last executing test programs:

3.056538909s ago: executing program 1 (id=3895):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0)

2.70624168s ago: executing program 1 (id=3897):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

2.36464997s ago: executing program 1 (id=3900):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0)

2.292448747s ago: executing program 1 (id=3902):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9})
socket$key(0xf, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000380), &(0x7f0000000880)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x239f, &(0x7f0000000380)=<r6=>0x0)
r7 = eventfd2(0x5, 0x1)
io_submit(r6, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r7, 0x0, 0x300, 0x800002, 0x0, 0x0, r7}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r7, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r7}])
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x18b743, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x45)
ioctl$SG_IO(r9, 0x2285, 0x0)
writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)

1.940327608s ago: executing program 1 (id=3904):
rename(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

1.528471864s ago: executing program 1 (id=3906):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x21000000000000ff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x2a9c2, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
fcntl$setown(0xffffffffffffffff, 0x8, r1)
tkill(r1, 0x13)

1.526597534s ago: executing program 4 (id=3908):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$lock(r5, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00'])
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0xe0, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xce, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
sendfile(r11, r11, 0x0, 0x2)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r12, r4}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x0, 0x3, 0x401, 0xe4f, 0x7ff})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.278288287s ago: executing program 4 (id=3915):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)

1.103263073s ago: executing program 3 (id=3920):
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sync()

824.903017ms ago: executing program 2 (id=3923):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")

769.253552ms ago: executing program 2 (id=3924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004})

733.348455ms ago: executing program 2 (id=3925):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
setresuid(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000180)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)

699.489008ms ago: executing program 2 (id=3926):
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="5d70000000000000b703000000000000850000001b000000b7000000000000009500000000000000e9aba040f3ece7025dc62d488a92680f9a926f09e6906951eec4e324fb03c539ece642665a3787c0e329fa9850089735d9a7727f24c4c4f447e67626b76d13a5e1f26ba03cc890ac692e1846cfcb77f27ba0344356c65c422f624d77f568f6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)

618.776275ms ago: executing program 3 (id=3927):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x38)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000180)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)

582.940688ms ago: executing program 3 (id=3928):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x450)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
setns(0xffffffffffffffff, 0x8000000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
clock_gettime(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
umount2(0x0, 0x0)
socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x144, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma'])

520.122944ms ago: executing program 2 (id=3930):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4811)

499.021756ms ago: executing program 2 (id=3931):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xd012})
cachestat(r0, &(0x7f0000000200)={0x10011, 0x5}, 0x0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x9, 0x2, 0x5}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b6030000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r4], 0x0)

381.947046ms ago: executing program 4 (id=3933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
setresuid(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000180)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)

362.059088ms ago: executing program 4 (id=3934):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x5eb, &(0x7f0000000e00)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x5b5, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x1d, "d3bc95a8e49a433410e08595b299c75b2c4574ad982971d0e7de0c3031047c4f9b0d5a91e6d135241fd79d86e3571b6a8814ada5e803473b321ed020586eecbc25a38c94fe0d685341f9c6a7a73722a0b392cb7fb5a316cb8c37ddfbea3414aa206c0d100dd427f9b04d118211ec1bbf82f95787e66cf76b381293f0b30892f57d8fc6050c448a240c5d9549b718426f0c7c066305d51037b76096aec78de70be746c819235ba50884d2dd4fe9a7e521564fe6171a1abc5ec29126942dd2beba75eb64c6959c091e7e4f4ce6f1060c83a5da5bb554c4af752a415a97bd52ca4b1e3101150db7a6bea4d7"}, {0x72d105ea678a14b8, 0x10, "0d031a2f4d7d693ba429348fd8d2d7fbf85e2760f7192a9fc3471d3fc240d7b571099e6466bc1e43b3ba840ab77fb31c78404f81e0472f3a141360e1d08be9dc318ba8639d049622bbdcad8058b1fddd28c45792d4bfa12af56caac91d587fc792a9ebd1c2199e54b9c5953a14d93c3281be60de5b88c1e71745b51cc946ca521a954a"}, {0x1f, 0x12, "758ed5324b0d79650c813aabfb982507bf4265d30f39d3b8312262583fff32a934f1bcceea1ffa2d8022536f61ec67c3ab7f49b9845ba3489e054fd5b821b206b5d4acbe8247dda62a4d17cfd00c7ad1d3dc883d5f1860d152b98aadf2e81bfe6de1b590b10bda322f7d9745b891facfd1fa1e27e922295403cc464f9534273fc7a05106a3e2e8b89f79d5e0ccc25dcb"}, {0x1, 0xc, "9cf5ffe1ecbfa7d128f25811e92cbfb56264b7175e02d4dd94771b0483b0584d0be4f603b86cf1a9c0b30ed348dcfaf9c7e4b38e3c788b9152ae725de860c7c49c4f6fcbe0c79172280980df011173656a9b4f3e93b65d5cd2659a4b2becad"}, {0x3, 0x1, "7785fa92cff551e54dcdc31aee"}, {0xe, 0x8, "e328681314b98966770279b92723ae43d357258f62be41fcf6f95cbdb66065a85274a3fb9864060dc0adbf4ca2081378b8f3fa887b34ee9805c3b4ab165caa"}, {0x18, 0xb, "beaa9d075fa081d5fe3cc777b2e467cc3c45f20edd6018bf96f17c0d285b032a6ca9f37ae7af36e19d1bc9c8b22f68a8e6b5d12e119bcbe669ab3b3cab12a4ef3aae89043f078691effb88211f5cb5a028f4791912e0"}, {0x22, 0x1e, "a641a4f7db32cc38083e13ccb3c78453beb9769c400222982915f819c5249867648a2ebd65bb7e07cbffe2dbbae2c6357ce30235ba38c2bcfa76d0c2f9f230356f27c0a242e828d67339b3a44fd4a00f8ce9a402aaa0ca18d9ad471255a6c00fa52fd7227136aaf5a5978c8de19249fbc0d5e86bc6b7678f3c590b8ee7c5d9384002eeadba3e098e9fe42d80cffeb9621709de0f71a0388e7e0e9ea82bcafb90fda91652c2fe41b29b0dca01211bb37090f12af9a2cb240213e1db2cd09661cf36f4493adb7619aa3f00c270ff952326421918d1158ca320fb0902a54389838c743279222c415919cc16eaa19e8b5e"}, {0x11, 0x1f, "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"}, {0x4, 0x16, "7d0d0f89ebd0af611e922973273e5cc82139f24e33aa848b000318789f0b61b263df9c60f4ad9e6773744f0d75838d60be5357913e1266dcc5f3ea36f7ead3f416e3ea4ce33e2dd6c4be2f9d5fef7a2905196a33e6982085e4ea1bbbc1643378ed1f2d3052cba1574b7dfd8026d2a12dad577d90d5c407f52bd89c66cbfe4c35dd6f9b72c98d8b0f8ee7e0a861db70537881f6474d2dcfca32c5508f5d0a79c245e749f61cdd9182c7b87e3b5d08a165de6b"}]}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

342.13401ms ago: executing program 0 (id=3935):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

341.47367ms ago: executing program 4 (id=3936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004})

337.18198ms ago: executing program 3 (id=3937):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x10000, 0x1, 0x12, 0xffffffffffffffff, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4811)

293.223324ms ago: executing program 0 (id=3938):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100), &(0x7f0000000080))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

283.244075ms ago: executing program 3 (id=3939):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc2d3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

282.303185ms ago: executing program 4 (id=3940):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000300"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r3}, 0x18)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13)
fadvise64(r2, 0x7f, 0x0, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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")
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$watch_queue(r2, &(0x7f0000001b00)=""/207, 0xcf)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r6, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28000084}, 0xc081)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

216.261331ms ago: executing program 0 (id=3941):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4811)

155.253696ms ago: executing program 0 (id=3942):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20)

74.187913ms ago: executing program 0 (id=3943):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)

17.827968ms ago: executing program 0 (id=3944):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$lock(r5, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00'])
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
sendfile(r10, r10, 0x0, 0x2)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r4}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x0, 0x3, 0x401, 0xe4f, 0x7ff})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

0s ago: executing program 3 (id=3945):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
setresuid(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000180)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)

kernel console output (not intermixed with test programs):

