bridge: RTM_NEWNEIGH with invalid ether address
[  129.180559][T10259] SELinux: ebitmap: high bit 2147942784 is not equal to the expected value 384
[  129.180706][T10259] SELinux: failed to load policy
[  129.439911][T10281] bridge: RTM_NEWNEIGH with invalid ether address
[  129.443098][T10281] bridge0: entered promiscuous mode
[  129.452546][T10281] macsec1: entered allmulticast mode
[  129.452567][T10281] bridge0: entered allmulticast mode
[  129.453868][T10281] bridge0: port 3(macsec1) entered blocking state
[  129.470791][T10281] bridge0: port 3(macsec1) entered disabled state
[  129.484563][T10281] bridge0: left allmulticast mode
[  129.484589][T10281] bridge0: left promiscuous mode
[  129.721614][T10328] random: crng reseeded on system resumption
[  129.734776][T10330] loop4: detected capacity change from 0 to 128
[  129.742008][T10330] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  129.755544][T10330] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  129.842161][T10334] loop4: detected capacity change from 0 to 8192
[  130.202654][T10350] hsr0: entered promiscuous mode
[  130.202804][T10350] vlan2: entered promiscuous mode
[  130.607127][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2696'.
[  130.758247][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2703'.
[  130.775929][T10381] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.821095][T10387] netlink: 209788 bytes leftover after parsing attributes in process `syz.0.2706'.
[  130.821122][T10387] netlink: zone id is out of range
[  130.821209][T10387] netlink: zone id is out of range
[  130.821220][T10387] netlink: zone id is out of range
[  130.821268][T10387] netlink: zone id is out of range
[  130.821276][T10387] netlink: zone id is out of range
[  130.821284][T10387] netlink: zone id is out of range
[  130.821292][T10387] netlink: del zone limit has 8 unknown bytes
[  130.967121][T10385] bridge: RTM_NEWNEIGH with invalid ether address
[  130.978971][T10385] bridge0: entered promiscuous mode
[  130.984474][T10385] macsec1: entered allmulticast mode
[  130.989880][T10385] bridge0: entered allmulticast mode
[  131.001432][T10385] bridge0: port 3(macsec1) entered blocking state
[  131.007934][T10385] bridge0: port 3(macsec1) entered disabled state
[  131.019595][T10385] bridge0: left allmulticast mode
[  131.024691][T10385] bridge0: left promiscuous mode
[  131.036773][T10408] loop4: detected capacity change from 0 to 128
[  132.021192][T10448] bridge: RTM_NEWNEIGH with invalid ether address
[  132.074990][T10448] bridge0: entered promiscuous mode
[  132.080721][T10448] macsec1: entered allmulticast mode
[  132.086043][T10448] bridge0: entered allmulticast mode
[  132.092774][T10448] bridge0: port 1(macsec1) entered blocking state
[  132.099338][T10448] bridge0: port 1(macsec1) entered disabled state
[  132.107003][T10448] bridge0: left allmulticast mode
[  132.112192][T10448] bridge0: left promiscuous mode
[  132.250966][T10467] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2735'.
[  132.761781][T10513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2757'.
[  132.762722][T10511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2757'.
[  133.194941][T10546] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  133.311146][T10558] rdma_op ffff88811e6df580 conn xmit_rdma 0000000000000000
[  133.351191][   T29] kauditd_printk_skb: 1632 callbacks suppressed
[  133.351209][   T29] audit: type=1400 audit(1749362240.307:20025): avc:  denied  { mount } for  pid=10566 comm="syz.2.2783" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  133.396703][T10577] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2785'.
[  133.406031][T10577] unsupported nla_type 65024
[  133.425852][   T29] audit: type=1400 audit(1749362240.377:20026): avc:  denied  { module_load } for  pid=10578 comm="syz.2.2786" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  133.425879][T10580] Invalid ELF header magic: != ELF
[  133.505694][   T29] audit: type=1400 audit(1749362240.457:20027): avc:  denied  { append } for  pid=10589 comm="syz.2.2801" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  133.629034][   T29] audit: type=1326 audit(1749362240.567:20028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  133.652893][   T29] audit: type=1326 audit(1749362240.567:20029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  133.676576][   T29] audit: type=1326 audit(1749362240.567:20030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  133.700131][   T29] audit: type=1326 audit(1749362240.567:20031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  133.723728][   T29] audit: type=1326 audit(1749362240.567:20032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  133.747574][   T29] audit: type=1326 audit(1749362240.567:20033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  133.771237][   T29] audit: type=1326 audit(1749362240.567:20034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  134.077713][T10613] loop4: detected capacity change from 0 to 512
[  134.078040][T10613] EXT4-fs: Ignoring removed nobh option
[  134.179886][T10613] EXT4-fs mount: 34 callbacks suppressed
[  134.179909][T10613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.201045][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.254393][T10602] bridge: RTM_NEWNEIGH with invalid ether address
[  134.277887][T10602] bridge0: entered promiscuous mode
[  134.277928][T10602] macsec1: entered allmulticast mode
[  134.277945][T10602] bridge0: entered allmulticast mode
[  134.279776][T10602] bridge0: port 3(macsec1) entered blocking state
[  134.300710][T10602] bridge0: port 3(macsec1) entered disabled state
[  134.360466][T10602] bridge0: left allmulticast mode
[  134.365564][T10602] bridge0: left promiscuous mode
[  134.542721][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'.
[  134.542751][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'.
[  134.545155][T10659] erspan0: entered promiscuous mode
[  134.545996][T10659] gretap0: entered promiscuous mode
[  134.652812][T10669] SELinux: syz.1.2824 (10669) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  134.724716][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'.
[  134.783802][T10686] netlink: 'syz.4.2833': attribute type 7 has an invalid length.
