last executing test programs:

2.82800499s ago: executing program 1 (id=3110):
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x6, 0x0, 0x1a}, 0x10, &(0x7f0000000380)=[{&(0x7f00000007c0)="0591f82a0f7900f1dfd9021f2a37a945dd58160f43d1cbf968e250b9df153d5ceafa25cb07bc63b7112ccdc3327a87de9258a13cf611bdcef52ac3c89e29b92054a9ddc2b7692994def8c08755c107f8", 0x50}, {&(0x7f0000001b00)="34586f9a4e9a58a30c97a8364cd1529277d24f0f193a94ef127bcbd76290b54466553762117350e95d9ff7e50305c17495966a072fbf1b37e96caf3857553fa1567c7b1f5fef6d64b852a78178fe3165f67b6abcb130abc31d423ac3953c79572c333c6185162920144dc92065b5e70c8506a276bd8c99fb1c56cf3ab788a46341d57b136deec33ca12f9bb845fa", 0x8e}], 0x2, 0x0, 0x0, 0x80c4}, 0x20008014)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_create1(0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x1, 0x8, 0x3ff, 0x0, 0x4, "b94749fb7c8eb721659e28438b12714b423f59"})
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='6']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

2.501852634s ago: executing program 1 (id=3112):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r1 = socket$inet6(0xa, 0x2, 0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0)

2.347010397s ago: executing program 1 (id=3116):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r1 = socket$inet6(0xa, 0x2, 0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)=@delneigh={0x24, 0x1d, 0x20, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x8, 0x4, 0x6}, [@NDA_NH_ID={0x8, 0xd, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x1)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6)

2.10245391s ago: executing program 1 (id=3118):
syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESOCT, @ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
sendto$inet(r2, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x2, @private2, 0xbd}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.08139989s ago: executing program 2 (id=3086):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x104, 0x2, 0x3c8, 0x0, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0xa, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418)
writev(0xffffffffffffffff, &(0x7f0000000cc0), 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0x0, 0x0)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010007bd7000fddbdf2555000000080001002500", @ANYRES32=r4, @ANYBLOB="7d371668f91df45e79ccafc583562bd4553e741f1969319ad2dcf66991de582d203a42937d740b27e1af29dd0b83b43e432435e9d4ef452258788776fdad54e1fe472e06ffeaa8cc4bed07f261d42a3089e142005d05fbeab6f8acd780d695895294ae161ecbca13265c367d35190e1ae952832dea8b8e7f"], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")

1.900137783s ago: executing program 2 (id=3121):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3b09}, 0x18)
r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0)

1.827337044s ago: executing program 2 (id=3122):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

1.464979879s ago: executing program 0 (id=3128):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x44000911)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r0, r2, 0x0, 0x20000000000006)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r4, 0x8000000000003, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r7=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r7}, 0x2a)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r8, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x101, 0x8006, 0x524c, 0xdb, <r9=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000380)={r9, 0x196, 0x5, 0x4}, &(0x7f00000003c0)=0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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")

1.237648863s ago: executing program 1 (id=3129):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001e00000000000000200018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff41)

710.00219ms ago: executing program 3 (id=3134):
r0 = eventfd2(0xce77, 0x800)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}})
close_range(r0, r1, 0x0)

678.61307ms ago: executing program 3 (id=3135):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0, 0x0, 0x4000000000}, 0x18)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa00000a1)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00'}, 0x18)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r6, &(0x7f0000000580)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095", @ANYRESOCT=r4, @ANYRES8=r5, @ANYRES64=r1, @ANYRESDEC=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x18)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x18, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x8, 0xfd, &(0x7f0000000800)=""/253, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x1, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[r4, 0xffffffffffffffff, r4], &(0x7f0000000a80)=[{0x3, 0x2, 0xb, 0x7}, {0x4, 0x2, 0x2, 0xc}, {0x1, 0x2, 0x10, 0xc}, {0x3, 0x2, 0x0, 0x6}, {0x2, 0x2, 0xf, 0xc}, {0x1, 0x3, 0x8, 0xa}, {0x1, 0x2, 0xd, 0x5}], 0x10, 0x1, @void, @value}, 0x94)
sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x48701)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r11=>r4, {0x1}}, './file0\x00'})
r12 = dup(r11)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRESHEX=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRESOCT=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}}, 0x4)

660.470281ms ago: executing program 2 (id=3136):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10)
pipe2$9p(&(0x7f0000000240), 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000880)

620.983711ms ago: executing program 4 (id=3138):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)

586.646132ms ago: executing program 4 (id=3139):
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r2, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
ioctl$EVIOCGRAB(r3, 0x40044590, 0x0)

568.107462ms ago: executing program 0 (id=3140):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521)

533.772033ms ago: executing program 4 (id=3141):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000000000180900", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r3}, 0x18)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r2, @ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x2, @private2, 0xbd}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
pread64(r0, &(0x7f0000001240)=""/102393, 0x18ff9, 0x2000000000)
socket(0x1f, 0x5, 0x3)

517.354723ms ago: executing program 2 (id=3142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r2, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
ioctl$EVIOCGRAB(r3, 0x40044590, 0x0)

482.717543ms ago: executing program 2 (id=3143):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000100), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x100000, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x18)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

473.715783ms ago: executing program 3 (id=3144):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r3}, 0x18)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r2, @ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x2, @private2, 0xbd}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
pread64(r0, &(0x7f0000001240)=""/102393, 0x18ff9, 0x2000000000)
socket(0x1f, 0x5, 0x3)

424.147974ms ago: executing program 0 (id=3145):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r3}, 0x18)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r2, @ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x2, @private2, 0xbd}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
pread64(r0, &(0x7f0000001240)=""/102393, 0x18ff9, 0x2000000000)
socket(0x1f, 0x5, 0x3)

382.438065ms ago: executing program 4 (id=3146):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0)