13855]  ? copy_process+0x37d/0x1ef0
[  285.678939][T13855]  ? refill_obj_stock+0x254/0x2e0
[  285.679031][T13855]  ? obj_cgroup_charge_account+0xba/0x1a0
[  285.679175][T13855]  ? __rcu_read_unlock+0x4f/0x70
[  285.679198][T13855]  ? __memcg_slab_post_alloc_hook+0x44b/0x530
[  285.679249][T13855]  __vmalloc_node_noprof+0x89/0xc0
[  285.679272][T13855]  ? copy_process+0x37d/0x1ef0
[  285.679290][T13855]  ? copy_process+0x37d/0x1ef0
[  285.679310][T13855]  dup_task_struct+0x219/0x950
[  285.679372][T13855]  ? copy_process+0x36c/0x1ef0
[  285.679408][T13855]  copy_process+0x37d/0x1ef0
[  285.679465][T13855]  ? kstrtouint+0x76/0xc0
[  285.679489][T13855]  ? kstrtouint_from_user+0x9f/0xf0
[  285.679510][T13855]  ? 0xffffffff81000000
[  285.679527][T13855]  kernel_clone+0x16c/0x5c0
[  285.679546][T13855]  ? vfs_write+0x7e8/0x960
[  285.679566][T13855]  __x64_sys_clone+0xe6/0x120
[  285.679609][T13855]  x64_sys_call+0x12d0/0x3000
[  285.679637][T13855]  do_syscall_64+0xca/0x2b0
[  285.679685][T13855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.679710][T13855] RIP: 0033:0x7f65ae89f749
[  285.679727][T13855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.679801][T13855] RSP: 002b:00007f65ad306fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  285.679825][T13855] RAX: ffffffffffffffda RBX: 00007f65aeaf5fa0 RCX: 00007f65ae89f749
[  285.679840][T13855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  285.679853][T13855] RBP: 00007f65ad307090 R08: 0000000000000000 R09: 0000000000000000
[  285.679882][T13855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  285.679908][T13855] R13: 00007f65aeaf6038 R14: 00007f65aeaf5fa0 R15: 00007ffef6a7ea88
[  285.679929][T13855]  </TASK>
[  285.683368][T13856] team0: Device ip6gre0 is of different type
[  285.691393][T13855] syz.4.3121: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  285.953002][T13855] CPU: 0 UID: 0 PID: 13855 Comm: syz.4.3121 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  285.953115][T13855] Tainted: [W]=WARN
[  285.953125][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  285.953139][T13855] Call Trace:
[  285.953148][T13855]  <TASK>
[  285.953158][T13855]  __dump_stack+0x1d/0x30
[  285.953185][T13855]  dump_stack_lvl+0x95/0xd0
[  285.953205][T13855]  dump_stack+0x15/0x1b
[  285.953231][T13855]  warn_alloc+0x12b/0x1a0
[  285.953361][T13855]  __vmalloc_node_range_noprof+0x2b3/0x1310
[  285.953389][T13855]  ? refill_obj_stock+0x254/0x2e0
[  285.953424][T13855]  ? obj_cgroup_charge_account+0xba/0x1a0
[  285.953524][T13855]  ? __rcu_read_unlock+0x4f/0x70
[  285.953547][T13855]  ? __memcg_slab_post_alloc_hook+0x44b/0x530
[  285.953642][T13855]  __vmalloc_node_noprof+0x89/0xc0
[  285.953666][T13855]  ? copy_process+0x37d/0x1ef0
[  285.953719][T13855]  ? copy_process+0x37d/0x1ef0
[  285.953750][T13855]  dup_task_struct+0x219/0x950
[  285.953772][T13855]  ? copy_process+0x36c/0x1ef0
[  285.953805][T13855]  copy_process+0x37d/0x1ef0
[  285.953825][T13855]  ? kstrtouint+0x76/0xc0
[  285.953927][T13855]  ? kstrtouint_from_user+0x9f/0xf0
[  285.953954][T13855]  ? 0xffffffff81000000
[  285.953974][T13855]  kernel_clone+0x16c/0x5c0
[  285.954043][T13855]  ? vfs_write+0x7e8/0x960
[  285.954066][T13855]  __x64_sys_clone+0xe6/0x120
[  285.954092][T13855]  x64_sys_call+0x12d0/0x3000
[  285.954115][T13855]  do_syscall_64+0xca/0x2b0
[  285.954176][T13855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.954197][T13855] RIP: 0033:0x7f65ae89f749
[  285.954213][T13855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.954235][T13855] RSP: 002b:00007f65ad306fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  285.954259][T13855] RAX: ffffffffffffffda RBX: 00007f65aeaf5fa0 RCX: 00007f65ae89f749
[  285.954279][T13855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  285.954291][T13855] RBP: 00007f65ad307090 R08: 0000000000000000 R09: 0000000000000000
[  285.954303][T13855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  285.954315][T13855] R13: 00007f65aeaf6038 R14: 00007f65aeaf5fa0 R15: 00007ffef6a7ea88
[  285.954333][T13855]  </TASK>
[  285.954342][T13855] Mem-Info:
[  286.182878][T13855] active_anon:15562 inactive_anon:11 isolated_anon:0
[  286.182878][T13855]  active_file:21540 inactive_file:2536 isolated_file:0
[  286.182878][T13855]  unevictable:0 dirty:307 writeback:0
[  286.182878][T13855]  slab_reclaimable:3625 slab_unreclaimable:52502
[  286.182878][T13855]  mapped:35816 shmem:5901 pagetables:1787
[  286.182878][T13855]  sec_pagetables:0 bounce:0
[  286.182878][T13855]  kernel_misc_reclaimable:0
[  286.182878][T13855]  free:1768191 free_pcp:70058 free_cma:0
[  286.228764][T13855] Node 0 active_anon:62248kB inactive_anon:44kB active_file:86160kB inactive_file:10144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143264kB dirty:1228kB writeback:0kB shmem:23604kB kernel_stack:4752kB pagetables:7148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  286.256415][T13855] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  286.286187][T13855] lowmem_reserve[]: 0 2880 7859 7859
[  286.291581][T13855] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB
[  286.322932][T13855] lowmem_reserve[]: 0 0 4978 4978
[  286.328090][T13855] Node 0 Normal free:4111520kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62248kB inactive_anon:44kB active_file:86160kB inactive_file:10144kB unevictable:0kB writepending:1224kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:276644kB local_pcp:216796kB free_cma:0kB
[  286.361486][T13855] lowmem_reserve[]: 0 0 0 0
[  286.366099][T13855] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  286.378893][T13855] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB
[  286.395087][T13855] Node 0 Normal: 445*4kB (UME) 1018*8kB (UME) 737*16kB (UME) 489*32kB (UME) 307*64kB (UME) 640*128kB (UM) 458*256kB (UME) 354*512kB (UME) 304*1024kB (UM) 230*2048kB (UM) 706*4096kB (UM) = 4111540kB
[  286.414850][T13855] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  286.424209][T13855] 29984 total pagecache pages
[  286.428947][T13855] 17 pages in swap cache
[  286.433257][T13855] Free swap  = 124628kB
[  286.437478][T13855] Total swap = 124996kB
[  286.441667][T13855] 2097051 pages RAM
[  286.445523][T13855] 0 pages HighMem/MovableOnly
[  286.450215][T13855] 81272 pages reserved
[  286.514919][   T29] kauditd_printk_skb: 347 callbacks suppressed
[  286.514988][   T29] audit: type=1326 audit(1767667875.751:24033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.572544][   T29] audit: type=1326 audit(1767667875.791:24034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.596285][   T29] audit: type=1326 audit(1767667875.791:24035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.620566][   T29] audit: type=1326 audit(1767667875.791:24036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.639588][T13863] lo speed is unknown, defaulting to 1000
[  286.644514][   T29] audit: type=1326 audit(1767667875.791:24037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.658523][T13864] netlink: 'syz.4.3126': attribute type 1 has an invalid length.
[  286.674177][   T29] audit: type=1326 audit(1767667875.791:24038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.674206][   T29] audit: type=1326 audit(1767667875.791:24039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.729501][   T29] audit: type=1326 audit(1767667875.791:24040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.753244][   T29] audit: type=1326 audit(1767667875.791:24041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.772041][T13864] bond25: entered promiscuous mode
[  286.777201][   T29] audit: type=1326 audit(1767667875.791:24043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f601dd4f749 code=0x7ffc0000
[  286.782601][T13864] 8021q: adding VLAN 0 to HW filter on device bond25
[  286.843364][T13868] lo speed is unknown, defaulting to 1000
[  286.905982][T13863] loop2: detected capacity change from 0 to 128
[  286.949438][T13863] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.023303][T13863] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3124'.
[  287.182061][T13893] lo speed is unknown, defaulting to 1000
[  287.237937][T13908] team0: Device ip6gre0 is of different type
[  287.321379][T13893] chnl_net:caif_netlink_parms(): no params data found
[  287.430102][T13893] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.437627][T13893] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.445253][T13893] bridge_slave_0: entered allmulticast mode
[  287.452071][T13893] bridge_slave_0: entered promiscuous mode
[  287.461249][   T61] bridge_slave_1: left allmulticast mode
[  287.467160][   T61] bridge_slave_1: left promiscuous mode
[  287.472846][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.482365][   T61] bridge_slave_0: left allmulticast mode
[  287.488174][   T61] bridge_slave_0: left promiscuous mode
[  287.494175][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.777241][   T61] bond8 (unregistering): (slave bridge1): Releasing backup interface
[  287.789029][   T61] bridge1 (unregistering): left promiscuous mode
[  288.157085][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.174628][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.278728][   T61] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  288.289277][   T61] bond0 (unregistering): Released all slaves
[  288.298066][   T61] bond1 (unregistering): Released all slaves
[  288.306695][   T61] bond2 (unregistering): Released all slaves
[  288.315440][   T61] bond3 (unregistering): Released all slaves
[  288.327620][   T61] bond4 (unregistering): Released all slaves
[  288.340920][   T61] bond5 (unregistering): Released all slaves
[  288.350398][   T61] bond6 (unregistering): Released all slaves
[  288.359515][   T61] bond7 (unregistering): Released all slaves
[  288.368557][   T61] bond8 (unregistering): Released all slaves
[  288.379143][   T61] bond9 (unregistering): Released all slaves
[  288.389607][   T61] bond10 (unregistering): Released all slaves
[  288.400936][   T61] bond11 (unregistering): Released all slaves
[  288.411138][   T61] bond12 (unregistering): Released all slaves
[  288.543532][   T61] bond13 (unregistering): Released all slaves
[  288.577011][   T61] bond14 (unregistering): Released all slaves
[  288.608978][   T61] bond15 (unregistering): Released all slaves
[  288.641263][   T61] bond16 (unregistering): Released all slaves
[  288.673067][   T61] bond17 (unregistering): Released all slaves
[  288.704152][   T61] bond18 (unregistering): Released all slaves
[  288.736310][   T61] bond19 (unregistering): Released all slaves
[  288.767578][   T61] bond20 (unregistering): Released all slaves
[  288.799753][   T61] bond21 (unregistering): Released all slaves
[  288.831585][   T61] bond22 (unregistering): Released all slaves
[  288.843359][   T61] bond23 (unregistering): Released all slaves
[  288.854560][   T61] bond24 (unregistering): Released all slaves
[  288.865937][   T61] bond25 (unregistering): Released all slaves
[  288.876613][T13893] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.883895][T13893] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.891981][T13893] bridge_slave_1: entered allmulticast mode
[  288.899319][T13893] bridge_slave_1: entered promiscuous mode
[  289.237078][T13893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.286374][T13893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.308787][T13945] lo speed is unknown, defaulting to 1000
[  289.376749][T13893] team0: Port device team_slave_0 added
[  289.385427][   T61] hsr_slave_0: left promiscuous mode
[  289.399867][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.418804][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.533740][   T61] team0 (unregistering): Port device team_slave_1 removed
[  289.605527][   T61] team0 (unregistering): Port device team_slave_0 removed
[  289.747259][T13893] team0: Port device team_slave_1 added
[  289.801230][T13893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.808313][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.834492][T13893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.906182][T13970] loop2: detected capacity change from 0 to 128
[  289.933639][T13970] EXT4-fs mount: 13 callbacks suppressed
[  289.933660][T13970] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  289.972180][T13893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.979297][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.005417][T13893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.017098][T13970] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.084212][T13893] hsr_slave_0: entered promiscuous mode
[  290.108411][T13893] hsr_slave_1: entered promiscuous mode
[  290.132784][T11783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  290.149077][T13893] debugfs: 'hsr0' already exists in 'hsr'
[  290.154958][T13893] Cannot create hsr debugfs directory
[  290.309544][T14011] netlink: 'syz.2.3156': attribute type 1 has an invalid length.
[  290.360738][T14019] netlink: 'syz.2.3156': attribute type 1 has an invalid length.
[  290.368637][T14019] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3156'.
[  290.408524][T14011] bond4: entered promiscuous mode
[  290.413919][T14011] 8021q: adding VLAN 0 to HW filter on device bond4
[  290.440617][T14011] bond4: (slave bridge4): making interface the new active one
[  290.448375][T14011] bridge4: entered promiscuous mode
[  290.455468][T14011] bridge4: left promiscuous mode
[  290.662879][T13893] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  290.683749][T13893] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  290.685343][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'.
[  290.704726][T13893] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  290.725692][T13893] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  290.748192][T14045] lo speed is unknown, defaulting to 1000
[  290.871871][T13893] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.904407][T13893] 8021q: adding VLAN 0 to HW filter on device team0
[  290.926219][  T355] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.933405][  T355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.942143][T14087] netlink: 'syz.0.3167': attribute type 1 has an invalid length.
[  290.944085][  T355] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.957063][  T355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.986530][T14087] bond1: entered promiscuous mode
[  290.999670][T14087] 8021q: adding VLAN 0 to HW filter on device bond1
[  291.042376][T14087] netlink: 'syz.0.3167': attribute type 1 has an invalid length.
[  291.050986][T14087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3167'.
[  291.067545][T14087] bond1: (slave bridge1): making interface the new active one
[  291.075101][T14087] bridge1: entered promiscuous mode
[  291.148942][T14087] bridge1: left promiscuous mode
[  291.184571][T14101] loop3: detected capacity change from 0 to 512
