last executing test programs:

2m53.754284231s ago: executing program 0 (id=912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

2m53.581873214s ago: executing program 0 (id=916):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10)

2m53.538013778s ago: executing program 0 (id=918):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x40, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r3, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0)

2m53.407212539s ago: executing program 0 (id=922):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0)

2m53.347645433s ago: executing program 0 (id=924):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
close(r0)

2m52.88792374s ago: executing program 0 (id=930):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

2m52.885466681s ago: executing program 32 (id=930):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

2m52.052563498s ago: executing program 4 (id=952):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378eb, 0x70bd28, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x30}}, 0x0)

2m51.746560893s ago: executing program 4 (id=954):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0xef03cf8a984ab5f}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x18)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

2m51.65420058s ago: executing program 4 (id=955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)

2m51.640356082s ago: executing program 4 (id=956):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

2m51.628895073s ago: executing program 4 (id=957):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

2m51.391917792s ago: executing program 4 (id=958):
r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)

2m51.391686462s ago: executing program 33 (id=958):
r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)

2m14.219443313s ago: executing program 6 (id=1936):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x54, 0x2000, 0x0, {0x0, 0xa}, {0x1, 0xb}, @period={0x59, 0xa, 0x1, 0x0, 0x400, {0x2, 0x1, 0x10, 0x5}, 0x0, 0x0}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

2m13.365489501s ago: executing program 6 (id=1960):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0)

2m12.50468778s ago: executing program 6 (id=1974):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r3, 0x0, 0x3, 0x0)
fcntl$setpipe(r2, 0x4, 0xfffffffffffff000)

2m12.085669454s ago: executing program 2 (id=1987):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2m12.035499398s ago: executing program 2 (id=1988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2000)

2m11.959171944s ago: executing program 2 (id=1990):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x128, 0xc8, 0x8, 0x128, 0x5803, 0x1f0, 0x2e8, 0x2e8, 0x1f0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'batadv0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffffffff}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'veth1\x00', 'syz_tun\x00', {}, {0x491d055cb43cf44b}, 0x8, 0x0, 0xf, 0x21}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3f9, 0x4)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

2m11.916470658s ago: executing program 2 (id=1993):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x901)
mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0x0)

2m11.840387724s ago: executing program 2 (id=1994):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x60f8, &(0x7f0000000400)={0x0, 0x10b6, 0x1000, 0x0, 0x203c0})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24)
listen(r3, 0x4)
close_range(r2, r3, 0x0)

2m11.700367765s ago: executing program 2 (id=1997):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m11.700060685s ago: executing program 34 (id=1997):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m11.673747487s ago: executing program 6 (id=2000):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
mkdir(&(0x7f0000000140)='./control\x00', 0x191)
rmdir(&(0x7f0000000100)='./control\x00')
sched_setscheduler(0x0, 0x1, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)

2m11.572652835s ago: executing program 6 (id=2003):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$eJzs3U+LG2UYAPBnstnsrD1kES+K4IAePC1dr142ygrFnJQI6kGDbUGSUOhCoCuY7qmfwO/iR/DixW9Q8Cp4aw8rIzOTyZ8yqVGzivb3Oz08b573fWfe3SSXPPPl65PR7XtJXD55HGmaROs0TuNpEkfRitrDaAcA8P/xNM/j17wMk7yyZWW7da0bAwCuTfX5/6c++AGA/7iPP/3sw16/f/ZRlqXxavfRdJBExOTRdFCN9+7G1zGOO3EzunEVkS9U8Qe3+mfRzgpH8dZkNh0UlZMvfpzP3/sloqw/2evGUXP9SVZZqZ9NB/vxUmTRu7tfb7UbrzTXv9NQH4NOvP3myv6Poxs/fRX3Yhy3o6hd1n97kmXv5989+ebzYpmiPmnF4KB8XSn3BQkAAAAAAAAAAAAAAAAAAAAAgN06zrKkat9T9u8pUvP+O3tX5fhxVjta789T1Sf1RFV/oLzuljNL5/lb/bObWZblSZSDy/p2vNb2YAEAAAAAAAAAAAAAAAAAAAAonD94fGM4Ht+5f/7gYvS3g7obQP2z/r86z+lK5o24GA33Nk948OxQPIxonnm120Cx1+duI9rt2NFtaQ4uF5nDYj87X+IgFplPogqqgznc7XW9/F51Ry9Gw6w+grnRMPmjtdL64L5fHepsOMHtg7z8k7jK1880XWx1vaqzo7vRubHMHC6HfsvzfLt53v25OqN5JilbbGy3+v48aLzAIkiLs0gX//jF0A+bJ9z4lrG3g7cdAAAAAAAAAAAAAAAAAACgwfJHvw2Dl88tbV3bpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgH7Z8/n8dpBGxnimC1mpmNi9+5jVNQSfun//LlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAL4PcAAAD//28ZVAA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x82)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)

2m11.228516822s ago: executing program 6 (id=2006):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x400, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10)
ppoll(&(0x7f00000002c0)=[{r0, 0x47}], 0x1, 0x0, 0x0, 0x0)

2m11.228284063s ago: executing program 35 (id=2006):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x400, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10)
ppoll(&(0x7f00000002c0)=[{r0, 0x47}], 0x1, 0x0, 0x0, 0x0)

1.586962483s ago: executing program 3 (id=5379):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x204c000}, 0x0)

1.519982858s ago: executing program 8 (id=5383):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), 0x0}, 0x20)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18)
fallocate(r0, 0x1, 0x0, 0x1001f0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="c1", 0x1}], 0x1, 0x33000, 0x7, 0x3)

1.4902713s ago: executing program 3 (id=5385):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

1.438914734s ago: executing program 8 (id=5387):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)

1.353849281s ago: executing program 3 (id=5392):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)

1.179882595s ago: executing program 5 (id=5400):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)={0x4c, r2, 0x1, 0x70bd25, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffe88, 0x8e, 0x2}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {}, {0xfffffffffffffe21}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {}, {0x0, 0x83, 0x1}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {}, {0x0, 0x83, 0x1}}]}, 0x4c}}, 0x0)

1.170500066s ago: executing program 5 (id=5403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0)
sendto$inet6(r2, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

1.083043793s ago: executing program 8 (id=5406):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)

526.496828ms ago: executing program 1 (id=5424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x2, 0x7ff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0)

507.442679ms ago: executing program 1 (id=5425):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

493.81218ms ago: executing program 1 (id=5426):
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

376.10906ms ago: executing program 3 (id=5427):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xa26d]}, 0x8, 0x80800)

366.511591ms ago: executing program 1 (id=5428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

245.80713ms ago: executing program 7 (id=5429):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "36a6434088fea58f", "111ed631702ca6fb3f5c4725ca7b6844", "3cbd0155", "559cd81cd03b2248"}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, ' \x00', "ae460d2d26cb2c92eb9da9b99ff762f0", "96a73145", "7018682274a5df86"}, 0x28)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

188.905795ms ago: executing program 3 (id=5430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457})
io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0)

188.562265ms ago: executing program 5 (id=5431):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d61"], 0x5c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20)

188.160555ms ago: executing program 1 (id=5432):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

187.874555ms ago: executing program 1 (id=5433):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = gettid()
r3 = eventfd2(0x0, 0x0)
write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8)
write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

183.600505ms ago: executing program 7 (id=5434):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

165.088337ms ago: executing program 7 (id=5435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0)

156.603987ms ago: executing program 5 (id=5436):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x18)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

80.535923ms ago: executing program 5 (id=5437):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000100)=""/38, 0x6000, 0x0, 0x200, 0x1}, 0x20)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2})
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x2, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "86e165", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e21, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x0, "9ae9b1", 0x3, "aa759c"}}}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

79.978213ms ago: executing program 8 (id=5438):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
close(r1)

79.683364ms ago: executing program 5 (id=5439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)

79.341854ms ago: executing program 7 (id=5440):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0)
shutdown(r0, 0x2)

64.914905ms ago: executing program 8 (id=5441):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

61.990535ms ago: executing program 3 (id=5442):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

53.843296ms ago: executing program 7 (id=5443):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$packet(0x11, 0x2, 0x300)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000880)=""/7, 0x7}], 0x1, 0xf2, 0xc)

394.09µs ago: executing program 8 (id=5444):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)