335.744565ms ago: executing program 4 (id=3147):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x104, 0x2, 0x3c8, 0x0, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0xa, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418)
writev(0xffffffffffffffff, &(0x7f0000000cc0), 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0x0, 0x0)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010007bd7000fddbdf2555000000080001002500000008", @ANYRES32=r4, @ANYBLOB="7d371668f91df45e79ccafc583562bd4553e741f1969319ad2dcf66991de582d203a42937d740b27e1af29dd0b83b43e432435e9d4ef452258788776fdad54e1fe472e06ffeaa8cc4bed07f261d42a3089e142005d05fbeab6f8acd780d695895294ae161ecbca13265c367d35190e1ae952832dea8b8e7f"], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")

319.663766ms ago: executing program 0 (id=3148):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4000000000}, 0x18)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, 0x0, 0xa00000a1)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00'}, 0x18)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r6, &(0x7f0000000580)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095", @ANYRESOCT=r4, @ANYRES8=r5, @ANYRES64=r1, @ANYRESDEC=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x18)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x18, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x8, 0xfd, &(0x7f0000000800)=""/253, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x1, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[r4, 0xffffffffffffffff, r4], &(0x7f0000000a80)=[{0x3, 0x2, 0xb, 0x7}, {0x4, 0x2, 0x2, 0xc}, {0x1, 0x2, 0x10, 0xc}, {0x3, 0x2, 0x0, 0x6}, {0x2, 0x2, 0xf, 0xc}, {0x1, 0x3, 0x8, 0xa}, {0x1, 0x2, 0xd, 0x5}], 0x10, 0x1, @void, @value}, 0x94)
sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x48701)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r11=>r4, {0x1}}, './file0\x00'})
r12 = dup(r11)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRESHEX=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRESOCT=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}}, 0x4)

296.851086ms ago: executing program 3 (id=3149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20)

175.614978ms ago: executing program 3 (id=3150):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)

150.995448ms ago: executing program 4 (id=3151):
syz_read_part_table(0x60f, &(0x7f0000000740)="$eJzs3D9olHcYB/DvJXlzJoLp4ORS49BJKIqjGaokV8VCOC2F4GD/IdJMEQInPUzRoc2gmEE6dpHCddA4qRmcFIXORRwsQgaXgl2kdsiVu3ubnLSWlkZK8fMZ7nnveHi+7wO/9Xfhf20gRfnUrnbL2x/9ZX97bON5Ie+3JqcOtdvt9rGkkuMpMl5sW04ylBenZleS4b45V74ZXfnq53eL1sOjz946cWdxYH1mNW8k2drfnJE/e5XqP9uUV+HqxN2xc+fnahc6X2rN1bUPkmtPJ+s3jywuLR8uDn7S+f1scq/s7x2MkZxOI2fyWT4c+ttRX2w8Vvrzfz8cpx7Umqtftx7vWdtRG7xxcv/znSsXb+9N5jsR0+ke9g3D/2LpPuv7Nya6+fPjl2aWmgd2X99+eV/j1v36k8Ff2j1lZLE5uQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvBpXOx/n52oXGhOnHtSaq1/+8P17155O1m8eWVxaPjx88FHZd6+sQ2U9nUbOpEgym9l8mrk/jh59SeRMpT9/4u7YufX8X0eTx3vWdtRaN07ufz61cvH23m5XJdOdMrBZW78sv7k6P35pZql5YPf17Zf3NW7drz8Z7PXNVvNxd90k1c1/DQAAAAAAAAAAAAAAAAAAAF5zk1OHdk6/Uz+WVHJ8S5KfPu/esm9XR75L9+Z9z66yPqom25Jc2dL7L4DWw6PPhk/cWfyxvBS/kGoWkmz9tkjy5nrO2Rdji43J/Jd+CwAA//87I43h")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000480)='/sys/kernel/fscaps', 0x0, 0x0)
finit_module(r4, 0x0, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001780)={'vcan0\x00', <r5=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2, 0x0, 0x0, 0x20040000}, 0x810)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000190a0103000000000000001100380000f9ffffffffffffff00000000"], 0x20}}, 0x0)
connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r6, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timerfd_create(0x9, 0x800)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000300000b000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

146.993158ms ago: executing program 3 (id=3152):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x44000911)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r0, r2, 0x0, 0x20000000000006)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r4, 0x8000000000003, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r7=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r7}, 0x2a)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r8, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x101, 0x8006, 0x524c, 0xdb, <r9=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000380)={r9, 0x196, 0x5, 0x4}, &(0x7f00000003c0)=0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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")

133.889018ms ago: executing program 0 (id=3153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r2, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
ioctl$EVIOCGRAB(r3, 0x40044590, 0x0)

51.466619ms ago: executing program 0 (id=3154):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x104, 0x2, 0x3c8, 0x0, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0xa, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418)
writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010007bd7000fddbdf2555000000080001002500000008000300", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x48, r6, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x17}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x4000815)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")

0s ago: executing program 1 (id=3155):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r1 = socket$inet6(0xa, 0x2, 0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
socket(0x10, 0x80002, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6)

kernel console output (not intermixed with test programs):