[  291.207936][T14101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.234015][T13893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.366351][T13893] veth0_vlan: entered promiscuous mode
[  291.375007][T13893] veth1_vlan: entered promiscuous mode
[  291.390268][T13893] veth0_macvtap: entered promiscuous mode
[  291.398239][T13893] veth1_macvtap: entered promiscuous mode
[  291.409407][T13893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.421030][T13893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.433935][ T7022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.444231][ T7022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.455332][ T7022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.464716][ T7022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.691538][T14147] loop4: detected capacity change from 0 to 1024
[  291.700661][T14147] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3178: bad orphan inode 134217728
[  291.714241][T14149] netlink: 'syz.2.3179': attribute type 1 has an invalid length.
[  291.716610][T14147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.741994][T14149] bond5: entered promiscuous mode
[  291.747377][T14149] 8021q: adding VLAN 0 to HW filter on device bond5
[  291.767176][T14147] net_ratelimit: 244 callbacks suppressed
[  291.767232][T14147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.820548][   T29] kauditd_printk_skb: 461 callbacks suppressed
[  291.820564][   T29] audit: type=1326 audit(1767667881.061:24504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  291.850804][   T29] audit: type=1326 audit(1767667881.061:24505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  291.874527][   T29] audit: type=1326 audit(1767667881.061:24506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  291.898750][   T29] audit: type=1326 audit(1767667881.061:24507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  291.922585][   T29] audit: type=1326 audit(1767667881.061:24508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  291.946446][   T29] audit: type=1326 audit(1767667881.061:24509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  291.946823][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3180'.
[  291.970402][   T29] audit: type=1326 audit(1767667881.061:24510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  292.003351][   T29] audit: type=1326 audit(1767667881.061:24511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  292.027083][   T29] audit: type=1326 audit(1767667881.061:24512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  292.058640][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'.
[  292.073134][   T29] audit: type=1326 audit(1767667881.161:24513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  292.100535][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.163121][T14158] lo speed is unknown, defaulting to 1000
[  292.213121][T14166] netlink: 'syz.2.3185': attribute type 1 has an invalid length.
[  292.226969][T14166] bond6: entered promiscuous mode
[  292.232301][T14166] 8021q: adding VLAN 0 to HW filter on device bond6
[  292.284060][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5120 sclass=netlink_route_socket pid=14172 comm=syz.2.3187
[  292.299733][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=14172 comm=syz.2.3187
[  292.352218][T14181] netlink: 'syz.0.3190': attribute type 1 has an invalid length.
[  292.367920][T14181] bond2: entered promiscuous mode
[  292.373372][T14181] 8021q: adding VLAN 0 to HW filter on device bond2
[  292.389930][T14181] netlink: 'syz.0.3190': attribute type 1 has an invalid length.
[  292.397951][T14181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3190'.
[  292.415576][T14181] bond2: (slave bridge1): making interface the new active one
[  292.423074][T14181] bridge1: entered promiscuous mode
[  292.430132][T14181] bridge1: left promiscuous mode
[  292.444165][T14186] loop2: detected capacity change from 0 to 8192
[  292.492100][T11783] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  292.500121][T11783] FAT-fs (loop2): Filesystem has been set read-only
[  292.534347][T14188] lo speed is unknown, defaulting to 1000
[  292.567154][T14188] loop2: detected capacity change from 0 to 128
[  292.579620][T14188] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  292.626175][T14188] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.639916][T14188] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3193'.
[  292.649732][T14188] netlink: zone id is out of range
[  292.655351][T14188] netlink: zone id is out of range
[  292.660718][T14188] netlink: zone id is out of range
[  292.666411][T14188] netlink: zone id is out of range
[  292.672837][T14188] netlink: zone id is out of range
[  292.678028][T14188] netlink: zone id is out of range
[  292.683807][T14188] netlink: zone id is out of range
[  292.689324][T14188] netlink: zone id is out of range
[  292.694543][T14188] netlink: zone id is out of range
[  292.721147][T11783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.991311][T14197] vhci_hcd vhci_hcd.3: invalid port number 9
[  293.010068][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'.
[  293.732402][T14218] netlink: 'syz.0.3203': attribute type 1 has an invalid length.
[  293.762735][T14218] bond3: entered promiscuous mode
[  293.772807][T14218] 8021q: adding VLAN 0 to HW filter on device bond3
[  293.792660][T14223] lo speed is unknown, defaulting to 1000
[  293.821598][T14218] netlink: 'syz.0.3203': attribute type 1 has an invalid length.
[  293.829439][T14218] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3203'.
[  293.846493][T14223] loop2: detected capacity change from 0 to 128
[  293.855254][T14223] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  293.878312][T14223] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.887188][T14218] bond3: (slave bridge2): making interface the new active one
[  293.896479][T14223] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3205'.
[  293.905927][T14218] bridge2: entered promiscuous mode
[  293.927955][T14218] bridge2: left promiscuous mode
[  293.943671][T11783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  294.015324][T14233] lo speed is unknown, defaulting to 1000
[  294.154601][T14239] team0: Device ip6gre0 is of different type
[  294.207775][T14241] lo speed is unknown, defaulting to 1000
[  294.336819][T14242] loop3: detected capacity change from 0 to 128
[  294.466909][T14242] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  294.479934][T14242] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.715874][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.846294][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  294.915740][T14251] netlink: 'syz.1.3214': attribute type 1 has an invalid length.
[  294.942045][T14251] bond1: entered promiscuous mode
[  294.948363][T14251] 8021q: adding VLAN 0 to HW filter on device bond1
[  294.994635][T14260] loop3: detected capacity change from 0 to 2048
[  295.019967][T14260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.053828][T14260] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.087055][T14261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.097462][T14261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.130914][T14265] lo speed is unknown, defaulting to 1000
[  295.172333][T14261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.182731][T14261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.245605][T14273] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3216: bg 0: block 345: padding at end of block bitmap is not set
[  295.306984][T14261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.317424][T14261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.352954][T14273] EXT4-fs (loop3): Remounting filesystem read-only
[  295.387184][  T355] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  295.418070][T14261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.428498][T14261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.547019][ T2331] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.555433][ T2331] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.654311][ T7022] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.662811][ T7022] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.701655][ T7022] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.710162][ T7022] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.715604][T14279] __nla_validate_parse: 7 callbacks suppressed
[  295.715619][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3221'.
[  295.744197][ T7022] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.752566][ T7022] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.774509][T14285] lo speed is unknown, defaulting to 1000
[  295.781657][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.937887][T14297] netlink: 'syz.2.3227': attribute type 1 has an invalid length.
[  295.955065][T14297] bond7: entered promiscuous mode
[  295.960397][T14297] 8021q: adding VLAN 0 to HW filter on device bond7
[  296.053255][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3229'.
[  296.064568][T14292] lo speed is unknown, defaulting to 1000
[  296.152715][T14292] chnl_net:caif_netlink_parms(): no params data found
[  296.203063][T14292] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.210493][T14292] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.218122][T14292] bridge_slave_0: entered allmulticast mode
[  296.224593][T14292] bridge_slave_0: entered promiscuous mode
[  296.231563][T14292] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.238974][T14292] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.246422][T14292] bridge_slave_1: entered allmulticast mode
[  296.253439][T14292] bridge_slave_1: entered promiscuous mode
[  296.274510][T14292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.288247][T14292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.321078][T14292] team0: Port device team_slave_0 added
[  296.328295][T14292] team0: Port device team_slave_1 added
[  296.349346][ T7022] bridge_slave_1: left allmulticast mode
[  296.355082][ T7022] bridge_slave_1: left promiscuous mode
[  296.360766][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.369006][ T7022] bridge_slave_0: left allmulticast mode
[  296.374721][ T7022] bridge_slave_0: left promiscuous mode
[  296.380660][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.446390][ T7022] bond11 (unregistering): (slave bridge1): Releasing backup interface
[  296.454716][ T7022] bridge1 (unregistering): left promiscuous mode
[  296.616268][ T7022] bond23 (unregistering): (slave bridge5): Releasing backup interface
[  296.624519][ T7022] bridge5 (unregistering): left promiscuous mode
[  296.720449][ T7022] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.729806][ T7022] bond_slave_0: left promiscuous mode
[  296.737891][ T7022] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.747383][ T7022] bond_slave_1: left promiscuous mode
[  296.753304][ T7022] $Hÿ (unregistering): Released all slaves
[  296.763897][ T7022] bond1 (unregistering): Released all slaves
[  296.775838][ T7022] bond2 (unregistering): Released all slaves
[  296.786631][ T7022] bond3 (unregistering): Released all slaves
[  296.797470][ T7022] bond4 (unregistering): Released all slaves
[  296.808524][ T7022] bond5 (unregistering): Released all slaves
[  296.820529][ T7022] bond6 (unregistering): Released all slaves
[  296.827006][   T29] kauditd_printk_skb: 314 callbacks suppressed
[  296.827023][   T29] audit: type=1326 audit(1767667886.071:24828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.865598][ T7022] bond7 (unregistering): Released all slaves
[  296.877120][ T7022] bond8 (unregistering): Released all slaves
[  296.883277][   T29] audit: type=1326 audit(1767667886.101:24829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.889148][ T7022] bond9 (unregistering): Released all slaves
[  296.907206][   T29] audit: type=1326 audit(1767667886.101:24830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.936890][   T29] audit: type=1326 audit(1767667886.101:24831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.940137][ T7022] bond10 (unregistering): Released all slaves
[  296.960537][   T29] audit: type=1326 audit(1767667886.111:24832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.960572][   T29] audit: type=1326 audit(1767667886.111:24833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.960622][   T29] audit: type=1326 audit(1767667886.121:24834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.960653][   T29] audit: type=1326 audit(1767667886.121:24835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  296.970336][ T7022] bond11 (unregistering): Released all slaves
[  297.073680][ T7022] bond12 (unregistering): Released all slaves
[  297.083013][ T7022] bond13 (unregistering): Released all slaves
[  297.092955][ T7022] bond14 (unregistering): Released all slaves
[  297.102384][ T7022] bond15 (unregistering): Released all slaves
[  297.111686][ T7022] bond16 (unregistering): Released all slaves
[  297.123028][ T7022] bond17 (unregistering): Released all slaves
[  297.129742][   T29] audit: type=1326 audit(1767667886.121:24836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  297.153423][   T29] audit: type=1326 audit(1767667886.121:24837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff641652005 code=0x7ffc0000
[  297.180099][ T7022] bond18 (unregistering): Released all slaves
[  297.188935][T14337] FAULT_INJECTION: forcing a failure.
[  297.188935][T14337] name failslab, interval 1, probability 0, space 0, times 0
[  297.201784][T14337] CPU: 1 UID: 0 PID: 14337 Comm: syz.0.3239 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  297.201823][T14337] Tainted: [W]=WARN
[  297.201832][T14337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  297.201901][T14337] Call Trace:
[  297.201910][T14337]  <TASK>
[  297.201920][T14337]  __dump_stack+0x1d/0x30
[  297.201949][T14337]  dump_stack_lvl+0x95/0xd0
[  297.201974][T14337]  dump_stack+0x15/0x1b
[  297.201996][T14337]  should_fail_ex+0x265/0x280
[  297.202082][T14337]  should_failslab+0x8c/0xb0
[  297.202109][T14337]  kmem_cache_alloc_noprof+0x69/0x4b0
[  297.202135][T14337]  ? security_inode_alloc+0x37/0x100
[  297.202162][T14337]  security_inode_alloc+0x37/0x100
[  297.202192][T14337]  inode_init_always_gfp+0x4b7/0x500
[  297.202233][T14337]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  297.202316][T14337]  alloc_inode+0x58/0x170
[  297.202339][T14337]  new_inode+0x1d/0xe0
[  297.202364][T14337]  shmem_get_inode+0x246/0x750
[  297.202439][T14337]  __shmem_file_setup+0x113/0x210
[  297.202467][T14337]  shmem_file_setup+0x3b/0x50
[  297.202494][T14337]  __se_sys_memfd_create+0x2f7/0x6b0
[  297.202626][T14337]  __x64_sys_memfd_create+0x31/0x40
[  297.202660][T14337]  x64_sys_call+0x28cb/0x3000
[  297.202708][T14337]  do_syscall_64+0xca/0x2b0
[  297.202788][T14337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.202813][T14337] RIP: 0033:0x7f91b335f749