0s ago: executing program 7 (id=5445):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfd)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10)
accept(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ive=1
[  168.521294][T19725] syzkaller0: entered promiscuous mode
[  168.526806][T19725] syzkaller0: entered allmulticast mode
[  168.687793][   T29] audit: type=1400 audit(1755471167.962:5731): avc:  denied  { unmount } for  pid=19742 comm="syz.5.3731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  168.916572][   T29] audit: type=1326 audit(1755471168.204:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19752 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  168.940102][   T29] audit: type=1326 audit(1755471168.204:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19752 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  168.963600][   T29] audit: type=1326 audit(1755471168.204:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19752 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  168.987203][   T29] audit: type=1326 audit(1755471168.204:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19752 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  169.010791][   T29] audit: type=1326 audit(1755471168.204:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19752 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  169.028264][T19731] loop7: detected capacity change from 0 to 1024
[  169.034418][   T29] audit: type=1326 audit(1755471168.235:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19752 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  169.064128][   T29] audit: type=1326 audit(1755471168.235:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19752 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  169.097615][T19731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.122157][T19731] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.365735][T19775] syzkaller1: entered promiscuous mode
[  169.371258][T19775] syzkaller1: entered allmulticast mode
[  169.500670][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.540052][T19805] veth0_vlan: entered allmulticast mode
[  169.828968][T19834] netlink: 'syz.5.3758': attribute type 30 has an invalid length.
[  170.084900][T19847] loop3: detected capacity change from 0 to 164
[  170.101274][T19847] syz.3.3761: attempt to access beyond end of device
[  170.101274][T19847] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  170.123935][T19847] syz.3.3761: attempt to access beyond end of device
[  170.123935][T19847] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  170.295528][T19875] loop3: detected capacity change from 0 to 512
[  170.307227][T19875] vfat: Unknown parameter 'nnonumtail'
[  170.476680][T19884] pim6reg1: entered promiscuous mode
[  170.482055][T19884] pim6reg1: entered allmulticast mode
[  170.520512][T19890] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  170.530881][T19890] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.609058][T19890] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  170.619017][T19890] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.687867][T19890] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  170.697949][T19890] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.759906][T19890] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  170.769837][T19890] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.873162][  T413] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  170.881518][  T413] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  170.898867][  T413] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  170.907208][  T413] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  170.920796][ T5475] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  170.929125][ T5475] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  170.982758][ T5475] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  170.991174][ T5475] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  171.221895][T19945] blktrace: Concurrent blktraces are not allowed on loop11
[  171.579665][T19979] __nla_validate_parse: 2 callbacks suppressed
[  171.579680][T19979] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3799'.
[  171.626071][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3801'.
[  171.653419][T19983] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3801'.
[  171.681765][T19975] loop3: detected capacity change from 0 to 32768
[  171.826986][T20014] 9pnet: p9_errstr2errno: server reported unknown error 
[  171.866691][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3810'.
[  171.876696][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3810'.
[  172.209771][T20055] loop3: detected capacity change from 0 to 512
[  172.256156][T20055] EXT4-fs (loop3): 1 truncate cleaned up
[  172.275578][T20055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.302039][T20055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.542998][T20038] loop8: detected capacity change from 0 to 1024
[  172.572824][T20038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.586386][T20038] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.796259][T20101] IPv6: sit1: Disabled Multicast RS
[  172.859142][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3841'.
[  172.915820][T20117] netlink: 'syz.3.3844': attribute type 10 has an invalid length.
[  172.923723][T20117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3844'.
[  172.943272][T20117] team0: Port device geneve1 added
[  172.993750][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.218248][T20146] loop7: detected capacity change from 0 to 1024
[  173.241613][T20144] tmpfs: Unsupported parameter 'huge'
[  173.249588][T20146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.294171][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.360670][T20164] loop7: detected capacity change from 0 to 128
[  173.377077][T20164] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  173.378675][   T29] kauditd_printk_skb: 134 callbacks suppressed
[  173.378687][   T29] audit: type=1400 audit(1755471172.886:5873): avc:  denied  { mounton } for  pid=20158 comm="syz.7.3859" path="/338/file0" dev="tmpfs" ino=1785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  173.395198][T20164] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  173.454352][T20169] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3864'.
[  173.492040][   T29] audit: type=1326 audit(1755471172.991:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  173.515616][   T29] audit: type=1326 audit(1755471173.002:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  173.539129][   T29] audit: type=1326 audit(1755471173.002:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  173.562667][   T29] audit: type=1326 audit(1755471173.002:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13897fec23 code=0x7ffc0000
[  173.586260][   T29] audit: type=1326 audit(1755471173.002:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f13897fd69f code=0x7ffc0000
[  173.609705][   T29] audit: type=1326 audit(1755471173.002:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f13897fec77 code=0x7ffc0000
[  173.633098][   T29] audit: type=1326 audit(1755471173.002:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13897fd550 code=0x7ffc0000
[  173.656608][   T29] audit: type=1326 audit(1755471173.002:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f13897fd84a code=0x7ffc0000
[  173.683474][T20181] $H�: entered promiscuous mode
[  173.730297][T20188] loop8: detected capacity change from 0 to 512
[  173.748443][   T29] audit: type=1326 audit(1755471173.138:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.5.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  173.777717][T20188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.810376][T20188] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.901257][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3877'.
[  173.924541][T20213] team1: entered promiscuous mode
[  173.929692][T20213] team1: entered allmulticast mode
[  173.939146][T20215] netlink: 'syz.1.3878': attribute type 10 has an invalid length.
[  173.951276][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.960736][T20215] syz_tun: entered promiscuous mode
[  174.036961][T20257] loop8: detected capacity change from 0 to 128
[  174.037113][T20255] netlink: 'syz.7.3880': attribute type 3 has an invalid length.
[  174.109937][T20264] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3883'.
[  174.122790][T20267] loop7: detected capacity change from 0 to 512
[  174.151175][T20267] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3884: casefold flag without casefold feature
[  174.174550][T20267] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3884: couldn't read orphan inode 15 (err -117)
[  174.196239][T20267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.358112][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.368840][T20172] loop3: detected capacity change from 0 to 1024
[  174.393633][T20172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.407888][T20172] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.461412][T20308] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008
[  174.646995][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.760092][T20325] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  175.584725][T20403] lo speed is unknown, defaulting to 1000
[  175.590753][T20403] lo speed is unknown, defaulting to 1000
[  176.308224][T20459] loop7: detected capacity change from 0 to 512
[  176.314965][T20459] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.321979][T20459] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  176.343323][T20459] EXT4-fs (loop7): 1 truncate cleaned up
[  176.353354][T20459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.547509][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.592983][T20468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.616437][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.627139][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.687239][T20468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.753265][T20468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.774779][T20492] bridge: RTM_NEWNEIGH with invalid ether address
[  176.807296][T20468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.887524][ T1764] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.918383][ T1764] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.936667][ T1764] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.948250][ T1764] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.030545][T20522] syz_tun: entered allmulticast mode
[  177.038757][T20521] syz_tun: left allmulticast mode
[  177.943815][T20541] loop8: detected capacity change from 0 to 512
[  177.962188][T20541] EXT4-fs: Ignoring removed mblk_io_submit option
[  177.981671][T20541] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  178.036461][T20541] EXT4-fs (loop8): 1 truncate cleaned up
[  178.042587][T20541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.076142][T20555] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.086081][T20555] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.117719][T20567] tipc: New replicast peer: 255.255.255.255
[  178.123953][T20567] tipc: Enabled bearer <udp:s>, priority 10
[  178.159251][T20555] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.169144][T20555] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.207383][T20555] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.217361][T20555] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.257283][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.274078][T20555] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.284049][T20555] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.294660][   T29] kauditd_printk_skb: 245 callbacks suppressed
[  178.294693][   T29] audit: type=1326 audit(1755471178.031:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.324355][   T29] audit: type=1326 audit(1755471178.031:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.347910][   T29] audit: type=1326 audit(1755471178.031:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.371459][   T29] audit: type=1326 audit(1755471178.031:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.395017][   T29] audit: type=1326 audit(1755471178.031:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.418629][   T29] audit: type=1326 audit(1755471178.031:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.465784][   T29] audit: type=1326 audit(1755471178.073:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.489310][   T29] audit: type=1326 audit(1755471178.073:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.513022][   T29] audit: type=1326 audit(1755471178.084:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.536626][   T29] audit: type=1326 audit(1755471178.115:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20587 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  178.595935][ T4423] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  178.604300][ T4423] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  178.619120][ T5475] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  178.627490][ T5475] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  178.638254][ T4451] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  178.646634][ T4451] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  178.656599][ T4451] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  178.664909][ T4451] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  179.100863][T10848] tipc: Node number set to 2145010096
[  179.155627][T20633] netlink: 'syz.8.3992': attribute type 1 has an invalid length.
[  179.183904][T20633] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.210418][T20633] bond1: (slave veth3): Enslaving as an active interface with a down link
[  179.228654][T20633] bond1: (slave dummy0): making interface the new active one
[  179.236939][T20686] 9pnet: p9_errstr2errno: server reported unknown error 18446744073
[  179.246674][T20633] dummy0: entered promiscuous mode
[  179.251894][T20633] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  179.272041][T20633] netlink: 'syz.8.3992': attribute type 10 has an invalid length.
[  179.279840][T20633] __nla_validate_parse: 5 callbacks suppressed
