last executing test programs:

6.074073743s ago: executing program 0 (id=5468):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000300)}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e", 0xc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc049095876", 0x76}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e", 0x64}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492", 0x56}, {&(0x7f0000001240)="d61f65ae", 0x4}], 0x2}}], 0x4, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0)

5.196158046s ago: executing program 0 (id=5473):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, 0x0, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000780)={0x1, {{0xa, 0x4e23, 0x99, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}}, {{0xa, 0x4e23, 0x736, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodelalloc}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

5.126119865s ago: executing program 0 (id=5474):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000c3040000009900000001"], 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000070000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mq_unlink(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='adfs\x00', 0x220ac08, 0x0)

4.403278909s ago: executing program 4 (id=5483):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000002c0)={@remote, 0x3, 0x2, 0x3, 0x0, 0x77f, 0x4000}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000500)=""/191, 0xbf}], 0x2, 0x5, 0x0)

4.384957512s ago: executing program 4 (id=5484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodelalloc}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

4.330586379s ago: executing program 4 (id=5485):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)

4.258441798s ago: executing program 0 (id=5486):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r5, 0x7f, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004"], 0x18}}, 0x8000)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x2, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="2593", 0x0, 0xffffffff, 0x30, 0x0, 0x0})

3.940764109s ago: executing program 4 (id=5488):
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x3, @remote}}}, 0x9e)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
tkill(0x0, 0x13)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x1, 0x6, 0x1, 0x10, 0x0, 0x1af, 0x600, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x80, 0x1}, 0x4000, 0x4, 0x5786cc05, 0x5, 0x92, 0x800, 0x1, 0x0, 0x1, 0x0, 0x5b0}, 0x0, 0x9, r1, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x4, 0xa}, 0x2c)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x7fffffff, 0x200001)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000280)={0x1, 'macsec0\x00', 0x4}, 0x18)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9})
mlock2(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x110}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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")

3.001593831s ago: executing program 3 (id=5497):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xfffffdff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x94bb8e57c32e7657}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d800000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd65}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
close(r0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000200012425b9a05b192156d000000ffffffff0000000000000000"], 0x48)

2.953564878s ago: executing program 4 (id=5498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c084}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280024}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x1)

2.055157594s ago: executing program 4 (id=5508):
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x239f, &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000080)=[{r0, 0x1130}, {r0, 0x4}], 0x2, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000580)={[{@nouid32}, {@debug}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, 'kfree\x00'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x14c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc95}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a7}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x718d797b}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

1.85072618s ago: executing program 1 (id=5510):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000300)}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e", 0xc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc049095876", 0x76}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e", 0x64}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492", 0x56}, {&(0x7f0000001240)="d61f65ae", 0x4}], 0x2}}], 0x4, 0x2090)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0)

1.784263459s ago: executing program 1 (id=5511):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000012002126000000000006000028001a00e0000001000000000000000000000000fe8000000000000000000000000000000200ff"], 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
r3 = socket$inet6(0x2d, 0x2, 0x0)
bind$inet6(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10}, {0x6, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@tmpl={0x184, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@remote, 0x0, 0x2, 0x0, 0xff, 0x7}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x4d5, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="86", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='f', 0x1}], 0x1}}], 0x2, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c)
shutdown(r9, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x9, 0x0, 0x7ff, 0x2}, &(0x7f00000002c0)=0x10)
r12 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r12, &(0x7f0000001200)={'#! ', './file0'}, 0xb)
close(r12)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

1.641301067s ago: executing program 1 (id=5512):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28)
close(r0)

1.569523427s ago: executing program 1 (id=5513):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mincore(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b5", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)

1.332795528s ago: executing program 0 (id=5487):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5", 0x78}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc2", 0x66}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad", 0x3}], 0x1}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0)

1.16256419s ago: executing program 1 (id=5515):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6", 0x2d}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f531217", 0x96}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc", 0x5f}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e", 0xc}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc2", 0x66}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0)

1.078499291s ago: executing program 2 (id=5516):
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x97}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000500)=""/191, 0xbf}], 0x2, 0x5, 0x0)

1.012417809s ago: executing program 2 (id=5517):
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x239f, &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000080)=[{r0, 0x1130}, {r0, 0x4}], 0x2, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000580)={[{@nouid32}, {@debug}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, 'kfree\x00'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x14c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc95}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a7}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x718d797b}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000004000000006955db32000b08d9bb6dfdb3c8a66226"], 0x50)
sendfile(r2, r1, 0x0, 0x7ffff000)

635.863918ms ago: executing program 3 (id=5518):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000005c0)={[{@acl}, {@nodioread_nolock}, {@minixdf}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@init_itable}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000cc0)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendfile(r0, r0, 0x0, 0x800000009)

499.815106ms ago: executing program 3 (id=5519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(r0, 0xffffffffffffffff, 0x0)

478.771668ms ago: executing program 3 (id=5520):
r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xef)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10)
write$cgroup_int(r3, 0x0, 0x0)

431.122195ms ago: executing program 3 (id=5521):
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0xfffffffe, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x158, 0x0, 0x148, 0x158, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {0xff}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x21, 0x0, 0x1ff, 0x100000, 0x0, 0x80000ed, 0x10000007}, {0x20}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffb, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x20, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff000000, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x6}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="34000000000000000000000007000000071d"], 0x38}}], 0x1, 0x46000)
listen(r0, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

430.614785ms ago: executing program 0 (id=5522):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x20004844)

379.674601ms ago: executing program 3 (id=5523):
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x239f, &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000080)=[{r0, 0x1130}, {r0, 0x4}], 0x2, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000580)={[{@nouid32}, {@debug}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, 'kfree\x00'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x14c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc95}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a7}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x718d797b}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

362.329613ms ago: executing program 2 (id=5524):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r5, 0x7f, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004"], 0x18}}, 0x8000)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x2, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="2593", 0x0, 0xffffffff, 0x30, 0x0, 0x0})

235.04046ms ago: executing program 1 (id=5525):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6", 0x2d}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c", 0xcd}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13", 0x9f}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc", 0x5f}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e", 0xc}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc2", 0x66}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0)

103.658607ms ago: executing program 2 (id=5526):
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')

63.028592ms ago: executing program 2 (id=5527):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmmsg$sock(r0, &(0x7f0000000f80)=[{{&(0x7f0000000840)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000008c0)="0dc626049bc96fb6e57b355185595a5b50f33e407d159d2cc9bad864f0645aaa69166f5ad86c5951bb452b4096d9b771403361cbce8ea8c70c5a0500d0d3443fcfe105e93611778254176af2201b2011eafc45aae163609d9feca940e1167283f7431d4ff757de34cb79df2d4bf10535469d5564b229a143835e6ce5fff7e86d2ee31caec8e4", 0x86}], 0x1, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0xcdd}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xa8}}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x6, 0x0, 0x2, 0x3, 0xa9}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b40)="5b48e0cf1cf9a56124117a22b90843302b70eb29815d0ef721042ae91dda7b9e6355a855c77b6345e991d6e29d9eaeed401803c8403eb31fce0b3142e47b9099d72d48db5c84412dbd051e41a26b28144dc146cf833d061cebd34ac5e85b5df0f749f11810e29553196474e32ac14c86f7223c4633b5a18e0ca5e9f87817207e29f9a5fb9281e3b36b2b", 0x8a}, {&(0x7f0000000980)="793168cb64fdcbd527ce7cd24137df2e480678e9e75bb3903d8a82a2f8d45a488c724e2079f3d8a94abdff091ad0", 0x2e}, {&(0x7f0000000c00)="c732d336dc66f4595d39989999e119eec4bec0dfafc5a8c47ab068e2761c15cf7353efc06f4ba041523d35c2b728f5b0db6ebd20f5742f9a77b0971c37b1a04ff26ef20bbacad0b7e231b6423e48a13e35fba87d6f2c6252419b1ad94457e8f1a766ebced7af15ae8e1fb20fe8a397baaea4e55ccdb3e7bec96e5b7a11b0f4", 0x7f}, {&(0x7f0000000d00)="34395a7b7ff4a97d8ffccfea20ba6765744a87eba0cf87107a6e2495de44c37c4e615eac89f0a7be36fda7ab00c5146cada71f68a09d9792468883d2171bda1e511ef21b8ddb732683e4df7b39e67a856cbc5f9e9d1dbf8a2520498c5f4e9dfa4aa2711a667f1bbc4c7b85df97161079cac9f43233a9c4ee1db9f7d4b0c5a043cdb77f775524ac78a50e4e288e1cb2bebbb7cf37ce946516d81307a5db9cd212e951c03449ca96c86072c31deb6179aed77318ae45492dc416019479b98a5455ca6f8d42ad4ae01044342cd95d3360902794318dcc7b", 0xd6}, {&(0x7f0000000e00)="9633cd15af6924db5e03ac808c7bc118994422a00ce38a58641e7855c09fc2566d4c30ad99ed158b99a12647237fdfbe0f6137b98561755d2b5b96c1b2a94b0b9ba1b8e299d288e49e442ce633506bc3e5995c7a0dbdf4e519c65c785e18753a083fdf8b2e0d1be5978f7b1b30", 0x6d}], 0x5, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x7f}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}], 0x2, 0x4000)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000900004802400078008000300010000000800040000000000080001081600000008000400c42c0000240007800800030000000000080003000600000008000100000000000800030000000000040007800800020001000000080004"], 0xa4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
flistxattr(r2, 0x0, 0x0)

0s ago: executing program 2 (id=5528):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x40, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x4)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12)

kernel console output (not intermixed with test programs):