[  297.202839][T14337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.202861][T14337] RSP: 002b:00007f91b1dc6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  297.202946][T14337] RAX: ffffffffffffffda RBX: 000000000000047f RCX: 00007f91b335f749
[  297.202962][T14337] RDX: 00007f91b1dc6ef0 RSI: 0000000000000000 RDI: 00007f91b33e4960
[  297.203054][T14337] RBP: 00002000000004c0 R08: 00007f91b1dc6bb7 R09: 00007f91b1dc6e40
[  297.203070][T14337] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  297.203083][T14337] R13: 00007f91b1dc6ef0 R14: 00007f91b1dc6eb0 R15: 0000200000000200
[  297.203145][T14337]  </TASK>
[  297.419448][ T7022] bond19 (unregistering): Released all slaves
[  297.429727][ T7022] bond20 (unregistering): Released all slaves
[  297.439054][ T7022] bond21 (unregistering): Released all slaves
[  297.448672][ T7022] bond22 (unregistering): Released all slaves
[  297.457864][ T7022] bond23 (unregistering): Released all slaves
[  297.467048][ T7022] bond0 (unregistering): Released all slaves
[  297.480164][T14292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.480298][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'.
[  297.487220][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  297.487255][T14292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.496576][T14340] net_ratelimit: 223 callbacks suppressed
[  297.496590][T14340] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  297.539212][T14292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.553809][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  297.580024][T14292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.613900][T14326] bridge0: port 3(gretap0) entered blocking state
[  297.620689][T14326] bridge0: port 3(gretap0) entered disabled state
[  297.630055][T14326] gretap0: entered allmulticast mode
[  297.637256][T14326] gretap0: entered promiscuous mode
[  297.643108][T14326] bridge0: port 3(gretap0) entered blocking state
[  297.649712][T14326] bridge0: port 3(gretap0) entered forwarding state
[  297.660782][T14335] team0: Device ip6gre0 is of different type
[  297.673138][ T7022] tipc: Left network mode
[  297.705275][T14292] hsr_slave_0: entered promiscuous mode
[  297.711411][T14292] hsr_slave_1: entered promiscuous mode
[  297.721574][T14292] debugfs: 'hsr0' already exists in 'hsr'
[  297.727483][T14292] Cannot create hsr debugfs directory
[  297.742575][T14344] lo speed is unknown, defaulting to 1000
[  297.749326][T14351] loop4: detected capacity change from 0 to 512
[  297.758664][ T7022] hsr_slave_0: left promiscuous mode
[  297.766218][ T7022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.785066][T14351] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  297.793007][T14351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  297.826094][ T7022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.833582][T14351] EXT4-fs (loop4): orphan cleanup on readonly fs
[  297.840393][T14351] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.3245: iget: bad i_size value: 12154761577498
[  297.853759][T14351] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3245: couldn't read orphan inode 13 (err -117)
[  297.867537][T14351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  297.932147][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.017344][ T7022] team0 (unregistering): Port device team_slave_1 removed
[  298.029347][ T7022] team0 (unregistering): Port device team_slave_0 removed
[  298.120319][T14367] macvtap1: entered promiscuous mode
[  298.126132][T14367] macvtap1: entered allmulticast mode
[  298.185405][T14382] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  298.230397][T14382] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  298.230397][T14382]    program syz.4.3251 not setting count and/or reply_len properly
[  298.260182][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'.
[  298.269697][T14386] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  298.580141][T14417] netlink: 'syz.2.3258': attribute type 1 has an invalid length.
[  298.587043][T14412] team0: Device ip6gre0 is of different type
[  298.616611][T14417] bond8: entered promiscuous mode
[  298.628262][T14417] 8021q: adding VLAN 0 to HW filter on device bond8
[  298.742899][T14427] ip6gre0: entered promiscuous mode
[  298.767962][T14427] team0: Device ip6gre0 is of different type
[  298.858121][T14292] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  299.001106][T14292] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  299.044561][T14292] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  299.091734][T14292] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  299.262926][T14292] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.300509][T14292] 8021q: adding VLAN 0 to HW filter on device team0
[  299.335882][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.343004][ T7022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.398137][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.405453][ T7022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.610974][T14292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.776775][T14292] veth0_vlan: entered promiscuous mode
[  299.795825][T14292] veth1_vlan: entered promiscuous mode
[  299.818054][T14292] veth0_macvtap: entered promiscuous mode
[  299.829025][T14292] veth1_macvtap: entered promiscuous mode
[  299.855390][T14292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.876604][T14292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.888686][ T2419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.924897][ T2419] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.933649][ T2419] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.965481][ T2419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.306977][T14519] loop4: detected capacity change from 0 to 128
[  300.332743][T14519] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  300.352380][T14519] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.379507][T14524] xt_hashlimit: size too large, truncated to 1048576
[  300.425768][T14526] loop3: detected capacity change from 0 to 128
[  300.443902][T13893] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  300.469409][T14526] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  300.488304][T14526] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.535854][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  300.724361][T14537] team0: Device ip6gre0 is of different type
[  301.121152][T14556] FAULT_INJECTION: forcing a failure.
[  301.121152][T14556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.134322][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.0.3288 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  301.134361][T14556] Tainted: [W]=WARN
[  301.134370][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  301.134383][T14556] Call Trace:
[  301.134401][T14556]  <TASK>
[  301.134412][T14556]  __dump_stack+0x1d/0x30
[  301.134449][T14556]  dump_stack_lvl+0x95/0xd0
[  301.134469][T14556]  dump_stack+0x15/0x1b
[  301.134487][T14556]  should_fail_ex+0x265/0x280
[  301.134646][T14556]  should_fail+0xb/0x20
[  301.134668][T14556]  should_fail_usercopy+0x1a/0x20
[  301.134696][T14556]  copy_fpstate_to_sigframe+0x628/0x7d0
[  301.134738][T14556]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[  301.134814][T14556]  ? x86_task_fpu+0x36/0x60
[  301.134857][T14556]  get_sigframe+0x34d/0x490
[  301.134906][T14556]  ? get_signal+0xdc7/0xf70
[  301.134938][T14556]  x64_setup_rt_frame+0xa8/0x580
[  301.134969][T14556]  arch_do_signal_or_restart+0x24c/0x450
[  301.135049][T14556]  exit_to_user_mode_loop+0x6a/0x740
[  301.135077][T14556]  do_syscall_64+0x1dd/0x2b0
[  301.135118][T14556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.135148][T14556] RIP: 0033:0x7f91b335f749
[  301.135191][T14556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.135225][T14556] RSP: 002b:00007f91b1dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081
[  301.135247][T14556] RAX: 0000000000000000 RBX: 00007f91b35b5fa0 RCX: 00007f91b335f749
[  301.135331][T14556] RDX: 0000200000000180 RSI: 0000000000000021 RDI: 00000000000000b1
[  301.135344][T14556] RBP: 00007f91b1dc7090 R08: 0000000000000000 R09: 0000000000000000
[  301.135357][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.135371][T14556] R13: 00007f91b35b6038 R14: 00007f91b35b5fa0 R15: 00007ffd765701a8
[  301.135393][T14556]  </TASK>
[  301.385499][T14564] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  301.416390][T14564] bond2: entered promiscuous mode
[  301.424830][T14564] 8021q: adding VLAN 0 to HW filter on device bond2
[  301.672366][T14577] xt_hashlimit: size too large, truncated to 1048576
[  301.896037][   T29] kauditd_printk_skb: 549 callbacks suppressed
[  301.896072][   T29] audit: type=1400 audit(1767667891.141:25387): avc:  denied  { create } for  pid=14585 comm="syz.2.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  301.956807][   T29] audit: type=1400 audit(1767667891.171:25388): avc:  denied  { ioctl } for  pid=14585 comm="syz.2.3300" path="socket:[45323]" dev="sockfs" ino=45323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  301.982194][   T29] audit: type=1400 audit(1767667891.171:25389): avc:  denied  { connect } for  pid=14585 comm="syz.2.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  301.990545][T14596] netlink: 'syz.2.3304': attribute type 1 has an invalid length.
[  302.002076][   T29] audit: type=1400 audit(1767667891.171:25390): avc:  denied  { write } for  pid=14585 comm="syz.2.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  302.009523][T14590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.056516][T14596] bond9: entered promiscuous mode
[  302.056582][T14588] loop3: detected capacity change from 0 to 128
[  302.068692][T14596] 8021q: adding VLAN 0 to HW filter on device bond9
[  302.085225][T14588] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  302.099484][   T29] audit: type=1400 audit(1767667891.341:25391): avc:  denied  { mount } for  pid=14584 comm="syz.3.3299" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  302.100348][T14588] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.136775][T14590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.156388][   T29] audit: type=1326 audit(1767667891.401:25392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  302.186162][T14586] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3299'.
[  302.188686][   T29] audit: type=1326 audit(1767667891.421:25393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  302.197983][T14586] netlink: zone id is out of range
[  302.219633][   T29] audit: type=1326 audit(1767667891.421:25394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  302.224726][T14586] netlink: zone id is out of range
[  302.258110][T14590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.264145][T14586] netlink: zone id is out of range
[  302.275947][T14586] netlink: zone id is out of range
[  302.281245][T14586] netlink: zone id is out of range
[  302.286512][T14586] netlink: zone id is out of range
[  302.293420][   T29] audit: type=1326 audit(1767667891.531:25395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  302.317567][   T29] audit: type=1326 audit(1767667891.531:25396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  302.317841][T14586] netlink: zone id is out of range
[  302.348536][T14586] netlink: zone id is out of range
[  302.362303][T14590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.422089][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.435415][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'.
[  302.450124][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.464790][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.488995][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.546844][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.549781][T14618] netlink: 'syz.1.3311': attribute type 1 has an invalid length.
[  302.594754][T14618] bond3: entered promiscuous mode
[  302.604731][T14618] 8021q: adding VLAN 0 to HW filter on device bond3
[  302.673172][T14630] loop4: detected capacity change from 0 to 128
[  302.704422][T14630] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  302.801021][T14630] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.848748][T14624] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3312'.
[  302.858341][T14624] net_ratelimit: 47 callbacks suppressed
[  302.858358][T14624] netlink: zone id is out of range
[  302.869304][T14624] netlink: zone id is out of range
[  302.875513][T14624] netlink: zone id is out of range
[  302.881042][T14624] netlink: zone id is out of range
[  302.888363][T14624] netlink: zone id is out of range
[  302.893802][T14624] netlink: zone id is out of range
[  302.899271][T14624] netlink: zone id is out of range
[  302.905749][T14624] netlink: zone id is out of range
[  302.910978][T14624] netlink: zone id is out of range
[  302.916144][T14624] netlink: zone id is out of range
[  302.932448][T14645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14645 comm=syz.3.3315
[  303.113293][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3320'.
[  303.193557][T13893] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  303.383710][T14659] loop4: detected capacity change from 0 to 2048
[  303.648595][T14680] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  303.648595][T14680]    program syz.3.3333 not setting count and/or reply_len properly
[  303.749799][T14687] syzkaller0: entered promiscuous mode
[  303.756221][T14687] syzkaller0: entered allmulticast mode
[  303.796854][ T3700] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  303.814512][ T3700] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  303.900546][T14695] fido_id[14695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  303.917062][T14699] loop3: detected capacity change from 0 to 2048
[  304.131466][T14712] team0: Device ip6gre0 is of different type
[  304.153099][T14714] netlink: 'syz.3.3345': attribute type 1 has an invalid length.
[  304.389816][T14722] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  304.389816][T14722]    program syz.4.3348 not setting count and/or reply_len properly
[  304.434312][T14724] loop3: detected capacity change from 0 to 2048
[  304.516359][T14724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.578447][T14724] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.631171][T14731] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  304.740469][T14734] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3349: bg 0: block 345: padding at end of block bitmap is not set
[  304.867316][T14734] EXT4-fs (loop3): Remounting filesystem read-only
[  304.894759][ T2419] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  305.006971][T14292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.175163][T14747] netlink: 'syz.3.3356': attribute type 1 has an invalid length.
[  305.260663][T14753] sd 0:0:1:0: device reset