.581081][T10858] loop3: detected capacity change from 0 to 8192
[  192.590067][T10862] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  192.601386][T10862] SELinux: failed to load policy
[  192.620314][ T3307]  loop3: p3 p4 < >
[  192.628574][ T3307] loop3: p3 start 18548 is beyond EOD, truncated
[  192.658829][T10858]  loop3: p3 p4 < >
[  192.673756][T10858] loop3: p3 start 18548 is beyond EOD, truncated
[  192.762115][T10872] loop3: detected capacity change from 0 to 128
[  192.794722][T10872] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.822848][T10878] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[  192.840352][T10872] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.866943][T10880] netlink: 'syz.1.2511': attribute type 1 has an invalid length.
[  192.896858][T10880] netlink: 'syz.1.2511': attribute type 3 has an invalid length.
[  192.904775][T10880] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2511'.
[  192.914151][T10880] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  192.932856][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.948143][T10883] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  192.955756][T10883] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  192.966902][T10885] loop3: detected capacity change from 0 to 512
[  192.985560][T10883] gtp0: entered promiscuous mode
[  192.990620][T10883] gtp0: entered allmulticast mode
[  192.995949][T10887] FAULT_INJECTION: forcing a failure.
[  192.995949][T10887] name failslab, interval 1, probability 0, space 0, times 0
[  193.008843][T10887] CPU: 1 UID: 0 PID: 10887 Comm: syz.1.2513 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  193.008878][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  193.008892][T10887] Call Trace:
[  193.008901][T10887]  <TASK>
[  193.008911][T10887]  __dump_stack+0x1d/0x30
[  193.008937][T10887]  dump_stack_lvl+0xe8/0x140
[  193.009009][T10887]  dump_stack+0x15/0x1b
[  193.009026][T10887]  should_fail_ex+0x265/0x280
[  193.009098][T10887]  should_failslab+0x8c/0xb0
[  193.009136][T10887]  __kvmalloc_node_noprof+0x126/0x4d0
[  193.009210][T10887]  ? __se_sys_add_key+0x1e9/0x350
[  193.009250][T10887]  __se_sys_add_key+0x1e9/0x350
[  193.009317][T10887]  __x64_sys_add_key+0x67/0x80
[  193.009431][T10887]  x64_sys_call+0x1d0d/0x2fb0
[  193.009458][T10887]  do_syscall_64+0xd0/0x1a0
[  193.009488][T10887]  ? clear_bhb_loop+0x40/0x90
[  193.009570][T10887]  ? clear_bhb_loop+0x40/0x90
[  193.009596][T10887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.009631][T10887] RIP: 0033:0x7f2a3649e969
[  193.009650][T10887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.009671][T10887] RSP: 002b:00007f2a34b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  193.009692][T10887] RAX: ffffffffffffffda RBX: 00007f2a366c5fa0 RCX: 00007f2a3649e969
[  193.009706][T10887] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000100
[  193.009731][T10887] RBP: 00007f2a34b07090 R08: 0000000026d6695a R09: 0000000000000000
[  193.009743][T10887] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  193.009828][T10887] R13: 0000000000000000 R14: 00007f2a366c5fa0 R15: 00007ffc021ea738
[  193.009849][T10887]  </TASK>
[  193.111844][T10888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10888 comm=syz.0.2510
[  193.216458][T10885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.246445][T10885] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.250613][T10892] SELinux: ebitmap: truncated map
[  193.263014][T10892] SELinux: failed to load policy
[  193.263204][T10885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.352347][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'.
[  193.423877][T10900] loop0: detected capacity change from 0 to 8192
[  193.459248][ T3497]  loop0: p3 p4 < >
[  193.464697][ T3497] loop0: p3 start 18548 is beyond EOD, truncated
[  193.481653][T10900]  loop0: p3 p4 < >
[  193.485620][T10900] loop0: p3 start 18548 is beyond EOD, truncated
[  193.495070][T10912] netlink: 'syz.2.2523': attribute type 1 has an invalid length.
[  193.505594][T10912] netlink: 'syz.2.2523': attribute type 3 has an invalid length.
[  193.513547][T10912] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  193.604215][T10927] loop2: detected capacity change from 0 to 128
[  193.615565][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  193.646553][T10927] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  193.664264][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  193.676488][T10927] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.716898][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  193.745386][T10935] loop2: detected capacity change from 0 to 512
[  193.775105][T10935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.788128][T10935] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.809053][T10935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.951353][T10945] SELinux: failed to load policy
[  193.984156][T10949] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  194.041742][T10951] loop3: detected capacity change from 0 to 8192
[  194.113792][T10956] FAULT_INJECTION: forcing a failure.
[  194.113792][T10956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.127546][T10956] CPU: 0 UID: 0 PID: 10956 Comm: syz.1.2540 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  194.127581][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  194.127596][T10956] Call Trace:
[  194.127671][T10956]  <TASK>
[  194.127679][T10956]  __dump_stack+0x1d/0x30
[  194.127703][T10956]  dump_stack_lvl+0xe8/0x140
[  194.127726][T10956]  dump_stack+0x15/0x1b
[  194.127746][T10956]  should_fail_ex+0x265/0x280
[  194.127783][T10956]  should_fail+0xb/0x20
[  194.127844][T10956]  should_fail_usercopy+0x1a/0x20
[  194.127945][T10956]  _copy_from_user+0x1c/0xb0
[  194.127973][T10956]  __copy_msghdr+0x244/0x300
[  194.127999][T10956]  ___sys_sendmsg+0x109/0x1d0
[  194.128040][T10956]  __x64_sys_sendmsg+0xd4/0x160
[  194.128070][T10956]  x64_sys_call+0x2999/0x2fb0
[  194.128115][T10956]  do_syscall_64+0xd0/0x1a0
[  194.128139][T10956]  ? clear_bhb_loop+0x40/0x90
[  194.128160][T10956]  ? clear_bhb_loop+0x40/0x90
[  194.128226][T10956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.128252][T10956] RIP: 0033:0x7f2a3649e969
[  194.128272][T10956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.128340][T10956] RSP: 002b:00007f2a34b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.128362][T10956] RAX: ffffffffffffffda RBX: 00007f2a366c5fa0 RCX: 00007f2a3649e969
[  194.128377][T10956] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  194.128394][T10956] RBP: 00007f2a34b07090 R08: 0000000000000000 R09: 0000000000000000
[  194.128409][T10956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.128424][T10956] R13: 0000000000000000 R14: 00007f2a366c5fa0 R15: 00007ffc021ea738
[  194.128449][T10956]  </TASK>
[  194.138886][ T3307]  loop3: p3 p4 < >
[  194.279335][T10958] loop4: detected capacity change from 0 to 128
[  194.298678][ T3307] loop3: p3 start 18548 is beyond EOD, truncated
[  194.327640][T10951]  loop3: p3 p4 < >
[  194.331838][T10951] loop3: p3 start 18548 is beyond EOD, truncated
[  194.352386][ T3004]  loop3: p3 p4 < >
[  194.356433][ T3004] loop3: p3 start 18548 is beyond EOD, truncated
[  194.393187][T10967] loop3: detected capacity change from 0 to 512