423.397537][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.404989][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.412391][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.419833][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.427643][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.435435][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.442926][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.450380][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.457848][ T3424] hid-generic 0103:0004:0000.001B: unknown main item tag 0x0
[  423.464903][T17139] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  423.472274][ T3424] hid-generic 0103:0004:0000.001B: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  423.485358][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  423.485377][   T29] audit: type=1326 audit(1768480909.507:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.534051][   T29] audit: type=1326 audit(1768480909.507:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.557752][   T29] audit: type=1326 audit(1768480909.527:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.581428][   T29] audit: type=1326 audit(1768480909.527:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.605219][   T29] audit: type=1326 audit(1768480909.527:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.621147][T17144] loop1: detected capacity change from 0 to 1024
[  423.628876][   T29] audit: type=1326 audit(1768480909.527:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.636231][T17145] loop0: detected capacity change from 0 to 512
[  423.658636][   T29] audit: type=1326 audit(1768480909.527:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.688597][   T29] audit: type=1326 audit(1768480909.527:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.689386][T17145] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  423.712167][   T29] audit: type=1326 audit(1768480909.527:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.721391][T17145] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  423.744844][   T29] audit: type=1326 audit(1768480909.527:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.0.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  423.780018][T17145] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  423.780758][T17144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  423.788260][T17145] System zones: 0-2, 18-18, 34-35
[  423.818018][T17144] System zones: 0-1, 3-12
[  423.832391][T17144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4989: bg 0: block 88: padding at end of block bitmap is not set
[  423.855469][T17153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  423.863604][T17153] System zones: 0-1, 3-12
[  423.874260][T17153] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4991: bg 0: block 88: padding at end of block bitmap is not set
[  423.892895][T17160] __nla_validate_parse: 5 callbacks suppressed
[  423.892910][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4993'.
[  423.908178][T17160] openvswitch: netlink: Flow actions attr not present in new flow.
[  423.968600][T17166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  423.983352][T17166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  424.055689][T17176] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.072763][T17171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  424.080277][T17171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  424.133713][T17182] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5000: bg 0: block 345: padding at end of block bitmap is not set
[  424.148639][T17182] EXT4-fs (loop2): Remounting filesystem read-only
[  424.155238][   T37] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  424.209217][T17184] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  424.218444][T17184] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  424.228222][T17184] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  424.237290][T17186] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  424.245572][T17184] System zones: 0-2, 18-18
[  424.245641][T17186] System zones: 0-1
[  424.245628][T17184] , 34-35
[  424.250085][T17186] , 3-12
[  424.261840][T17186] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5002: bg 0: block 88: padding at end of block bitmap is not set
[  424.288008][T17176] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  424.373575][T17197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  424.381320][T17197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  424.394837][T17199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  424.403203][T17199] System zones: 0-1, 3-12
[  424.409613][T17199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5006: bg 0: block 88: padding at end of block bitmap is not set
[  424.547277][T17215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5011'.
[  424.556461][T17215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5011'.
[  424.565562][T17215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5011'.
[  424.591316][ T3424] hid-generic 0103:0004:0000.001C: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  424.638067][T17219] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.671055][T17221] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.686321][T17219] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.697159][T17223] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  424.707469][T17223] System zones: 0-1, 3-12
[  424.713754][T17223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5015: bg 0: block 88: padding at end of block bitmap is not set
[  424.741315][T17229] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5014: bg 0: block 345: padding at end of block bitmap is not set
[  424.763975][T17219] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.775724][T17229] EXT4-fs (loop4): Remounting filesystem read-only
[  424.782396][  T887] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  424.826217][T17219] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.844762][T17231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  424.853025][T17231] System zones: 0-1, 3-12
[  424.858242][T17221] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  424.866118][T17231] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5016: bg 0: block 88: padding at end of block bitmap is not set
[  424.895716][ T1860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.919774][ T1860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.933454][ T1860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.942061][ T1860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.954918][T17236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  424.963164][T17236] System zones: 0-1, 3-12
[  424.969804][T17236] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5018: bg 0: block 88: padding at end of block bitmap is not set
[  425.020533][T17245] xt_hashlimit: overflow, rate too high: 0
[  425.028530][T17245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5020'.
[  425.037608][T17245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5020'.
[  425.046683][T17245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5020'.
[  425.060454][T17245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5020'.
[  425.062208][T17243] syzkaller0: entered promiscuous mode
[  425.075093][T17243] syzkaller0: entered allmulticast mode
[  425.103179][T17250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  425.110824][T17250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  425.144063][T17254] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.195899][T17254] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.254971][T17258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  425.263179][T17258] System zones: 0-1, 3-12
[  425.271107][T17258] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5026: bg 0: block 88: padding at end of block bitmap is not set
[  425.287805][T17254] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.298508][T17261] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  425.307657][T17261] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  425.316830][T17261] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  425.325086][T17261] System zones: 0-2, 18-18, 34-35
[  425.356942][T17254] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.384870][T17266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  425.393008][T17266] System zones: 0-1, 3-12
[  425.400322][T17266] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5028: bg 0: block 88: padding at end of block bitmap is not set
[  425.505100][T17272] syzkaller0: entered promiscuous mode
[  425.510685][T17272] syzkaller0: entered allmulticast mode
[  425.593853][ T3913] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  425.615106][T17276] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  425.623433][T17276] System zones: 0-1, 3-12
[  425.631442][T17276] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5032: bg 0: block 88: padding at end of block bitmap is not set
[  425.677236][T17280] xt_hashlimit: overflow, rate too high: 0
[  425.685258][T17280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5033'.
[  425.694300][T17280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5033'.
[  426.092359][T17284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17284 comm=syz.4.5035
[  426.132153][T17288] FAULT_INJECTION: forcing a failure.
[  426.132153][T17288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.145509][T17288] CPU: 1 UID: 0 PID: 17288 Comm: syz.0.5036 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  426.145548][T17288] Tainted: [W]=WARN
[  426.145557][T17288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  426.145572][T17288] Call Trace:
[  426.145579][T17288]  <TASK>
[  426.145588][T17288]  __dump_stack+0x1d/0x30
[  426.145619][T17288]  dump_stack_lvl+0x95/0xd0
[  426.145728][T17288]  dump_stack+0x15/0x1b
[  426.145752][T17288]  should_fail_ex+0x265/0x280
[  426.145780][T17288]  should_fail+0xb/0x20
[  426.145804][T17288]  should_fail_usercopy+0x1a/0x20
[  426.145904][T17288]  _copy_from_user+0x1c/0xb0
[  426.145937][T17288]  ucma_write+0xd9/0x250
[  426.145979][T17288]  ? __pfx_ucma_write+0x10/0x10
[  426.146032][T17288]  vfs_write+0x269/0x960
[  426.146050][T17288]  ? __rcu_read_unlock+0x4f/0x70
[  426.146094][T17288]  ? __fget_files+0x184/0x1c0
[  426.146123][T17288]  ksys_write+0xda/0x1a0
[  426.146158][T17288]  __x64_sys_write+0x40/0x50
[  426.146181][T17288]  x64_sys_call+0x2847/0x3000
[  426.146290][T17288]  do_syscall_64+0xca/0x2b0
[  426.146328][T17288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.146370][T17288] RIP: 0033:0x7f7875a5f749
[  426.146384][T17288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.146415][T17288] RSP: 002b:00007f78744c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  426.146473][T17288] RAX: ffffffffffffffda RBX: 00007f7875cb5fa0 RCX: 00007f7875a5f749
[  426.146489][T17288] RDX: 0000000000000018 RSI: 0000200000000f80 RDI: 0000000000000003
[  426.146559][T17288] RBP: 00007f78744c7090 R08: 0000000000000000 R09: 0000000000000000
[  426.146572][T17288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.146583][T17288] R13: 00007f7875cb6038 R14: 00007f7875cb5fa0 R15: 00007ffe2961a368
[  426.146604][T17288]  </TASK>
[  426.339429][   T44] Bluetooth: hci1: command 0x1003 tx timeout
[  426.340265][ T3536] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  426.403198][ T3430] hid-generic 0103:0004:0000.001D: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  426.413129][ T4050] hid-generic 0103:0004:0000.001E: hidraw1: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  426.463671][   T37] Bluetooth: hci0: Frame reassembly failed (-84)
[  426.475403][T17309] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.531832][T17316] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  426.540981][T17316] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  426.561473][T17317] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5046: bg 0: block 345: padding at end of block bitmap is not set
[  426.576469][T17317] EXT4-fs (loop4): Remounting filesystem read-only
[  426.583178][   T52] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  426.597242][T17316] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  426.606832][T17316] System zones: 0-2, 18-18, 34-35
[  426.658875][T17309] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  426.700966][T17324] netlink: 'syz.4.5049': attribute type 10 has an invalid length.
[  426.711762][T17324] ipvlan2: entered promiscuous mode
[  426.718936][T17324] bridge0: port 4(ipvlan2) entered blocking state
[  426.725585][T17324] bridge0: port 4(ipvlan2) entered disabled state
[  426.732437][T17324] ipvlan2: entered allmulticast mode
[  426.737817][T17324] bridge0: entered allmulticast mode
[  426.743574][T17324] ipvlan2: left allmulticast mode
[  426.748778][T17324] bridge0: left allmulticast mode
[  426.810876][T17327] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42768 sclass=netlink_xfrm_socket pid=17327 comm=syz.4.5050
[  426.827753][T17327] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5050: bad orphan inode 15
[  426.838116][T17327] ext4_test_bit(bit=14, block=5) = 0
[  426.848363][T17327] EXT4-fs (loop4): can't disable delalloc during remount
[  426.902156][T17332] sit0: left promiscuous mode
[  427.005469][T17339] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  427.014727][T17339] System zones: 0-1, 3-12
[  427.021909][T17339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5055: bg 0: block 88: padding at end of block bitmap is not set
[  427.040253][T17335] sit0: entered promiscuous mode
[  427.077035][ T4050] hid-generic 0103:0004:0000.001F: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  427.421601][T17355] set_capacity_and_notify: 20 callbacks suppressed
[  427.421614][T17355] loop4: detected capacity change from 0 to 2048
[  427.445532][T17355] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.546522][T17367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  427.554226][T17367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  427.801481][T17372] loop4: detected capacity change from 0 to 1024
[  427.815001][T17372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  427.823293][T17372] System zones: 0-1, 3-12
[  427.830743][T17372] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5066: bg 0: block 88: padding at end of block bitmap is not set
[  427.872572][T17376] xt_hashlimit: overflow, rate too high: 0
[  427.902068][T17378] sit0: left promiscuous mode
[  427.984402][T17379] sit0: entered promiscuous mode
[  428.045987][T17381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  428.053597][T17381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  428.195116][T17387] 9pnet_fd: Insufficient options for proto=fd
[  428.242225][T17391] loop3: detected capacity change from 0 to 2048
[  428.255402][T17391] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.274551][T17397] FAULT_INJECTION: forcing a failure.
[  428.274551][T17397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.287748][T17397] CPU: 1 UID: 0 PID: 17397 Comm: syz.4.5075 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  428.287777][T17397] Tainted: [W]=WARN
[  428.287783][T17397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  428.287794][T17397] Call Trace:
[  428.287800][T17397]  <TASK>
[  428.287866][T17397]  __dump_stack+0x1d/0x30
[  428.287888][T17397]  dump_stack_lvl+0x95/0xd0
[  428.287907][T17397]  dump_stack+0x15/0x1b
[  428.287946][T17397]  should_fail_ex+0x265/0x280
[  428.287976][T17397]  should_fail+0xb/0x20
[  428.288033][T17397]  should_fail_usercopy+0x1a/0x20
[  428.288092][T17397]  _copy_to_user+0x20/0xa0
[  428.288116][T17397]  simple_read_from_buffer+0xb5/0x130
[  428.288135][T17397]  proc_fail_nth_read+0x10e/0x150
[  428.288164][T17397]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  428.288223][T17397]  vfs_read+0x1a8/0x770
[  428.288286][T17397]  ? __rcu_read_unlock+0x4f/0x70
[  428.288303][T17397]  ? __fget_files+0x184/0x1c0
[  428.288323][T17397]  ? mutex_lock+0x58/0x90
[  428.288361][T17397]  ksys_read+0xda/0x1a0
[  428.288378][T17397]  __x64_sys_read+0x40/0x50
[  428.288394][T17397]  x64_sys_call+0x2889/0x3000
[  428.288491][T17397]  do_syscall_64+0xca/0x2b0
[  428.288522][T17397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.288541][T17397] RIP: 0033:0x7f04829de15c
[  428.288555][T17397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  428.288571][T17397] RSP: 002b:00007f0481447030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  428.288630][T17397] RAX: ffffffffffffffda RBX: 00007f0482c35fa0 RCX: 00007f04829de15c
[  428.288641][T17397] RDX: 000000000000000f RSI: 00007f04814470a0 RDI: 0000000000000005
[  428.288736][T17397] RBP: 00007f0481447090 R08: 0000000000000000 R09: 0000000000000000
[  428.288752][T17397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.288771][T17397] R13: 00007f0482c36038 R14: 00007f0482c35fa0 R15: 00007ffd594b2288
[  428.288788][T17397]  </TASK>
[  428.490015][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  428.500391][   T29] kauditd_printk_skb: 1078 callbacks suppressed
[  428.500464][   T29] audit: type=1326 audit(1768480914.527:9339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.0.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  428.531172][   T29] audit: type=1326 audit(1768480914.547:9340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.0.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  428.569001][T17401] loop1: detected capacity change from 0 to 1024
[  428.585224][T17400] xt_hashlimit: overflow, rate too high: 0
[  428.585224][T17401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  428.585255][T17401] System zones: 0-1, 3-12
[  428.606266][T17401] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5077: bg 0: block 88: padding at end of block bitmap is not set
[  428.622759][T17403] loop3: detected capacity change from 0 to 2048
[  428.657988][T17403] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.664162][T17411] sit0: left promiscuous mode
[  428.742400][T17413] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5076: bg 0: block 345: padding at end of block bitmap is not set
[  428.757164][T17413] EXT4-fs (loop3): Remounting filesystem read-only
[  428.763917][  T887] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  428.831174][T17412] sit0: entered promiscuous mode
[  428.990862][T17403] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  429.043277][T17422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  429.050751][T17422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  429.069846][T17420] loop3: detected capacity change from 0 to 2048
[  429.086093][T17420] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.146181][T17431] loop1: detected capacity change from 0 to 2048
[  429.166228][T17434] loop0: detected capacity change from 0 to 1024
[  429.172981][T17432] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5081: bg 0: block 345: padding at end of block bitmap is not set
[  429.194247][T17432] EXT4-fs (loop3): Remounting filesystem read-only
[  429.200977][  T873] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  429.217314][T17431] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.234201][T17434] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  429.253994][T17434] System zones: 0-1, 3-12
[  429.266769][T17434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5087: bg 0: block 88: padding at end of block bitmap is not set
[  429.288652][T17420] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  429.313941][T17439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5086: bg 0: block 345: padding at end of block bitmap is not set
[  429.334504][T17439] EXT4-fs (loop1): Remounting filesystem read-only
[  429.341098][   T52] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  429.418549][T17431] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  429.471762][T17445] loop1: detected capacity change from 0 to 1024
[  429.500511][   T10] hid_parser_main: 50 callbacks suppressed
[  429.500534][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.514258][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.521633][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.529159][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.534990][T17445] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  429.537638][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.545013][T17445] System zones: 0-1, 3-12
[  429.552040][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.556439][T17445] 
[  429.566246][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.573662][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.581118][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.588618][   T10] hid-generic 0103:0004:0000.0020: unknown main item tag 0x0
[  429.599903][   T10] hid-generic 0103:0004:0000.0020: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  429.609882][T17445] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5090: bg 0: block 88: padding at end of block bitmap is not set
[  429.651771][T17451] loop4: detected capacity change from 0 to 2048
[  429.675796][T17451] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.699444][T17455] sit0: left promiscuous mode
[  429.825569][T17456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5092: bg 0: block 345: padding at end of block bitmap is not set
[  429.840430][T17456] EXT4-fs (loop4): Remounting filesystem read-only
[  429.847632][   T52] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  429.873367][T17457] sit0: entered promiscuous mode
[  430.060675][T17458] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  430.173568][T17468] syzkaller0: entered promiscuous mode
[  430.179308][T17468] syzkaller0: entered allmulticast mode
[  430.307227][T17475] EXT4-fs: Ignoring removed bh option
[  430.307671][T17473] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.345655][T17475] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  430.375934][T17475] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  430.388574][T17475] EXT4-fs (loop0): This should not happen!! Data will be lost
[  430.388574][T17475] 
[  430.398278][T17475] EXT4-fs (loop0): Total free blocks count 0
[  430.404304][T17475] EXT4-fs (loop0): Free/Dirty block details
[  430.410220][T17475] EXT4-fs (loop0): free_blocks=2415919104
[  430.415997][T17475] EXT4-fs (loop0): dirty_blocks=32
[  430.421127][T17475] EXT4-fs (loop0): Block reservation details
[  430.427209][T17475] EXT4-fs (loop0): i_reserved_data_blocks=2
[  430.442530][   T29] audit: type=1400 audit(1768480916.437:9341): avc:  denied  { ioctl } for  pid=17474 comm="syz.0.5100" path="/514/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  430.468515][  T873] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  430.480776][  T873] EXT4-fs (loop0): This should not happen!! Data will be lost
[  430.480776][  T873] 
[  430.503477][   T29] audit: type=1400 audit(1768480916.517:9342): avc:  denied  { mounton } for  pid=17486 comm="syz.4.5103" path="/499/file0" dev="tmpfs" ino=2642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  430.514911][T17487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5099: bg 0: block 345: padding at end of block bitmap is not set
[  430.542184][T17489] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  430.542221][T17487] EXT4-fs (loop3): Remounting filesystem read-only
[  430.542323][  T873] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  430.574058][T17488] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  430.582419][T17488] EXT4-fs (loop4): orphan cleanup on readonly fs
[  430.595421][T17488] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.5103: corrupted inode contents
[  430.624480][T17488] EXT4-fs (loop4): Remounting filesystem read-only
[  430.631267][T17488] EXT4-fs (loop4): 1 truncate cleaned up
[  430.637122][ T1860] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  430.647708][ T1860] Quota error (device loop4): write_blk: dquota write failed
[  430.655157][ T1860] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  430.665375][ T1860] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  430.675996][ T1860] Quota error (device loop4): write_blk: dquota write failed
[  430.683474][ T1860] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  430.693549][ T1860] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  430.703718][ T1860] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  430.712880][ T1860] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  430.724852][  T887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.743364][  T887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.756997][  T887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.805557][  T873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.828658][T17499] sit0: left promiscuous mode
[  430.985591][T17505] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.997887][T17497] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.011376][T17503] sit0: entered promiscuous mode
[  431.101660][T17513] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5106: bg 0: block 345: padding at end of block bitmap is not set
[  431.117666][T17512] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5108: bg 0: block 345: padding at end of block bitmap is not set
[  431.140352][T17513] EXT4-fs (loop4): Remounting filesystem read-only
[  431.147798][T17512] EXT4-fs (loop2): Remounting filesystem read-only
[  431.154461][  T873] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  431.168189][  T812] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  431.185730][ T6317] hid-generic 0103:0004:0000.0021: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  431.238426][T17521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  431.246885][T17521] System zones: 0-1, 3-12
[  431.265004][T17521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5112: bg 0: block 88: padding at end of block bitmap is not set
[  431.368227][T17497] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  431.378438][T17516] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.437447][T17532] IPVS: Error connecting to the multicast addr
[  431.446123][T17516] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.456403][T17529] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  431.469408][T17529] System zones: 0-1, 3-12
[  431.478516][T17529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5115: bg 0: block 88: padding at end of block bitmap is not set
[  431.493224][T17532] EXT4-fs: Ignoring removed bh option
[  431.500197][T17532] EXT4-fs: Ignoring removed orlov option
[  431.500838][T17537] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.507178][T17532] ext2: Unknown parameter 'obj_user'
[  431.541921][T17516] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.576839][T17537] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.605130][T17545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  431.613310][T17545] System zones: 0-1, 3-12
[  431.621993][T17545] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5122: bg 0: block 88: padding at end of block bitmap is not set
[  431.638502][T17549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  431.639041][T17516] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.646727][T17549] System zones: 0-1, 3-12
[  431.663663][T17549] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5123: bg 0: block 88: padding at end of block bitmap is not set
[  431.686170][T17537] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.765881][  T812] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.778738][  T812] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.796575][  T812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.812682][T17537] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.843765][  T812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.879196][T17560] sit0: left promiscuous mode
[  432.014586][T17562] sit0: entered promiscuous mode
[  432.386190][T17565] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.438639][T17572] __nla_validate_parse: 16 callbacks suppressed
[  432.438653][T17572] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5130'.
[  432.454103][T17572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5130'.
[  432.463093][T17572] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5130'.
[  432.478602][T17573] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5128: bg 0: block 345: padding at end of block bitmap is not set
[  432.500855][T17573] EXT4-fs (loop0): Remounting filesystem read-only
[  432.507665][  T887] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  432.539074][T17565] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  432.551810][T17577] FAULT_INJECTION: forcing a failure.
[  432.551810][T17577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  432.565017][T17577] CPU: 0 UID: 0 PID: 17577 Comm: syz.4.5132 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  432.565056][T17577] Tainted: [W]=WARN
[  432.565064][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  432.565079][T17577] Call Trace:
[  432.565096][T17577]  <TASK>
[  432.565104][T17577]  __dump_stack+0x1d/0x30
[  432.565133][T17577]  dump_stack_lvl+0x95/0xd0
[  432.565158][T17577]  dump_stack+0x15/0x1b
[  432.565182][T17577]  should_fail_ex+0x265/0x280
[  432.565240][T17577]  should_fail+0xb/0x20
[  432.565332][T17577]  should_fail_usercopy+0x1a/0x20
[  432.565360][T17577]  _copy_from_user+0x1c/0xb0
[  432.565392][T17577]  __x64_sys_sched_setaffinity+0x41/0xa0
[  432.565490][T17577]  x64_sys_call+0x11a3/0x3000
[  432.565520][T17577]  do_syscall_64+0xca/0x2b0
[  432.565613][T17577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.565679][T17577] RIP: 0033:0x7f04829df749
[  432.565767][T17577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.565789][T17577] RSP: 002b:00007f0481447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb
[  432.565814][T17577] RAX: ffffffffffffffda RBX: 00007f0482c35fa0 RCX: 00007f04829df749
[  432.565830][T17577] RDX: 00002000000002c0 RSI: 0000000000000008 RDI: 0000000000000000
[  432.565846][T17577] RBP: 00007f0481447090 R08: 0000000000000000 R09: 0000000000000000
[  432.565861][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  432.565876][T17577] R13: 00007f0482c36038 R14: 00007f0482c35fa0 R15: 00007ffd594b2288
[  432.565967][T17577]  </TASK>
[  432.806479][T17583] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  432.826222][T17585] set_capacity_and_notify: 11 callbacks suppressed
[  432.826243][T17585] loop0: detected capacity change from 0 to 1024