[  134.885810][T10701] syzkaller1: entered promiscuous mode
[  134.885832][T10701] syzkaller1: entered allmulticast mode
[  136.086864][T10851] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:6c17:c6ff:feb9:d59b error=-28
[  136.133732][T10851] infiniband syz!: set active
[  136.138461][T10851] infiniband syz!: added team_slave_0
[  136.152000][T10851] RDS/IB: syz!: added
[  136.156118][T10851] smc: adding ib device syz! with port count 1
[  136.162408][T10851] smc:    ib device syz! port 1 has pnetid 
[  137.060545][T10840] syz.3.2849 (10840) used greatest stack depth: 7160 bytes left
[  137.545766][   T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.596621][   T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.681786][   T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.720787][   T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.874770][T10971] SELinux:  Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped).
[  137.922552][   T31] $Hÿ (unregistering): Released all slaves
[  137.996022][   T31] IPVS: stopping master sync thread 3591 ...
[  138.043929][   T31] hsr_slave_0: left promiscuous mode
[  138.044256][   T31] hsr_slave_1: left promiscuous mode
[  138.050634][   T31] veth1_macvtap: left promiscuous mode
[  138.050726][   T31] veth0_macvtap: left promiscuous mode
[  138.050891][   T31] veth1_vlan: left promiscuous mode
[  138.050931][   T31] veth0_vlan: left promiscuous mode
[  138.227007][T10935] chnl_net:caif_netlink_parms(): no params data found
[  138.267458][T10935] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.274759][T10935] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.276606][T10935] bridge_slave_0: entered allmulticast mode
[  138.290993][T10935] bridge_slave_0: entered promiscuous mode
[  138.292152][T10935] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.303997][T10935] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.312484][T10935] bridge_slave_1: entered allmulticast mode
[  138.313147][T10935] bridge_slave_1: entered promiscuous mode
[  138.336759][T10935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.338626][T10935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.361356][   T29] kauditd_printk_skb: 1069 callbacks suppressed
[  138.361370][   T29] audit: type=1326 audit(1749362245.317:21104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1277a958e7 code=0x7ffc0000
[  138.361404][   T29] audit: type=1326 audit(1749362245.317:21105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1277a3ab19 code=0x7ffc0000
[  138.361487][   T29] audit: type=1326 audit(1749362245.317:21106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000
[  138.368274][   T29] audit: type=1326 audit(1749362245.317:21107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000
[  138.368313][   T29] audit: type=1326 audit(1749362245.317:21108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000
[  138.368399][   T29] audit: type=1326 audit(1749362245.317:21109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  138.369559][T10935] team0: Port device team_slave_0 added
[  138.392468][   T29] audit: type=1326 audit(1749362245.347:21110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000
[  138.452214][T10935] team0: Port device team_slave_1 added
[  138.462496][   T29] audit: type=1326 audit(1749362245.347:21111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000
[  138.567947][   T29] audit: type=1326 audit(1749362245.347:21112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  138.568448][   T29] audit: type=1326 audit(1749362245.467:21113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1277a958e7 code=0x7ffc0000
[  138.630120][T10935] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.630136][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.630188][T10935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.633897][T10935] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.681460][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.681525][T10935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.685482][   T31] IPVS: stop unused estimator thread 0...
[  138.770232][T10935] hsr_slave_0: entered promiscuous mode
[  138.770746][T10935] hsr_slave_1: entered promiscuous mode
[  138.771042][T10935] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.771058][T10935] Cannot create hsr debugfs directory
[  138.891469][T10935] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  138.904522][T10935] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  138.913718][T10935] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  138.923795][T10935] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  138.971398][T11008] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2911'.
[  138.993639][T10935] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.000783][T10935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.008132][T10935] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.015227][T10935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.035703][T11015] $Hÿ: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  139.035732][T11015] $Hÿ: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  139.036192][T11015] $Hÿ: (slave ipvlan2): Error -95 calling set_mac_address
[  139.079689][T10935] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.096733][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.143088][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.166566][T11027] xt_hashlimit: max too large, truncated to 1048576
[  139.176186][T10935] 8021q: adding VLAN 0 to HW filter on device team0
[  139.191104][  T381] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.198235][  T381] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.216292][  T381] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.223531][  T381] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.308344][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2919'.
[  139.325179][T10935] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.465014][T10935] veth0_vlan: entered promiscuous mode
[  139.468248][T10935] veth1_vlan: entered promiscuous mode
[  139.485364][T10935] veth0_macvtap: entered promiscuous mode
[  139.491145][T10935] veth1_macvtap: entered promiscuous mode
[  139.505179][T10935] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.510664][T10935] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.523794][T10935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.523836][T10935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.523931][T10935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.523977][T10935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.696994][T11064] loop4: detected capacity change from 0 to 2048
[  139.716269][T11064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.896339][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.914117][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2931'.
[  139.992393][T11084] loop5: detected capacity change from 0 to 1024
[  140.012321][T11084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.083232][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.108584][T11095] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2936'.
[  140.114424][T11092] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2936'.
[  140.175758][T11103] loop5: detected capacity change from 0 to 2048
[  140.180486][T11105] 9pnet: Could not find request transport: t
[  140.204018][T11101] loop4: detected capacity change from 0 to 8192
[  140.249125][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2945'.
[  140.351061][T11128] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2952'.
[  140.502408][T11140] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2955'.
[  140.522341][T11134] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2955'.