[  179.279853][T20633] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3992'.
[  179.296177][T20633] bond1: (slave dummy0): Releasing active interface
[  179.505530][T20721] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4003'.
[  179.535037][T20721] 0�X���: renamed from caif0
[  179.557837][T20721] 0�X���: entered allmulticast mode
[  179.563037][T20721] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  179.821666][T20701] loop8: detected capacity change from 0 to 1024
[  179.846907][T20701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.860759][T20701] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.080518][T20748] netlink: 'syz.5.4022': attribute type 7 has an invalid length.
[  180.088325][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4022'.
[  180.147016][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4016'.
[  180.157141][T20760] loop3: detected capacity change from 0 to 512
[  180.181182][T20760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.193719][T20760] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.206675][T20760] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4017: corrupted inode contents
[  180.215740][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.218771][T20760] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4017: mark_inode_dirty error
[  180.241141][T20760] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4017: corrupted inode contents
[  180.254410][T20760] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4017: mark_inode_dirty error
[  180.285507][T20772] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  180.314006][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.557848][T20786] Set syz1 is full, maxelem 65536 reached
[  180.601351][T20805] loop7: detected capacity change from 0 to 7
[  180.621852][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.631012][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  180.647611][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.656787][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  180.664860][T20805]  loop7: unable to read partition table
[  180.670731][T20805] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  180.739425][T20819] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4034'.
[  180.748498][T20819] netem: unknown loss type 0
[  180.753096][T20819] netem: change failed
[  180.944377][T20835] siw: device registration error -23
[  180.973388][T20835] loop7: detected capacity change from 0 to 512
[  181.007558][T20835] loop7: detected capacity change from 0 to 1024
[  181.018106][T20835] EXT4-fs: inline encryption not supported
[  181.023973][T20835] EXT4-fs: Ignoring removed i_version option
[  181.031234][T20835] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  181.042971][T20835] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.4042: lblock 1 mapped to illegal pblock 1 (length 1)
[  181.063156][T20835] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4042: Failed to acquire dquot type 0
[  181.076081][T20835] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.4042: Freeing blocks not in datazone - block = 0, count = 4096
[  181.089717][T20835] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4042: Invalid inode bitmap blk 0 in block_group 0
[  181.102748][ T4429] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:41: lblock 1 mapped to illegal pblock 1 (length 1)
[  181.105048][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4043'.
[  181.126039][T20835] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  181.134661][ T4429] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:41: Failed to release dquot type 0
[  181.146385][T20844] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.153883][T20844] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.162814][T20835] EXT4-fs (loop7): 1 orphan inode deleted
[  181.168990][T20835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.183917][T20835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.195070][T20844] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.202509][T20844] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.292103][T20859] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  181.301993][T20859] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  181.370976][T20859] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  181.380882][T20859] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  181.473466][T20859] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  181.483336][T20859] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  181.569494][T20859] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  181.579379][T20859] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  181.840065][ T4423] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  181.848575][ T4423] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  181.861416][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4062'.
[  181.916635][ T4423] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  181.924953][ T4423] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  181.976202][ T4423] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  181.984592][ T4423] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  182.024502][ T4423] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  182.032792][ T4423] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  182.089830][T20896] Set syz1 is full, maxelem 65536 reached
[  182.170744][T20931] loop7: detected capacity change from 0 to 512
[  182.178850][T20931] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #17: comm syz.7.4068: invalid fast symlink length 0
[  182.192638][T20931] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4068: couldn't read orphan inode 17 (err -117)
[  182.196888][T20935] syzkaller1: entered promiscuous mode
[  182.209946][T20935] syzkaller1: entered allmulticast mode
[  182.217852][T20931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.257597][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.450142][T20954] loop7: detected capacity change from 0 to 256
[  182.457898][T20954] vfat: Unknown parameter '?����[�J�/ͨ[�i`$��&�u���+8eU���7��Y��v�U��֛>�^��є&͘�g�x{3G醾:�M���o�4<9߳D�ƿ����"صa�B��.�ך��[�ۍ��M��z�S�%�+asC�C8�ǫ(��s�5Ǻ��l�F�A����.����a����p�t�A���X�'
[  182.745700][T20974] loop3: detected capacity change from 0 to 2048
[  182.846460][T20974]  loop3: p2 p3 p7
[  183.015687][T20947] loop8: detected capacity change from 0 to 1024
[  183.053274][T20972] Set syz1 is full, maxelem 65536 reached
[  183.070902][T20947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.080091][T20998] netlink: 29 bytes leftover after parsing attributes in process `syz.7.4084'.
[  183.101264][T20947] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.131645][T20999] loop3: detected capacity change from 0 to 2048
[  183.188658][T21003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4088'.
[  183.198409][T20999]  loop3: p1 < > p4
[  183.212249][T20999] loop3: p4 size 8388608 extends beyond EOD, truncated
[  183.247988][   T29] kauditd_printk_skb: 306 callbacks suppressed
[  183.248001][   T29] audit: type=1400 audit(1755471183.249:6441): avc:  denied  { read write } for  pid=20994 comm="syz.3.4087" name="loop3p4" dev="devtmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  183.278544][   T29] audit: type=1400 audit(1755471183.249:6442): avc:  denied  { open } for  pid=20994 comm="syz.3.4087" path="/dev/loop3p4" dev="devtmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  183.353723][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4092'.
[  183.396313][T21023] loop7: detected capacity change from 0 to 512
[  183.418205][T21023] ext4: Unknown parameter 'euid>00000000000000000000'
[  183.476754][T21035] loop7: detected capacity change from 0 to 1024
[  183.492588][T21035] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  183.496025][   T29] audit: type=1326 audit(1755471183.491:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.524732][   T29] audit: type=1326 audit(1755471183.491:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.548201][   T29] audit: type=1326 audit(1755471183.491:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.571687][   T29] audit: type=1326 audit(1755471183.491:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.595366][   T29] audit: type=1326 audit(1755471183.491:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.618833][   T29] audit: type=1326 audit(1755471183.512:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.642441][   T29] audit: type=1326 audit(1755471183.512:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.665903][   T29] audit: type=1326 audit(1755471183.512:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  183.691665][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.823334][T21065] bridge: RTM_NEWNEIGH with invalid ether address
[  184.061755][T21083] bridge: RTM_NEWNEIGH with invalid ether address
[  184.376046][T21074] loop3: detected capacity change from 0 to 1024
[  184.387879][T21074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.400096][T21074] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.625169][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.708819][T21104] __nla_validate_parse: 3 callbacks suppressed
[  184.708834][T21104] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4125'.
[  185.011271][T21114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4115'.
[  185.029852][T21120] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4129'.
[  185.067958][T21128] loop3: detected capacity change from 0 to 1024
[  185.094309][T21128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.129292][T21128] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4119: Allocating blocks 449-513 which overlap fs metadata
[  185.152849][T21127] EXT4-fs (loop3): pa ffff8881072a8620: logic 48, phys. 177, len 21
[  185.161435][T21127] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  185.185781][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.258450][T21167] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4135'.
[  185.432652][T21193] loop8: detected capacity change from 0 to 1024
[  185.464311][T21193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.491020][T21193] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.4143: Allocating blocks 449-513 which overlap fs metadata
[  185.513254][T21191] EXT4-fs (loop8): pa ffff888107268c40: logic 48, phys. 177, len 21
[  185.521364][T21191] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  185.550355][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.898424][T21247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4159'.
[  185.907541][T21247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4159'.
[  185.931523][T21249] loop3: detected capacity change from 0 to 512
[  185.938555][T21249] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  186.364788][T21256] loop8: detected capacity change from 0 to 2048
[  186.374553][T21258] loop3: detected capacity change from 0 to 512
[  186.381324][T21258] EXT4-fs: Ignoring removed oldalloc option
[  186.391272][T21256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.391557][T21258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  186.432130][T12602] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  186.448418][T12602] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  186.458013][T21258] EXT4-fs (loop3): 1 truncate cleaned up
[  186.465847][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.467176][T21267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  186.485964][T21258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.610650][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.851735][T21301] syzkaller0: entered promiscuous mode
[  186.857301][T21301] syzkaller0: entered allmulticast mode
[  186.919978][T21313] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.979989][T21313] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.060269][T21313] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.121634][T21313] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.195338][ T4451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.224309][ T4451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.243511][ T4451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.276077][ T4451] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.280419][T21357] loop7: detected capacity change from 0 to 2048
[  187.292892][T21355] loop8: detected capacity change from 0 to 4096
[  187.322506][T21355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.341451][T21357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.379237][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.404534][T21367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.434074][T21365] tipc: Resetting bearer <eth:syzkaller0>
[  187.465246][T21365] tipc: Disabling bearer <eth:syzkaller0>
[  187.497895][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4196'.
[  187.699316][T21409] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.709191][T21409] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  187.756656][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.789763][T21409] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.799724][T21409] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  187.855484][T21415] loop3: detected capacity change from 0 to 1024
[  187.859875][T21424] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4207'.
[  187.865398][T21415] EXT4-fs: Ignoring removed bh option
[  187.883628][T21409] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.893565][T21409] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  187.905173][T21415] EXT4-fs: Ignoring removed nobh option
[  187.911609][T21415] EXT4-fs: inline encryption not supported
[  187.951608][T21415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.970506][T21409] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  187.980381][T21409] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  188.092925][ T4423] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  188.101230][ T4423] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  188.135694][ T4423] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  188.144055][ T4423] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  188.177124][T21415] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[  188.205403][ T4423] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  188.214008][ T4423] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  188.288576][ T4423] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  188.296909][ T4423] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  188.305335][T21453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.338121][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.348195][T21451] tipc: Resetting bearer <eth:syzkaller0>