[  432.848546][T17589] xt_hashlimit: overflow, rate too high: 0
[  432.864440][T17585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  432.873255][T17589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5138'.
[  432.882362][T17589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5138'.
[  432.883128][  T887] Bluetooth: hci0: Frame reassembly failed (-84)
[  432.891468][T17589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5138'.
[  432.899868][T17585] System zones: 0-1, 3-12
[  432.907056][T17589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5138'.
[  432.919497][T17585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5135: bg 0: block 88: padding at end of block bitmap is not set
[  432.956981][T17596] loop3: detected capacity change from 0 to 512
[  432.964941][T17596] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  432.974067][T17596] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  432.988031][T17600] loop0: detected capacity change from 0 to 1024
[  432.997603][T17596] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  433.005861][T17596] System zones: 0-2, 18-18, 34-35
[  433.016303][T17600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  433.024869][T17600] System zones: 0-1, 3-12
[  433.035272][T17600] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5142: bg 0: block 88: padding at end of block bitmap is not set
[  433.076118][T17605] syzkaller0: entered promiscuous mode
[  433.081702][T17605] syzkaller0: entered allmulticast mode
[  434.758943][T17621] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  434.800643][T17625] loop1: detected capacity change from 0 to 1024
[  434.810562][T17625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  434.818764][T17625] System zones: 0-1, 3-12
[  434.825794][T17625] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5152: bg 0: block 88: padding at end of block bitmap is not set
[  434.870081][T17630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42768 sclass=netlink_xfrm_socket pid=17630 comm=syz.1.5153
[  434.885393][T17630] loop1: detected capacity change from 0 to 512
[  434.893643][T17630] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.5153: bad orphan inode 15
[  434.904052][T17630] ext4_test_bit(bit=14, block=5) = 0
[  434.910890][T17630] ext4: Unknown parameter './file0'
[  434.937270][T17633] xt_hashlimit: overflow, rate too high: 0
[  434.945467][T17633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5154'.
[  434.954537][T17633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5154'.
[  434.963610][T17633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5154'.
[  435.005064][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  435.012927][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  435.012944][   T29] audit: type=1326 audit(1768480920.975:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17592 comm="syz.3.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7189cdf749 code=0x7ffc0000
[  435.043372][   T29] audit: type=1326 audit(1768480920.975:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17592 comm="syz.3.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7189cdf749 code=0x7ffc0000
[  435.075584][T17637] lo speed is unknown, defaulting to 1000
[  435.108937][T17638] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  435.579003][   T36] hid_parser_main: 14 callbacks suppressed
[  435.579019][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.592489][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.599876][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.607477][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.614972][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.622768][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.630191][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.637636][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.645148][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.652530][   T36] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0
[  435.660453][   T36] hid-generic 0103:0004:0000.0022: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  435.733060][T17651] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  435.758251][T17653] loop3: detected capacity change from 0 to 1024
[  435.767287][T17653] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  435.775425][T17653] System zones: 0-1, 3-12
[  435.781851][T17653] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5163: bg 0: block 88: padding at end of block bitmap is not set
[  435.917174][T17667] xt_hashlimit: overflow, rate too high: 0
[  435.995608][ T3424] IPVS: starting estimator thread 0...
[  436.006143][T17670] loop3: detected capacity change from 0 to 512
[  436.013216][T17670] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  436.022383][T17670] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  436.033930][T17670] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  436.042129][T17670] System zones: 0-2, 18-18, 34-35
[  436.054569][T17674] FAULT_INJECTION: forcing a failure.
[  436.054569][T17674] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.067733][T17674] CPU: 0 UID: 0 PID: 17674 Comm: syz.1.5171 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  436.067835][T17674] Tainted: [W]=WARN
[  436.067911][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  436.067922][T17674] Call Trace:
[  436.067928][T17674]  <TASK>
[  436.067935][T17674]  __dump_stack+0x1d/0x30
[  436.067968][T17674]  dump_stack_lvl+0x95/0xd0
[  436.068053][T17674]  dump_stack+0x15/0x1b
[  436.068078][T17674]  should_fail_ex+0x265/0x280
[  436.068099][T17674]  should_fail+0xb/0x20
[  436.068145][T17674]  should_fail_usercopy+0x1a/0x20
[  436.068184][T17674]  _copy_from_user+0x1c/0xb0
[  436.068209][T17674]  do_sys_poll+0x149/0xbd0
[  436.068273][T17674]  ? selinux_file_open+0x2dc/0x330
[  436.068327][T17674]  __se_sys_poll+0xdd/0x200
[  436.068347][T17674]  __x64_sys_poll+0x43/0x50
[  436.068444][T17674]  x64_sys_call+0x289f/0x3000
[  436.068467][T17674]  do_syscall_64+0xca/0x2b0
[  436.068498][T17674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.068518][T17674] RIP: 0033:0x7f316081f749
[  436.068532][T17674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.068602][T17674] RSP: 002b:00007f315f27f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  436.068619][T17674] RAX: ffffffffffffffda RBX: 00007f3160a75fa0 RCX: 00007f316081f749
[  436.068630][T17674] RDX: 0000000000000400 RSI: 0000000000000001 RDI: 0000200000000000
[  436.068642][T17674] RBP: 00007f315f27f090 R08: 0000000000000000 R09: 0000000000000000
[  436.068653][T17674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.068734][T17674] R13: 00007f3160a76038 R14: 00007f3160a75fa0 R15: 00007ffcd1768ec8
[  436.068759][T17674]  </TASK>
[  436.250886][T17671] IPVS: using max 2400 ests per chain, 120000 per kthread
[  436.301547][   T29] audit: type=1400 audit(1768480922.230:9371): avc:  denied  { setopt } for  pid=17677 comm="syz.1.5173" laddr=fe80::10 lport=39448 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  436.352465][   T29] audit: type=1400 audit(1768480922.279:9372): avc:  denied  { create } for  pid=17679 comm="syz.1.5174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  436.372510][   T29] audit: type=1400 audit(1768480922.279:9373): avc:  denied  { bind } for  pid=17679 comm="syz.1.5174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  436.409416][T17682] sit0: left promiscuous mode
[  436.557157][T17693] sit0: entered promiscuous mode
[  436.644383][T17697] loop4: detected capacity change from 0 to 512
[  436.792308][   T29] audit: type=1326 audit(1768480922.698:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316081f749 code=0x7ffc0000
[  436.824897][   T29] audit: type=1326 audit(1768480922.698:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316081f749 code=0x7ffc0000
[  436.848592][   T29] audit: type=1326 audit(1768480922.708:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f316081f749 code=0x7ffc0000
[  436.872339][   T29] audit: type=1326 audit(1768480922.708:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316081f749 code=0x7ffc0000
[  436.895953][   T29] audit: type=1326 audit(1768480922.708:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17706 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316081f749 code=0x7ffc0000
[  436.920069][T12191] EXT4-fs unmount: 145 callbacks suppressed
[  436.920130][T12191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.975185][T17716] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.016310][T17717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  437.023773][T17717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  437.051887][T17716] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.135364][T17716] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.152076][   T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.163796][   T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.175399][   T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.187837][   T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.221644][T17720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  437.251408][T17722] syzkaller0: entered promiscuous mode
[  437.257035][T17722] syzkaller0: entered allmulticast mode
[  437.265912][T17716] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.390519][T17729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  437.398088][T17729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  437.597960][T17738] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  437.624274][T17742] loop3: detected capacity change from 0 to 1024
[  437.636122][T17742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  437.644368][T17742] System zones: 0-1, 3-12
[  437.649399][T17742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.663761][T17742] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5198: bg 0: block 88: padding at end of block bitmap is not set
[  437.678448][T17744] loop2: detected capacity change from 0 to 2048
[  437.697778][T17744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.710178][T17744] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.722284][T12191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.750944][T17751] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.783138][T17752] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5199: bg 0: block 345: padding at end of block bitmap is not set
[  437.797926][T17752] EXT4-fs (loop2): Remounting filesystem read-only
[  437.804575][  T812] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  437.819775][T17751] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.843995][T17744] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  437.866370][T12409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.877257][T17751] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.937370][   T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.948766][   T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.961101][   T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.970633][T17751] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.984873][   T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.028100][  T873] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.039178][  T873] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.050719][  T873] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.063122][  T873] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.079113][T17759] loop1: detected capacity change from 0 to 512
[  438.785108][T17773] loop2: detected capacity change from 0 to 1024
[  438.802420][T17773] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  438.810613][T17773] System zones: 0-1, 3-12
[  438.815622][T17773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.829678][T17773] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5210: bg 0: block 88: padding at end of block bitmap is not set
[  438.860971][T12409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.898833][T17779] loop1: detected capacity change from 0 to 2048
[  438.922237][T17779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.934734][T17779] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.020449][T17788] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5212: bg 0: block 345: padding at end of block bitmap is not set
[  439.035488][T17788] EXT4-fs (loop1): Remounting filesystem read-only
[  439.042447][  T812] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  439.059453][T17792] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  439.161227][T11149] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.161982][T17794] syzkaller0: entered promiscuous mode
[  439.175906][T17794] syzkaller0: entered allmulticast mode
[  439.209476][T17801] loop0: detected capacity change from 0 to 512
[  439.229126][T17801] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5220: bad orphan inode 15
[  439.261067][T17801] ext4_test_bit(bit=14, block=5) = 0
[  439.279518][T17805] loop1: detected capacity change from 0 to 2048
[  439.286647][T17801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.311577][T17805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.318399][T17810] loop4: detected capacity change from 0 to 1024
[  439.325378][T17805] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.335988][T17801] EXT4-fs (loop0): can't disable delalloc during remount
[  439.352604][T17810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  439.361053][T17810] System zones: 0-1, 3-12
[  439.366164][T17810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.380492][T17810] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5223: bg 0: block 88: padding at end of block bitmap is not set
[  439.396159][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.408381][T17814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5221: bg 0: block 345: padding at end of block bitmap is not set
[  439.424009][T17814] EXT4-fs (loop1): Remounting filesystem read-only
[  439.430726][  T812] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  439.455180][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.478949][T17816] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  439.486502][T17805] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  439.515250][T11149] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.580599][T17831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  439.588064][T17831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  439.618431][T17836] sit0: left promiscuous mode
[  439.628851][T17838] loop0: detected capacity change from 0 to 1024
[  439.709896][T17838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  439.710496][T17840] sit0: entered promiscuous mode
[  439.718268][T17838] System zones: 0-1, 3-12
[  439.731686][T17838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.755488][T17838] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5234: bg 0: block 88: padding at end of block bitmap is not set
[  439.821674][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.862596][T17846] loop0: detected capacity change from 0 to 1024
[  439.933556][T17846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  439.960684][T17846] System zones: 0-1, 3-12
[  439.973553][T17846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.001743][T17846] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5235: bg 0: block 88: padding at end of block bitmap is not set