[  140.926257][T11165] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.084662][T11178] loop5: detected capacity change from 0 to 1024
[  141.130676][T11178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.130925][T11178] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.142854][T11178] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  141.155401][T11178] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  141.181299][T11178] EXT4-fs (loop5): This should not happen!! Data will be lost
[  141.181299][T11178] 
[  141.191140][T11178] EXT4-fs (loop5): Total free blocks count 0
[  141.197157][T11178] EXT4-fs (loop5): Free/Dirty block details
[  141.203105][T11178] EXT4-fs (loop5): free_blocks=4293918720
[  141.203165][T11178] EXT4-fs (loop5): dirty_blocks=64
[  141.203182][T11178] EXT4-fs (loop5): Block reservation details
[  141.203197][T11178] EXT4-fs (loop5): i_reserved_data_blocks=4
[  141.243477][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.285516][T11194] xt_hashlimit: max too large, truncated to 1048576
[  141.502487][T11214] vcan0: tx drop: invalid da for name 0x0000000000000001
[  141.566691][T11216] loop4: detected capacity change from 0 to 128
[  141.574247][T11216] FAT-fs (loop4): Directory bread(block 162) failed
[  141.574275][T11216] FAT-fs (loop4): Directory bread(block 163) failed
[  141.574372][T11216] FAT-fs (loop4): Directory bread(block 164) failed
[  141.574395][T11216] FAT-fs (loop4): Directory bread(block 165) failed
[  141.574488][T11216] FAT-fs (loop4): Directory bread(block 166) failed
[  141.574510][T11216] FAT-fs (loop4): Directory bread(block 167) failed
[  141.574532][T11216] FAT-fs (loop4): Directory bread(block 168) failed
[  141.574577][T11216] FAT-fs (loop4): Directory bread(block 169) failed
[  141.575577][T11216] FAT-fs (loop4): Directory bread(block 162) failed
[  141.575645][T11216] FAT-fs (loop4): Directory bread(block 163) failed
[  141.576046][T11216] syz.4.2989: attempt to access beyond end of device
[  141.576046][T11216] loop4: rw=3, sector=226, nr_sectors = 6 limit=128
[  141.576071][T11216] syz.4.2989: attempt to access beyond end of device
[  141.576071][T11216] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128
[  141.631944][T11211] bridge: RTM_NEWNEIGH with invalid ether address
[  141.645559][T11219] loop4: detected capacity change from 0 to 2048
[  141.656678][T11211] bridge0: entered promiscuous mode
[  141.706788][T11211] macsec1: entered allmulticast mode
[  141.706811][T11211] bridge0: entered allmulticast mode
[  141.707683][T11211] bridge0: port 1(macsec1) entered blocking state
[  141.724581][T11211] bridge0: port 1(macsec1) entered disabled state
[  141.734226][T11211] bridge0: left allmulticast mode
[  141.734249][T11211] bridge0: left promiscuous mode
[  142.002784][T11243] vhci_hcd: default hub control req: 4016 v0009 i0000 l0
[  142.120260][T11248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3001'.
[  142.410609][T11254] bridge: RTM_NEWNEIGH with invalid ether address
[  142.433102][T11254] bridge0: entered promiscuous mode
[  142.456010][T11254] macsec1: entered allmulticast mode
[  142.461521][T11254] bridge0: entered allmulticast mode
[  142.472194][T11254] bridge0: port 1(macsec1) entered blocking state
[  142.478868][T11254] bridge0: port 1(macsec1) entered disabled state
[  142.495428][T11254] bridge0: left allmulticast mode
[  142.500615][T11254] bridge0: left promiscuous mode
[  142.563601][T11277] loop4: detected capacity change from 0 to 8192
[  142.609676][T11277]  loop4: p2 p3 p4
[  142.629112][T11277] loop4: p2 size 327551 extends beyond EOD, truncated
[  142.640083][T11277] loop4: p3 size 16776960 extends beyond EOD, truncated
[  142.657148][T11277] loop4: p4 size 3599499392 extends beyond EOD, truncated
[  142.671095][T11293] loop5: detected capacity change from 0 to 2048
[  142.720323][T11293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.930599][T11302] loop4: detected capacity change from 0 to 1024
[  142.961802][T11302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.020241][T11302] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.043801][T11302] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.3021: lblock 3 mapped to illegal pblock 3 (length 1)
[  143.058171][T11302] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  143.070549][T11302] EXT4-fs (loop4): This should not happen!! Data will be lost
[  143.070549][T11302] 
[  143.156684][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.172157][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.214892][T11312] loop4: detected capacity change from 0 to 256
[  143.234573][T11315] loop5: detected capacity change from 0 to 2048
[  143.294265][T11319] SELinux: failed to load policy
[  143.375380][   T29] kauditd_printk_skb: 2681 callbacks suppressed
[  143.375400][   T29] audit: type=1326 audit(1749362250.327:23795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000
[  143.435913][   T29] audit: type=1326 audit(1749362250.327:23796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f3346ab19 code=0x7ffc0000
[  143.459482][   T29] audit: type=1326 audit(1749362250.327:23797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  143.483209][   T29] audit: type=1326 audit(1749362250.337:23798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000
[  143.490147][T11324] loop5: detected capacity change from 0 to 8192
[  143.506730][   T29] audit: type=1326 audit(1749362250.337:23799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f3346ab19 code=0x7ffc0000
[  143.536881][   T29] audit: type=1326 audit(1749362250.337:23800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  143.560758][   T29] audit: type=1326 audit(1749362250.337:23801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000
[  143.584345][   T29] audit: type=1326 audit(1749362250.337:23802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f3346ab19 code=0x7ffc0000
[  143.607915][   T29] audit: type=1326 audit(1749362250.337:23803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000
[  143.631791][   T29] audit: type=1326 audit(1749362250.357:23804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000
[  143.664434][T11330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3032'.
[  144.004282][T11343] bridge: RTM_NEWNEIGH with invalid ether address
[  144.017360][T11343] bridge0: entered promiscuous mode
[  144.022788][T11343] macsec1: entered allmulticast mode
[  144.028142][T11343] bridge0: entered allmulticast mode
[  144.037196][T11343] bridge0: port 3(macsec1) entered blocking state
[  144.043809][T11343] bridge0: port 3(macsec1) entered disabled state
[  144.054529][T11343] bridge0: left allmulticast mode
[  144.059657][T11343] bridge0: left promiscuous mode
[  144.410240][T11379] SELinux:  Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped).
[  144.979483][T11428] vxcan0: tx drop: invalid da for name 0xffffffffffffffff
[  145.012429][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'.