[  188.370681][T21451] tipc: Disabling bearer <eth:syzkaller0>
[  188.408922][T21474] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4216'.
[  188.512956][T21495] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4223'.
[  188.600610][   T29] kauditd_printk_skb: 212 callbacks suppressed
[  188.600622][   T29] audit: type=1326 audit(1755471188.866:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.630361][   T29] audit: type=1326 audit(1755471188.866:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.656903][   T29] audit: type=1326 audit(1755471188.929:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.680595][   T29] audit: type=1326 audit(1755471188.929:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.704202][   T29] audit: type=1326 audit(1755471188.929:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.723387][T21508] loop8: detected capacity change from 0 to 128
[  188.734058][   T29] audit: type=1326 audit(1755471188.982:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.757582][   T29] audit: type=1326 audit(1755471188.982:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.781114][   T29] audit: type=1326 audit(1755471188.982:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.804581][   T29] audit: type=1326 audit(1755471188.982:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.828239][   T29] audit: type=1326 audit(1755471188.982:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.7.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  188.865438][T21512] syz.8.4230: attempt to access beyond end of device
[  188.865438][T21512] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128
[  188.887602][T21512] syz.8.4230: attempt to access beyond end of device
[  188.887602][T21512] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128
[  188.919398][T21512] syz.8.4230: attempt to access beyond end of device
[  188.919398][T21512] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128
[  188.945992][T21512] syz.8.4230: attempt to access beyond end of device
[  188.945992][T21512] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128
[  188.977146][T21512] syz.8.4230: attempt to access beyond end of device
[  188.977146][T21512] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128
[  188.995957][T21512] syz.8.4230: attempt to access beyond end of device
[  188.995957][T21512] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128
[  189.391118][T21565] loop7: detected capacity change from 0 to 128
[  189.414888][T21568] netlink: 'syz.5.4252': attribute type 10 has an invalid length.
[  189.429562][T21558] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.436814][T21558] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.528301][T21558] 0�X���: left allmulticast mode
[  189.560180][T21565] syz.7.4251: attempt to access beyond end of device
[  189.560180][T21565] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128
[  189.575187][T21565] syz.7.4251: attempt to access beyond end of device
[  189.575187][T21565] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[  189.588777][T21565] syz.7.4251: attempt to access beyond end of device
[  189.588777][T21565] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128
[  189.602267][T21565] syz.7.4251: attempt to access beyond end of device
[  189.602267][T21565] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128
[  189.671445][ T4405] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.681580][ T4405] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.690856][ T4405] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.710702][ T4405] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.725680][T21595] loop7: detected capacity change from 0 to 1024
[  189.732722][T21595] EXT4-fs: Ignoring removed nobh option
[  189.738287][T21595] EXT4-fs: Ignoring removed bh option
[  189.753341][T21595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.774085][T21604] loop3: detected capacity change from 0 to 512
[  189.781784][T21604] EXT4-fs: Ignoring removed nobh option
[  189.789180][T21604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.864689][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.969200][T21617] __nla_validate_parse: 4 callbacks suppressed
[  189.969215][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4260'.
[  190.179760][T21638] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  190.518538][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.562532][T21653] loop7: detected capacity change from 0 to 1024
[  190.585673][T21658] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4275'.
[  190.599478][T21653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.637750][T21653] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4273: Allocating blocks 449-513 which overlap fs metadata
[  190.659721][T21652] EXT4-fs (loop7): pa ffff8881072a8620: logic 48, phys. 177, len 21
[  190.667771][T21652] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  190.753898][T12423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.059541][T21686] loop8: detected capacity change from 0 to 1024
[  191.067791][T21686] EXT4-fs: Ignoring removed nobh option
[  191.073386][T21686] EXT4-fs: Ignoring removed bh option
[  191.081082][T21684] loop7: detected capacity change from 0 to 128
[  191.098112][T21686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.622731][T21704] loop3: detected capacity change from 0 to 1024
[  191.637479][T21704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.651212][T21710] 0��{X��: left allmulticast mode
[  191.683278][T21704] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4300: Allocating blocks 449-513 which overlap fs metadata
[  191.743800][T21702] EXT4-fs (loop3): pa ffff888107268cb0: logic 48, phys. 177, len 21
[  191.751985][T21702] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  191.794884][T21710] 0�X���: left allmulticast mode
[  191.842217][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.859443][T12602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.097262][T21742] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4304'.
[  192.110058][T21742] netlink: 'syz.8.4304': attribute type 10 has an invalid length.
[  192.117917][T21742] netlink: 55 bytes leftover after parsing attributes in process `syz.8.4304'.
[  192.229744][T21774] lo: entered allmulticast mode
[  192.257936][T21772] 0��{X��: left allmulticast mode
[  192.292962][T21772] $H�: left promiscuous mode
[  192.322464][T21772] wg2: left promiscuous mode
[  192.327236][T21772] wg2: left allmulticast mode
[  192.375008][T21772] geneve2: left promiscuous mode
[  192.382692][T21772] bond0: left promiscuous mode
[  192.387877][T21772] bond0: left allmulticast mode
[  192.394871][T21772] geneve3: left allmulticast mode
[  192.403386][T21772] team1: left promiscuous mode
[  192.408430][T21772] team1: left allmulticast mode
[  192.414260][T21779] bridge: RTM_NEWNEIGH with invalid ether address
[  192.422235][   T36] syz1: Port: 1 Link DOWN
[  192.426889][ T4405] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.435418][ T4405] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  192.445042][ T4405] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.453479][ T4405] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  192.489046][ T4405] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.497623][ T4405] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  192.507504][ T4405] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  192.515952][ T4405] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  192.685765][T21803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4323'.
[  192.717877][T21803] netlink: 'syz.1.4323': attribute type 10 has an invalid length.
[  192.725754][T21803] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4323'.
[  193.600918][T21858] loop3: detected capacity change from 0 to 512
[  193.617382][   T29] kauditd_printk_skb: 150 callbacks suppressed
[  193.617415][   T29] audit: type=1400 audit(1755471194.137:6823): avc:  denied  { mounton } for  pid=21857 comm="syz.3.4338" path="/261/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  193.647742][T21858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  193.673613][T21858] EXT4-fs (loop3): 1 truncate cleaned up
[  193.679799][T21858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.710764][T21858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.994202][T21877] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4341'.
[  194.022935][T21877] netlink: 'syz.7.4341': attribute type 10 has an invalid length.
[  194.030801][T21877] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4341'.
[  194.073715][T21887] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  194.297472][   T29] audit: type=1326 audit(1755471194.851:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.321174][   T29] audit: type=1326 audit(1755471194.851:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.344679][   T29] audit: type=1326 audit(1755471194.851:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.368354][   T29] audit: type=1326 audit(1755471194.851:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.391865][   T29] audit: type=1326 audit(1755471194.851:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.416398][   T29] audit: type=1326 audit(1755471194.882:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.439898][   T29] audit: type=1326 audit(1755471194.882:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.463458][   T29] audit: type=1326 audit(1755471194.882:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  194.486949][   T29] audit: type=1326 audit(1755471194.882:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21909 comm="syz.5.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  195.286957][T21943] loop3: detected capacity change from 0 to 128
[  195.435327][T21948] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4372'.
[  195.454879][T21948] netlink: 'syz.7.4372': attribute type 10 has an invalid length.
[  195.462767][T21948] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4372'.
[  195.640094][T21983] loop8: detected capacity change from 0 to 128
[  196.080675][T22015] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4394'.
[  196.737732][T22041] 9pnet: p9_errstr2errno: server reported unknown error 
[  196.863242][T22058] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4398'.
[  196.934563][T22064] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4400'.
[  197.173128][T22070] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4403'.
[  197.193037][T22070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4403'.
[  197.304021][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'.
[  197.315716][T22080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4419'.
[  197.471535][T22097] 9pnet: p9_errstr2errno: server reported unknown error 
[  197.805085][T22114] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4421'.
[  198.032686][T22144] 9pnet: p9_errstr2errno: server reported unknown error 
[  198.425448][   T29] kauditd_printk_skb: 130 callbacks suppressed
[  198.425463][   T29] audit: type=1326 audit(1755471199.176:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.468203][   T29] audit: type=1326 audit(1755471199.176:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.491883][   T29] audit: type=1326 audit(1755471199.218:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.515484][   T29] audit: type=1326 audit(1755471199.218:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.538985][   T29] audit: type=1326 audit(1755471199.218:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.562513][   T29] audit: type=1326 audit(1755471199.218:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.586109][   T29] audit: type=1326 audit(1755471199.218:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.609665][   T29] audit: type=1326 audit(1755471199.218:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.633126][   T29] audit: type=1326 audit(1755471199.218:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.656650][   T29] audit: type=1326 audit(1755471199.229:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22203 comm="syz.1.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  198.693628][T22209] 9pnet: p9_errstr2errno: server reported unknown error 
[  198.835848][T22224] IPv6: sit1: Disabled Multicast RS
[  198.927370][T22233] netlink: 'syz.1.4457': attribute type 10 has an invalid length.
[  198.960450][T22233] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  200.177308][T22305] netlink: 'syz.3.4482': attribute type 3 has an invalid length.
[  200.963972][T22322] __nla_validate_parse: 8 callbacks suppressed
[  200.963986][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4488'.
[  200.979726][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4488'.
[  201.175120][T22337] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  201.654172][T22365] netlink: 'syz.5.4508': attribute type 10 has an invalid length.
[  202.216064][T22391] netlink: 'syz.8.4516': attribute type 3 has an invalid length.
[  202.447021][T22406] netlink: 'syz.3.4521': attribute type 10 has an invalid length.
[  202.575390][T22419] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008
[  202.634107][T22423] lo speed is unknown, defaulting to 1000
[  202.640554][T22423] lo speed is unknown, defaulting to 1000
[  202.961947][T22457] bridge: RTM_NEWNEIGH with invalid ether address
[  202.979146][T22461] netlink: 'syz.8.4536': attribute type 10 has an invalid length.
[  203.767047][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4555'.
[  203.886350][T22504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  203.893636][T22504] IPv6: NLM_F_CREATE should be set when creating new route
[  203.942448][   T29] kauditd_printk_skb: 228 callbacks suppressed