[  440.055226][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.092322][T17857] loop2: detected capacity change from 0 to 512
[  440.190885][T17870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  440.198593][T17870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  440.237083][T17872] loop4: detected capacity change from 0 to 512
[  440.244509][T17872] ext4: Unknown parameter 'fowner'
[  440.259945][T17869] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[  440.267891][T17869] FAT-fs (loop4): Filesystem has been set read-only
[  440.362535][T17874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.375536][T17874] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.464761][T17878] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5246: bg 0: block 345: padding at end of block bitmap is not set
[  440.479537][T17878] EXT4-fs (loop0): Remounting filesystem read-only
[  440.486370][  T812] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  440.527081][T17874] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  440.527649][T17869] syz.4.5245: attempt to access beyond end of device
[  440.527649][T17869] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  440.549357][T17869] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  440.559430][T17869] syz.4.5245: attempt to access beyond end of device
[  440.559430][T17869] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  440.573260][T17869] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  440.606948][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.691301][T17882] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.744555][T17882] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.806121][T17888] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  440.807875][T17882] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.814389][T17888] System zones: 0-1, 3-12
[  440.815869][T17888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.846499][T17888] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5250: bg 0: block 88: padding at end of block bitmap is not set
[  440.891935][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.904620][T17882] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.967279][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  440.967340][   T29] audit: type=1326 audit(1768480926.785:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  440.998858][   T29] audit: type=1326 audit(1768480926.814:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.022662][   T29] audit: type=1326 audit(1768480926.814:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.046631][   T29] audit: type=1326 audit(1768480926.814:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.070308][   T29] audit: type=1326 audit(1768480926.814:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.093899][   T29] audit: type=1326 audit(1768480926.814:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.098503][T17907] xt_connbytes: Forcing CT accounting to be enabled
[  441.117908][   T29] audit: type=1326 audit(1768480926.814:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.147726][   T29] audit: type=1326 audit(1768480926.814:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.147962][T17907] set match dimension is over the limit!
[  441.171302][   T29] audit: type=1326 audit(1768480926.814:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.171340][   T29] audit: type=1326 audit(1768480926.814:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04829df749 code=0x7ffc0000
[  441.240228][T17908] lo speed is unknown, defaulting to 1000
[  441.253328][T17903] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  441.285560][T17909] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  441.329477][T17911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  441.337822][T17911] System zones: 0-1, 3-12
[  441.342832][T17911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.359901][T17911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5259: bg 0: block 88: padding at end of block bitmap is not set
[  441.402383][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.426606][T17916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  441.434136][T17916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  441.446821][T17918] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5260: bad orphan inode 15
[  441.461810][T17918] ext4_test_bit(bit=14, block=5) = 0
[  441.467867][T17918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.486963][T17918] EXT4-fs (loop4): can't disable delalloc during remount
[  441.506904][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.563186][T17922] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  441.571662][T17922] System zones: 0-1, 3-12
[  441.576533][T17922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.590688][T17922] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5263: bg 0: block 88: padding at end of block bitmap is not set
[  441.623688][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.696234][T17942] __nla_validate_parse: 5 callbacks suppressed
[  441.696288][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5270'.
[  441.701011][T17944] xt_hashlimit: overflow, rate too high: 0
[  441.719621][T17944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5271'.
[  441.724418][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5270'.
[  441.728918][T17944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5271'.
[  441.746666][T17944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5271'.
[  441.755946][T17944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5271'.
[  441.851303][T17953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  441.858801][T17953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  442.001227][T17957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  442.009407][T17957] System zones: 0-1, 3-12
[  442.014460][T17957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.028212][T17957] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5276: bg 0: block 88: padding at end of block bitmap is not set
[  442.060707][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.175767][T17971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.188203][T17971] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.262532][T17974] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5282: bg 0: block 345: padding at end of block bitmap is not set
[  442.277207][T17974] EXT4-fs (loop0): Remounting filesystem read-only
[  442.283859][  T887] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  442.321916][T17971] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  442.342409][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.370531][T17976] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  442.378806][T17976] System zones: 0-1, 3-12
[  442.384210][T17976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.399924][T17976] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5283: bg 0: block 88: padding at end of block bitmap is not set
[  442.426435][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.448536][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5285'.
[  442.496265][T17984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  442.504671][T17984] System zones: 0-1, 3-12
[  442.509702][T17984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.523102][T17984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5286: bg 0: block 88: padding at end of block bitmap is not set
[  442.556217][T17990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  442.564474][T17990] System zones: 0-1, 3-12
[  442.569703][T17990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.583167][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.586433][T17990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5288: bg 0: block 88: padding at end of block bitmap is not set
[  442.646292][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.701170][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5293'.
[  442.712580][T18002] xt_connbytes: Forcing CT accounting to be enabled
[  442.719229][T18002] Cannot find set identified by id 0 to match
[  442.752155][T18004] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  442.760375][T18004] System zones: 0-1, 3-12
[  442.765715][T18004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.778315][T18006] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  442.786781][T18006] System zones: 0-1, 3-12
[  442.791299][T18004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5294: bg 0: block 88: padding at end of block bitmap is not set
[  442.792877][T18006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.822292][T18006] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5295: bg 0: block 88: padding at end of block bitmap is not set
[  442.837807][T12409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.856628][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.890063][T18012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  442.898505][T18012] System zones: 0-1, 3-12
[  442.903669][T18012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.918677][T18012] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5296: bg 0: block 88: padding at end of block bitmap is not set
[  442.980016][T12409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.987485][T18022] sit0: left promiscuous mode
[  443.118101][T18029] sit0: entered promiscuous mode
[  443.333375][  T812] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.349749][  T812] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.358039][  T812] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.367602][  T812] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.492212][T18037] set_capacity_and_notify: 17 callbacks suppressed
[  443.492247][T18037] loop1: detected capacity change from 0 to 1024
[  443.515806][T18037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  443.524145][T18037] System zones: 0-1, 3-12
[  443.529063][T18037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.552353][T18037] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5306: bg 0: block 88: padding at end of block bitmap is not set
[  443.580015][T11149] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.611492][T18043] lo speed is unknown, defaulting to 1000
[  443.668569][T18051] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  443.802553][T18056] loop4: detected capacity change from 0 to 1024
[  443.918059][T18056] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  443.934287][T18056] System zones: 0-1, 3-12
[  443.966146][T18056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.000240][T18062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.018435][T18062] tipc: Resetting bearer <eth:syzkaller0>
[  444.028860][T18056] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5313: bg 0: block 88: padding at end of block bitmap is not set
[  444.052554][T18061] tipc: Disabling bearer <eth:syzkaller0>
[  444.213548][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.249872][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5317'.
[  444.264932][T18066] syz_tun: entered promiscuous mode
[  444.295470][T18066] syz_tun: left promiscuous mode
[  444.367812][T18073] loop4: detected capacity change from 0 to 1024
[  444.385550][T18073] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  444.393884][T18073] System zones: 0-1, 3-12
[  444.399313][T18073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.423983][T18073] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5319: bg 0: block 88: padding at end of block bitmap is not set
[  444.451102][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.484852][T18084] loop0: detected capacity change from 0 to 512
[  444.574928][T18088] xt_hashlimit: overflow, rate too high: 0
[  444.606491][T18088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5325'.
[  444.658730][T18097] loop2: detected capacity change from 0 to 1024
[  444.669221][T18097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  444.676864][T18099] loop3: detected capacity change from 0 to 1024
[  444.677617][T18097] System zones: 0-1, 3-12
[  444.688834][T18097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.702689][T18097] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5329: bg 0: block 88: padding at end of block bitmap is not set
[  444.737544][T18099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  444.767458][T18099] System zones: 0-1, 3-12
[  444.780453][T18099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.803611][T12409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.815989][T18099] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5330: bg 0: block 88: padding at end of block bitmap is not set
[  444.895961][T18109] xt_connbytes: Forcing CT accounting to be enabled
[  444.903609][T12191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.904339][T18109] Cannot find set identified by id 0 to match
[  444.922731][T18109] loop2: detected capacity change from 0 to 128
[  444.951679][T18113] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  445.018792][T18123] sit0: left promiscuous mode
[  445.048601][T18127] loop2: detected capacity change from 0 to 1024
[  445.110224][T18127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  445.118529][T18127] System zones: 0-1, 3-12
[  445.123826][T18127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.139152][T18127] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5340: bg 0: block 88: padding at end of block bitmap is not set
[  445.172148][T12409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.185851][T18128] sit0: entered promiscuous mode
[  445.207772][T18133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.215155][T18133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.437294][T18142] loop0: detected capacity change from 0 to 512
[  445.450440][T18142] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5344: bad orphan inode 15
[  445.461370][T18142] ext4_test_bit(bit=14, block=5) = 0
[  445.467424][T18142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.480532][T18149] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  445.545178][T18151] loop4: detected capacity change from 0 to 2048
[  445.553717][T18142] EXT4-fs (loop0): can't disable delalloc during remount
[  445.583066][T10831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.607541][T18151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.620288][T18151] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.637760][T18161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  445.646251][T18161] System zones: 0-1, 3-12
[  445.652041][T18161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.666531][T18161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5351: bg 0: block 88: padding at end of block bitmap is not set
[  445.701171][T18172] sit0: left promiscuous mode
[  445.713907][T18171] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5348: bg 0: block 345: padding at end of block bitmap is not set
[  445.739694][T18171] EXT4-fs (loop4): Remounting filesystem read-only
[  445.746387][  T873] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  445.770652][T11149] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.847639][T18151] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  445.861611][T18175] sit0: entered promiscuous mode