[  145.365945][T11456] loop5: detected capacity change from 0 to 512
[  145.380524][T11456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  145.405772][T11456] EXT4-fs (loop5): 1 truncate cleaned up
[  145.414600][T11456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.475234][   T12] tipc: Subscription rejected, illegal request
[  145.520956][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.918372][T11494] binfmt_misc: register: failed to install interpreter file ./file2
[  146.177358][T11524] netlink: 'syz.3.3116': attribute type 1 has an invalid length.
[  146.474607][T11557] loop5: detected capacity change from 0 to 256
[  146.484813][T11557] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.759812][T11559] bridge: RTM_NEWNEIGH with invalid ether address
[  146.935394][T11573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.942753][T11573] IPv6: NLM_F_CREATE should be set when creating new route
[  146.942785][T11573] IPv6: NLM_F_CREATE should be set when creating new route
[  146.942796][T11573] IPv6: NLM_F_CREATE should be set when creating new route
[  147.131927][T11586] loop4: detected capacity change from 0 to 8192
[  147.164559][T11593] loop5: detected capacity change from 0 to 512
[  147.172938][T11593] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #32: comm syz.5.3146: iget: special inode unallocated
[  147.179175][T11586]  loop4: p2 p3 p4
[  147.187866][T11593] EXT4-fs (loop5): Remounting filesystem read-only
[  147.195025][T11586] loop4: p2 size 327551 extends beyond EOD, 
[  147.195997][T11593] EXT4-fs (loop5): no journal found
[  147.196012][T11593] EXT4-fs (loop5): can't get journal size
[  147.202044][T11586] truncated
[  147.205790][T11586] loop4: p3 size 16776960 extends beyond EOD, 
[  147.208656][T11593] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  147.213129][T11586] truncated
[  147.248855][T11586] loop4: p4 size 3599499392 extends beyond EOD, truncated
[  147.249019][T11593] EXT4-fs (loop5): failed to initialize system zone (-117)
[  147.267882][T11593] EXT4-fs (loop5): mount failed
[  147.485417][T11598] bridge: RTM_NEWNEIGH with invalid ether address
[  147.592668][T11601] macsec1: entered allmulticast mode
[  147.598043][T11601] bridge0: entered allmulticast mode
[  147.616995][T11601] bridge0: port 1(macsec1) entered blocking state
[  147.623631][T11601] bridge0: port 1(macsec1) entered disabled state
[  147.653840][T11601] bridge0: left allmulticast mode
[  147.983934][T11600] syz.5.3149 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  147.984045][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.5.3149 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) 
[  147.984082][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  147.984095][T11600] Call Trace:
[  147.984102][T11600]  <TASK>
[  147.984110][T11600]  __dump_stack+0x1d/0x30
[  147.984130][T11600]  dump_stack_lvl+0xe8/0x140
[  147.984174][T11600]  dump_stack+0x15/0x1b
[  147.984193][T11600]  dump_header+0x81/0x220
[  147.984296][T11600]  oom_kill_process+0x334/0x3f0
[  147.984339][T11600]  out_of_memory+0x979/0xb80
[  147.984372][T11600]  try_charge_memcg+0x5e6/0x9e0
[  147.984455][T11600]  obj_cgroup_charge_pages+0xa6/0x150
[  147.984493][T11600]  __memcg_kmem_charge_page+0x9f/0x170
[  147.984529][T11600]  __alloc_frozen_pages_noprof+0x188/0x360
[  147.984596][T11600]  alloc_pages_mpol+0xb3/0x250
[  147.984635][T11600]  alloc_pages_noprof+0x90/0x130
[  147.984672][T11600]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  147.984819][T11600]  __kvmalloc_node_noprof+0x30f/0x4e0
[  147.984851][T11600]  ? ip_set_alloc+0x1f/0x30
[  147.984874][T11600]  ? ip_set_alloc+0x1f/0x30
[  147.984894][T11600]  ? __kmalloc_cache_noprof+0x189/0x320
[  147.984957][T11600]  ip_set_alloc+0x1f/0x30
[  147.984973][T11600]  hash_netiface_create+0x282/0x740
[  147.984999][T11600]  ? __pfx_hash_netiface_create+0x10/0x10
[  147.985026][T11600]  ip_set_create+0x3cc/0x960
[  147.985071][T11600]  ? __nla_parse+0x40/0x60
[  147.985127][T11600]  nfnetlink_rcv_msg+0x4c3/0x590
[  147.985187][T11600]  ? selinux_capable+0x1f9/0x270
[  147.985213][T11600]  netlink_rcv_skb+0x120/0x220
[  147.985237][T11600]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  147.985275][T11600]  nfnetlink_rcv+0x16b/0x1690
[  147.985356][T11600]  ? __kfree_skb+0x109/0x150
[  147.985375][T11600]  ? nlmon_xmit+0x4f/0x60
[  147.985400][T11600]  ? consume_skb+0x49/0x150
[  147.985420][T11600]  ? nlmon_xmit+0x4f/0x60
[  147.985521][T11600]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  147.985553][T11600]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  147.985578][T11600]  ? __dev_queue_xmit+0x182/0x1fb0
[  147.985609][T11600]  ? ref_tracker_free+0x37d/0x3e0
[  147.985636][T11600]  ? __netlink_deliver_tap+0x4dc/0x500
[  147.985729][T11600]  netlink_unicast+0x5a1/0x670
[  147.985753][T11600]  netlink_sendmsg+0x58b/0x6b0
[  147.985777][T11600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.985849][T11600]  __sock_sendmsg+0x142/0x180
[  147.985895][T11600]  ____sys_sendmsg+0x31e/0x4e0
[  147.985946][T11600]  ___sys_sendmsg+0x17b/0x1d0