[  194.399539][T10965] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  194.434247][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  194.445408][T10967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.452904][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  194.469889][T10967] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.525526][T10965] loop2: detected capacity change from 0 to 256
[  194.534766][T10967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.535733][T10980] SELinux: failed to load policy
[  194.578123][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  194.601252][   T29] kauditd_printk_skb: 217 callbacks suppressed
[  194.601270][   T29] audit: type=1326 audit(1748070603.647:12286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.668346][   T29] audit: type=1326 audit(1748070603.677:12287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.692924][   T29] audit: type=1326 audit(1748070603.677:12288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.717333][   T29] audit: type=1326 audit(1748070603.677:12289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.741522][   T29] audit: type=1326 audit(1748070603.677:12290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.765379][   T29] audit: type=1326 audit(1748070603.677:12291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.789329][   T29] audit: type=1326 audit(1748070603.677:12292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.813407][   T29] audit: type=1326 audit(1748070603.677:12293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.837679][   T29] audit: type=1326 audit(1748070603.677:12294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  194.892182][T10990] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  194.994131][   T29] audit: type=1400 audit(1748070604.037:12295): avc:  denied  { read } for  pid=10993 comm="syz.4.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  195.127098][T11001] loop4: detected capacity change from 0 to 8192
[  195.179376][T11001]  loop4: p3 p4 < >
[  195.183443][T11001] loop4: p3 start 18548 is beyond EOD, truncated
[  195.326659][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  195.355827][T11014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  195.373432][T11014] loop3: detected capacity change from 0 to 256
[  195.585742][T11022] validate_nla: 3 callbacks suppressed
[  195.585767][T11022] netlink: 'syz.1.2564': attribute type 3 has an invalid length.
[  195.599274][T11022] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  195.722626][T11028] syz.1.2565: attempt to access beyond end of device
[  195.722626][T11028] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  195.862981][T11043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  195.938958][T11051] loop2: detected capacity change from 0 to 256
[  195.968763][T11050] netlink: 'syz.3.2575': attribute type 3 has an invalid length.
[  195.977232][T11050] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  196.352432][T11076] loop4: detected capacity change from 0 to 128
[  196.367769][T11076] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.386092][T11076] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.411218][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.467379][T11081] netlink: 'syz.0.2586': attribute type 3 has an invalid length.
[  196.475350][T11081] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  196.738392][T11101] loop1: detected capacity change from 0 to 2048
[  196.796054][T11105] loop0: detected capacity change from 0 to 2048
[  196.803439][ T3004]  loop1: p1 < > p4
[  196.813043][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  196.830062][T11106] loop2: detected capacity change from 0 to 1024
[  196.842002][T11101]  loop1: p1 < > p4
[  196.848581][T11101] loop1: p4 size 8388608 extends beyond EOD, truncated
[  196.849047][T11106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.888703][T11106] EXT4-fs: Ignoring sb option on remount
[  196.894534][T11106] EXT4-fs: Ignoring removed orlov option
[  196.906344][ T3004]  loop0: p1 < > p4
[  196.919141][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated
[  196.922647][T11101] __nla_validate_parse: 22 callbacks suppressed
[  196.922663][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2594'.
[  196.932514][T11106] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  196.952978][T11106] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  196.956528][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2594'.
[  196.961736][T11105]  loop0: p1 < > p4
[  196.976926][T11105] loop0: p4 size 8388608 extends beyond EOD, truncated
[  197.008244][ T3004]  loop0: p1 < > p4
[  197.012904][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated
[  197.031678][ T3004]  loop0: p1 < > p4
[  197.036906][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated
[  197.083336][T11116] loop0: detected capacity change from 0 to 128
[  197.096546][T11116] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.117499][T11119] netlink: 'syz.1.2599': attribute type 3 has an invalid length.
[  197.125353][T11119] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2599'.
[  197.134472][T11119] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  197.151286][T11116] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.153235][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  197.164979][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  197.201427][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  197.201606][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  197.237235][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.398656][T11130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  197.414653][T11130] loop0: detected capacity change from 0 to 256
[  197.529079][T11135] SELinux: failed to load policy
[  197.561379][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.574163][T11137] loop0: detected capacity change from 0 to 2048
[  197.629250][T11137]  loop0: p1 < > p4
[  197.633939][T11137] loop0: p4 size 8388608 extends beyond EOD, truncated
[  197.641437][T11143] loop3: detected capacity change from 0 to 128
[  197.655756][T11143] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.667843][ T3004]  loop0: p1 < > p4
[  197.668738][T11143] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.683243][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated
[  197.752241][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.862385][T11152] netlink: 'syz.0.2612': attribute type 3 has an invalid length.
[  197.870281][T11152] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2612'.
[  197.879422][T11152] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  197.929708][T11156] loop3: detected capacity change from 0 to 256
[  197.993952][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2616'.
[  198.053092][T11167] netlink: 'syz.0.2618': attribute type 1 has an invalid length.
[  198.092800][T11167] loop0: detected capacity change from 0 to 512
[  198.109939][T11170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2616'.
[  198.129868][T11167] EXT4-fs: Ignoring removed nobh option
[  198.147369][T11167] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2618: invalid indirect mapped block 256 (level 2)
[  198.170240][T11167] EXT4-fs (loop0): 2 truncates cleaned up