[  203.942461][   T29] audit: type=1326 audit(1755471204.983:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  203.991905][   T29] audit: type=1326 audit(1755471205.025:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  204.015477][   T29] audit: type=1326 audit(1755471205.025:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  204.039026][   T29] audit: type=1326 audit(1755471205.025:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  204.062477][   T29] audit: type=1326 audit(1755471205.025:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  204.086137][   T29] audit: type=1326 audit(1755471205.025:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  204.109761][   T29] audit: type=1326 audit(1755471205.025:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  204.703049][ T4428] unregister_netdevice: waiting for lo to become free. Usage count = 1046
[  204.712079][ T4428] ref_tracker: netdev@ffff88810b750550 has 21/1045 users at
[  204.712079][ T4428]      dst_init+0x97/0x240
[  204.712079][ T4428]      dst_alloc+0xe0/0x100
[  204.712079][ T4428]      rt_dst_clone+0x3b/0x2e0
[  204.712079][ T4428]      NF_HOOK+0x65/0x200
[  204.712079][ T4428]      ip_mc_output+0x1f9/0x340
[  204.712079][ T4428]      ip_local_out+0xdb/0xe0
[  204.712079][ T4428]      iptunnel_xmit+0x354/0x480
[  204.712079][ T4428]      udp_tunnel_xmit_skb+0x1aa/0x1f0
[  204.712079][ T4428]      tipc_udp_xmit+0x327/0x400
[  204.712079][ T4428]      tipc_udp_send_msg+0x17b/0x200
[  204.712079][ T4428]      tipc_bearer_xmit_skb+0x199/0x200
[  204.712079][ T4428]      tipc_disc_timeout+0x3fc/0x430
[  204.712079][ T4428]      call_timer_fn+0x38/0x2c0
[  204.712079][ T4428]      __run_timer_base+0x415/0x610
[  204.712079][ T4428]      run_timer_softirq+0x31/0x70
[  204.712079][ T4428]      handle_softirqs+0xba/0x290
[  204.712079][ T4428] 
[  204.798375][ T4428] ref_tracker: netdev@ffff88810b750550 has 1024/1045 users at
[  204.798375][ T4428]      dst_init+0x97/0x240
[  204.798375][ T4428]      dst_alloc+0xe0/0x100
[  204.798375][ T4428]      rt_dst_clone+0x3b/0x2e0
[  204.798375][ T4428]      NF_HOOK+0x65/0x200
[  204.798375][ T4428]      ip_mc_output+0x139/0x340
[  204.798375][ T4428]      ip_send_skb+0x14e/0x160
[  204.798375][ T4428]      udp_send_skb+0x6e3/0xa40
[  204.798375][ T4428]      udp_sendmsg+0x1050/0x13c0
[  204.798375][ T4428]      inet_sendmsg+0xac/0xd0
[  204.798375][ T4428]      __sock_sendmsg+0x102/0x180
[  204.798375][ T4428]      ____sys_sendmsg+0x345/0x4e0
[  204.798375][ T4428]      ___sys_sendmsg+0x17b/0x1d0
[  204.798375][ T4428]      __sys_sendmmsg+0x178/0x300
[  204.798375][ T4428]      __x64_sys_sendmmsg+0x57/0x70
[  204.798375][ T4428]      x64_sys_call+0x1c4a/0x2ff0
[  204.798375][ T4428]      do_syscall_64+0xd2/0x200
[  204.798375][ T4428] 
[  204.925370][T22550] netlink: '+}[@': attribute type 13 has an invalid length.
[  204.941986][T22543] lo speed is unknown, defaulting to 1000
[  204.962127][T22550] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.971806][T22550] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  204.987750][T22543] lo speed is unknown, defaulting to 1000
[  205.080603][T22568] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4564'.
[  205.125198][T22587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4566'.
[  205.780026][T22610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.787253][T22610] IPv6: NLM_F_CREATE should be set when creating new route
[  205.832830][   T29] audit: type=1400 audit(1755471206.946:7208): avc:  denied  { write } for  pid=22611 comm="syz.5.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  206.630714][T22641] netlink: 'syz.8.4585': attribute type 1 has an invalid length.
[  206.643691][T22643] netlink: 'syz.3.4584': attribute type 1 has an invalid length.
[  206.676065][T22643] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.684396][T22641] bond2: entered promiscuous mode
[  206.689452][T22641] bond2: entered allmulticast mode
[  206.696195][T22641] 8021q: adding VLAN 0 to HW filter on device bond2
[  206.714675][T22643] bond1: (slave veth3): Enslaving as an active interface with a down link
[  206.728551][T22641] bridge7: entered promiscuous mode
[  206.733873][T22641] bridge7: entered allmulticast mode
[  206.744654][T22641] bond2: (slave bridge7): Enslaving as a backup interface with an up link
[  206.755219][T22643] bond0: (slave dummy0): Releasing backup interface
[  206.763980][T22643] bond1: (slave dummy0): making interface the new active one
[  206.783859][T22643] dummy0: entered promiscuous mode
[  206.789174][T22643] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  206.798393][ T4452] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  206.830140][T22731] netlink: 'syz.3.4584': attribute type 10 has an invalid length.
[  206.838134][T22731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4584'.
[  206.871936][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4599'.
[  206.874960][T22731] bond1: (slave dummy0): Releasing active interface
[  206.912213][ T4452] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  207.011630][T22746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4604'.
[  207.036301][T22745] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4595'.
[  207.045276][T22745] netem: unknown loss type 0
[  207.049884][T22745] netem: change failed
[  207.074135][T22755] lo speed is unknown, defaulting to 1000
[  207.085834][T22755] lo speed is unknown, defaulting to 1000
[  207.094310][T22757] netlink: '+}[@': attribute type 13 has an invalid length.
[  207.154493][T22757] 8021q: adding VLAN 0 to HW filter on device $H�
[  207.172414][T22757] 8021q: adding VLAN 0 to HW filter on device team0
[  207.189712][T22757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.255703][T22785] netlink: 'syz.7.4598': attribute type 7 has an invalid length.
[  207.263517][T22785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4598'.
[  207.339154][T22799] netlink: 'syz.5.4605': attribute type 1 has an invalid length.
[  207.380620][T22799] 8021q: adding VLAN 0 to HW filter on device bond4
[  207.414571][T22853] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4609'.
[  207.423830][T22840] bond4: (slave veth1): Enslaving as an active interface with a down link
[  207.462951][T22799] bond4: (slave dummy0): making interface the new active one
[  207.477604][T22799] dummy0: entered promiscuous mode
[  207.482948][T22799] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  207.495194][T22855] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4611'.
[  207.504232][T22855] netem: unknown loss type 0
[  207.508878][T22855] netem: change failed
[  207.515132][T22799] netlink: 'syz.5.4605': attribute type 10 has an invalid length.
[  207.522966][T22799] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4605'.
[  207.546517][T22799] bond4: (slave dummy0): Releasing active interface
[  207.897127][T22873] netlink: 'syz.8.4617': attribute type 7 has an invalid length.
[  207.904944][T22873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4617'.
[  207.956241][T22884] netlink: '+}[@': attribute type 13 has an invalid length.
[  208.006562][T22884] 8021q: adding VLAN 0 to HW filter on device $H�
[  208.014799][T22884] 8021q: adding VLAN 0 to HW filter on device team0
[  208.024837][T22884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.068445][T22890] lo speed is unknown, defaulting to 1000
[  208.074807][T22890] lo speed is unknown, defaulting to 1000
[  208.152987][T22918] siw: device registration error -23
[  208.543082][T22959] netlink: 'syz.3.4633': attribute type 7 has an invalid length.
[  208.550880][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4633'.
[  209.197919][T22972] lo speed is unknown, defaulting to 1000
[  209.205231][T22972] lo speed is unknown, defaulting to 1000
[  209.328988][   T29] audit: type=1326 audit(1755471210.631:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.366535][   T29] audit: type=1326 audit(1755471210.663:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.390062][   T29] audit: type=1326 audit(1755471210.663:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.413550][   T29] audit: type=1326 audit(1755471210.663:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.437233][   T29] audit: type=1326 audit(1755471210.663:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.460746][   T29] audit: type=1326 audit(1755471210.663:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.484310][   T29] audit: type=1326 audit(1755471210.663:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.507931][   T29] audit: type=1326 audit(1755471210.663:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  209.583953][T23029] siw: device registration error -23
[  209.596735][T23030] bond2: entered promiscuous mode
[  209.601836][T23030] bond2: entered allmulticast mode
[  209.612366][T23030] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.625992][T23030] bridge5: entered promiscuous mode
[  209.631437][T23030] bridge5: entered allmulticast mode
[  209.637766][T23030] bond2: (slave bridge5): Enslaving as a backup interface with an up link
[  209.702978][ T4429] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  209.788201][T23092] 8021q: adding VLAN 0 to HW filter on device bond4
[  209.811339][T23092] bond4: (slave veth1): Enslaving as an active interface with a down link
[  209.820538][ T4429] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  209.839740][T23092] bond4: (slave dummy0): making interface the new active one
[  209.848688][T23092] dummy0: entered promiscuous mode
[  209.853896][T23092] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  209.868664][T23092] bond4: (slave dummy0): Releasing active interface
[  209.976103][   T29] audit: type=1326 audit(1755471211.314:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  210.026147][   T29] audit: type=1326 audit(1755471211.345:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23162 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  210.180367][T23190] bridge: RTM_NEWNEIGH with invalid ether address
[  211.130991][T23328] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.194087][T23364] bond3: (slave gretap1): making interface the new active one
[  211.221210][T23364] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  211.249139][T23328] vlan0: entered allmulticast mode
[  211.254281][T23328] bond3: entered allmulticast mode
[  211.259453][T23328] gretap1: entered allmulticast mode
[  211.305702][T23328] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  211.651899][T23419] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  212.136085][T23465] validate_nla: 4 callbacks suppressed
[  212.136100][T23465] netlink: 'syz.5.4757': attribute type 10 has an invalid length.
[  212.170078][T23465] dummy0: left promiscuous mode
[  212.185107][T23470] netlink: 'syz.5.4757': attribute type 10 has an invalid length.
[  212.312973][T23479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23479 comm=syz.5.4762
[  212.644138][T23523] netlink: 'syz.3.4781': attribute type 1 has an invalid length.
[  212.671072][T23523] 8021q: adding VLAN 0 to HW filter on device bond3
[  212.679777][T23499] lo speed is unknown, defaulting to 1000
[  212.687313][T23499] lo speed is unknown, defaulting to 1000
[  212.722940][T23523] bond3: (slave gretap1): making interface the new active one
[  212.731389][T23523] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  212.799942][T23523] vlan0: entered allmulticast mode
[  212.805074][T23523] bond3: entered allmulticast mode
[  212.810269][T23523] gretap1: entered allmulticast mode
[  212.832598][T23523] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  213.078127][T23614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23614 comm=syz.3.4793
[  213.135947][T23620] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  213.162165][T23624] wireguard0: entered promiscuous mode
[  213.167621][T23624] wireguard0: entered allmulticast mode
[  213.215475][T23634] bond4: entered promiscuous mode
[  213.220540][T23634] bond4: entered allmulticast mode
[  213.228122][T23634] 8021q: adding VLAN 0 to HW filter on device bond4
[  213.240606][T23634] bond4 (unregistering): Released all slaves
[  213.276688][T23706] __nla_validate_parse: 4 callbacks suppressed
[  213.276705][T23706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4790'.
[  213.387052][T23727] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4799'.
[  213.463528][T23734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23734 comm=syz.1.4806
[  213.491257][T23740] netlink: 'syz.5.4809': attribute type 1 has an invalid length.
[  213.534826][T23740] 8021q: adding VLAN 0 to HW filter on device bond5
[  213.547992][T23783] bond5: (slave gretap0): making interface the new active one
[  213.556036][T23783] bond5: (slave gretap0): Enslaving as an active interface with an up link
[  213.567815][T23746] wireguard1: entered promiscuous mode
[  213.573322][T23746] wireguard1: entered allmulticast mode
[  213.587894][T23724] lo speed is unknown, defaulting to 1000
[  213.588210][T23782] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4812'.
[  213.602923][T23724] lo speed is unknown, defaulting to 1000
[  213.627958][T23789] bond5: entered promiscuous mode
[  213.633078][T23789] bond5: entered allmulticast mode
[  213.651518][T23789] 8021q: adding VLAN 0 to HW filter on device bond5
[  213.662678][T23789] bond5 (unregistering): Released all slaves
[  213.681596][T23740] vlan0: entered allmulticast mode
[  213.686791][T23740] bond5: entered allmulticast mode
[  213.691915][T23740] gretap0: entered allmulticast mode
[  213.698936][T23740] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  214.044984][T23911] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4818'.
[  214.145330][T23919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4827'.
[  214.154313][T23919] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4827'.
[  214.174039][T23919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4827'.
[  214.185628][T23919] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4827'.
[  214.194746][T23919] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4827'.
[  214.237917][T23925] wireguard1: entered promiscuous mode
[  214.243446][T23925] wireguard1: entered allmulticast mode
[  214.256999][T23931] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4829'.
[  214.270739][T23932] ip6gre3: entered allmulticast mode
[  214.302072][T23938] bond6: entered promiscuous mode
[  214.307159][T23938] bond6: entered allmulticast mode
[  214.314490][T23938] 8021q: adding VLAN 0 to HW filter on device bond6