[  305.275115][T14751] lo speed is unknown, defaulting to 1000
[  305.295874][T14751] lo speed is unknown, defaulting to 1000
[  305.301952][T14751] lo speed is unknown, defaulting to 1000
[  305.351051][T14751] infiniband syz1: set active
[  305.355834][T14751] infiniband syz1: added lo
[  305.360453][ T4015] lo speed is unknown, defaulting to 1000
[  305.457046][T14757] vhci_hcd vhci_hcd.3: invalid port number 9
[  305.541091][T14751] RDS/IB: syz1: added
[  305.549742][T14751] smc: adding ib device syz1 with port count 1
[  305.561736][T14751] smc:    ib device syz1 port 1 has no pnetid
[  305.568066][ T3700] lo speed is unknown, defaulting to 1000
[  305.579768][T14751] lo speed is unknown, defaulting to 1000
[  305.639090][T14751] lo speed is unknown, defaulting to 1000
[  305.681540][T14751] lo speed is unknown, defaulting to 1000
[  305.734490][T14751] lo speed is unknown, defaulting to 1000
[  305.943658][T14751] lo speed is unknown, defaulting to 1000
[  306.035303][T14771] netlink: 'syz.2.3365': attribute type 1 has an invalid length.
[  306.066435][T14771] bond10: entered promiscuous mode
[  306.075369][T14771] 8021q: adding VLAN 0 to HW filter on device bond10
[  306.090259][T14778] netlink: 'syz.4.3367': attribute type 1 has an invalid length.
[  306.110628][T14778] bond1: entered promiscuous mode
[  306.114293][T14781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3369'.
[  306.116051][T14778] 8021q: adding VLAN 0 to HW filter on device bond1
[  306.185272][T14783] netlink: 'syz.2.3370': attribute type 178 has an invalid length.
[  306.198443][T14787] loop4: detected capacity change from 0 to 128
[  306.214023][T14787] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  306.227842][T14787] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.318167][T13893] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  306.344333][T14796] FAULT_INJECTION: forcing a failure.
[  306.344333][T14796] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.357486][T14796] CPU: 1 UID: 0 PID: 14796 Comm: syz.0.3377 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  306.357609][T14796] Tainted: [W]=WARN
[  306.357618][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.357630][T14796] Call Trace:
[  306.357639][T14796]  <TASK>
[  306.357649][T14796]  __dump_stack+0x1d/0x30
[  306.357674][T14796]  dump_stack_lvl+0x95/0xd0
[  306.357721][T14796]  dump_stack+0x15/0x1b
[  306.357740][T14796]  should_fail_ex+0x265/0x280
[  306.357766][T14796]  should_fail+0xb/0x20
[  306.357788][T14796]  should_fail_usercopy+0x1a/0x20
[  306.357814][T14796]  _copy_from_user+0x1c/0xb0
[  306.357951][T14796]  memdup_user+0x5e/0xd0
[  306.357972][T14796]  strndup_user+0x68/0xb0
[  306.357989][T14796]  keyctl_restrict_keyring+0x15a/0x1b0
[  306.358015][T14796]  __se_sys_keyctl+0x1ed/0xb80
[  306.358051][T14796]  ? __rcu_read_unlock+0x4f/0x70
[  306.358075][T14796]  ? __fget_files+0x184/0x1c0
[  306.358101][T14796]  ? mutex_unlock+0x4f/0x90
[  306.358130][T14796]  ? fput+0x8f/0xc0
[  306.358156][T14796]  __x64_sys_keyctl+0x67/0x80
[  306.358180][T14796]  x64_sys_call+0x27b8/0x3000
[  306.358216][T14796]  do_syscall_64+0xca/0x2b0
[  306.358253][T14796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.358291][T14796] RIP: 0033:0x7f91b335f749
[  306.358310][T14796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.358332][T14796] RSP: 002b:00007f91b1dc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  306.358356][T14796] RAX: ffffffffffffffda RBX: 00007f91b35b5fa0 RCX: 00007f91b335f749
[  306.358372][T14796] RDX: 0000200000000200 RSI: 000000002405eade RDI: 000000000000001d
[  306.358387][T14796] RBP: 00007f91b1dc7090 R08: 0000000000000000 R09: 0000000000000000
[  306.358454][T14796] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001
[  306.358468][T14796] R13: 00007f91b35b6038 R14: 00007f91b35b5fa0 R15: 00007ffd765701a8
[  306.358498][T14796]  </TASK>
[  306.568897][T14798] xt_hashlimit: size too large, truncated to 1048576
[  306.579113][T14800] loop4: detected capacity change from 0 to 512
[  306.665646][T14800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.711990][T14800] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  306.769794][T14800] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3376: corrupted inode contents
[  306.862153][T14800] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.3376: mark_inode_dirty error
[  306.895946][T14800] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3376: corrupted inode contents
[  306.917518][T14800] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3376: mark_inode_dirty error
[  306.948747][   T29] kauditd_printk_skb: 362 callbacks suppressed
[  306.948764][   T29] audit: type=1326 audit(1767667896.191:25759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.3.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  306.979239][   T29] audit: type=1326 audit(1767667896.191:25760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.3.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  307.002904][   T29] audit: type=1326 audit(1767667896.191:25761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.3.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  307.016361][T14843] FAULT_INJECTION: forcing a failure.
[  307.016361][T14843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.026998][   T29] audit: type=1326 audit(1767667896.191:25762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.3.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  307.039852][T14843] CPU: 0 UID: 0 PID: 14843 Comm: syz.0.3393 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  307.039943][T14843] Tainted: [W]=WARN
[  307.039950][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  307.039963][T14843] Call Trace:
[  307.039970][T14843]  <TASK>
[  307.039980][T14843]  __dump_stack+0x1d/0x30
[  307.040006][T14843]  dump_stack_lvl+0x95/0xd0
[  307.040065][T14843]  dump_stack+0x15/0x1b
[  307.040152][T14843]  should_fail_ex+0x265/0x280
[  307.040175][T14843]  should_fail+0xb/0x20
[  307.040195][T14843]  should_fail_usercopy+0x1a/0x20
[  307.040236][T14843]  _copy_to_user+0x20/0xa0
[  307.040263][T14843]  simple_read_from_buffer+0xb5/0x130
[  307.040286][T14843]  proc_fail_nth_read+0x10e/0x150
[  307.040345][T14843]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  307.040372][T14843]  vfs_read+0x1a8/0x770
[  307.040450][T14843]  ? __rcu_read_unlock+0x4f/0x70
[  307.040471][T14843]  ? __fget_files+0x184/0x1c0
[  307.040494][T14843]  ? mutex_lock+0x58/0x90
[  307.040563][T14843]  ksys_read+0xda/0x1a0
[  307.040583][T14843]  __x64_sys_read+0x40/0x50
[  307.040609][T14843]  x64_sys_call+0x2889/0x3000
[  307.040706][T14843]  do_syscall_64+0xca/0x2b0
[  307.040739][T14843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.040761][T14843] RIP: 0033:0x7f91b335e15c
[  307.040800][T14843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  307.040820][T14843] RSP: 002b:00007f91b1dc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  307.040841][T14843] RAX: ffffffffffffffda RBX: 00007f91b35b5fa0 RCX: 00007f91b335e15c
[  307.040855][T14843] RDX: 000000000000000f RSI: 00007f91b1dc70a0 RDI: 0000000000000003
[  307.040869][T14843] RBP: 00007f91b1dc7090 R08: 0000000000000000 R09: 0000000000000000
[  307.040902][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  307.040915][T14843] R13: 00007f91b35b6038 R14: 00007f91b35b5fa0 R15: 00007ffd765701a8
[  307.041000][T14843]  </TASK>
[  307.292997][   T29] audit: type=1326 audit(1767667896.251:25763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14842 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  307.316780][   T29] audit: type=1326 audit(1767667896.251:25764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14842 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  307.340748][   T29] audit: type=1326 audit(1767667896.261:25765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14842 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  307.364695][   T29] audit: type=1326 audit(1767667896.261:25766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14842 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  307.388685][   T29] audit: type=1326 audit(1767667896.261:25767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14842 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  307.412361][   T29] audit: type=1326 audit(1767667896.261:25768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14842 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  307.510730][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.534649][T14860] loop3: detected capacity change from 0 to 2048
[  307.839339][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3407'.
[  307.905484][T14882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  307.912064][T14882] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  307.919692][T14882] vhci_hcd vhci_hcd.0: Device attached
[  308.027661][T14891] xt_hashlimit: max too large, truncated to 1048576
[  308.100312][T14891] FAULT_INJECTION: forcing a failure.
[  308.100312][T14891] name failslab, interval 1, probability 0, space 0, times 0
[  308.113180][T14891] CPU: 0 UID: 0 PID: 14891 Comm: syz.1.3411 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  308.113214][T14891] Tainted: [W]=WARN
[  308.113222][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.113235][T14891] Call Trace:
[  308.113296][T14891]  <TASK>
[  308.113307][T14891]  __dump_stack+0x1d/0x30
[  308.113337][T14891]  dump_stack_lvl+0x95/0xd0
[  308.113366][T14891]  dump_stack+0x15/0x1b
[  308.113384][T14891]  should_fail_ex+0x265/0x280
[  308.113411][T14891]  should_failslab+0x8c/0xb0
[  308.113477][T14891]  __kvmalloc_node_noprof+0x149/0x6b0
[  308.113501][T14891]  ? nf_hook_entries_grow+0x1c1/0x460
[  308.113600][T14891]  nf_hook_entries_grow+0x1c1/0x460
[  308.113637][T14891]  __nf_register_net_hook+0x18e/0x480
[  308.113668][T14891]  nf_register_net_hook+0x88/0x130
[  308.113754][T14891]  nf_register_net_hooks+0x44/0x150
[  308.113782][T14891]  nf_defrag_ipv4_enable+0x6e/0xc0
[  308.113841][T14891]  nf_ct_netns_do_get+0x13c/0x380
[  308.113871][T14891]  nf_ct_netns_get+0x87/0xc0
[  308.113942][T14891]  xt_ct_tg_check+0x7d/0x660
[  308.113971][T14891]  xt_ct_tg_check_v0+0xb7/0x120
[  308.114006][T14891]  xt_check_target+0x28d/0x4c0
[  308.114069][T14891]  ? mutex_unlock+0x4f/0x90
[  308.114135][T14891]  ? xt_find_target+0x1cd/0x200
[  308.114177][T14891]  translate_table+0xc31/0xf90
[  308.114289][T14891]  do_ipt_set_ctl+0x66f/0x820
[  308.114311][T14891]  ? trace_reschedule_exit+0xd/0xc0
[  308.114340][T14891]  nf_setsockopt+0x199/0x1b0
[  308.114372][T14891]  ip_setsockopt+0x102/0x110
[  308.114476][T14891]  udp_setsockopt+0x99/0xb0
[  308.114535][T14891]  sock_common_setsockopt+0x69/0x80
[  308.114605][T14891]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  308.114628][T14891]  __sys_setsockopt+0x184/0x200
[  308.114684][T14891]  __x64_sys_setsockopt+0x64/0x80
[  308.114716][T14891]  x64_sys_call+0x21d5/0x3000
[  308.114771][T14891]  do_syscall_64+0xca/0x2b0
[  308.114803][T14891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.114823][T14891] RIP: 0033:0x7f601dd4f749
[  308.114839][T14891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.114900][T14891] RSP: 002b:00007f601c7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  308.114926][T14891] RAX: ffffffffffffffda RBX: 00007f601dfa5fa0 RCX: 00007f601dd4f749
[  308.114942][T14891] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  308.114982][T14891] RBP: 00007f601c7b7090 R08: 0000000000000328 R09: 0000000000000000
[  308.115027][T14891] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000002
[  308.115041][T14891] R13: 00007f601dfa6038 R14: 00007f601dfa5fa0 R15: 00007ffe0b79db78
[  308.115063][T14891]  </TASK>
[  308.379998][ T4015] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  308.425925][T14882] net_ratelimit: 45 callbacks suppressed
[  308.425944][T14882] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  308.439307][ T3700] IPVS: starting estimator thread 0...
[  308.444909][ T4015] usb 1-1: new full-speed USB device number 2 using vhci_hcd
[  308.462569][T14886] vhci_hcd: connection reset by peer
[  308.469086][T14895] loop4: detected capacity change from 0 to 2048
[  308.475953][  T355] vhci_hcd vhci_hcd.0: stop threads
[  308.481201][  T355] vhci_hcd vhci_hcd.0: release socket
[  308.486788][  T355] vhci_hcd vhci_hcd.0: disconnect device
[  308.534986][T14897] IPVS: using max 2112 ests per chain, 105600 per kthread
[  308.590562][T14916] loop4: detected capacity change from 0 to 2048
[  308.622482][T14925] netlink: 'syz.2.3418': attribute type 1 has an invalid length.
[  308.648890][T14925] bond11: entered promiscuous mode
[  308.654353][T14925] 8021q: adding VLAN 0 to HW filter on device bond11
[  308.665453][ T3755] Alternate GPT is invalid, using primary GPT.
[  308.671779][ T3755]  loop4: p2 p3 p7
[  308.685566][T14916] Alternate GPT is invalid, using primary GPT.
[  308.692115][T14916]  loop4: p2 p3 p7
[  308.709234][T14925] bond11: (slave bridge9): making interface the new active one
[  308.716933][T14925] bridge9: entered promiscuous mode
[  308.725446][T14925] bridge9: left promiscuous mode
[  308.788685][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  308.789525][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  308.799768][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  308.843078][T14939] SELinux:  policydb version 280 does not match my version range 15-35
[  308.845514][T14942] FAULT_INJECTION: forcing a failure.
[  308.845514][T14942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.864785][T14942] CPU: 1 UID: 0 PID: 14942 Comm: syz.3.3424 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  308.864820][T14942] Tainted: [W]=WARN
[  308.864827][T14942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.864838][T14942] Call Trace:
[  308.864921][T14942]  <TASK>
[  308.864931][T14942]  __dump_stack+0x1d/0x30
[  308.864957][T14942]  dump_stack_lvl+0x95/0xd0
[  308.864978][T14942]  dump_stack+0x15/0x1b
[  308.864999][T14942]  should_fail_ex+0x265/0x280
[  308.865026][T14942]  should_fail+0xb/0x20
[  308.865128][T14939] SELinux: failed to load policy
[  308.865123][T14942]  should_fail_usercopy+0x1a/0x20
[  308.865160][T14942]  _copy_from_user+0x1c/0xb0
[  308.865251][T14942]  ___sys_sendmsg+0xc1/0x1d0
[  308.865291][T14942]  __x64_sys_sendmsg+0xd4/0x160
[  308.865321][T14942]  x64_sys_call+0x17ba/0x3000
[  308.865346][T14942]  do_syscall_64+0xca/0x2b0
[  308.865385][T14942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.865434][T14942] RIP: 0033:0x7f88a937f749
[  308.865452][T14942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.865488][T14942] RSP: 002b:00007f88a7ddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.865510][T14942] RAX: ffffffffffffffda RBX: 00007f88a95d5fa0 RCX: 00007f88a937f749
[  308.865524][T14942] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  308.865561][T14942] RBP: 00007f88a7ddf090 R08: 0000000000000000 R09: 0000000000000000