[  198.180963][T11167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.275301][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'.
[  198.295483][T11167] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2618: bg 0: block 5: invalid block bitmap
[  198.373589][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.470293][T11180] loop0: detected capacity change from 0 to 512
[  198.472164][T11182] loop1: detected capacity change from 0 to 128
[  198.496814][T11180] EXT4-fs (loop0): orphan cleanup on readonly fs
[  198.518383][T11180] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2620: bad orphan inode 13
[  198.529486][T11182] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.542707][T11180] ext4_test_bit(bit=12, block=18) = 1
[  198.548224][T11180] is_bad_inode(inode)=0
[  198.552413][T11180] NEXT_ORPHAN(inode)=2130706432
[  198.557353][T11180] max_ino=32
[  198.560579][T11180] i_nlink=1
[  198.572090][T11182] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.594062][T11180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.625566][T11180] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  198.636856][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.651145][T11180] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2620: bg 0: block 248: padding at end of block bitmap is not set
[  198.687189][T11180] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2620: Failed to acquire dquot type 1
[  198.704023][T11187] loop1: detected capacity change from 0 to 2048
[  198.710899][T11180] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  198.760090][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.772111][ T3307]  loop1: p1 < > p4
[  198.782167][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated
[  198.824586][T11189] loop0: detected capacity change from 0 to 512
[  198.835591][T11187]  loop1: p1 < > p4
[  198.844288][T11187] loop1: p4 size 8388608 extends beyond EOD, truncated
[  198.946532][T11201] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  198.958791][T11189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.997525][T11189] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.014864][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2628'.
[  199.036377][T11205] loop4: detected capacity change from 0 to 1024
[  199.043867][T11205] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  199.054865][T11205] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  199.059196][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  199.076865][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  199.087063][T11205] JBD2: no valid journal superblock found
[  199.092880][T11205] EXT4-fs (loop4): Could not load journal inode
[  199.105815][T11189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.131725][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  199.147581][T11205] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  199.167632][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  199.196176][T11189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2623'.
[  199.213344][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  199.220165][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  199.264858][T11212] loop0: detected capacity change from 0 to 128
[  199.286209][T11207] loop1: detected capacity change from 0 to 256
[  199.303868][T11212] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  199.370126][T11212] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.434711][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.464092][T11221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2635'.
[  199.514198][T11156] syz.3.2614 (11156) used greatest stack depth: 7000 bytes left
[  199.526274][T11224] loop0: detected capacity change from 0 to 2048
[  199.548326][T11227] loop3: detected capacity change from 0 to 2048
[  199.579514][ T3307]  loop0: p1 < > p4
[  199.584019][ T3307] loop0: p4 size 8388608 extends beyond EOD, truncated
[  199.600970][T11224]  loop0: p1 < > p4
[  199.601038][ T3497]  loop3: p1 < > p4
[  199.609430][T11224] loop0: p4 size 8388608 extends beyond EOD, truncated
[  199.610676][ T3497] loop3: p4 size 8388608 extends beyond EOD, truncated
[  199.626101][T11227]  loop3: p1 < > p4
[  199.632196][T11227] loop3: p4 size 8388608 extends beyond EOD, truncated
[  199.649886][ T3004]  loop3: p1 < > p4
[  199.660813][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated
[  199.683895][ T3004]  loop3: p1 < > p4
[  199.691665][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated
[  199.717588][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  199.731441][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  199.768631][   T29] kauditd_printk_skb: 258 callbacks suppressed
[  199.768650][   T29] audit: type=1326 audit(1748078798.790:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  199.798573][   T29] audit: type=1326 audit(1748078798.790:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  199.806213][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  199.822479][   T29] audit: type=1326 audit(1748078798.790:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  199.822519][   T29] audit: type=1326 audit(1748078798.790:12555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  199.834417][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  199.856277][   T29] audit: type=1326 audit(1748078798.790:12556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  199.856312][   T29] audit: type=1326 audit(1748078798.790:12557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  199.937683][   T29] audit: type=1326 audit(1748078798.790:12558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e74d9d2d0 code=0x7ffc0000
[  199.961506][   T29] audit: type=1326 audit(1748078798.790:12559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  199.985406][   T29] audit: type=1326 audit(1748078798.790:12560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  200.009152][   T29] audit: type=1326 audit(1748078798.790:12561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.3.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  200.069035][T11244] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  200.085768][T11244] loop3: detected capacity change from 0 to 256
[  200.112011][ T3004]  loop0: p1 < > p4
[  200.122738][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated
[  200.141867][T11247] loop0: detected capacity change from 0 to 128
[  200.161468][T11247] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.174104][T11247] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.239072][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.300227][T11261] loop2: detected capacity change from 0 to 2048
[  200.338120][T11258] loop4: detected capacity change from 0 to 128
[  200.349124][ T3307]  loop2: p1 < > p4
[  200.365427][ T3307] loop2: p4 size 8388608 extends beyond EOD, truncated
[  200.365722][T11264] loop3: detected capacity change from 0 to 128
[  200.398568][T11261]  loop2: p1 < > p4
[  200.420325][T11261] loop2: p4 size 8388608 extends beyond EOD, truncated
[  200.436794][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.458738][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.601267][T11289] loop0: detected capacity change from 0 to 512