[  445.905081][T10952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.090113][T18183] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.134416][T18188] syz!: rxe_newlink: already configured on team_slave_0
[  446.151889][T18183] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.165590][T18190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  446.173282][T18190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  446.201545][T18183] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.261383][T18183] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.369910][   T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.392098][   T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.407059][   T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.419193][   T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.481287][T18199] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5363: bad orphan inode 15
[  446.491924][T18199] ext4_test_bit(bit=14, block=5) = 0
[  446.497770][T18199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.514628][T18199] EXT4-fs (loop4): can't disable delalloc during remount
[  446.573153][T18202] syzkaller0: entered promiscuous mode
[  446.578821][T18202] syzkaller0: entered allmulticast mode
[  446.620697][T18206] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.687822][T18211] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.704364][T18212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5366: bg 0: block 345: padding at end of block bitmap is not set
[  446.719061][T18212] EXT4-fs (loop4): Remounting filesystem read-only
[  446.725702][  T887] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  446.744961][T18211] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.817436][T18211] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.833272][T18214] sit0: left promiscuous mode
[  446.953469][T18206] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  446.963118][T18215] sit0: entered promiscuous mode
[  447.189290][T18211] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.250323][T18226] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  447.277341][  T873] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.293651][  T873] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.316334][T18231] ext4: Unknown parameter 'fowner'
[  447.324783][T18232] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5372: bg 0: block 345: padding at end of block bitmap is not set
[  447.331199][  T873] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.358235][  T873] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.367509][T18228] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000)
[  447.375459][T18228] FAT-fs (loop0): Filesystem has been set read-only
[  447.394978][T18232] EXT4-fs (loop1): Remounting filesystem read-only
[  447.401579][  T887] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  447.633704][T18243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  447.637413][   T29] kauditd_printk_skb: 343 callbacks suppressed
[  447.637461][   T29] audit: type=1326 audit(1768480933.277:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.673943][T18231] syz.0.5373: attempt to access beyond end of device
[  447.673943][T18231] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  447.687735][T18231] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  447.694031][T18249] __nla_validate_parse: 7 callbacks suppressed
[  447.694070][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5381'.
[  447.702439][T18243] System zones: 0-1, 3-12
[  447.714356][T18251] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  447.725300][   T29] audit: type=1326 audit(1768480933.326:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.749205][   T29] audit: type=1326 audit(1768480933.326:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.754929][T18231] syz.0.5373: attempt to access beyond end of device
[  447.754929][T18231] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  447.772797][   T29] audit: type=1326 audit(1768480933.326:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.772871][   T29] audit: type=1326 audit(1768480933.326:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.786578][T18231] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  447.842081][   T29] audit: type=1326 audit(1768480933.326:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.865765][   T29] audit: type=1326 audit(1768480933.336:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.881002][T18249] Cannot find set identified by id 0 to match
[  447.889319][   T29] audit: type=1326 audit(1768480933.336:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.889355][   T29] audit: type=1326 audit(1768480933.336:9745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  447.942421][   T29] audit: type=1326 audit(1768480933.336:9746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.2.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d85f749 code=0x7ffc0000
[  448.001271][T18249] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  448.059977][T18243] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5379: bg 0: block 88: padding at end of block bitmap is not set
[  448.069928][T18257] lo speed is unknown, defaulting to 1000
[  448.152459][T18262] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  448.265203][T18269] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.326762][T18274] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.346694][T18258] lo speed is unknown, defaulting to 1000
[  448.373779][T18269] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.407878][T18281] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5387: bg 0: block 345: padding at end of block bitmap is not set
[  448.426802][T18281] EXT4-fs (loop3): Remounting filesystem read-only
[  448.437044][  T887] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  448.479243][T18269] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.546283][T18258] chnl_net:caif_netlink_parms(): no params data found
[  448.560589][T18269] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.601067][T18258] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.608192][T18258] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.615464][T18258] bridge_slave_0: entered allmulticast mode
[  448.622182][T18258] bridge_slave_0: entered promiscuous mode
[  448.629683][T18295] set_capacity_and_notify: 10 callbacks suppressed
[  448.629700][T18295] loop3: detected capacity change from 0 to 512
[  448.630703][T18258] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.649712][T18258] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.657035][T18295] ext4: Unknown parameter 'fowner'
[  448.657404][T18258] bridge_slave_1: entered allmulticast mode
[  448.668296][T18295] loop3: detected capacity change from 0 to 128
[  448.670410][T18258] bridge_slave_1: entered promiscuous mode
[  448.684021][T18291] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[  448.691930][T18291] FAT-fs (loop3): Filesystem has been set read-only
[  448.710849][T18258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.728507][  T873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.743805][T18258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.752988][   T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.774591][  T887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.791861][T18258] team0: Port device team_slave_0 added
[  448.805112][  T887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.815676][T18258] team0: Port device team_slave_1 added
[  448.862476][T18258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.869595][T18258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.895573][T18258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.918268][T18258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.925276][T18258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.951312][T18258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.032657][T18258] hsr_slave_0: entered promiscuous mode
[  449.038603][T18295] syz.3.5392: attempt to access beyond end of device
[  449.038603][T18295] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  449.052324][T18295] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  449.056848][T18305] loop4: detected capacity change from 0 to 1024
[  449.062279][T18258] hsr_slave_1: entered promiscuous mode
[  449.068235][T18291] syz.3.5392: attempt to access beyond end of device
[  449.068235][T18291] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  449.073941][T18258] debugfs: 'hsr0' already exists in 'hsr'
[  449.086643][T18291] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  449.090505][T18291] syz.3.5392: attempt to access beyond end of device
[  449.090505][T18291] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  449.092441][T18258] Cannot create hsr debugfs directory
[  449.120148][T18291] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  449.137065][T18305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  449.145255][T18305] System zones: 0-1, 3-12
[  449.153002][T18305] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5396: bg 0: block 88: padding at end of block bitmap is not set
[  449.237163][T18258] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.267077][T18310] loop4: detected capacity change from 0 to 1024
[  449.277979][T18258] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.289148][T18310] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  449.313679][T18310] System zones: 0-1, 3-12
[  449.326125][T18310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5397: bg 0: block 88: padding at end of block bitmap is not set
[  449.355948][T18258] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.379753][T18317] loop3: detected capacity change from 0 to 512
[  449.408909][T18258] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.430916][T18323] loop4: detected capacity change from 0 to 1024
[  449.448077][T18323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  449.456247][T18323] System zones: 0-1, 3-12
[  449.464985][T18323] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5402: bg 0: block 88: padding at end of block bitmap is not set
[  449.526194][T18329] loop4: detected capacity change from 0 to 1024
[  449.538282][T18329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  449.546470][T18329] System zones: 0-1, 3-12
[  449.554069][T18329] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5404: bg 0: block 88: padding at end of block bitmap is not set
[  449.620179][T18333] loop4: detected capacity change from 0 to 1024
[  449.638331][T18333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  449.646512][T18333] System zones: 0-1, 3-12
[  449.653094][T18333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5405: bg 0: block 88: padding at end of block bitmap is not set
[  449.751605][T18343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.759149][T18343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.893004][T18347] loop4: detected capacity change from 0 to 2048
[  449.908940][T18347] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.980362][T18350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5409: bg 0: block 345: padding at end of block bitmap is not set
[  449.995520][T18350] EXT4-fs (loop4): Remounting filesystem read-only
[  450.002203][   T52] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  450.072980][T18347] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  450.192467][T18363] loop4: detected capacity change from 0 to 1024
[  450.222906][T18363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  450.237149][T18363] System zones: 0-1, 3-12
[  450.250988][T18375] tmpfs: Bad value for 'mpol'
[  450.262818][T18377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  450.270443][T18377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  450.282121][T18363] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5416: bg 0: block 88: padding at end of block bitmap is not set
[  450.316226][T18258] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  450.325772][T18258] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  450.335139][T18258] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  450.344865][T18258] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  450.381643][ T1860] bridge_slave_1: left allmulticast mode
[  450.387470][ T1860] bridge_slave_1: left promiscuous mode
[  450.393236][ T1860] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.401354][ T1860] bridge_slave_0: left allmulticast mode
[  450.407370][ T1860] bridge_slave_0: left promiscuous mode
[  450.413442][ T1860] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.544356][ T1860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.555120][ T1860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  450.574141][ T1860] bond0 (unregistering): Released all slaves
[  450.614801][T18258] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.626216][ T1860] tipc: Disabling bearer <eth:veth0_macvtap>
[  450.633170][ T1860] tipc: Left network mode
[  450.647342][T18408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  450.655992][T18408] System zones: 0-1, 3-12
[  450.665029][T18406] syzkaller0: entered promiscuous mode
[  450.668576][T18408] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5429: bg 0: block 88: padding at end of block bitmap is not set
[  450.670638][T18406] syzkaller0: entered allmulticast mode
[  450.724833][T18258] 8021q: adding VLAN 0 to HW filter on device team0
[  450.735984][ T1860] hsr_slave_0: left promiscuous mode
[  450.743030][ T1860] hsr_slave_1: left promiscuous mode
[  450.750131][ T1860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  450.757571][ T1860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.768271][ T1860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.776016][ T1860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.787411][ T1860] veth1_macvtap: left promiscuous mode
[  450.793031][ T1860] veth0_macvtap: left promiscuous mode
[  450.798718][ T1860] veth1_vlan: left promiscuous mode
[  450.804369][ T1860] veth0_vlan: left promiscuous mode
[  450.895972][ T1860] team0 (unregistering): Port device team_slave_1 removed
[  450.906732][ T1860] team0 (unregistering): Port device team_slave_0 removed
[  450.944644][ T3491] lo speed is unknown, defaulting to 1000
[  450.950468][ T3491] infiniband syz2: ib_query_port failed (-19)
[  450.958068][  T887] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.965140][  T887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.979659][  T873] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.986791][  T873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.004954][T18258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  451.015456][T18258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.082964][T18258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.160054][T18258] veth0_vlan: entered promiscuous mode
[  451.168536][T18258] veth1_vlan: entered promiscuous mode
[  451.185661][T18258] veth0_macvtap: entered promiscuous mode
[  451.193520][T18258] veth1_macvtap: entered promiscuous mode