[  308.865574][T14942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.865637][T14942] R13: 00007f88a95d6038 R14: 00007f88a95d5fa0 R15: 00007fffce151c58
[  308.865656][T14942]  </TASK>
[  308.888396][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3423'.
[  308.948145][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  308.948248][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3423'.
[  308.959893][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  308.985121][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  309.135469][T14960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.183799][T14966] xt_hashlimit: size too large, truncated to 1048576
[  309.301137][T14960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.322589][T14957] loop4: detected capacity change from 0 to 512
[  309.346324][T14957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.362208][T14978] netlink: 'syz.3.3435': attribute type 1 has an invalid length.
[  309.378734][T14978] bond1: entered promiscuous mode
[  309.385541][T14978] 8021q: adding VLAN 0 to HW filter on device bond1
[  309.438052][T14960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.488036][T14983] bond1: (slave bridge1): making interface the new active one
[  309.495672][T14983] bridge1: entered promiscuous mode
[  309.507713][T14983] bridge1: left promiscuous mode
[  309.581183][T14960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.624230][T14988] loop3: detected capacity change from 0 to 128
[  309.635185][T14988] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  309.648480][T14988] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.665997][  T355] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.687519][  T355] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.704956][  T355] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.717667][  T355] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.727458][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  309.755853][T14991] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  309.768105][T14991] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  309.819293][T14998] lo speed is unknown, defaulting to 1000
[  309.889261][T14998] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3440'.
[  309.912060][T14998] netlink: zone id is out of range
[  309.917267][T14998] netlink: zone id is out of range
[  309.923080][T14998] netlink: zone id is out of range
[  309.928935][T14998] netlink: zone id is out of range
[  309.934417][T14998] netlink: zone id is out of range
[  309.939603][T14998] netlink: zone id is out of range
[  309.945226][T14998] netlink: zone id is out of range
[  309.950623][T14998] netlink: zone id is out of range
[  309.950707][T15004] loop3: detected capacity change from 0 to 1024
[  309.955916][T14998] netlink: zone id is out of range
[  309.985517][T15004] EXT4-fs: Ignoring removed oldalloc option
[  309.998849][T15004] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  310.016360][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.027337][T15004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.111587][T15010] loop4: detected capacity change from 0 to 2048
[  310.127762][T14292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.313930][T15033] loop4: detected capacity change from 0 to 2048
[  310.450519][T15033] Alternate GPT is invalid, using primary GPT.
[  310.456998][T15033]  loop4: p2 p3 p7
[  310.537856][T15047] lo speed is unknown, defaulting to 1000
[  310.769918][T15049] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  310.824086][T15050] lo speed is unknown, defaulting to 1000
[  310.925904][T15049] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.977930][T15049] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3458'.
[  311.014364][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  311.029398][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  311.029995][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  311.297364][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  311.363752][T15079] set_capacity_and_notify: 1 callbacks suppressed
[  311.363772][T15079] loop4: detected capacity change from 0 to 2048
[  311.366808][T15080] lo speed is unknown, defaulting to 1000
[  311.410982][T15079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.444760][T15089] loop3: detected capacity change from 0 to 128
[  311.451570][T15079] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.541132][T15089] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  311.585505][T15089] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.588869][T15094] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3470: bg 0: block 345: padding at end of block bitmap is not set
[  311.610914][T15094] EXT4-fs (loop4): Remounting filesystem read-only
[  311.621013][T13948] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  311.662351][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  311.682308][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.740827][T15101] netlink: 'syz.4.3477': attribute type 1 has an invalid length.
[  311.756456][T15101] bond2: entered promiscuous mode
[  311.762458][T15101] 8021q: adding VLAN 0 to HW filter on device bond2
[  311.992812][T15116] lo speed is unknown, defaulting to 1000
[  312.121000][T15118] loop3: detected capacity change from 0 to 2048
[  312.127905][T15118] ext2: Unknown parameter 'dont_hash'
[  312.588169][T15133] futex_wake_op: syz.0.3487 tries to shift op by -1; fix this program
[  312.626337][   T29] kauditd_printk_skb: 401 callbacks suppressed
[  312.626361][   T29] audit: type=1326 audit(1767667901.871:26170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.643055][T15137] netlink: 'syz.2.3488': attribute type 1 has an invalid length.
[  312.656596][   T29] audit: type=1326 audit(1767667901.901:26171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.698480][T15136] loop3: detected capacity change from 0 to 2048
[  312.721272][T15137] bond12: entered promiscuous mode
[  312.735149][T15137] 8021q: adding VLAN 0 to HW filter on device bond12
[  312.741907][   T29] audit: type=1326 audit(1767667901.931:26172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.765660][   T29] audit: type=1326 audit(1767667901.931:26173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.789561][   T29] audit: type=1326 audit(1767667901.931:26174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.813279][   T29] audit: type=1326 audit(1767667901.931:26175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.836916][   T29] audit: type=1326 audit(1767667901.931:26176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.860704][   T29] audit: type=1326 audit(1767667901.931:26177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.865062][T15147] loop4: detected capacity change from 0 to 2048
[  312.885167][   T29] audit: type=1326 audit(1767667901.931:26178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88a937f749 code=0x7ffc0000
[  312.915398][   T29] audit: type=1326 audit(1767667901.931:26179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88a937f783 code=0x7ffc0000
[  312.980994][ T3755] Alternate GPT is invalid, using primary GPT.
[  312.987414][ T3755]  loop3: p2 p3 p7
[  312.987986][T15147] Alternate GPT is invalid, using primary GPT.
[  312.997809][T15147]  loop4: p2 p3 p7
[  313.013542][T15136] Alternate GPT is invalid, using primary GPT.
[  313.020031][T15136]  loop3: p2 p3 p7
[  313.076931][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  313.203172][T15163] vlan2: entered promiscuous mode
[  313.208532][T15163] vlan2: entered allmulticast mode
[  313.213872][T15163] hsr_slave_1: entered allmulticast mode
[  313.224337][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'.
[  313.338316][T15173] netlink: 'syz.3.3502': attribute type 1 has an invalid length.
[  313.402016][T15173] bond2: entered promiscuous mode
[  313.408642][T15173] 8021q: adding VLAN 0 to HW filter on device bond2
[  313.454573][T15179] lo speed is unknown, defaulting to 1000
[  313.583248][T15181] loop4: detected capacity change from 0 to 2048
[  313.590361][T15181] ext2: Unknown parameter 'dont_hash'
[  313.833825][ T4015] usb 1-1: enqueue for inactive port 0
[  313.839479][ T4015] usb 1-1: enqueue for inactive port 0
[  313.873442][T15173] bond2: (slave bridge1): making interface the new active one
[  313.880987][T15173] bridge1: entered promiscuous mode
[  313.893587][T15173] bridge1: left promiscuous mode
[  313.915132][ T4015] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  314.005060][T15185] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3504'.
[  314.075115][T15185] net_ratelimit: 105 callbacks suppressed
[  314.075135][T15185] netlink: zone id is out of range
[  314.086212][T15185] netlink: zone id is out of range
[  314.091826][T15185] netlink: zone id is out of range
[  314.097588][T15185] netlink: zone id is out of range
[  314.103222][T15185] netlink: zone id is out of range
[  314.108417][T15185] netlink: zone id is out of range
[  314.118417][T15185] netlink: zone id is out of range
[  314.123791][T15185] netlink: zone id is out of range
[  314.129136][T15185] netlink: zone id is out of range
[  314.134355][T15185] netlink: zone id is out of range
[  314.160007][T15184] lo speed is unknown, defaulting to 1000
[  314.166398][T15199] netlink: 'syz.0.3509': attribute type 1 has an invalid length.
[  314.226834][T15199] bond4: entered promiscuous mode
[  314.232117][T15199] 8021q: adding VLAN 0 to HW filter on device bond4
[  314.556074][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3513'.
[  314.915939][T15238] lo speed is unknown, defaulting to 1000
[  314.971476][T15239] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3521'.
[  315.253075][T15249] lo speed is unknown, defaulting to 1000
[  315.261518][T15246] loop4: detected capacity change from 0 to 2048
[  315.305967][T15250] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3525'.
[  315.599868][T15265] netlink: 'syz.1.3530': attribute type 1 has an invalid length.
[  315.612190][T15268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3532'.
[  315.621556][T15259] loop4: detected capacity change from 0 to 512
[  315.631117][T15265] bond4: entered promiscuous mode
[  315.637129][T15265] 8021q: adding VLAN 0 to HW filter on device bond4
[  315.655943][T15259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.988688][T15299] netlink: 'syz.3.3543': attribute type 1 has an invalid length.
[  316.001610][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3544'.
[  316.005356][T15299] bond3: entered promiscuous mode
[  316.016330][T15299] 8021q: adding VLAN 0 to HW filter on device bond3
[  316.034923][T15304] netlink: 'syz.1.3545': attribute type 1 has an invalid length.
[  316.052270][T15304] bond5: entered promiscuous mode
[  316.066700][T15304] 8021q: adding VLAN 0 to HW filter on device bond5
[  316.076670][T15309] loop3: detected capacity change from 0 to 2048
[  316.128314][T15309] Alternate GPT is invalid, using primary GPT.
[  316.134756][T15309]  loop3: p2 p3 p7
[  316.201158][T15313] netlink: 'syz.1.3549': attribute type 1 has an invalid length.
[  316.219611][T15315] loop3: detected capacity change from 0 to 2048
[  316.232122][T15313] bond6: entered promiscuous mode
[  316.237978][T15313] 8021q: adding VLAN 0 to HW filter on device bond6
[  316.264407][T15313] bond6: (slave bridge6): making interface the new active one
[  316.272135][T15313] bridge6: entered promiscuous mode
[  316.293525][T15313] bridge6: left promiscuous mode
[  316.335027][T15320] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  316.335027][T15320]    program syz.2.3551 not setting count and/or reply_len properly
[  316.352690][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.394835][T15321] Alternate GPT is invalid, using primary GPT.
[  316.401590][T15321]  loop3: p2 p3 p7
[  316.504787][T15325] xt_hashlimit: size too large, truncated to 1048576
[  316.620445][T15332] netlink: 'syz.2.3557': attribute type 1 has an invalid length.
[  316.641813][T15332] bond13: entered promiscuous mode
[  316.648386][T15332] 8021q: adding VLAN 0 to HW filter on device bond13
[  316.727659][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3556'.
[  316.832836][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  316.848183][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  316.861761][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  316.926879][T15340] netlink: 'syz.0.3558': attribute type 1 has an invalid length.
[  317.074821][T15340] bond5: entered promiscuous mode
[  317.080474][T15340] 8021q: adding VLAN 0 to HW filter on device bond5
[  317.098873][T15343] set_capacity_and_notify: 1 callbacks suppressed
[  317.098888][T15343] loop3: detected capacity change from 0 to 2048
[  317.186031][T15343] Alternate GPT is invalid, using primary GPT.
[  317.192443][T15343]  loop3: p2 p3 p7
[  317.326882][T15359] netlink: 'syz.1.3564': attribute type 1 has an invalid length.
[  317.360281][T15359] bond7: entered promiscuous mode
[  317.375640][T15359] 8021q: adding VLAN 0 to HW filter on device bond7
[  317.390043][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  317.396903][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  317.487872][T15366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  317.487872][T15366]    program syz.0.3566 not setting count and/or reply_len properly
[  317.493689][T15359] bond7: (slave bridge6): making interface the new active one
[  317.512476][T15359] bridge6: entered promiscuous mode
[  317.546377][T15359] bridge6: left promiscuous mode
[  317.597327][T15368] netlink: 'syz.2.3567': attribute type 1 has an invalid length.
[  317.627803][T15368] bond14: entered promiscuous mode
[  317.633741][T15363] loop4: detected capacity change from 0 to 512
[  317.640389][   T29] kauditd_printk_skb: 860 callbacks suppressed
[  317.640404][   T29] audit: type=1326 audit(1767667906.881:27040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff64161e3aa code=0x7ffc0000
[  317.676767][T15368] 8021q: adding VLAN 0 to HW filter on device bond14
[  317.709399][   T29] audit: type=1326 audit(1767667906.921:27041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff64161e3aa code=0x7ffc0000
[  317.733288][   T29] audit: type=1326 audit(1767667906.921:27042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff64161de97 code=0x7ffc0000
[  317.757302][   T29] audit: type=1326 audit(1767667906.921:27043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff641620eea code=0x7ffc0000