[  200.613699][T11289] EXT4-fs (loop0): orphan cleanup on readonly fs
[  200.622161][T11289] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2661: bad orphan inode 13
[  200.632862][T11289] ext4_test_bit(bit=12, block=18) = 1
[  200.638312][T11289] is_bad_inode(inode)=0
[  200.642537][T11289] NEXT_ORPHAN(inode)=2130706432
[  200.647406][T11289] max_ino=32
[  200.650701][T11289] i_nlink=1
[  200.654646][T11289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  200.676548][T11294] loop4: detected capacity change from 0 to 512
[  200.684733][T11294] EXT4-fs (loop4): orphan cleanup on readonly fs
[  200.692471][T11289] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  200.704503][T11294] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2662: bad orphan inode 13
[  200.718137][T11294] ext4_test_bit(bit=12, block=18) = 1
[  200.723783][T11294] is_bad_inode(inode)=0
[  200.728131][T11294] NEXT_ORPHAN(inode)=2130706432
[  200.733054][T11294] max_ino=32
[  200.736268][T11294] i_nlink=1
[  200.741780][T11294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  200.754946][T11289] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2661: bg 0: block 248: padding at end of block bitmap is not set
[  200.771259][T11289] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2661: Failed to acquire dquot type 1
[  200.784395][T11294] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  200.795249][T11289] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  200.812427][T11294] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2662: bg 0: block 248: padding at end of block bitmap is not set
[  200.828525][T11294] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2662: Failed to acquire dquot type 1
[  200.841114][T11294] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  200.857798][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.885021][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.092727][T11316] loop3: detected capacity change from 0 to 2048
[  201.145200][T11316]  loop3: p1 < > p4
[  201.155983][T11316] loop3: p4 size 8388608 extends beyond EOD, truncated
[  201.176589][ T3004]  loop3: p1 < > p4
[  201.181122][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated
[  201.256288][T11326] loop4: detected capacity change from 0 to 1024
[  201.299156][T11326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.388115][T11326] EXT4-fs: Ignoring sb option on remount
[  201.394062][T11326] EXT4-fs: Ignoring removed orlov option
[  201.400128][T11326] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  201.412324][T11326] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  201.593859][T11342] loop3: detected capacity change from 0 to 1024
[  201.606363][T11342] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  201.617355][T11342] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  201.637844][T11342] JBD2: no valid journal superblock found
[  201.643933][T11342] EXT4-fs (loop3): Could not load journal inode
[  201.729705][T11347] SELinux: failed to load policy
[  201.827801][T11351] loop1: detected capacity change from 0 to 2048
[  201.909833][ T3307]  loop1: p1 < > p4
[  201.913833][T11355] loop3: detected capacity change from 0 to 2048
[  201.918780][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated
[  201.937018][T11351]  loop1: p1 < > p4
[  201.951867][T11351] loop1: p4 size 8388608 extends beyond EOD, truncated
[  201.969942][ T3497]  loop3: p1 < > p4
[  201.975258][ T3497] loop3: p4 size 8388608 extends beyond EOD, truncated
[  201.992577][T11351] __nla_validate_parse: 3 callbacks suppressed
[  201.992790][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2683'.
[  202.013276][T11351] netlink: 'syz.1.2683': attribute type 1 has an invalid length.
[  202.013585][T11355]  loop3: p1 < > p4
[  202.026492][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.045559][T11355] loop3: p4 size 8388608 extends beyond EOD, truncated
[  202.160949][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'.
[  202.170993][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'.
[  202.186902][T11365] loop4: detected capacity change from 0 to 1024
[  202.204398][T11365] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  202.215394][T11365] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  202.215838][T11368] loop2: detected capacity change from 0 to 512
[  202.232712][T11365] JBD2: no valid journal superblock found
[  202.238678][T11365] EXT4-fs (loop4): Could not load journal inode
[  202.286660][T11365] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  202.290541][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'.
[  202.310419][T11368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.323247][T11357] loop0: detected capacity change from 0 to 128
[  202.324111][T11369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2688'.
[  202.348067][T11368] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.359773][T11368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.425271][T11368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2691'.
[  202.446971][T11382] loop3: detected capacity change from 0 to 1024
[  202.466906][T11382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.498184][T11382] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  202.540945][T11391] SELinux: ebitmap: truncated map
[  202.546297][T11391] SELinux: failed to load policy
[  202.547972][T11393] loop0: detected capacity change from 0 to 2048
[  202.576339][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2696'.
[  202.589212][ T3307]  loop0: p1 < > p4
[  202.593835][ T3307] loop0: p4 size 8388608 extends beyond EOD, truncated
[  202.603192][T11393]  loop0: p1 < > p4
[  202.607833][T11393] loop0: p4 size 8388608 extends beyond EOD, truncated
[  202.631500][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2698'.
[  202.641552][T11393] netlink: 'syz.0.2698': attribute type 1 has an invalid length.
[  202.641691][T11398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2696'.
[  202.732391][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'.
[  202.784173][T11403] loop0: detected capacity change from 0 to 128
[  202.817701][T11407] loop0: detected capacity change from 0 to 2048
[  202.858894][ T3307]  loop0: p1 < > p4
[  202.863779][ T3307] loop0: p4 size 8388608 extends beyond EOD, truncated
[  202.875298][T11407]  loop0: p1 < > p4
[  202.880489][T11407] loop0: p4 size 8388608 extends beyond EOD, truncated
[  202.953125][T11409] loop1: detected capacity change from 0 to 512
[  202.968822][T11409] EXT4-fs: Ignoring removed nobh option
[  202.981659][T11409] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2703: invalid indirect mapped block 256 (level 2)
[  203.024068][T11409] EXT4-fs (loop1): 2 truncates cleaned up
[  203.030979][T11409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.055941][T11415] netlink: 'syz.0.2705': attribute type 1 has an invalid length.
[  203.066352][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.076256][T11415] netlink: 'syz.0.2705': attribute type 3 has an invalid length.
[  203.084065][T11415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  203.113010][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.171039][T11422] loop1: detected capacity change from 0 to 512
[  203.179398][T11422] EXT4-fs (loop1): orphan cleanup on readonly fs