[  451.205025][T18258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.219107][T18258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.231070][   T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.249242][   T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.272823][   T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.312797][   T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.349786][T18435] xt_hashlimit: overflow, rate too high: 0
[  451.365254][T18437] sit0: entered allmulticast mode
[  451.404886][T18437] sit0: entered promiscuous mode
[  451.483137][T18445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5434'.
[  451.492298][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5434'.
[  451.501259][T18445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5434'.
[  451.510544][T18445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5434'.
[  451.868265][T18455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.875553][T18455] IPv6: NLM_F_CREATE should be set when creating new route
[  451.882846][T18455] IPv6: NLM_F_CREATE should be set when creating new route
[  451.892095][T18455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  452.237098][ T1860] IPVS: stop unused estimator thread 0...
[  452.668865][T18479] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.704733][T18481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  452.727481][T18481] System zones: 0-1, 3-12
[  452.739435][T18481] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5448: bg 0: block 88: padding at end of block bitmap is not set
[  452.766238][T18487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5447: bg 0: block 345: padding at end of block bitmap is not set
[  452.784851][T18487] EXT4-fs (loop3): Remounting filesystem read-only
[  452.791741][ T1860] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  452.826381][T18479] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  452.862201][T18491] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  452.870646][T18491] System zones: 0-1, 3-12
[  452.885665][T18491] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5450: bg 0: block 88: padding at end of block bitmap is not set
[  452.906733][T18497] wireguard1: entered promiscuous mode
[  452.912267][T18497] wireguard1: entered allmulticast mode
[  452.967066][T18501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=18501 comm=syz.3.5452
[  453.043940][T18509] FAULT_INJECTION: forcing a failure.
[  453.043940][T18509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.057173][T18509] CPU: 1 UID: 0 PID: 18509 Comm: syz.1.5457 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  453.057207][T18509] Tainted: [W]=WARN
[  453.057216][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  453.057232][T18509] Call Trace:
[  453.057242][T18509]  <TASK>
[  453.057252][T18509]  __dump_stack+0x1d/0x30
[  453.057383][T18509]  dump_stack_lvl+0x95/0xd0
[  453.057410][T18509]  dump_stack+0x15/0x1b
[  453.057440][T18509]  should_fail_ex+0x265/0x280
[  453.057536][T18509]  should_fail+0xb/0x20
[  453.057554][T18509]  should_fail_usercopy+0x1a/0x20
[  453.057577][T18509]  _copy_from_user+0x1c/0xb0
[  453.057678][T18509]  ___sys_sendmsg+0xc1/0x1d0
[  453.057724][T18509]  __x64_sys_sendmsg+0xd4/0x160
[  453.057793][T18509]  x64_sys_call+0x17ba/0x3000
[  453.057824][T18509]  do_syscall_64+0xca/0x2b0
[  453.057867][T18509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.057909][T18509] RIP: 0033:0x7fee417bf749
[  453.057924][T18509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.057941][T18509] RSP: 002b:00007fee40227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.058021][T18509] RAX: ffffffffffffffda RBX: 00007fee41a15fa0 RCX: 00007fee417bf749
[  453.058033][T18509] RDX: 00000000200440c4 RSI: 00002000000003c0 RDI: 0000000000000005
[  453.058087][T18509] RBP: 00007fee40227090 R08: 0000000000000000 R09: 0000000000000000
[  453.058103][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.058119][T18509] R13: 00007fee41a16038 R14: 00007fee41a15fa0 R15: 00007ffc81b3b118
[  453.058144][T18509]  </TASK>
[  453.241863][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'.
[  453.256713][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'.
[  453.290966][T18517] bridge: RTM_NEWNEIGH with invalid state 0x10
[  453.334829][T18522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  453.343167][T18522] System zones: 0-1, 3-12
[  453.350647][T18522] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5461: bg 0: block 88: padding at end of block bitmap is not set
[  453.428110][T18526] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.500733][T18529] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5462: bg 0: block 345: padding at end of block bitmap is not set
[  453.515363][T18529] EXT4-fs (loop4): Remounting filesystem read-only
[  453.522028][ T1910] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  453.562779][T18526] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  454.130041][T18546] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.187947][T18546] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.239509][T18546] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.300827][T18546] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.358695][ T1910] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.370570][ T1910] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.383068][ T1910] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.394304][ T1910] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.890568][T18553] set_capacity_and_notify: 7 callbacks suppressed
[  454.890584][T18553] loop2: detected capacity change from 0 to 2048
[  454.915967][T18553] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.959486][T18557] loop0: detected capacity change from 0 to 512
[  454.967466][T18557] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5473: bad orphan inode 15
[  454.977843][T18557] ext4_test_bit(bit=14, block=5) = 0
[  454.988885][T18557] EXT4-fs (loop0): can't disable delalloc during remount
[  454.997817][T18559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5472: bg 0: block 345: padding at end of block bitmap is not set
[  455.012676][T18559] EXT4-fs (loop2): Remounting filesystem read-only
[  455.019325][ T1910] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  455.076135][   T29] kauditd_printk_skb: 161 callbacks suppressed
[  455.076222][   T29] audit: type=1326 audit(1768480940.560:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.112612][   T29] audit: type=1326 audit(1768480940.589:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.136236][   T29] audit: type=1326 audit(1768480940.589:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.159797][   T29] audit: type=1326 audit(1768480940.589:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.183256][   T29] audit: type=1326 audit(1768480940.589:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.206760][   T29] audit: type=1326 audit(1768480940.589:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.230353][   T29] audit: type=1326 audit(1768480940.589:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.253922][   T29] audit: type=1326 audit(1768480940.589:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.277466][   T29] audit: type=1326 audit(1768480940.589:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.300901][   T29] audit: type=1326 audit(1768480940.589:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7875a5f749 code=0x7ffc0000
[  455.380132][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5477'.
[  455.394129][T18568] Cannot find set identified by id 0 to match
[  455.422866][T18568] loop2: detected capacity change from 0 to 128
[  455.451689][T18568] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  455.477270][T18574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.484672][T18574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.644396][T18584] syzkaller0: entered promiscuous mode
[  455.650002][T18584] syzkaller0: entered allmulticast mode
[  455.770360][T18589] loop4: detected capacity change from 0 to 512
[  455.778747][T18589] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5484: bad orphan inode 15
[  455.789201][T18589] ext4_test_bit(bit=14, block=5) = 0
[  455.799186][T18589] EXT4-fs (loop4): can't disable delalloc during remount
[  455.875656][T18592] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.903486][T18594] loop0: detected capacity change from 0 to 2048
[  455.919822][T18592] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.929861][T18594] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.973110][T18592] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.002500][T18597] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5486: bg 0: block 345: padding at end of block bitmap is not set
[  456.017198][T18597] EXT4-fs (loop0): Remounting filesystem read-only
[  456.023984][  T873] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  456.039583][T18592] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.100739][  T873] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.112692][  T873] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.126130][T18594] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  456.141498][  T873] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.150374][  T873] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.271792][T18609] loop4: detected capacity change from 0 to 512
[  456.351443][T18616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.358837][T18616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.402138][T18601] chnl_net:caif_netlink_parms(): no params data found
[  456.447571][ T1860] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.458745][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5492'.
[  456.474157][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5492'.
[  456.494044][T18601] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.501276][T18601] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.508786][T18601] bridge_slave_0: entered allmulticast mode
[  456.515318][T18601] bridge_slave_0: entered promiscuous mode
[  456.522058][T18601] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.529156][T18601] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.536334][T18601] bridge_slave_1: entered allmulticast mode
[  456.543212][T18601] bridge_slave_1: entered promiscuous mode
[  456.552296][ T1860] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.578477][T18601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.590029][T18601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.600485][ T1860] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.623010][T18601] team0: Port device team_slave_0 added
[  456.629898][T18601] team0: Port device team_slave_1 added
[  456.646702][T18601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.653739][T18601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.677937][T18634] loop3: detected capacity change from 0 to 512
[  456.680213][T18601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.697954][ T1860] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.702704][T18634] ext4: Unknown parameter 'fowner'
[  456.713322][T18601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.720321][T18601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.746399][T18601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.757333][T18634] loop3: detected capacity change from 0 to 128
[  456.770411][T18632] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[  456.778350][T18632] FAT-fs (loop3): Filesystem has been set read-only
[  456.794864][T18601] hsr_slave_0: entered promiscuous mode
[  456.801106][T18601] hsr_slave_1: entered promiscuous mode
[  456.807249][T18601] debugfs: 'hsr0' already exists in 'hsr'
[  456.813033][T18601] Cannot create hsr debugfs directory
[  456.895136][ T1860] bridge_slave_1: left allmulticast mode
[  456.900952][ T1860] bridge_slave_1: left promiscuous mode
[  456.906658][ T1860] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.914757][ T1860] bridge_slave_0: left allmulticast mode
[  456.920566][ T1860] bridge_slave_0: left promiscuous mode
[  456.926309][ T1860] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.020066][T18634] syz.3.5495: attempt to access beyond end of device
[  457.020066][T18634] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  457.033898][T18634] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  457.042988][T18634] syz.3.5495: attempt to access beyond end of device
[  457.042988][T18634] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  457.056744][T18634] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  457.075333][ T1860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.086008][ T1860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.096112][ T1860] bond0 (unregistering): Released all slaves
[  457.113298][T18637] loop1: detected capacity change from 0 to 2048
[  457.120471][ T1860] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  457.128897][ T1860] wireguard0: left promiscuous mode
[  457.145408][T18637] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.160441][ T1860] bond1 (unregistering): Released all slaves
[  457.204327][T18642] syzkaller0: entered promiscuous mode
[  457.209975][T18642] syzkaller0: entered allmulticast mode
[  457.231139][ T1860] tipc: Disabling bearer <eth:veth0_macvtap>
[  457.240119][T18645] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5496: bg 0: block 345: padding at end of block bitmap is not set
[  457.254594][ T1860] tipc: Left network mode
[  457.255852][T18645] EXT4-fs (loop1): Remounting filesystem read-only
[  457.267420][   T37] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  457.297481][T18637] tipc: Started in network mode
[  457.302546][T18637] tipc: Node identity aaaaaaaaaa38, cluster identity 4711
[  457.309852][T18637] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  457.328184][ T1860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.335850][ T1860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.344810][ T1860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.352287][ T1860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.363363][ T1860] veth1_macvtap: left promiscuous mode
[  457.368918][ T1860] veth0_macvtap: left promiscuous mode
[  457.375094][ T1860] veth1_vlan: left promiscuous mode
[  457.380395][ T1860] veth0_vlan: left promiscuous mode
[  457.466672][ T1860] team0 (unregistering): Port device team_slave_1 removed
[  457.478110][ T1860] team0 (unregistering): Port device team_slave_0 removed
[  457.485663][   T37] smc: removing ib device syz!
[  457.503528][T18654] FAULT_INJECTION: forcing a failure.
[  457.503528][T18654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.516678][T18654] CPU: 1 UID: 0 PID: 18654 Comm: syz.2.5502 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  457.516785][T18654] Tainted: [W]=WARN
[  457.516794][T18654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  457.516809][T18654] Call Trace:
[  457.516817][T18654]  <TASK>
[  457.516827][T18654]  __dump_stack+0x1d/0x30
[  457.516857][T18654]  dump_stack_lvl+0x95/0xd0
[  457.516884][T18654]  dump_stack+0x15/0x1b
[  457.516985][T18654]  should_fail_ex+0x265/0x280
[  457.517043][T18654]  should_fail+0xb/0x20
[  457.517062][T18654]  should_fail_usercopy+0x1a/0x20
[  457.517091][T18654]  _copy_from_user+0x1c/0xb0
[  457.517132][T18654]  __sys_bind+0x106/0x2a0
[  457.517211][T18654]  __x64_sys_bind+0x3f/0x50