[  317.781192][   T29] audit: type=1400 audit(1767667906.921:27044): avc:  denied  { create } for  pid=15370 comm="syz.0.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  317.785674][T15363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.801084][   T29] audit: type=1400 audit(1767667906.931:27045): avc:  denied  { connect } for  pid=15370 comm="syz.0.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  317.833595][   T29] audit: type=1400 audit(1767667906.931:27046): avc:  denied  { setopt } for  pid=15370 comm="syz.0.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  317.854274][   T29] audit: type=1400 audit(1767667906.931:27047): avc:  denied  { write } for  pid=15370 comm="syz.0.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  317.875266][   T29] audit: type=1400 audit(1767667906.951:27048): avc:  denied  { read write } for  pid=15367 comm="syz.2.3567" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  317.903676][   T29] audit: type=1400 audit(1767667906.951:27049): avc:  denied  { open } for  pid=15367 comm="syz.2.3567" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  317.952468][T15372] bond14: (slave bridge11): making interface the new active one
[  317.960552][T15372] bridge11: entered promiscuous mode
[  317.968473][T15372] bridge11: left promiscuous mode
[  318.034136][T15383] lo speed is unknown, defaulting to 1000
[  318.058266][T15390] loop3: detected capacity change from 0 to 2048
[  318.096967][T15390] Alternate GPT is invalid, using primary GPT.
[  318.103515][T15390]  loop3: p2 p3 p7
[  318.109796][T15392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.155884][T15392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.228478][T15392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.252954][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.279451][T15392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.305209][T15398] futex_wake_op: syz.3.3577 tries to shift op by -1; fix this program
[  318.342109][T13948] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.350815][T15403] loop4: detected capacity change from 0 to 8192
[  318.358903][T13948] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.379709][T13948] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.393687][T13948] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.418445][T13893] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  318.426563][T13893] FAT-fs (loop4): Filesystem has been set read-only
[  318.461841][T15409] netlink: 'syz.3.3583': attribute type 1 has an invalid length.
[  318.477634][T15409] bond4: entered promiscuous mode
[  318.482956][T15409] 8021q: adding VLAN 0 to HW filter on device bond4
[  318.502217][T15409] bond4: (slave bridge2): making interface the new active one
[  318.509795][T15409] bridge2: entered promiscuous mode
[  318.516969][T15409] bridge2: left promiscuous mode
[  318.643327][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3586'.
[  318.677688][T15425] loop4: detected capacity change from 0 to 2048
[  318.718023][ T3755] Alternate GPT is invalid, using primary GPT.
[  318.724676][ T3755]  loop4: p2 p3 p7
[  318.735834][T15425] Alternate GPT is invalid, using primary GPT.
[  318.742467][T15425]  loop4: p2 p3 p7
[  318.799583][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  318.810124][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  318.820123][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  318.853957][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  318.865593][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  318.990186][T15438] futex_wake_op: syz.4.3592 tries to shift op by -1; fix this program
[  319.138943][T15451] netlink: 'syz.4.3596': attribute type 1 has an invalid length.
[  319.151847][T15451] bond3: entered promiscuous mode
[  319.157540][T15451] 8021q: adding VLAN 0 to HW filter on device bond3
[  319.175514][T15451] bond3: (slave bridge3): making interface the new active one
[  319.183259][T15451] bridge3: entered promiscuous mode
[  319.190606][T15451] bridge3: left promiscuous mode
[  319.205386][T15454] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  319.205386][T15454]    program syz.0.3597 not setting count and/or reply_len properly
[  319.364676][T15462] lo speed is unknown, defaulting to 1000
[  319.500240][T15477] bond4: entered promiscuous mode
[  319.505673][T15477] 8021q: adding VLAN 0 to HW filter on device bond4
[  319.616290][T15494] futex_wake_op: syz.3.3610 tries to shift op by -1; fix this program
[  319.633085][T15496] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  319.633085][T15496]    program syz.4.3616 not setting count and/or reply_len properly
[  319.684464][T15499] loop4: detected capacity change from 0 to 2048
[  319.726973][ T3007] Alternate GPT is invalid, using primary GPT.
[  319.733594][ T3007]  loop4: p2 p3 p7
[  319.757938][T15499] Alternate GPT is invalid, using primary GPT.
[  319.765112][T15499]  loop4: p2 p3 p7
[  319.896980][T15509] loop4: detected capacity change from 0 to 1024
[  319.906390][T15509] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  319.917677][T15509] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  319.928481][T15509] JBD2: no valid journal superblock found
[  319.934365][T15509] EXT4-fs (loop4): Could not load journal inode
[  319.941599][T15513] xt_hashlimit: size too large, truncated to 1048576
[  320.014590][T15518] loop3: detected capacity change from 0 to 2048
[  320.086693][T15518] Alternate GPT is invalid, using primary GPT.
[  320.093143][T15518]  loop3: p2 p3 p7
[  320.174725][T15526] loop3: detected capacity change from 0 to 2048
[  320.255993][T15526] Alternate GPT is invalid, using primary GPT.
[  320.262623][T15526]  loop3: p2 p3 p7
[  320.284028][T15529] futex_wake_op: syz.4.3630 tries to shift op by -1; fix this program
[  320.300514][ T3007] Alternate GPT is invalid, using primary GPT.
[  320.307020][ T3007]  loop3: p2 p3 p7
[  320.606370][T15553] loop3: detected capacity change from 0 to 2048
[  320.637903][T15553] Alternate GPT is invalid, using primary GPT.
[  320.644662][T15553]  loop3: p2 p3 p7
[  320.667677][T15559] lo speed is unknown, defaulting to 1000
[  320.769636][T15564] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  320.810550][T15564] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.869790][T15561] lo speed is unknown, defaulting to 1000
[  320.890106][T15575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.912732][T15564] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3642'.
[  320.933231][T15575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.935030][T15564] net_ratelimit: 183 callbacks suppressed
[  320.935045][T15564] netlink: zone id is out of range
[  320.955324][T15564] netlink: zone id is out of range
[  320.971083][T15564] netlink: zone id is out of range
[  320.981163][T15564] netlink: zone id is out of range
[  321.004992][T15564] netlink: zone id is out of range
[  321.010139][T15564] netlink: zone id is out of range
[  321.022787][T15575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.045903][T15564] netlink: zone id is out of range
[  321.061478][T15564] netlink: zone id is out of range
[  321.066810][T15564] netlink: zone id is out of range
[  321.071943][T15564] netlink: zone id is out of range
[  321.087650][T15575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.162643][T13948] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.177162][T13948] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.185706][T13948] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.194751][T13948] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.259650][T13893] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  321.367055][T15585] vhci_hcd vhci_hcd.3: invalid port number 9
[  321.815212][T15596] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  321.815212][T15596]    program syz.3.3654 not setting count and/or reply_len properly
[  321.917679][T15610] lo speed is unknown, defaulting to 1000
[  322.137188][T15618] vhci_hcd vhci_hcd.3: invalid port number 9
[  322.205943][T15620] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.277089][T15620] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.336841][T15620] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.396580][T15620] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.989736][   T29] kauditd_printk_skb: 840 callbacks suppressed
[  322.989832][   T29] audit: type=1326 audit(1767667912.231:27890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.063533][T15650] set_capacity_and_notify: 1 callbacks suppressed
[  323.063551][T15650] loop4: detected capacity change from 0 to 2048
[  323.077616][   T29] audit: type=1326 audit(1767667912.231:27891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.101964][   T29] audit: type=1326 audit(1767667912.231:27892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.126020][   T29] audit: type=1326 audit(1767667912.231:27893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.150068][   T29] audit: type=1326 audit(1767667912.231:27894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.174288][   T29] audit: type=1326 audit(1767667912.231:27895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.198046][   T29] audit: type=1326 audit(1767667912.231:27896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.222092][   T29] audit: type=1326 audit(1767667912.231:27897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f91b335f749 code=0x7ffc0000
[  323.246129][   T29] audit: type=1326 audit(1767667912.231:27898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91b335f783 code=0x7ffc0000
[  323.269658][   T29] audit: type=1326 audit(1767667912.241:27899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91b335e1ff code=0x7ffc0000
[  323.336423][T15660] validate_nla: 1 callbacks suppressed
[  323.336441][T15660] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  323.358061][T15660] bond15: entered promiscuous mode
[  323.363526][T15660] 8021q: adding VLAN 0 to HW filter on device bond15
[  323.385538][T15660] bond15: (slave bridge11): making interface the new active one
[  323.393418][T15660] bridge11: entered promiscuous mode
[  323.400882][T15660] bridge11: left promiscuous mode
[  323.608421][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3681'.
[  323.638147][T15669] lo speed is unknown, defaulting to 1000
[  323.705888][T15671] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  323.705888][T15671]    program syz.2.3682 not setting count and/or reply_len properly
[  323.928558][T15692] netlink: 'syz.2.3689': attribute type 1 has an invalid length.
[  323.942508][T15692] bond16: entered promiscuous mode
[  323.948371][T15692] 8021q: adding VLAN 0 to HW filter on device bond16
[  323.967824][T15692] bond16: (slave bridge11): making interface the new active one
[  323.975535][T15692] bridge11: entered promiscuous mode
[  323.983100][T15692] bridge11: left promiscuous mode
[  324.482422][T15719] xt_hashlimit: size too large, truncated to 1048576
[  324.959387][T15734] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3705'.
[  324.968864][T15734] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3705'.
[  324.978149][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'.
[  325.155550][T15743] futex_wake_op: syz.2.3709 tries to shift op by -1; fix this program
[  325.222094][T15765] netlink: 'syz.0.3719': attribute type 29 has an invalid length.
[  325.231363][T15765] netlink: 'syz.0.3719': attribute type 29 has an invalid length.
[  325.430132][T15782] pimreg: entered allmulticast mode
[  325.457263][T15788] netlink: 'syz.1.3729': attribute type 1 has an invalid length.
[  325.478640][T15786] loop4: detected capacity change from 0 to 2048
[  325.498961][T15788] bond8: entered promiscuous mode
[  325.504680][T15788] 8021q: adding VLAN 0 to HW filter on device bond8
[  325.545321][T15786] Alternate GPT is invalid, using primary GPT.
[  325.551786][T15786]  loop4: p2 p3 p7
[  325.609260][T15800] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  325.609260][T15800]    program syz.0.3732 not setting count and/or reply_len properly
[  325.628913][   T38] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.662398][   T38] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.696335][   T38] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.720061][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  325.724079][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  325.736900][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  325.750623][   T38] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.804357][T15805] xt_hashlimit: size too large, truncated to 1048576
[  326.145955][T15770] pimreg: left allmulticast mode
[  326.281039][T15830] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  326.300176][T15847] loop3: detected capacity change from 0 to 1024
[  326.329013][T15847] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  326.340266][T15847] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  326.367095][T15847] JBD2: no valid journal superblock found
[  326.373058][T15847] EXT4-fs (loop3): Could not load journal inode
[  326.454535][T15863] lo speed is unknown, defaulting to 1000
[  326.477925][T15865] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  326.477925][T15865]    program syz.0.3758 not setting count and/or reply_len properly
[  326.534310][T15868] loop4: detected capacity change from 0 to 128
[  326.562283][T15867] lo speed is unknown, defaulting to 1000
[  326.583756][T15868] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  326.655197][T15868] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.681243][T15878] loop3: detected capacity change from 0 to 128
[  326.756647][T15876] vhci_hcd vhci_hcd.3: invalid port number 9
[  326.756971][T15878] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  326.790501][T15878] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.872559][T15863] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3757'.
[  326.888085][T15872] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3759'.
[  326.899244][T15863] net_ratelimit: 53 callbacks suppressed
[  326.899264][T15863] netlink: zone id is out of range
[  326.903886][T15890] lo speed is unknown, defaulting to 1000
[  326.904954][T15863] netlink: zone id is out of range
[  326.912366][T15872] netlink: zone id is out of range
[  326.926480][T15872] netlink: zone id is out of range
[  326.932092][T15863] netlink: zone id is out of range
[  326.942360][T15863] netlink: zone id is out of range
[  326.951841][T15863] netlink: zone id is out of range
[  326.958476][T15863] netlink: zone id is out of range
[  326.973547][T15872] netlink: zone id is out of range
[  326.974496][T15863] netlink: zone id is out of range
[  326.993874][T15892] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3766'.
[  327.086706][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  327.121998][T13893] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  327.159543][T15911] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  327.159543][T15911]    program syz.0.3773 not setting count and/or reply_len properly
[  327.196186][T15917] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  327.196186][T15917]    program syz.4.3772 not setting count and/or reply_len properly
[  327.241308][T15913] lo speed is unknown, defaulting to 1000