[  203.186397][T11422] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2706: bad orphan inode 13
[  203.198016][T11422] ext4_test_bit(bit=12, block=18) = 1
[  203.203500][T11422] is_bad_inode(inode)=0
[  203.207733][T11422] NEXT_ORPHAN(inode)=2130706432
[  203.212722][T11422] max_ino=32
[  203.215964][T11422] i_nlink=1
[  203.219729][T11422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.234192][T11417] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  203.285716][T11425] SELinux: ebitmap: truncated map
[  203.292003][T11425] SELinux: failed to load policy
[  203.297147][T11417] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  203.322231][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.398909][T11428] loop1: detected capacity change from 0 to 2048
[  203.439155][ T3307]  loop1: p1 < > p4
[  203.448204][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated
[  203.455662][T11436] loop2: detected capacity change from 0 to 2048
[  203.489219][T11436]  loop2: p1 < > p4
[  203.500702][T11436] loop2: p4 size 8388608 extends beyond EOD, truncated
[  203.508360][T11444] netlink: 'syz.3.2718': attribute type 1 has an invalid length.
[  203.519162][T11428]  loop1: p1 < > p4
[  203.523177][T11444] loop3: detected capacity change from 0 to 512
[  203.532260][T11428] loop1: p4 size 8388608 extends beyond EOD, truncated
[  203.542207][T11444] EXT4-fs: Ignoring removed nobh option
[  203.549773][ T3004]  loop2: p1 < > p4
[  203.554343][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated
[  203.564463][T11444] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2718: invalid indirect mapped block 256 (level 2)
[  203.600915][T11444] EXT4-fs (loop3): 2 truncates cleaned up
[  203.612033][T11444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.614987][T11449] netlink: 'syz.0.2720': attribute type 1 has an invalid length.
[  203.634095][T11444] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2718: bg 0: block 5: invalid block bitmap
[  203.664487][T11449] loop0: detected capacity change from 0 to 512
[  203.673748][T11449] EXT4-fs: Ignoring removed nobh option
[  203.694404][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.751638][T11449] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2720: invalid indirect mapped block 256 (level 2)
[  203.792008][T11449] EXT4-fs (loop0): 2 truncates cleaned up
[  203.816884][T11455] SELinux: ebitmap: truncated map
[  203.823138][T11455] SELinux: failed to load policy
[  203.824251][T11449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.849770][T11463] loop2: detected capacity change from 0 to 512
[  203.858587][T11463] EXT4-fs: Ignoring removed nobh option
[  203.865505][T11464] loop3: detected capacity change from 0 to 512
[  203.882531][T11464] EXT4-fs (loop3): orphan cleanup on readonly fs
[  203.892448][T11463] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2725: invalid indirect mapped block 256 (level 2)
[  203.916102][T11464] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2721: bad orphan inode 13
[  203.945258][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.960505][T11463] EXT4-fs (loop2): 2 truncates cleaned up
[  203.966821][T11463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.988191][T11464] ext4_test_bit(bit=12, block=18) = 1
[  203.993759][T11464] is_bad_inode(inode)=0
[  203.997989][T11464] NEXT_ORPHAN(inode)=2130706432
[  203.999469][T11469] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  204.002919][T11464] max_ino=32
[  204.013332][T11464] i_nlink=1
[  204.029859][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.043842][T11464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  204.064563][T11469] loop4: detected capacity change from 0 to 256
[  204.073806][T11464] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  204.129291][T11464] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  204.220603][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.262887][T11489] loop3: detected capacity change from 0 to 512
[  204.316002][T11489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.351994][T11489] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.373534][T11489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.498017][T11504] loop2: detected capacity change from 0 to 1024
[  204.515490][T11504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.605429][T11504] EXT4-fs: Ignoring sb option on remount
[  204.611441][T11504] EXT4-fs: Ignoring removed orlov option
[  204.637692][T11504] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  204.652043][T11510] loop3: detected capacity change from 0 to 2048
[  204.679996][T11504] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  204.701048][ T3307]  loop3: p1 < > p4
[  204.708529][ T3307] loop3: p4 size 8388608 extends beyond EOD, truncated
[  204.723739][T11510]  loop3: p1 < > p4
[  204.728321][T11510] loop3: p4 size 8388608 extends beyond EOD, truncated
[  204.843130][   T29] kauditd_printk_skb: 357 callbacks suppressed
[  204.843151][   T29] audit: type=1326 audit(1748099278.883:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  204.874727][   T29] audit: type=1326 audit(1748099278.883:12916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  204.898917][   T29] audit: type=1326 audit(1748099278.883:12917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  204.922866][   T29] audit: type=1326 audit(1748099278.883:12918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  204.946861][   T29] audit: type=1326 audit(1748099278.883:12919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  204.970449][   T29] audit: type=1326 audit(1748099278.883:12920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  204.994508][   T29] audit: type=1326 audit(1748099278.883:12921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  205.018098][   T29] audit: type=1326 audit(1748099278.883:12922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  205.042380][   T29] audit: type=1326 audit(1748099278.883:12923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  205.066453][   T29] audit: type=1326 audit(1748099278.883:12924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e74d9e969 code=0x7ffc0000
[  205.124929][T11531] loop3: detected capacity change from 0 to 2048
[  205.169454][ T3307]  loop3: p1 < > p4
[  205.174188][ T3307] loop3: p4 size 8388608 extends beyond EOD, truncated
[  205.185697][T11531]  loop3: p1 < > p4
[  205.190336][T11531] loop3: p4 size 8388608 extends beyond EOD, truncated
[  205.204443][ T3004]  loop3: p1 < > p4
[  205.211062][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.220376][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated
[  205.281996][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  205.294273][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  205.329310][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  205.340803][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  205.356912][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  205.358155][T11542] loop2: detected capacity change from 0 to 128
[  205.368073][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  205.433195][T11547] loop4: detected capacity change from 0 to 1024
[  205.450990][T11547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.464134][T11547] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  205.576346][T11561] netlink: 'syz.2.2759': attribute type 1 has an invalid length.