[  147.985972][T11600]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  147.986028][T11600]  __x64_sys_sendmsg+0xd4/0x160
[  147.986073][T11600]  x64_sys_call+0x2999/0x2fb0
[  147.986094][T11600]  do_syscall_64+0xd2/0x200
[  147.986181][T11600]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  147.986220][T11600]  ? clear_bhb_loop+0x40/0x90
[  147.986251][T11600]  ? clear_bhb_loop+0x40/0x90
[  147.986283][T11600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.986397][T11600] RIP: 0033:0x7f8fc9c8e929
[  147.986427][T11600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.986451][T11600] RSP: 002b:00007f8fc82f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.986478][T11600] RAX: ffffffffffffffda RBX: 00007f8fc9eb5fa0 RCX: 00007f8fc9c8e929
[  147.986495][T11600] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000006
[  147.986511][T11600] RBP: 00007f8fc9d10b39 R08: 0000000000000000 R09: 0000000000000000
[  147.986563][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.986580][T11600] R13: 0000000000000000 R14: 00007f8fc9eb5fa0 R15: 00007fff5840d6b8
[  147.986605][T11600]  </TASK>
[  147.986629][T11600] memory: usage 307200kB, limit 307200kB, failcnt 104
[  148.359305][T11600] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0
[  148.359322][T11600] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  148.359337][T11600] Memory cgroup stats for /syz5:
[  148.359627][T11600] cache 0
[  148.382790][T11600] rss 4096
[  148.382803][T11600] shmem 0
[  148.382811][T11600] mapped_file 0
[  148.382820][T11600] dirty 0
[  148.395193][T11600] writeback 0
[  148.395205][T11600] workingset_refault_anon 8
[  148.395215][T11600] workingset_refault_file 0
[  148.395236][T11600] swap 180224
[  148.395244][T11600] swapcached 8192
[  148.395253][T11600] pgpgin 5254
[  148.395260][T11600] pgpgout 5252
[  148.395268][T11600] pgfault 8143
[  148.395277][T11600] pgmajfault 2
[  148.395284][T11600] inactive_anon 0
[  148.395293][T11600] active_anon 8192
[  148.395300][T11600] inactive_file 0
[  148.395306][T11600] active_file 0
[  148.395312][T11600] unevictable 0
[  148.395319][T11600] hierarchical_memory_limit 314572800
[  148.395327][T11600] hierarchical_memsw_limit 9223372036854771712
[  148.395401][T11600] total_cache 0
[  148.395410][T11600] total_rss 4096
[  148.395441][T11600] total_shmem 0
[  148.395449][T11600] total_mapped_file 0
[  148.395487][T11600] total_dirty 0
[  148.395495][T11600] total_writeback 0
[  148.395504][T11600] total_workingset_refault_anon 8
[  148.395513][T11600] total_workingset_refault_file 0
[  148.395523][T11600] total_swap 180224
[  148.395532][T11600] total_swapcached 8192
[  148.395539][T11600] total_pgpgin 5254
[  148.395546][T11600] total_pgpgout 5252
[  148.395552][T11600] total_pgfault 8143
[  148.395559][T11600] total_pgmajfault 2
[  148.395566][T11600] total_inactive_anon 0
[  148.395573][T11600] total_active_anon 8192
[  148.395583][T11600] total_inactive_file 0
[  148.395590][T11600] total_active_file 0
[  148.395596][T11600] total_unevictable 0
[  148.395604][T11600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3149,pid=11599,uid=0
[  148.395725][T11600] Memory cgroup out of memory: Killed process 11599 (syz.5.3149) total-vm:95668kB, anon-rss:936kB, file-rss:22008kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  148.533062][   T29] kauditd_printk_skb: 1756 callbacks suppressed
[  148.533155][   T29] audit: type=1400 audit(1749362255.487:25561): avc:  denied  { create } for  pid=11630 comm="syz.0.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  148.634120][   T29] audit: type=1400 audit(1749362255.527:25562): avc:  denied  { listen } for  pid=11630 comm="syz.0.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  148.682016][T11634] binfmt_misc: register: failed to install interpreter file ./file2
[  148.749193][   T29] audit: type=1326 audit(1749362255.697:25563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  148.749235][   T29] audit: type=1326 audit(1749362255.697:25564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  148.749316][   T29] audit: type=1326 audit(1749362255.697:25565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  148.749402][   T29] audit: type=1326 audit(1749362255.697:25566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  148.749435][   T29] audit: type=1326 audit(1749362255.697:25567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000
[  148.885627][   T29] audit: type=1400 audit(1749362255.837:25568): avc:  denied  { create } for  pid=11649 comm="syz.4.3164" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  148.885695][   T29] audit: type=1401 audit(1749362255.837:25569): op=setxattr invalid_context=""
[  148.894912][   T29] audit: type=1400 audit(1749362255.847:25570): avc:  denied  { unlink } for  pid=3307 comm="syz-executor" name="file0" dev="tmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  149.013282][T11660] loop4: detected capacity change from 0 to 1024
[  149.020941][T11660] EXT4-fs: Ignoring removed orlov option
[  149.029890][T11660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.064788][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3173'.