[  327.251590][T15919] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3774'.
[  327.477132][T15938] xt_hashlimit: max too large, truncated to 1048576
[  327.485435][T15938] xt_CT: You must specify a L4 protocol and not use inversions on it
[  327.573856][T15943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3783'.
[  327.677799][T15946] loop3: detected capacity change from 0 to 512
[  327.682329][T15957] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  327.682329][T15957]    program syz.0.3789 not setting count and/or reply_len properly
[  327.727268][T15946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.771013][T15963] loop4: detected capacity change from 0 to 2048
[  327.851012][ T3755] Alternate GPT is invalid, using primary GPT.
[  327.857726][ T3755]  loop4: p2 p3 p7
[  327.872103][T15963] Alternate GPT is invalid, using primary GPT.
[  327.878596][T15963]  loop4: p2 p3 p7
[  327.942191][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  327.956463][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  327.971002][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  327.983287][T15978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3797'.
[  327.996627][   T29] kauditd_printk_skb: 534 callbacks suppressed
[  327.996645][   T29] audit: type=1400 audit(1767667917.241:28434): avc:  denied  { remount } for  pid=15977 comm="syz.2.3797" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  328.014157][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  328.025903][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  328.034221][   T29] audit: type=1400 audit(1767667917.241:28435): avc:  denied  { read write } for  pid=15977 comm="syz.2.3797" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  328.044626][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  328.070688][   T29] audit: type=1400 audit(1767667917.241:28436): avc:  denied  { open } for  pid=15977 comm="syz.2.3797" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  328.114425][   T29] audit: type=1326 audit(1767667917.351:28437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15973 comm="syz.4.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64161f749 code=0x7ffc0000
[  328.138342][   T29] audit: type=1326 audit(1767667917.351:28438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15973 comm="syz.4.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64161f749 code=0x7ffc0000
[  328.170340][   T29] audit: type=1400 audit(1767667917.411:28439): avc:  denied  { create } for  pid=15981 comm="syz.2.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  328.201232][   T29] audit: type=1400 audit(1767667917.431:28440): avc:  denied  { read write } for  pid=13893 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  328.226585][   T29] audit: type=1400 audit(1767667917.431:28441): avc:  denied  { open } for  pid=13893 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  328.251784][   T29] audit: type=1400 audit(1767667917.441:28442): avc:  denied  { ioctl } for  pid=13893 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  328.277737][   T29] audit: type=1400 audit(1767667917.441:28443): avc:  denied  { create } for  pid=15983 comm="syz.2.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  328.320672][T14292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.400069][T15996] loop3: detected capacity change from 0 to 128
[  328.428188][T15996] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  328.441268][T15996] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.457412][T16000] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  328.457412][T16000]    program syz.4.3807 not setting count and/or reply_len properly
[  328.478551][T15992] futex_wake_op: syz.2.3803 tries to shift op by -1; fix this program
[  328.489332][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  328.592327][T16011] loop3: detected capacity change from 0 to 2048
[  328.652533][T16015] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  328.652533][T16015]    program syz.2.3813 not setting count and/or reply_len properly
[  328.968523][T16032] loop3: detected capacity change from 0 to 1024
[  329.006776][T16032] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  329.017788][T16032] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  329.050332][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'.
[  329.078754][T16032] JBD2: no valid journal superblock found
[  329.084538][T16032] EXT4-fs (loop3): Could not load journal inode
[  329.262472][T16047] SELinux:  Context @ is not valid (left unmapped).
[  329.398340][T16051] futex_wake_op: syz.2.3828 tries to shift op by -1; fix this program
[  329.508658][T16067] xt_hashlimit: size too large, truncated to 1048576
[  329.521893][T16072] loop3: detected capacity change from 0 to 1024
[  329.535182][T16072] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  329.546214][T16072] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  329.559859][T16072] JBD2: no valid journal superblock found
[  329.565798][T16072] EXT4-fs (loop3): Could not load journal inode
[  329.676916][T16076] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  329.676916][T16076]    program syz.2.3836 not setting count and/or reply_len properly
[  329.735716][T16084] loop3: detected capacity change from 0 to 1024
[  329.743701][T16084] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  329.754918][T16084] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  329.799141][T16084] JBD2: no valid journal superblock found
[  329.804961][T16084] EXT4-fs (loop3): Could not load journal inode
[  329.986488][T16102] netlink: 'syz.0.3847': attribute type 1 has an invalid length.
[  330.234558][T16116] __nla_validate_parse: 1 callbacks suppressed
[  330.234592][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3851'.
[  330.276716][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3853'.
[  330.531345][T16127] loop4: detected capacity change from 0 to 512
[  330.558961][T16127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.613883][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.662286][T16144] xt_hashlimit: size too large, truncated to 1048576
[  330.858648][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3866'.
[  331.687646][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3881'.
[  331.927283][T16211] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.937290][T16211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.975051][T16215] futex_wake_op: syz.0.3888 tries to shift op by -1; fix this program
[  331.997142][T16211] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.007048][T16211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.047136][T16219] loop4: detected capacity change from 0 to 128
[  332.058457][T16211] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.068297][T16211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.151041][T16219] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  332.164388][T16219] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.206699][T16211] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.217004][T16211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.228362][T13893] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  332.276194][   T38] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.284434][   T38] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.315525][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.323888][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.435161][   T38] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.443455][   T38] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.485241][   T38] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.493590][   T38] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.624464][T16236] lo speed is unknown, defaulting to 1000
[  332.921329][T16237] dvmrp1: entered allmulticast mode
[  332.940061][T16237] dvmrp1: left allmulticast mode
[  333.010223][   T29] kauditd_printk_skb: 502 callbacks suppressed
[  333.010250][   T29] audit: type=1400 audit(1767667922.251:28946): avc:  denied  { cpu } for  pid=16233 comm="syz.4.3894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  333.239750][   T29] audit: type=1326 audit(1767667922.481:28947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.263629][   T29] audit: type=1326 audit(1767667922.481:28948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.287259][   T29] audit: type=1326 audit(1767667922.481:28949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.311192][   T29] audit: type=1326 audit(1767667922.481:28950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.336483][   T29] audit: type=1326 audit(1767667922.571:28951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.360544][   T29] audit: type=1326 audit(1767667922.571:28952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.384579][   T29] audit: type=1326 audit(1767667922.571:28953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.408529][   T29] audit: type=1326 audit(1767667922.571:28954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.432514][   T29] audit: type=1326 audit(1767667922.571:28955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f129138f749 code=0x7ffc0000
[  333.779141][T16257] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  333.779141][T16257]    program syz.1.3902 not setting count and/or reply_len properly
[  333.818784][T16260] lo speed is unknown, defaulting to 1000
[  333.894228][T16261] loop3: detected capacity change from 0 to 128
[  334.148523][T16261] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  334.205267][T16267] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  334.205267][T16267]    program syz.2.3905 not setting count and/or reply_len properly
[  334.223949][T16261] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.238139][T16261] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3903'.
[  334.247647][T16261] net_ratelimit: 226 callbacks suppressed
[  334.247668][T16261] netlink: zone id is out of range
[  334.258552][T16261] netlink: zone id is out of range
[  334.263867][T16261] netlink: zone id is out of range
[  334.269421][T16261] netlink: zone id is out of range
[  334.274741][T16261] netlink: zone id is out of range
[  334.280040][T16261] netlink: zone id is out of range
[  334.285684][T16261] netlink: zone id is out of range
[  334.291363][T16261] netlink: zone id is out of range
[  334.296612][T16261] netlink: zone id is out of range
[  334.301744][T16261] netlink: zone id is out of range
[  334.453234][T16272] netlink: 'syz.4.3908': attribute type 1 has an invalid length.
[  334.478270][T16272] bond5: entered promiscuous mode
[  334.483658][T16272] 8021q: adding VLAN 0 to HW filter on device bond5
[  334.534537][T16272] bond5: (slave bridge6): making interface the new active one
[  334.542119][T16272] bridge6: entered promiscuous mode
[  334.551996][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'.
[  334.561733][T16272] bridge6: left promiscuous mode
[  334.568902][T14292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  334.885696][T16309] netlink: 'syz.2.3922': attribute type 1 has an invalid length.
[  334.909367][T16309] bond17: entered promiscuous mode
[  334.915097][T16309] 8021q: adding VLAN 0 to HW filter on device bond17
[  334.928197][T16311] team0: Device ip6gre0 is of different type
[  334.962882][T16309] bond17: (slave bridge13): making interface the new active one
[  334.970678][T16309] bridge13: entered promiscuous mode
[  334.978671][T16309] bridge13: left promiscuous mode
[  335.258662][T16319] lo speed is unknown, defaulting to 1000
[  335.321074][T16320] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3926'.
[  335.462483][T16324] futex_wake_op: syz.3.3928 tries to shift op by -1; fix this program
[  335.718568][T16353] loop4: detected capacity change from 0 to 2048
[  335.750731][T16353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.786390][T16353] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.925251][T16367] netlink: 'syz.0.3944': attribute type 1 has an invalid length.
[  335.949264][T16369] ==================================================================
[  335.957550][T16369] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  335.965059][T16369] 
[  335.967392][T16369] read-write to 0xffff888107a3d220 of 8 bytes by task 16353 on cpu 1:
[  335.976503][T16369]  __xa_set_mark+0xd2/0x1a0
[  335.981279][T16369]  __folio_mark_dirty+0x384/0x4a0
[  335.986407][T16369]  mark_buffer_dirty+0x11e/0x210
[  335.991546][T16369]  folio_zero_new_buffers+0x28c/0x2e0
[  335.997276][T16369]  block_write_end+0x200/0x210
[  336.002138][T16369]  ext4_da_write_end+0x1d3/0x800
[  336.007285][T16369]  generic_perform_write+0x312/0x490
[  336.012596][T16369]  ext4_buffered_write_iter+0x1ee/0x3c0
[  336.018184][T16369]  ext4_file_write_iter+0x387/0xf60
[  336.023502][T16369]  vfs_write+0x52a/0x960
[  336.027838][T16369]  ksys_write+0xda/0x1a0
[  336.032190][T16369]  __x64_sys_write+0x40/0x50
[  336.036800][T16369]  x64_sys_call+0x2847/0x3000
[  336.041508][T16369]  do_syscall_64+0xca/0x2b0
[  336.046037][T16369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.051938][T16369] 
[  336.054441][T16369] read to 0xffff888107a3d220 of 8 bytes by task 16369 on cpu 0:
[  336.062339][T16369]  xas_find_marked+0x218/0x620
[  336.067308][T16369]  find_get_entry+0x5d/0x380
[  336.071926][T16369]  filemap_get_folios_tag+0x13b/0x210
[  336.077314][T16369]  mpage_prepare_extent_to_map+0x308/0xc20
[  336.083430][T16369]  ext4_do_writepages+0x9f6/0x27e0
[  336.088994][T16369]  ext4_writepages+0x179/0x300
[  336.094097][T16369]  do_writepages+0x1c6/0x310
[  336.098875][T16369]  filemap_flush_range+0xf1/0x130
[  336.104105][T16369]  generic_fadvise+0x312/0x430
[  336.109236][T16369]  __x64_sys_fadvise64+0xcb/0x110
[  336.114368][T16369]  x64_sys_call+0x29f4/0x3000
[  336.119079][T16369]  do_syscall_64+0xca/0x2b0
[  336.123702][T16369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.129632][T16369] 
[  336.131967][T16369] value changed: 0x00003fffffffffff -> 0x0000ffffffffffff
[  336.139168][T16369] 
[  336.141554][T16369] Reported by Kernel Concurrency Sanitizer on:
[  336.148005][T16369] CPU: 0 UID: 0 PID: 16369 Comm: syz.4.3940 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  336.159829][T16369] Tainted: [W]=WARN
[  336.163722][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  336.173779][T16369] ==================================================================
[  336.188617][T16367] bond6: entered promiscuous mode
[  336.194358][T16367] 8021q: adding VLAN 0 to HW filter on device bond6
[  336.211318][T16369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3940: bg 0: block 345: padding at end of block bitmap is not set
[  336.238672][T16369] EXT4-fs (loop4): Remounting filesystem read-only
[  336.245397][ T3936] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  336.299223][T13893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.