[  214.328874][T23938] bond6 (unregistering): Released all slaves
[  214.493169][T24009] lo speed is unknown, defaulting to 1000
[  214.505779][T24009] lo speed is unknown, defaulting to 1000
[  214.520100][   T29] kauditd_printk_skb: 253 callbacks suppressed
[  214.520112][   T29] audit: type=1326 audit(1755471216.080:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.564739][   T29] audit: type=1326 audit(1755471216.109:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.588302][   T29] audit: type=1326 audit(1755471216.109:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.612133][   T29] audit: type=1326 audit(1755471216.109:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.635691][   T29] audit: type=1326 audit(1755471216.109:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.659206][   T29] audit: type=1326 audit(1755471216.109:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.682884][   T29] audit: type=1326 audit(1755471216.109:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.706429][   T29] audit: type=1326 audit(1755471216.109:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.730041][   T29] audit: type=1326 audit(1755471216.109:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  214.753519][   T29] audit: type=1326 audit(1755471216.109:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24022 comm="syz.7.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  215.086682][T24079] wireguard0: entered promiscuous mode
[  215.092187][T24079] wireguard0: entered allmulticast mode
[  215.163838][T24088] bond4: entered promiscuous mode
[  215.168880][T24088] bond4: entered allmulticast mode
[  215.174298][T24088] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.184964][T24088] bond4 (unregistering): Released all slaves
[  215.389676][T24162] lo speed is unknown, defaulting to 1000
[  215.395891][T24162] lo speed is unknown, defaulting to 1000
[  215.766322][T24218] lo speed is unknown, defaulting to 1000
[  215.773285][T24218] lo speed is unknown, defaulting to 1000
[  215.863722][T24258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  215.912385][T24268] ip6gre1: entered allmulticast mode
[  215.933700][T24272] netlink: 'syz.1.4869': attribute type 1 has an invalid length.
[  215.957964][T24272] 8021q: adding VLAN 0 to HW filter on device bond5
[  215.978858][T24272] bond5: (slave gretap1): making interface the new active one
[  215.989851][T24272] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  216.015994][T24309] lo speed is unknown, defaulting to 1000
[  216.024875][T24315] wireguard0: entered promiscuous mode
[  216.030507][T24315] wireguard0: entered allmulticast mode
[  216.042242][T24272] vlan0: entered allmulticast mode
[  216.047385][T24272] bond5: entered allmulticast mode
[  216.052575][T24272] gretap1: entered allmulticast mode
[  216.058521][T24272] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  216.085115][T24309] lo speed is unknown, defaulting to 1000
[  216.101995][T24324] bond1: entered promiscuous mode
[  216.107079][T24324] bond1: entered allmulticast mode
[  216.112515][T24324] 8021q: adding VLAN 0 to HW filter on device bond1
[  216.122351][T24324] bond1 (unregistering): Released all slaves
[  216.377323][T24432] lo speed is unknown, defaulting to 1000
[  216.383570][T24432] lo speed is unknown, defaulting to 1000
[  216.766971][T24487] wireguard0: entered promiscuous mode
[  216.772643][T24487] wireguard0: entered allmulticast mode
[  216.826290][T24496] bond1: entered promiscuous mode
[  216.831565][T24496] bond1: entered allmulticast mode
[  216.849482][T24496] 8021q: adding VLAN 0 to HW filter on device bond1
[  216.869793][T24496] bond1 (unregistering): Released all slaves
[  217.182914][T24582] lo speed is unknown, defaulting to 1000
[  217.199080][T24582] lo speed is unknown, defaulting to 1000
[  217.408690][T24614] bridge0: port 1(veth1_to_hsr) entered blocking state
[  217.415620][T24614] bridge0: port 1(veth1_to_hsr) entered disabled state
[  217.422643][T24614] veth1_to_hsr: entered allmulticast mode
[  217.431326][T24614] veth1_to_hsr: entered promiscuous mode
[  217.442839][T24618] wireguard0: entered promiscuous mode
[  217.448356][T24618] wireguard0: entered allmulticast mode
[  217.458492][T24614] veth1_to_hsr (unregistering): left allmulticast mode
[  217.465387][T24614] veth1_to_hsr (unregistering): left promiscuous mode
[  217.472227][T24614] bridge0: port 1(veth1_to_hsr) entered disabled state
[  217.495108][T24626] bond4: entered promiscuous mode
[  217.500148][T24626] bond4: entered allmulticast mode
[  217.511749][T24626] 8021q: adding VLAN 0 to HW filter on device bond4
[  217.522066][T24626] bond4 (unregistering): Released all slaves
[  218.094685][T24724] lo speed is unknown, defaulting to 1000
[  218.101990][T24724] lo speed is unknown, defaulting to 1000
[  218.181724][T24750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.188975][T24750] IPv6: NLM_F_CREATE should be set when creating new route
[  219.033810][T24796] wireguard1: entered promiscuous mode
[  219.039302][T24796] wireguard1: entered allmulticast mode
[  219.109189][T24802] bond6: entered promiscuous mode
[  219.114230][T24802] bond6: entered allmulticast mode
[  219.167358][T24802] 8021q: adding VLAN 0 to HW filter on device bond6
[  219.195117][T24802] bond6 (unregistering): Released all slaves
[  219.388276][T24882] __nla_validate_parse: 3 callbacks suppressed
[  219.388293][T24882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'.
[  219.492051][T24893] netlink: 'syz.7.4943': attribute type 1 has an invalid length.
[  219.524154][T24893] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.555831][T24933] vlan0: entered allmulticast mode
[  219.563919][T24933] dummy0: entered allmulticast mode
[  219.597846][T24934] bond1: (slave gretap0): making interface the new active one
[  219.620627][T24934] bond1: (slave gretap0): Enslaving as an active interface with an up link
[  219.633359][T24893] vlan0: entered allmulticast mode
[  219.638506][T24893] bond1: entered allmulticast mode
[  219.643631][T24893] gretap0: entered allmulticast mode
[  219.663595][T24893] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  220.095665][T24961] bridge0: port 1(veth1_to_hsr) entered blocking state
[  220.102586][T24961] bridge0: port 1(veth1_to_hsr) entered disabled state
[  220.119907][T24961] veth1_to_hsr: entered allmulticast mode
[  220.127069][T24961] veth1_to_hsr: entered promiscuous mode
[  220.137400][T24965] 9pnet: p9_errstr2errno: server reported unknown error 
[  220.156503][T24961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4954'.
[  220.178530][T24961] veth1_to_hsr (unregistering): left allmulticast mode
[  220.185403][T24961] veth1_to_hsr (unregistering): left promiscuous mode
[  220.192261][T24961] bridge0: port 1(veth1_to_hsr) entered disabled state
[  220.203225][T24961] hsr_slave_1 (unregistering): left promiscuous mode
[  220.572054][T25006] netlink: 'syz.3.4971': attribute type 15 has an invalid length.
[  220.579990][T25006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4971'.
[  220.618745][T25011] 9pnet: p9_errstr2errno: server reported unknown error 
[  221.046060][T25047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4987'.
[  221.421126][T25059] 9pnet: p9_errstr2errno: server reported unknown error 
[  221.497616][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  221.497629][   T29] audit: type=1400 audit(1755471222.516:7504): avc:  denied  { read } for  pid=25064 comm="syz.7.4994" path="socket:[54030]" dev="sockfs" ino=54030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  221.674510][T25088] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.5000'.
[  221.683745][T25088] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5000'.
[  221.710857][T25091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5003'.
[  221.779229][ T4452] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.802049][ T4452] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.818964][ T4452] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.836632][ T4452] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.930663][T25098] netlink: 'syz.1.5004': attribute type 15 has an invalid length.
[  221.938546][T25098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5004'.
[  222.211378][   T29] audit: type=1400 audit(1755471223.180:7505): avc:  denied  { ioctl } for  pid=25113 comm="syz.3.5011" path="socket:[54102]" dev="sockfs" ino=54102 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  222.275603][T25117] lo speed is unknown, defaulting to 1000
[  222.281698][T25117] lo speed is unknown, defaulting to 1000
[  222.528654][T25145] bridge0: port 1(veth1_to_hsr) entered blocking state
[  222.535588][T25145] bridge0: port 1(veth1_to_hsr) entered disabled state
[  222.542873][T25145] veth1_to_hsr: entered allmulticast mode
[  222.549236][T25145] veth1_to_hsr: entered promiscuous mode
[  222.559567][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5014'.
[  222.571252][T25145] veth1_to_hsr (unregistering): left allmulticast mode
[  222.578237][T25145] veth1_to_hsr (unregistering): left promiscuous mode
[  222.585070][T25145] bridge0: port 1(veth1_to_hsr) entered disabled state
[  222.599720][T25145] hsr_slave_1 (unregistering): left promiscuous mode
[  222.645164][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5017'.
[  222.664094][ T4429] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.673618][ T4429] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.682024][ T4429] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.690304][ T4429] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  222.712695][T25164] netlink: 'syz.7.5018': attribute type 15 has an invalid length.
[  222.889790][   T29] audit: type=1326 audit(1755471223.808:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.8.5022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f069224ebe9 code=0x0
[  222.941886][T25183] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.076921][T25201] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.159140][T25201] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.225063][T25201] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.292740][   T29] audit: type=1326 audit(1755471224.177:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.5.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  223.316312][   T29] audit: type=1326 audit(1755471224.177:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.5.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  223.339853][   T29] audit: type=1326 audit(1755471224.177:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.5.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  223.341589][T25201] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.363347][   T29] audit: type=1326 audit(1755471224.177:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.5.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  223.363376][   T29] audit: type=1326 audit(1755471224.177:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.5.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  223.420136][   T29] audit: type=1326 audit(1755471224.177:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.5.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  223.454757][   T29] audit: type=1326 audit(1755471224.177:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.5.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13897febe9 code=0x7ffc0000
[  223.538064][ T4452] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.585297][ T4452] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.629228][ T4452] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.666266][ T4452] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.100531][T25259] lo speed is unknown, defaulting to 1000
[  224.112684][T25259] lo speed is unknown, defaulting to 1000
[  224.314161][T25301] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.259078][T25319] lo speed is unknown, defaulting to 1000
[  225.267376][T25319] lo speed is unknown, defaulting to 1000
[  225.351310][T25317] Set syz1 is full, maxelem 65536 reached
[  225.360725][T25341] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  225.461477][T25363] __nla_validate_parse: 2 callbacks suppressed
[  225.461493][T25363] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.5069'.
[  225.476963][T25363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5069'.
[  225.488964][T25367] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5072'.
[  225.972106][T10841] IPVS: starting estimator thread 0...
[  226.070564][T25447] IPVS: using max 2880 ests per chain, 144000 per kthread
[  226.326246][T25459] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5104'.
[  226.918534][   T29] kauditd_printk_skb: 50 callbacks suppressed
[  226.918547][   T29] audit: type=1326 audit(1755471227.528:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  226.981514][   T29] audit: type=1326 audit(1755471227.556:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.005050][   T29] audit: type=1326 audit(1755471227.556:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.028570][   T29] audit: type=1326 audit(1755471227.556:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.052071][   T29] audit: type=1326 audit(1755471227.556:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.075626][   T29] audit: type=1326 audit(1755471227.556:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.099175][   T29] audit: type=1326 audit(1755471227.556:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.122747][   T29] audit: type=1326 audit(1755471227.556:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.146319][   T29] audit: type=1326 audit(1755471227.556:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.169777][   T29] audit: type=1326 audit(1755471227.556:7573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25503 comm="syz.3.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  227.457203][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'.
[  227.799592][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5152'.
[  227.915124][T25601] 8021q: adding VLAN 0 to HW filter on device bond4
[  228.046168][T25663] netlink: 'syz.7.5169': attribute type 3 has an invalid length.
[  228.109234][T25672] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5174'.
[  228.127554][T25672] bond1: (slave gretap0): Releasing active interface