[  149.122939][T11671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.394491][T11701] loop4: detected capacity change from 0 to 512
[  149.404082][T11701] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.3190: corrupted in-inode xattr: invalid ea_ino
[  149.404281][T11701] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3190: couldn't read orphan inode 15 (err -117)
[  149.405043][T11701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.459244][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.607089][T11711] loop4: detected capacity change from 0 to 512
[  149.607987][T11711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  149.628458][T11711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002]
[  149.628868][T11711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3193: missing EA_INODE flag
[  149.629021][T11711] EXT4-fs (loop4): Remounting filesystem read-only
[  149.629055][T11711] EXT4-fs (loop4): 1 orphan inode deleted
[  149.629530][T11711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.657789][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.998190][T11731] loop5: detected capacity change from 0 to 8192
[  150.019115][T11731]  loop5: p2 p3 p4
[  150.019161][T11731] loop5: p2 size 327551 extends beyond EOD, truncated
[  150.021183][T11731] loop5: p3 size 16776960 extends beyond EOD, truncated
[  150.021873][T11731] loop5: p4 size 3599499392 extends beyond EOD, truncated
[  150.314471][T11759] loop4: detected capacity change from 0 to 512
[  150.324233][T11755] bridge: RTM_NEWNEIGH with invalid ether address
[  150.345591][T11759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.347996][T11746] bridge0: entered promiscuous mode
[  150.364940][T11746] macsec1: entered allmulticast mode
[  150.370305][T11746] bridge0: entered allmulticast mode
[  150.377353][T11746] bridge0: port 3(macsec1) entered blocking state
[  150.383913][T11746] bridge0: port 3(macsec1) entered disabled state
[  150.386390][T11759] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.410534][T11746] bridge0: left allmulticast mode
[  150.415716][T11746] bridge0: left promiscuous mode
[  150.446790][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.492793][T11771] loop5: detected capacity change from 0 to 256
[  150.586672][T11787] loop4: detected capacity change from 0 to 256
[  150.646793][T11793] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  150.653268][T11793] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  150.672005][T11796] loop5: detected capacity change from 0 to 512
[  150.692040][T11796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.704900][T11796] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.735505][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.770756][T11810] loop5: detected capacity change from 0 to 164
[  150.778188][T11810] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  150.792129][T11810] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  150.800882][T11810] Symlink component flag not implemented
[  150.806546][T11810] Symlink component flag not implemented
[  150.813672][T11810] Symlink component flag not implemented (7)
[  150.819690][T11810] Symlink component flag not implemented (116)
[  150.988556][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'.
[  151.333354][T11872] loop4: detected capacity change from 0 to 1024
[  151.350921][T11872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.377731][T11872] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.402731][T11882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3266'.
[  151.415251][T11872] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.3263: lblock 1 mapped to illegal pblock 1 (length 15)
[  151.431558][T11872] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.3263: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  151.503338][T11890] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  151.511566][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.632579][T11894] loop4: detected capacity change from 0 to 8192
[  151.680510][T11894]  loop4: p2 p3 p4
[  151.684717][T11894] loop4: p2 size 327551 extends beyond EOD, truncated
[  151.694666][T11894] loop4: p3 size 16776960 extends beyond EOD, truncated
[  151.702576][T11894] loop4: p4 size 3599499392 extends beyond EOD, truncated
[  151.770655][T11915] SELinux:  policydb version 0 does not match my version range 15-34
[  151.779127][T11915] SELinux: failed to load policy
[  151.795595][  T262] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.842433][  T262] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.916034][  T262] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.989069][T11936] loop4: detected capacity change from 0 to 1024
[  151.996841][T11936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  152.007689][T11936] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  152.008494][  T262] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.018679][T11936] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  152.021043][T11936] JBD2: no valid journal superblock found
[  152.044481][T11936] EXT4-fs (loop4): Could not load journal inode
[  152.122248][  T262] bridge_slave_1: left allmulticast mode
[  152.127981][  T262] bridge_slave_1: left promiscuous mode
[  152.133695][  T262] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.144366][  T262] bridge_slave_0: left allmulticast mode
[  152.150080][  T262] bridge_slave_0: left promiscuous mode
[  152.155846][  T262] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.272098][  T262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.282946][  T262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.293009][  T262] bond0 (unregistering): Released all slaves
[  152.305890][T11948] netlink: 'syz.4.3294': attribute type 13 has an invalid length.
[  152.313818][T11948] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3294'.
[  152.446198][  T262] hsr_slave_0: left promiscuous mode
[  152.476093][  T262] hsr_slave_1: left promiscuous mode
[  152.490705][  T262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.498201][  T262] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.506584][  T262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.514103][  T262] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.526437][  T262] veth1_macvtap: left promiscuous mode
[  152.532602][  T262] veth0_macvtap: left promiscuous mode
[  152.538380][  T262] veth1_vlan: left promiscuous mode
[  152.539662][T11961] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  152.543911][  T262] veth0_vlan: left promiscuous mode
[  152.558502][T11961] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  152.580834][T11961] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  152.710887][  T262] team0 (unregistering): Port device team_slave_1 removed
[  152.728940][  T262] team0 (unregistering): Port device team_slave_0 removed
[  152.788357][T11922] chnl_net:caif_netlink_parms(): no params data found
[  152.813216][T11982] loop4: detected capacity change from 0 to 8192
[  153.003738][T11922] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.010927][T11922] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.020311][T11922] bridge_slave_0: entered allmulticast mode
[  153.027357][T11922] bridge_slave_0: entered promiscuous mode
[  153.036021][T11922] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.043143][T11922] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.051348][T11922] bridge_slave_1: entered allmulticast mode
[  153.058040][T11922] bridge_slave_1: entered promiscuous mode
[  153.086580][T12004] loop4: detected capacity change from 0 to 1024
[  153.095117][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.105877][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.124694][T12004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.163054][T11922] team0: Port device team_slave_0 added
[  153.180793][T11922] team0: Port device team_slave_1 added
[  153.205003][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.206217][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.212000][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.212103][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.258634][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.265640][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.291728][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.368389][T11922] hsr_slave_0: entered promiscuous mode
[  153.380557][T11922] hsr_slave_1: entered promiscuous mode
[  153.389573][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.408940][T11922] Cannot create hsr debugfs directory
[  153.457251][T12025] loop4: detected capacity change from 0 to 512
[  153.484990][T12025] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  153.501111][T12025] EXT4-fs (loop4): mount failed
[  153.551930][   T29] kauditd_printk_skb: 686 callbacks suppressed
[  153.551946][   T29] audit: type=1400 audit(1749362260.507:26256): avc:  denied  { create } for  pid=12031 comm="syz.4.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  153.558427][T11922] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  153.597079][   T29] audit: type=1400 audit(1749362260.537:26257): avc:  denied  { write } for  pid=12031 comm="syz.4.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  153.621596][   T29] audit: type=1400 audit(1749362260.577:26258): avc:  denied  { create } for  pid=12033 comm="syz.4.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  153.641509][   T29] audit: type=1400 audit(1749362260.577:26259): avc:  denied  { connect } for  pid=12033 comm="syz.4.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  153.663592][T11922] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  153.681849][T11922] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  153.690918][T11922] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  153.711241][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'.