[  457.517258][T18654]  x64_sys_call+0x2ceb/0x3000
[  457.517290][T18654]  do_syscall_64+0xca/0x2b0
[  457.517432][T18654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.517455][T18654] RIP: 0033:0x7f3b5d85f749
[  457.517471][T18654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.517498][T18654] RSP: 002b:00007f3b5c2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  457.517518][T18654] RAX: ffffffffffffffda RBX: 00007f3b5dab5fa0 RCX: 00007f3b5d85f749
[  457.517529][T18654] RDX: 0000000000000060 RSI: 0000200000000240 RDI: 0000000000000003
[  457.517541][T18654] RBP: 00007f3b5c2c7090 R08: 0000000000000000 R09: 0000000000000000
[  457.517597][T18654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.517613][T18654] R13: 00007f3b5dab6038 R14: 00007f3b5dab5fa0 R15: 00007ffc23b97dc8
[  457.517655][T18654]  </TASK>
[  457.788056][T18665] FAULT_INJECTION: forcing a failure.
[  457.788056][T18665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.801464][T18665] CPU: 1 UID: 0 PID: 18665 Comm: syz.2.5506 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  457.801501][T18665] Tainted: [W]=WARN
[  457.801508][T18665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  457.801521][T18665] Call Trace:
[  457.801552][T18665]  <TASK>
[  457.801560][T18665]  __dump_stack+0x1d/0x30
[  457.801591][T18665]  dump_stack_lvl+0x95/0xd0
[  457.801684][T18665]  dump_stack+0x15/0x1b
[  457.801703][T18665]  should_fail_ex+0x265/0x280
[  457.801753][T18665]  should_fail+0xb/0x20
[  457.801779][T18665]  should_fail_usercopy+0x1a/0x20
[  457.801825][T18665]  _copy_from_user+0x1c/0xb0
[  457.801859][T18665]  ___sys_sendmsg+0xc1/0x1d0
[  457.801983][T18665]  __x64_sys_sendmsg+0xd4/0x160
[  457.802026][T18665]  x64_sys_call+0x17ba/0x3000
[  457.802099][T18665]  do_syscall_64+0xca/0x2b0
[  457.802138][T18665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.802164][T18665] RIP: 0033:0x7f3b5d85f749
[  457.802183][T18665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.802208][T18665] RSP: 002b:00007f3b5c2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  457.802242][T18665] RAX: ffffffffffffffda RBX: 00007f3b5dab5fa0 RCX: 00007f3b5d85f749
[  457.802258][T18665] RDX: 00000000200440c4 RSI: 00002000000003c0 RDI: 0000000000000005
[  457.802276][T18665] RBP: 00007f3b5c2c7090 R08: 0000000000000000 R09: 0000000000000000
[  457.802293][T18665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.802310][T18665] R13: 00007f3b5dab6038 R14: 00007f3b5dab5fa0 R15: 00007ffc23b97dc8
[  457.802335][T18665]  </TASK>
[  458.000673][T18667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.007751][T18667] syzkaller0: entered promiscuous mode
[  458.013356][T18667] syzkaller0: entered allmulticast mode
[  458.025554][T18667] tipc: Resetting bearer <eth:syzkaller0>
[  458.036339][T18666] tipc: Resetting bearer <eth:syzkaller0>
[  458.043791][T18666] tipc: Disabling bearer <eth:syzkaller0>
[  458.064713][T18601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  458.073821][T18601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  458.083124][T18601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  458.092433][T18601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  458.139080][T18601] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.151489][T18601] 8021q: adding VLAN 0 to HW filter on device team0
[  458.162217][T18678] loop4: detected capacity change from 0 to 512
[  458.169635][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.176739][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.185883][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.193024][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.212515][T18601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  458.222987][T18601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  458.225957][T18678] ext4: Unknown parameter 'fowner'
[  458.263951][T18669] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[  458.272034][T18669] FAT-fs (loop4): Filesystem has been set read-only
[  458.307172][T18601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.350318][ T1860] IPVS: stop unused estimator thread 0...
[  458.410283][ T4119] tipc: Node number set to 9611946
[  458.517853][T18601] veth0_vlan: entered promiscuous mode
[  458.540774][T18601] veth1_vlan: entered promiscuous mode
[  458.595195][T18601] veth0_macvtap: entered promiscuous mode
[  458.602850][T18601] veth1_macvtap: entered promiscuous mode
[  458.615604][T18697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.641186][T18601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.658657][T18601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.671737][T18697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.676460][T18678] syz.4.5508: attempt to access beyond end of device
[  458.676460][T18678] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  458.695937][T18678] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  458.705363][T18678] syz.4.5508: attempt to access beyond end of device
[  458.705363][T18678] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  458.719196][T18678] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  458.729855][ T1860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.739480][ T1860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.750586][ T1860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.763647][T18697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.775961][ T1860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.815411][T18697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.870836][  T873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.882483][  T873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.894293][ T1860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.907187][  T873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.143667][T18702] chnl_net:caif_netlink_parms(): no params data found
[  459.167327][T18719] ext4: Unknown parameter 'fowner'
[  459.185725][T18716] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[  459.193735][T18716] FAT-fs (loop2): Filesystem has been set read-only
[  459.202055][T18702] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.209237][T18702] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.216803][T18702] bridge_slave_0: entered allmulticast mode
[  459.223534][T18702] bridge_slave_0: entered promiscuous mode
[  459.230825][T18702] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.237989][T18702] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.245582][T18702] bridge_slave_1: entered allmulticast mode
[  459.252625][T18702] bridge_slave_1: entered promiscuous mode
[  459.273236][T18702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.285547][T18702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.309069][T18702] team0: Port device team_slave_0 added
[  459.315942][T18702] team0: Port device team_slave_1 added
[  459.338404][T18702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.345502][T18702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.371755][T18702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.386514][T18702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.393560][T18702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.419563][T18702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.467489][T18702] hsr_slave_0: entered promiscuous mode
[  459.473751][T18702] hsr_slave_1: entered promiscuous mode
[  459.479985][T18702] debugfs: 'hsr0' already exists in 'hsr'
[  459.485751][T18702] Cannot create hsr debugfs directory
[  459.569222][T18716] syz.2.5517: attempt to access beyond end of device
[  459.569222][T18716] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  459.583455][T18716] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  459.593834][T18725] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002]
[  459.596079][T18702] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.602683][T18725] System zones: 0-1, 3-12
[  459.620968][T18725] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5518: bg 0: block 88: padding at end of block bitmap is not set
[  459.675856][T18702] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.704318][T18734] xt_hashlimit: overflow, rate too high: 0
[  459.713291][T18734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5521'.
[  459.722395][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5521'.
[  459.731413][T18734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5521'.
[  459.740552][T18734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5521'.
[  459.765359][T18702] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.829067][T18702] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.840939][T18740] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.856082][T18743] ext4: Unknown parameter 'fowner'
[  459.884496][T18738] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[  459.892484][T18738] FAT-fs (loop3): Filesystem has been set read-only
[  459.971747][T18748] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5524: bg 0: block 345: padding at end of block bitmap is not set
[  459.986647][T18748] EXT4-fs (loop2): Remounting filesystem read-only
[  459.993413][ T1860] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  460.135711][T18754] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  460.163163][T18738] ==================================================================
[  460.171290][T18738] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
[  460.180808][T18738] 
[  460.183149][T18738] read to 0xffff88812ea3fa00 of 512 bytes by task 135 on cpu 1:
[  460.190793][T18738]  copy_folio_from_iter_atomic+0x760/0x1150
[  460.196717][T18738]  generic_perform_write+0x2c2/0x490
[  460.202038][T18738]  shmem_file_write_iter+0xc5/0xf0
[  460.207174][T18738]  lo_rw_aio+0x673/0x720
[  460.211431][T18738]  loop_process_work+0x56d/0xaa0
[  460.216388][T18738]  loop_workfn+0x31/0x40
[  460.220652][T18738]  process_scheduled_works+0x4ce/0x9d0
[  460.226131][T18738]  worker_thread+0x582/0x770
[  460.230751][T18738]  kthread+0x489/0x510
[  460.234850][T18738]  ret_from_fork+0x149/0x290
[  460.239465][T18738]  ret_from_fork_asm+0x1a/0x30
[  460.244249][T18738] 
[  460.246591][T18738] write to 0xffff88812ea3faad of 69 bytes by task 18738 on cpu 0:
[  460.254490][T18738]  copy_folio_from_iter_atomic+0x760/0x1150
[  460.260467][T18738]  generic_perform_write+0x2c2/0x490
[  460.265785][T18738]  __generic_file_write_iter+0x9e/0x120
[  460.271353][T18738]  generic_file_write_iter+0x8d/0x2f0
[  460.276786][T18738]  iter_file_splice_write+0x66b/0xa20
[  460.282172][T18738]  direct_splice_actor+0x156/0x2a0
[  460.287314][T18738]  splice_direct_to_actor+0x312/0x680
[  460.292706][T18738]  do_splice_direct+0xda/0x150
[  460.297493][T18738]  do_sendfile+0x380/0x650
[  460.301926][T18738]  __x64_sys_sendfile64+0x105/0x150
[  460.307142][T18738]  x64_sys_call+0x2db1/0x3000
[  460.311842][T18738]  do_syscall_64+0xca/0x2b0
[  460.316368][T18738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.322278][T18738] 
[  460.324612][T18738] Reported by Kernel Concurrency Sanitizer on:
[  460.330772][T18738] CPU: 0 UID: 0 PID: 18738 Comm: syz.3.5523 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  460.342157][T18738] Tainted: [W]=WARN
[  460.345969][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  460.356043][T18738] ==================================================================
[  460.383316][T18738] syz.3.5523: attempt to access beyond end of device
[  460.383316][T18738] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  460.397072][T18738] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  460.405994][T18743] syz.3.5523: attempt to access beyond end of device
[  460.405994][T18743] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128
[  460.419773][T18743] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  461.490948][T18702] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  461.499847][T18702] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  461.508456][T18702] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  461.517356][T18702] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  461.552101][T18702] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.564626][T18702] 8021q: adding VLAN 0 to HW filter on device team0
[  461.574203][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.581317][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.594937][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.602123][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.610198][  T135] dummy0: left allmulticast mode
[  461.615365][  T135] bridge0: port 3(dummy0) entered disabled state
[  461.622680][  T135] bridge_slave_1: left allmulticast mode
[  461.628353][  T135] bridge_slave_1: left promiscuous mode
[  461.634107][  T135] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.641882][  T135] bridge_slave_0: left allmulticast mode
[  461.647583][  T135] bridge_slave_0: left promiscuous mode
[  461.653401][  T135] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.855571][  T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.865518][  T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.875518][  T135] bond0 (unregistering): Released all slaves
[  461.884501][  T135] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  461.892935][  T135] wireguard0: left promiscuous mode
[  461.899754][  T135] bond1 (unregistering): Released all slaves
[  461.909307][  T135] bond2 (unregistering): (slave wireguard1): Releasing backup interface
[  461.917712][  T135] wireguard1: left promiscuous mode
[  461.923980][  T135] bond2 (unregistering): Released all slaves
[  461.932531][  T135] bond3 (unregistering): Released all slaves
[  461.961624][  T135] tipc: Disabling bearer <eth:veth0_macvtap>
[  461.968282][  T135] tipc: Left network mode
[  461.977768][  T135] hsr_slave_0: left promiscuous mode
[  461.983656][  T135] hsr_slave_1: left promiscuous mode
[  461.989855][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.997311][  T135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.004961][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.012521][  T135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.023382][  T135] veth1_macvtap: left promiscuous mode
[  462.028982][  T135] veth0_macvtap: left promiscuous mode
[  462.034485][  T135] veth1_vlan: left promiscuous mode
[  462.039847][  T135] veth0_vlan: left promiscuous mode
[  462.113731][  T135] team0 (unregistering): Port device team_slave_1 removed
[  462.124292][  T135] team0 (unregistering): Port device team_slave_0 removed
[  462.179153][T18702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.283398][T18702] veth0_vlan: entered promiscuous mode
[  462.290927][T18702] veth1_vlan: entered promiscuous mode
[  462.306139][T18702] veth0_macvtap: entered promiscuous mode
[  462.313252][T18702] veth1_macvtap: entered promiscuous mode
[  462.323752][T18702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.335215][T18702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.346255][   T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.356795][   T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.365716][   T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.374999][   T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.571743][  T135] IPVS: stop unused estimator thread 0...