[  228.135662][T25672] gretap0: left allmulticast mode
[  228.240192][T25685] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.304114][T25685] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.401032][T25685] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.466003][T25685] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.536458][ T4410] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.546802][ T4410] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.558131][ T4452] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.569721][ T4410] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  228.603410][T25707] lo speed is unknown, defaulting to 1000
[  228.609672][T25707] lo speed is unknown, defaulting to 1000
[  228.821162][T25754] C: renamed from team_slave_0
[  228.827400][T25754] netlink: 'syz.1.5192': attribute type 1 has an invalid length.
[  228.835192][T25754] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5192'.
[  228.844308][T25754] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  228.883836][T25757] netlink: 'syz.1.5193': attribute type 1 has an invalid length.
[  228.902764][T25757] 8021q: adding VLAN 0 to HW filter on device bond6
[  228.928402][T25757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.937697][T25757] bond6: (slave batadv0): making interface the new active one
[  228.946668][T25757] bond6: (slave batadv0): Enslaving as an active interface with an up link
[  228.995202][T25801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5197'.
[  229.062261][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5203'.
[  229.093328][T25823] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  229.229474][T25845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25845 comm=syz.3.5213
[  229.724564][T25829] syz.1.5207 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  229.738895][T25829] CPU: 0 UID: 0 PID: 25829 Comm: syz.1.5207 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) 
[  229.738963][T25829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  229.738977][T25829] Call Trace:
[  229.738983][T25829]  <TASK>
[  229.738989][T25829]  __dump_stack+0x1d/0x30
[  229.739008][T25829]  dump_stack_lvl+0xe8/0x140
[  229.739025][T25829]  dump_stack+0x15/0x1b
[  229.739043][T25829]  dump_header+0x81/0x220
[  229.739082][T25829]  oom_kill_process+0x342/0x400
[  229.739119][T25829]  out_of_memory+0x979/0xb80
[  229.739264][T25829]  try_charge_memcg+0x5e6/0x9e0
[  229.739304][T25829]  obj_cgroup_charge_pages+0xa6/0x150
[  229.739338][T25829]  __memcg_kmem_charge_page+0x9f/0x170
[  229.739382][T25829]  __alloc_frozen_pages_noprof+0x188/0x360
[  229.739419][T25829]  alloc_pages_mpol+0xb3/0x250
[  229.739451][T25829]  alloc_pages_noprof+0x90/0x130
[  229.739523][T25829]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  229.739563][T25829]  __kvmalloc_node_noprof+0x30f/0x4e0
[  229.739644][T25829]  ? ip_set_alloc+0x1f/0x30
[  229.739739][T25829]  ? ip_set_alloc+0x1f/0x30
[  229.739768][T25829]  ? __kmalloc_cache_noprof+0x189/0x320
[  229.739798][T25829]  ip_set_alloc+0x1f/0x30
[  229.739830][T25829]  hash_netiface_create+0x282/0x740
[  229.739979][T25829]  ? __pfx_hash_netiface_create+0x10/0x10
[  229.740009][T25829]  ip_set_create+0x3cc/0x960
[  229.740036][T25829]  ? __nla_parse+0x40/0x60
[  229.740058][T25829]  nfnetlink_rcv_msg+0x4c3/0x590
[  229.740210][T25829]  netlink_rcv_skb+0x123/0x220
[  229.740222][T25829]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  229.740242][T25829]  nfnetlink_rcv+0x16b/0x1690
[  229.740258][T25829]  ? nlmon_xmit+0x4f/0x60
[  229.740388][T25829]  ? consume_skb+0x49/0x150
[  229.740398][T25829]  ? nlmon_xmit+0x4f/0x60
[  229.740411][T25829]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  229.740447][T25829]  ? __dev_queue_xmit+0x1200/0x2000
[  229.740461][T25829]  ? __dev_queue_xmit+0x182/0x2000
[  229.740484][T25829]  ? ref_tracker_free+0x37d/0x3e0
[  229.740510][T25829]  ? __netlink_deliver_tap+0x4dc/0x500
[  229.740563][T25829]  netlink_unicast+0x5bd/0x690
[  229.740582][T25829]  netlink_sendmsg+0x58b/0x6b0
[  229.740595][T25829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.740607][T25829]  __sock_sendmsg+0x142/0x180
[  229.740625][T25829]  ____sys_sendmsg+0x31e/0x4e0
[  229.740639][T25829]  ___sys_sendmsg+0x17b/0x1d0
[  229.740659][T25829]  __x64_sys_sendmsg+0xd4/0x160
[  229.740673][T25829]  x64_sys_call+0x191e/0x2ff0
[  229.740749][T25829]  do_syscall_64+0xd2/0x200
[  229.740809][T25829]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  229.740851][T25829]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  229.740908][T25829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.740921][T25829] RIP: 0033:0x7f1fd3b1ebe9
[  229.740937][T25829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.740947][T25829] RSP: 002b:00007f1fd257f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.740983][T25829] RAX: ffffffffffffffda RBX: 00007f1fd3d45fa0 RCX: 00007f1fd3b1ebe9
[  229.740990][T25829] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006
[  229.740997][T25829] RBP: 00007f1fd3ba1e19 R08: 0000000000000000 R09: 0000000000000000
[  229.741003][T25829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.741010][T25829] R13: 00007f1fd3d46038 R14: 00007f1fd3d45fa0 R15: 00007ffc7b0e3e98
[  229.741020][T25829]  </TASK>
[  229.741027][T25829] memory: usage 307200kB, limit 307200kB, failcnt 1590
[  230.080497][T25829] memory+swap: usage 307220kB, limit 9007199254740988kB, failcnt 0
[  230.088379][T25829] kmem: usage 294812kB, limit 9007199254740988kB, failcnt 0
[  230.095772][T25829] Memory cgroup stats for /syz1:
[  230.100611][T25829] cache 12185600
[  230.109096][T25829] rss 487424
[  230.112355][T25829] shmem 11993088
[  230.115983][T25829] mapped_file 192512
[  230.120018][T25829] dirty 192512
[  230.123402][T25829] writeback 0
[  230.126673][T25829] workingset_refault_anon 4486
[  230.129511][T25896] lo speed is unknown, defaulting to 1000
[  230.131413][T25829] workingset_refault_file 382
[  230.131422][T25829] swap 20480
[  230.131429][T25829] swapcached 0
[  230.138787][T25896] lo speed is unknown, defaulting to 1000
[  230.141949][T25829] pgpgin 374059
[  230.141957][T25829] pgpgout 370962
[  230.141963][T25829] pgfault 314868
[  230.164683][T25829] pgmajfault 596
[  230.168232][T25829] inactive_anon 12480512
[  230.172489][T25829] active_anon 0
[  230.175942][T25829] inactive_file 0
[  230.179668][T25829] active_file 204800
[  230.183553][T25829] unevictable 0
[  230.187013][T25829] hierarchical_memory_limit 314572800
[  230.192408][T25829] hierarchical_memsw_limit 9223372036854771712
[  230.198614][T25829] total_cache 12185600
[  230.202670][T25829] total_rss 487424
[  230.206377][T25829] total_shmem 11993088
[  230.210476][T25829] total_mapped_file 192512
[  230.214880][T25829] total_dirty 192512
[  230.218844][T25829] total_writeback 0
[  230.222672][T25829] total_workingset_refault_anon 4486
[  230.227949][T25829] total_workingset_refault_file 382
[  230.233180][T25829] total_swap 20480
[  230.236886][T25829] total_swapcached 0
[  230.240819][T25829] total_pgpgin 374059
[  230.244803][T25829] total_pgpgout 370962
[  230.248859][T25829] total_pgfault 314868
[  230.252922][T25829] total_pgmajfault 596
[  230.257007][T25829] total_inactive_anon 12480512
[  230.261825][T25829] total_active_anon 0
[  230.265919][T25829] total_inactive_file 0
[  230.270077][T25829] total_active_file 204800
[  230.274644][T25829] total_unevictable 0
[  230.278614][T25829] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5207,pid=25828,uid=0
[  230.293346][T25829] Memory cgroup out of memory: Killed process 25829 (syz.1.5207) total-vm:93764kB, anon-rss:1076kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  230.475651][T25929] syz_tun: entered allmulticast mode
[  230.483955][T25928] syz_tun: left allmulticast mode
[  230.837906][T25959] lo speed is unknown, defaulting to 1000
[  230.844045][T25959] lo speed is unknown, defaulting to 1000
[  231.139990][T25998] __nla_validate_parse: 1 callbacks suppressed
[  231.140005][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5246'.
[  231.265903][T26004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5248'.
[  231.594231][T26010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5251'.
[  231.630318][T26010] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5251'.
[  231.887068][T26020] lo speed is unknown, defaulting to 1000
[  231.911751][T26020] lo speed is unknown, defaulting to 1000
[  232.361912][   T29] kauditd_printk_skb: 286 callbacks suppressed
[  232.361926][   T29] audit: type=1326 audit(1755471232.550:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.413140][T26085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5271'.
[  232.422656][   T29] audit: type=1326 audit(1755471232.587:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.446325][   T29] audit: type=1326 audit(1755471232.587:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.470414][   T29] audit: type=1326 audit(1755471232.587:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.484650][T26085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5271'.
[  232.493882][   T29] audit: type=1326 audit(1755471232.587:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.526908][   T29] audit: type=1326 audit(1755471232.587:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.550822][   T29] audit: type=1326 audit(1755471232.587:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.574309][   T29] audit: type=1326 audit(1755471232.587:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.598268][   T29] audit: type=1326 audit(1755471232.587:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.621870][   T29] audit: type=1326 audit(1755471232.587:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.1.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1fd3b1ebe9 code=0x7ffc0000
[  232.865896][T26112] lo speed is unknown, defaulting to 1000
[  232.876584][T26112] lo speed is unknown, defaulting to 1000
[  232.890897][T26117] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5278'.
[  232.951131][T26117] bond4: (slave veth1): Releasing active interface
[  232.968828][T26117] bond5: (slave gretap0): Releasing active interface
[  232.975975][T26117] gretap0: left allmulticast mode
[  233.143168][T26157] sch_fq: defrate 4294967295 ignored.
[  233.270426][T26181] lo speed is unknown, defaulting to 1000
[  233.276772][T26181] lo speed is unknown, defaulting to 1000
[  233.347518][T26207] netem: change failed
[  233.414855][T10839] IPVS: starting estimator thread 0...
[  233.523678][T26223] IPVS: using max 2832 ests per chain, 141600 per kthread
[  233.706007][T26238] netlink: 'syz.1.5302': attribute type 1 has an invalid length.
[  233.734088][T26238] bond7: entered promiscuous mode
[  233.739120][T26238] bond7: entered allmulticast mode
[  233.753921][T26242] sch_fq: defrate 4294967295 ignored.
[  233.782715][T26238] geneve2: entered allmulticast mode
[  233.790181][T26238] bond7: (slave geneve2): making interface the new active one
[  233.797749][T26238] geneve2: entered promiscuous mode
[  233.803626][T26238] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  233.813839][ T4429] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.818056][T26238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5302'.
[  233.831692][T26238] bond7: left promiscuous mode
[  233.836457][T26238] geneve2: left promiscuous mode
[  233.842136][T26238] bond7: left allmulticast mode
[  233.848606][T26238] 8021q: adding VLAN 0 to HW filter on device bond7
[  233.858088][ T4429] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.877772][ T4429] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.886712][ T4429] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.894925][T26288] netlink: 'syz.7.5306': attribute type 1 has an invalid length.
[  233.902758][T26288] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5306'.
[  233.911769][T26288] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  234.282190][T26330] lo speed is unknown, defaulting to 1000
[  234.299675][T26330] lo speed is unknown, defaulting to 1000
[  234.315780][T26345] netem: change failed
[  234.442274][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5329'.
[  235.143817][T26380] syz.8.5328 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  235.157729][T26380] CPU: 1 UID: 0 PID: 26380 Comm: syz.8.5328 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) 
[  235.157747][T26380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  235.157764][T26380] Call Trace:
[  235.157768][T26380]  <TASK>
[  235.157773][T26380]  __dump_stack+0x1d/0x30
[  235.157787][T26380]  dump_stack_lvl+0xe8/0x140
[  235.157798][T26380]  dump_stack+0x15/0x1b
[  235.157807][T26380]  dump_header+0x81/0x220
[  235.157825][T26380]  oom_kill_process+0x342/0x400
[  235.157870][T26380]  out_of_memory+0x979/0xb80
[  235.157958][T26380]  try_charge_memcg+0x5e6/0x9e0
[  235.157996][T26380]  obj_cgroup_charge_pages+0xa6/0x150
[  235.158014][T26380]  __memcg_kmem_charge_page+0x9f/0x170
[  235.158082][T26380]  __alloc_frozen_pages_noprof+0x188/0x360
[  235.158102][T26380]  alloc_pages_mpol+0xb3/0x250
[  235.158120][T26380]  alloc_pages_noprof+0x90/0x130
[  235.158200][T26380]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  235.158236][T26380]  __kvmalloc_node_noprof+0x30f/0x4e0
[  235.158310][T26380]  ? ip_set_alloc+0x1f/0x30
[  235.158327][T26380]  ? ip_set_alloc+0x1f/0x30
[  235.158343][T26380]  ? __kmalloc_cache_noprof+0x189/0x320
[  235.158359][T26380]  ip_set_alloc+0x1f/0x30
[  235.158399][T26380]  hash_netiface_create+0x282/0x740
[  235.158418][T26380]  ? __pfx_hash_netiface_create+0x10/0x10
[  235.158507][T26380]  ip_set_create+0x3cc/0x960
[  235.158523][T26380]  ? __nla_parse+0x40/0x60
[  235.158644][T26380]  nfnetlink_rcv_msg+0x4c3/0x590
[  235.158672][T26380]  netlink_rcv_skb+0x123/0x220
[  235.158682][T26380]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  235.158718][T26380]  nfnetlink_rcv+0x16b/0x1690
[  235.158735][T26380]  ? nlmon_xmit+0x4f/0x60
[  235.158763][T26380]  ? consume_skb+0x49/0x150
[  235.158802][T26380]  ? nlmon_xmit+0x4f/0x60
[  235.158826][T26380]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  235.158841][T26380]  ? __dev_queue_xmit+0x1200/0x2000
[  235.158979][T26380]  ? __dev_queue_xmit+0x182/0x2000
[  235.158991][T26380]  ? ref_tracker_free+0x37d/0x3e0
[  235.159006][T26380]  ? __netlink_deliver_tap+0x4dc/0x500