[  153.720242][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'.
[  153.752051][T11922] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.759178][T11922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.766581][T11922] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.773747][T11922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.782315][   T29] audit: type=1400 audit(1749362260.727:26260): avc:  denied  { read write } for  pid=12051 comm="syz.4.3337" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.806320][   T29] audit: type=1400 audit(1749362260.727:26261): avc:  denied  { open } for  pid=12051 comm="syz.4.3337" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.855573][T11922] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.864732][   T29] audit: type=1326 audit(1749362260.817:26262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000
[  153.893989][   T29] audit: type=1326 audit(1749362260.847:26263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000
[  153.917892][   T29] audit: type=1326 audit(1749362260.847:26264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000
[  153.941637][   T29] audit: type=1326 audit(1749362260.847:26265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000
[  153.973554][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.995640][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.022543][T11922] 8021q: adding VLAN 0 to HW filter on device team0
[  154.041477][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.048606][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.087885][T11922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.098048][T12073] netlink: 'syz.3.3343': attribute type 21 has an invalid length.
[  154.098377][T11922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.119271][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.126381][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.206853][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3347'.
[  154.221605][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.418135][T11922] veth0_vlan: entered promiscuous mode
[  154.422440][T11922] veth1_vlan: entered promiscuous mode
[  154.446132][T11922] veth0_macvtap: entered promiscuous mode
[  154.446407][    C1] vcan0: j1939_tp_rxtimer: 0xffff888103d04c00: rx timeout, send abort
[  154.446488][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888103d04c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  154.447971][T11922] veth1_macvtap: entered promiscuous mode
[  154.493850][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.499444][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.541982][T11922] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.542016][T11922] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.542054][T11922] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.542109][T11922] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.617735][T12113] loop6: detected capacity change from 0 to 164
[  154.625237][T12113] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  154.630995][T12113] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  154.631526][T12113] rock: directory entry would overflow storage
[  154.631534][T12113] rock: sig=0x4f50, size=4, remaining=3
[  154.631547][T12113] iso9660: Corrupted directory entry in block 4 of inode 1792
[  154.928377][T12129] loop6: detected capacity change from 0 to 764
[  155.011773][T12132] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3362'.
[  155.063552][T12139] loop6: detected capacity change from 0 to 512
[  155.081090][T12139] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  155.106448][T12139] EXT4-fs (loop6): 1 truncate cleaned up
[  155.128546][T12139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.312764][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.331804][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.561809][T12183] bond1: entered promiscuous mode
[  155.561831][T12183] bond1: entered allmulticast mode
[  155.567261][T12183] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.573879][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.602560][T12183] bond1 (unregistering): Released all slaves
[  155.884466][T12207] vhci_hcd: invalid port number 16
[  155.889779][T12207] vhci_hcd: default hub control req: 0000 v0008 i0010 l0
[  155.968007][T12216] loop4: detected capacity change from 0 to 2048
[  156.001433][T12216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.017288][T12220] loop6: detected capacity change from 0 to 256
[  156.025373][T12220] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001)
[  156.044022][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.083186][T12228] loop6: detected capacity change from 0 to 1024
[  156.083595][T12228] EXT4-fs: Ignoring removed bh option
[  156.103379][T12228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  156.139445][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  156.191593][T12239] SELinux: failed to load policy
[  156.192232][T12242] loop6: detected capacity change from 0 to 512
[  156.192716][T12242] EXT4-fs: Ignoring removed mblk_io_submit option
[  156.193025][T12242] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  156.195053][T12242] EXT4-fs (loop6): 1 truncate cleaned up
[  156.195425][T12242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.294377][T12255] EXT4-fs (loop6): shut down requested (2)
[  156.314066][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.431013][T12272] loop4: detected capacity change from 0 to 1024
[  156.439427][T12272] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  156.451838][T12272] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  156.463796][T12272] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  156.502894][T12272] EXT4-fs (loop4): orphan cleanup on readonly fs
[  156.524695][T12272] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.3417: Inode bitmap for bg 0 marked uninitialized
[  156.546852][T12272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  156.612146][T12272] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  156.634334][T12288] __nla_validate_parse: 1 callbacks suppressed
[  156.634391][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'.
[  156.634406][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'.
[  156.659067][T12266] bridge: RTM_NEWNEIGH with invalid ether address
[  156.682878][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.688186][T12266] bridge0: entered promiscuous mode
[  156.688275][T12266] macsec1: entered allmulticast mode
[  156.688291][T12266] bridge0: entered allmulticast mode
[  156.692199][T12266] bridge0: port 3(macsec1) entered blocking state
[  156.692336][T12266] bridge0: port 3(macsec1) entered disabled state
[  156.693529][T12266] bridge0: left allmulticast mode
[  156.693629][T12266] bridge0: left promiscuous mode
[  157.602884][T12302] program syz.1.3428 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.757866][T12328] loop4: detected capacity change from 0 to 128
[  157.767609][T12328] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.781269][T12328] ext4 filesystem being mounted at /638/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.812500][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.865688][T12345] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  157.970101][T12353] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  157.997610][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3454'.
[  158.548106][T12388] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  158.592215][T12398] loop6: detected capacity change from 0 to 512
[  158.668645][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3471'.