[  235.159020][T26380]  netlink_unicast+0x5bd/0x690
[  235.159039][T26380]  netlink_sendmsg+0x58b/0x6b0
[  235.159056][T26380]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.159068][T26380]  __sock_sendmsg+0x142/0x180
[  235.159084][T26380]  ____sys_sendmsg+0x31e/0x4e0
[  235.159132][T26380]  ___sys_sendmsg+0x17b/0x1d0
[  235.159154][T26380]  __x64_sys_sendmsg+0xd4/0x160
[  235.159218][T26380]  x64_sys_call+0x191e/0x2ff0
[  235.159235][T26380]  do_syscall_64+0xd2/0x200
[  235.159338][T26380]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  235.159425][T26380]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  235.159448][T26380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.159472][T26380] RIP: 0033:0x7f069224ebe9
[  235.159489][T26380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.159509][T26380] RSP: 002b:00007f0690caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.159531][T26380] RAX: ffffffffffffffda RBX: 00007f0692475fa0 RCX: 00007f069224ebe9
[  235.159591][T26380] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005
[  235.159605][T26380] RBP: 00007f06922d1e19 R08: 0000000000000000 R09: 0000000000000000
[  235.159616][T26380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.159626][T26380] R13: 00007f0692476038 R14: 00007f0692475fa0 R15: 00007ffd7a09a748
[  235.159667][T26380]  </TASK>
[  235.490493][T26380] memory: usage 307200kB, limit 307200kB, failcnt 181
[  235.497345][T26380] memory+swap: usage 321772kB, limit 9007199254740988kB, failcnt 0
[  235.505224][T26380] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  235.512522][T26380] Memory cgroup stats for /syz8:
[  235.513027][T26380] cache 0
[  235.521459][T26380] rss 0
[  235.524213][T26380] shmem 0
[  235.527134][T26380] mapped_file 0
[  235.530608][T26380] dirty 0
[  235.533547][T26380] writeback 0
[  235.536824][T26380] workingset_refault_anon 5490
[  235.541607][T26380] workingset_refault_file 1
[  235.546096][T26380] swap 14921728
[  235.550126][T26380] swapcached 12288
[  235.553829][T26380] pgpgin 194316
[  235.557278][T26380] pgpgout 194311
[  235.560856][T26380] pgfault 205418
[  235.564443][T26380] pgmajfault 695
[  235.567975][T26380] inactive_anon 12288
[  235.571969][T26380] active_anon 0
[  235.575496][T26380] inactive_file 8192
[  235.579380][T26380] active_file 0
[  235.583451][T26380] unevictable 0
[  235.586900][T26380] hierarchical_memory_limit 314572800
[  235.592272][T26380] hierarchical_memsw_limit 9223372036854771712
[  235.595489][T26431] lo speed is unknown, defaulting to 1000
[  235.598521][T26380] total_cache 0
[  235.607629][T26380] total_rss 0
[  235.609133][T26431] lo speed is unknown, defaulting to 1000
[  235.610897][T26380] total_shmem 0
[  235.610906][T26380] total_mapped_file 0
[  235.624523][T26380] total_dirty 0
[  235.628058][T26380] total_writeback 0
[  235.631909][T26380] total_workingset_refault_anon 5490
[  235.637257][T26380] total_workingset_refault_file 1
[  235.642270][T26380] total_swap 14921728
[  235.646241][T26380] total_swapcached 12288
[  235.651034][T26380] total_pgpgin 194316
[  235.654998][T26380] total_pgpgout 194311
[  235.659077][T26380] total_pgfault 205418
[  235.663131][T26380] total_pgmajfault 695
[  235.667186][T26380] total_inactive_anon 12288
[  235.671702][T26380] total_active_anon 0
[  235.675668][T26380] total_inactive_file 8192
[  235.680715][T26380] total_active_file 0
[  235.684752][T26380] total_unevictable 0
[  235.688716][T26380] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3676,pid=19577,uid=0
[  235.703491][T26380] Memory cgroup out of memory: Killed process 19577 (syz.8.3676) total-vm:93632kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000
[  235.732555][T12602] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  235.743553][T12602] CPU: 0 UID: 0 PID: 12602 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) 
[  235.743678][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  235.743696][T12602] Call Trace:
[  235.743700][T12602]  <TASK>
[  235.743706][T12602]  __dump_stack+0x1d/0x30
[  235.743730][T12602]  dump_stack_lvl+0xe8/0x140
[  235.743750][T12602]  dump_stack+0x15/0x1b
[  235.743804][T12602]  dump_header+0x81/0x220
[  235.743837][T12602]  oom_kill_process+0x342/0x400
[  235.743890][T12602]  out_of_memory+0x979/0xb80
[  235.743925][T12602]  try_charge_memcg+0x5e6/0x9e0
[  235.743957][T12602]  charge_memcg+0x51/0xc0
[  235.743976][T12602]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  235.744044][T12602]  __read_swap_cache_async+0x1df/0x350
[  235.744078][T12602]  swap_cluster_readahead+0x277/0x3e0
[  235.744114][T12602]  swapin_readahead+0xde/0x6f0
[  235.744208][T12602]  ? __filemap_get_folio+0x4f7/0x6b0
[  235.744285][T12602]  ? bpf_perf_event_read+0x129/0x150
[  235.744321][T12602]  ? swap_cache_get_folio+0x77/0x200
[  235.744354][T12602]  do_swap_page+0x301/0x2430
[  235.744417][T12602]  ? _raw_spin_unlock+0x14/0x50
[  235.744451][T12602]  ? finish_task_switch+0xb6/0x2b0
[  235.744517][T12602]  ? __pfx_default_wake_function+0x10/0x10
[  235.744581][T12602]  handle_mm_fault+0x9a5/0x2c20
[  235.744652][T12602]  do_user_addr_fault+0x636/0x1090
[  235.744683][T12602]  ? fpregs_restore_userregs+0xe2/0x1d0
[  235.744713][T12602]  ? switch_fpu_return+0xe/0x20
[  235.744794][T12602]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  235.744823][T12602]  exc_page_fault+0x62/0xa0
[  235.744891][T12602]  asm_exc_page_fault+0x26/0x30
[  235.744909][T12602] RIP: 0033:0x7f0692281465
[  235.744922][T12602] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  235.744937][T12602] RSP: 002b:00007ffd7a09aa88 EFLAGS: 00010246
[  235.744949][T12602] RAX: 0000000000000000 RBX: 0000000000000568 RCX: 00007f0692281463
[  235.744960][T12602] RDX: 00007ffd7a09aaa0 RSI: 0000000000000000 RDI: 0000000000000000
[  235.744983][T12602] RBP: 00007ffd7a09ab0c R08: 000000001fef09a7 R09: 0000000000000000
[  235.744995][T12602] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  235.745007][T12602] R13: 00000000000927c0 R14: 000000000003a58c R15: 00007ffd7a09ab60
[  235.745024][T12602]  </TASK>
[  235.976048][T12602] memory: usage 307200kB, limit 307200kB, failcnt 235
[  235.982889][T12602] memory+swap: usage 321624kB, limit 9007199254740988kB, failcnt 0
[  235.990767][T12602] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  235.998094][T12602] Memory cgroup stats for /syz8:
[  236.031935][T12602] cache 0
[  236.039943][T12602] rss 4096
[  236.042955][T12602] shmem 0
[  236.045882][T12602] mapped_file 0
[  236.049417][T12602] dirty 0
[  236.052343][T12602] writeback 0
[  236.055660][T12602] workingset_refault_anon 5493
[  236.060434][T12602] workingset_refault_file 1
[  236.064926][T12602] swap 14770176
[  236.068370][T12602] swapcached 4096
[  236.072076][T12602] pgpgin 194319
[  236.075580][T12602] pgpgout 194316
[  236.079168][T12602] pgfault 205419
[  236.082739][T12602] pgmajfault 696
[  236.086263][T12602] inactive_anon 0
[  236.089903][T12602] active_anon 0
[  236.093360][T12602] inactive_file 0
[  236.096976][T12602] active_file 8192
[  236.100706][T12602] unevictable 0
[  236.104169][T12602] hierarchical_memory_limit 314572800
[  236.109530][T12602] hierarchical_memsw_limit 9223372036854771712
[  236.115719][T12602] total_cache 0
[  236.119167][T12602] total_rss 4096
[  236.122701][T12602] total_shmem 0
[  236.126183][T12602] total_mapped_file 0
[  236.130148][T12602] total_dirty 0
[  236.133586][T12602] total_writeback 0
[  236.137511][T12602] total_workingset_refault_anon 5493
[  236.142862][T12602] total_workingset_refault_file 1
[  236.147906][T12602] total_swap 14770176
[  236.151870][T12602] total_swapcached 4096
[  236.156069][T12602] total_pgpgin 194319
[  236.160037][T12602] total_pgpgout 194316
[  236.164089][T12602] total_pgfault 205419
[  236.168159][T12602] total_pgmajfault 696
[  236.172214][T12602] total_inactive_anon 0
[  236.176354][T12602] total_active_anon 0
[  236.180333][T12602] total_inactive_file 0
[  236.184472][T12602] total_active_file 8192
[  236.188719][T12602] total_unevictable 0
[  236.192687][T12602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5328,pid=26379,uid=0
[  236.207474][T12602] Memory cgroup out of memory: Killed process 26379 (syz.8.5328) total-vm:93764kB, anon-rss:856kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  236.208511][T26456] lo speed is unknown, defaulting to 1000
[  236.259080][T26456] lo speed is unknown, defaulting to 1000
[  236.352469][T26475] bond4: (slave veth1): Releasing active interface
[  236.369770][T26475] bond5: (slave gretap1): Releasing active interface
[  236.383399][T26475] gretap1: left allmulticast mode
[  236.404230][T26475] bond6: (slave batadv0): Releasing active interface
[  236.425050][T26475] bond7: (slave geneve2): Releasing active interface
[  236.499469][ T4410] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.525556][ T4410] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.577966][ T4410] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.617269][ T4410] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.766865][T26380] syz.8.5328 (26380) used greatest stack depth: 6224 bytes left
[  236.795788][T26400] Set syz1 is full, maxelem 65536 reached
[  236.999770][T26510] lo speed is unknown, defaulting to 1000
[  237.019743][T26510] lo speed is unknown, defaulting to 1000
[  237.404241][T26555] __nla_validate_parse: 5 callbacks suppressed
[  237.404255][T26555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5370'.
[  237.419375][T26555] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5370'.
[  237.487304][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5366'.
[  237.496317][T26565] IPVS: Error joining to the multicast group
[  237.597572][T26577] bond8: entered promiscuous mode
[  237.602621][T26577] bond8: entered allmulticast mode
[  237.608043][T26577] 8021q: adding VLAN 0 to HW filter on device bond8
[  237.626027][T26577] bond8 (unregistering): Released all slaves
[  237.754007][T26669] macsec0: entered allmulticast mode
[  237.773921][T26670] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5391'.
[  237.822043][T26675] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  237.830039][T26677] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5394'.
[  237.864541][T26677] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5394'.
[  237.933729][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5400'.
[  238.088465][T26706] ref_ctr increment failed for inode: 0x184d offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810496c500
[  238.109527][T26705] uprobe: syz.1.5407:26705 failed to unregister, leaking uprobe
[  238.251628][   T29] kauditd_printk_skb: 141 callbacks suppressed
[  238.251672][   T29] audit: type=1326 audit(1755471237.987:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26720 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  238.281385][   T29] audit: type=1326 audit(1755471237.987:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26720 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  238.304926][   T29] audit: type=1326 audit(1755471237.987:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26720 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66464ebe9 code=0x7ffc0000
[  238.714860][   T29] audit: type=1326 audit(1755471238.421:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26756 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  238.738404][   T29] audit: type=1326 audit(1755471238.421:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26756 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  238.774613][   T29] audit: type=1326 audit(1755471238.449:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26756 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  238.798180][   T29] audit: type=1326 audit(1755471238.449:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26756 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  238.821708][   T29] audit: type=1326 audit(1755471238.449:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26756 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  238.845197][   T29] audit: type=1326 audit(1755471238.449:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26756 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  238.868751][   T29] audit: type=1326 audit(1755471238.449:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26756 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4198d4ebe9 code=0x7ffc0000
[  239.730930][T26799] ==================================================================
[  239.739030][T26799] BUG: KCSAN: data-race in atime_needs_update / touch_atime
[  239.746332][T26799] 
[  239.748641][T26799] write to 0xffff88812c2b40f0 of 4 bytes by task 26795 on cpu 1:
[  239.756344][T26799]  touch_atime+0x1e8/0x340
[  239.760761][T26799]  shmem_file_read_iter+0x477/0x540
[  239.765952][T26799]  copy_splice_read+0x442/0x660
[  239.770798][T26799]  splice_direct_to_actor+0x290/0x680
[  239.776164][T26799]  do_splice_direct+0xda/0x150
[  239.780919][T26799]  do_sendfile+0x380/0x650
[  239.785333][T26799]  __x64_sys_sendfile64+0x105/0x150
[  239.790534][T26799]  x64_sys_call+0x2bb0/0x2ff0
[  239.795203][T26799]  do_syscall_64+0xd2/0x200
[  239.799701][T26799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.805580][T26799] 
[  239.807893][T26799] read to 0xffff88812c2b40f0 of 4 bytes by task 26799 on cpu 0:
[  239.815509][T26799]  atime_needs_update+0x25f/0x3e0
[  239.820536][T26799]  touch_atime+0x4a/0x340
[  239.824860][T26799]  shmem_file_read_iter+0x477/0x540
[  239.830050][T26799]  copy_splice_read+0x442/0x660
[  239.834911][T26799]  splice_direct_to_actor+0x290/0x680
[  239.840278][T26799]  do_splice_direct+0xda/0x150
[  239.845038][T26799]  do_sendfile+0x380/0x650
[  239.849456][T26799]  __x64_sys_sendfile64+0x105/0x150
[  239.854658][T26799]  x64_sys_call+0x2bb0/0x2ff0
[  239.859331][T26799]  do_syscall_64+0xd2/0x200
[  239.863837][T26799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.869726][T26799] 
[  239.872038][T26799] value changed: 0x151539d3 -> 0x15a2151b
[  239.877738][T26799] 
[  239.880093][T26799] Reported by Kernel Concurrency Sanitizer on:
[  239.886231][T26799] CPU: 0 UID: 0 PID: 26799 Comm: syz.8.5444 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) 
[  239.898718][T26799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  239.908761][T26799] ==================================================================