[  158.691774][T12402] netem: change failed
[  158.807619][T12412] loop4: detected capacity change from 0 to 512
[  158.834123][T12412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  158.881017][T12398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.893735][T12398] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.905866][   T29] kauditd_printk_skb: 1077 callbacks suppressed
[  158.905878][   T29] audit: type=1400 audit(1749362265.857:27343): avc:  denied  { read } for  pid=12397 comm="syz.6.3470" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  158.943167][T12412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.956457][T12412] ext4 filesystem being mounted at /646/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.970663][   T29] audit: type=1400 audit(1749362265.927:27344): avc:  denied  { ioctl } for  pid=12397 comm="syz.6.3470" path="/31/bus/file1" dev="loop6" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  158.983503][T12412] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3476: corrupted xattr block 19: overlapping e_value 
[  159.024368][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.063455][T12412] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  159.072900][T12412] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3476: corrupted xattr block 19: overlapping e_value 
[  159.131208][T12412] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  159.149063][T12412] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3476: corrupted xattr block 19: overlapping e_value 
[  159.163049][   T29] audit: type=1400 audit(1749362266.107:27345): avc:  denied  { read write } for  pid=12411 comm="syz.4.3476" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  159.186018][   T29] audit: type=1326 audit(1749362266.107:27346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  159.220722][T12412] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  159.259881][   T29] audit: type=1326 audit(1749362266.117:27347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  159.283573][   T29] audit: type=1326 audit(1749362266.117:27348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  159.307264][   T29] audit: type=1326 audit(1749362266.117:27349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  159.331007][   T29] audit: type=1326 audit(1749362266.117:27350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  159.354697][   T29] audit: type=1326 audit(1749362266.117:27351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  159.378419][   T29] audit: type=1326 audit(1749362266.117:27352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efcde93e929 code=0x7ffc0000
[  159.412366][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.093036][T12475] loop6: detected capacity change from 0 to 1024
[  160.122369][T12475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.135198][T12475] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.158741][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.521239][T12493] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  160.896795][T12519] loop4: detected capacity change from 0 to 512
[  160.913388][T12519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  160.944466][T12521] atomic_op ffff88811f430928 conn xmit_atomic 0000000000000000
[  160.954259][T12519] EXT4-fs (loop4): 1 truncate cleaned up
[  160.974591][T12519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.118290][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.328049][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'.
[  161.390479][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'.
[  161.443968][T12548] loop4: detected capacity change from 0 to 1764
[  161.517405][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3532'.
[  161.557025][T12562] hub 9-0:1.0: USB hub found
[  161.566501][T12562] hub 9-0:1.0: 8 ports detected
[  161.800561][T12582] vhci_hcd: invalid port number 96
[  161.805818][T12582] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  162.011688][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3551'.
[  162.056105][T12609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3552'.
[  162.386879][T12641] hub 9-0:1.0: USB hub found
[  162.396030][T12641] hub 9-0:1.0: 8 ports detected
[  162.509184][T12650] vlan0: entered allmulticast mode
[  162.514417][T12650] bridge_slave_0: entered allmulticast mode
[  162.583151][T12656] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3574'.
[  162.652807][T12672] loop4: detected capacity change from 0 to 1024
[  162.662452][T12672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.960612][T12683] loop6: detected capacity change from 0 to 8192
[  162.999106][T12683]  loop6: p2 p3 p4
[  163.002932][T12683] loop6: p2 size 327551 extends beyond EOD, truncated
[  163.013627][T12683] loop6: p3 size 16776960 extends beyond EOD, truncated
[  163.022099][T12683] loop6: p4 size 3599499392 extends beyond EOD, truncated
[  163.393178][T12675] ==================================================================
[  163.401333][T12675] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range
[  163.410318][T12675] 
[  163.412651][T12675] read-write to 0xffff888106fdbb50 of 8 bytes by task 12672 on cpu 0:
[  163.420830][T12675]  __filemap_add_folio+0x5b9/0x7d0
[  163.425984][T12675]  filemap_add_folio+0x98/0x1b0
[  163.430873][T12675]  __filemap_get_folio+0x31e/0x650
[  163.436025][T12675]  ext4_write_begin+0x234/0xd30
[  163.440917][T12675]  generic_perform_write+0x184/0x490
[  163.446225][T12675]  ext4_buffered_write_iter+0x1ee/0x3c0
[  163.451804][T12675]  ext4_file_write_iter+0xdbf/0xf00
[  163.457027][T12675]  iter_file_splice_write+0x5ef/0x970
[  163.462436][T12675]  direct_splice_actor+0x153/0x2a0
[  163.467593][T12675]  splice_direct_to_actor+0x30f/0x680
[  163.473000][T12675]  do_splice_direct+0xda/0x150
[  163.477811][T12675]  do_sendfile+0x380/0x650
[  163.482269][T12675]  __x64_sys_sendfile64+0x105/0x150
[  163.487498][T12675]  x64_sys_call+0xb39/0x2fb0
[  163.492121][T12675]  do_syscall_64+0xd2/0x200
[  163.496660][T12675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.502580][T12675] 
[  163.504918][T12675] read to 0xffff888106fdbb50 of 8 bytes by task 12675 on cpu 1:
[  163.512649][T12675]  filemap_write_and_wait_range+0x59/0x340
[  163.518673][T12675]  ext4_file_write_iter+0xe04/0xf00
[  163.523910][T12675]  iter_file_splice_write+0x5ef/0x970
[  163.529335][T12675]  direct_splice_actor+0x153/0x2a0
[  163.534494][T12675]  splice_direct_to_actor+0x30f/0x680
[  163.539915][T12675]  do_splice_direct+0xda/0x150
[  163.544721][T12675]  do_sendfile+0x380/0x650
[  163.549163][T12675]  __x64_sys_sendfile64+0x105/0x150
[  163.554403][T12675]  x64_sys_call+0xb39/0x2fb0
[  163.559065][T12675]  do_syscall_64+0xd2/0x200
[  163.563605][T12675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.569559][T12675] 
[  163.571893][T12675] value changed: 0x0000000000000000 -> 0x0000000000000001
[  163.579014][T12675] 
[  163.581370][T12675] Reported by Kernel Concurrency Sanitizer on:
[  163.587542][T12675] CPU: 1 UID: 0 PID: 12675 Comm: syz.4.3579 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) 
[  163.599728][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  163.609893][T12675] ==================================================================
[  163.756266][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.