[  205.586499][T11561] netlink: 'syz.2.2759': attribute type 3 has an invalid length.
[  205.594331][T11561] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  205.656270][T11570] loop0: detected capacity change from 0 to 1024
[  205.671696][T11570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.688873][T11570] EXT4-fs: Ignoring sb option on remount
[  205.694689][T11570] EXT4-fs: Ignoring removed orlov option
[  205.700603][T11571] loop3: detected capacity change from 0 to 512
[  205.700632][T11570] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  205.720455][T11571] EXT4-fs (loop3): orphan cleanup on readonly fs
[  205.729168][T11570] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  205.730438][T11571] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2763: bad orphan inode 13
[  205.750558][T11571] ext4_test_bit(bit=12, block=18) = 1
[  205.756085][T11571] is_bad_inode(inode)=0
[  205.760507][T11571] NEXT_ORPHAN(inode)=2130706432
[  205.765396][T11571] max_ino=32
[  205.768854][T11571] i_nlink=1
[  205.773026][T11571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  205.775705][T11577] loop1: detected capacity change from 0 to 2048
[  205.793499][T11571] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  205.808814][T11571] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  205.828906][ T3307]  loop1: p1 < > p4
[  205.833416][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated
[  205.843135][T11577]  loop1: p1 < > p4
[  205.847766][T11577] loop1: p4 size 8388608 extends beyond EOD, truncated
[  205.884757][T11577] netlink: 'syz.1.2764': attribute type 1 has an invalid length.
[  205.932335][T11583] loop3: detected capacity change from 0 to 128
[  205.946928][T11583] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.955107][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  205.988051][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  206.194478][T11602] loop3: detected capacity change from 0 to 1024
[  206.215108][T11602] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  206.280241][T11613] loop1: detected capacity change from 0 to 2048
[  206.328861][ T3307]  loop1: p1 < > p4
[  206.333483][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated
[  206.343003][T11613]  loop1: p1 < > p4
[  206.347633][T11613] loop1: p4 size 8388608 extends beyond EOD, truncated
[  206.371904][T11613] netlink: 'syz.1.2777': attribute type 1 has an invalid length.
[  206.396464][T11613] bond21: entered promiscuous mode
[  206.402049][T11613] 8021q: adding VLAN 0 to HW filter on device bond21
[  206.456508][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  206.456691][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  206.501352][T11623] loop2: detected capacity change from 0 to 128
[  206.554465][T11625] SELinux: failed to load policy
[  206.637184][T11633] SELinux: ebitmap: truncated map
[  206.645589][T11633] SELinux: failed to load policy
[  206.689110][T11637] loop2: detected capacity change from 0 to 1024
[  206.697610][T11637] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  206.709178][T11637] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  206.721724][T11637] JBD2: no valid journal superblock found
[  206.727588][T11637] EXT4-fs (loop2): Could not load journal inode
[  206.737342][T11637] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  206.815496][T11639] loop1: detected capacity change from 0 to 512
[  206.823809][T11639] EXT4-fs (loop1): orphan cleanup on readonly fs
[  206.831229][T11639] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2788: bad orphan inode 13
[  206.842624][T11639] ext4_test_bit(bit=12, block=18) = 1
[  206.848136][T11639] is_bad_inode(inode)=0
[  206.852406][T11639] NEXT_ORPHAN(inode)=2130706432
[  206.857468][T11639] max_ino=32
[  206.860461][T11645] loop0: detected capacity change from 0 to 1024
[  206.860703][T11639] i_nlink=1
[  206.874613][T11639] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  206.889941][T11639] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  206.902943][T11645] EXT4-fs: Ignoring sb option on remount
[  206.909058][T11645] EXT4-fs: Ignoring removed orlov option
[  206.920092][T11645] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  206.931138][T11645] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  207.057727][T11657] loop4: detected capacity change from 0 to 2048
[  207.089388][T11657]  loop4: p1 < > p4
[  207.089502][T11659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  207.095058][T11657] loop4: p4 size 8388608 extends beyond EOD, truncated
[  207.120535][T11659] loop1: detected capacity change from 0 to 256
[  207.172139][T11657] __nla_validate_parse: 19 callbacks suppressed
[  207.172226][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'.
[  207.192084][T11663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2796'.
[  207.204161][T11657] netlink: 'syz.4.2793': attribute type 1 has an invalid length.
[  207.216567][T11663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2796'.
[  207.227533][ T3004]  loop4: p1 < > p4
[  207.235865][ T3004] loop4: p4 size 8388608 extends beyond EOD, truncated
[  207.316791][T11669] SELinux: ebitmap: truncated map
[  207.322305][T11669] SELinux: failed to load policy
[  207.343982][T11671] netlink: 'syz.4.2800': attribute type 1 has an invalid length.
[  207.353081][T11671] netlink: 'syz.4.2800': attribute type 3 has an invalid length.
[  207.361041][T11671] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2800'.
[  207.370160][T11671] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  207.458042][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2805'.
[  207.487231][T11682] netlink: 36 bytes leftover after parsing attributes in process `+}[@'.
[  207.612710][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2809'.
[  207.653644][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2809'.
[  207.669559][T11694] netlink: 'syz.2.2811': attribute type 1 has an invalid length.
[  207.688939][T11694] netlink: 'syz.2.2811': attribute type 3 has an invalid length.
[  207.696980][T11694] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2811'.
[  207.706553][T11694] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  207.724281][T11696] SELinux: ebitmap: truncated map
[  207.740570][T11696] SELinux: failed to load policy
[  207.902737][T11706] SELinux: failed to load policy
[  207.941448][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2817'.
[  207.959536][T11716] loop3: detected capacity change from 0 to 1024
[  207.972778][T11716] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  208.011833][T11719] loop2: detected capacity change from 0 to 1024
[  208.033927][T11719] EXT4-fs: Ignoring sb option on remount
[  208.040012][T11719] EXT4-fs: Ignoring removed orlov option
[  208.045840][T11719] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  208.055700][T11719] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  208.767432][T11734] SELinux: ebitmap: truncated map
[  208.773537][T11734] SELinux: failed to load policy
[  208.865431][T11742] loop1: detected capacity change from 0 to 2048
[  208.889843][T11742]  loop1: p1 < > p4
[  208.894588][T11742] loop1: p4 size 8388608 extends beyond EOD, truncated
[  208.909054][ T3004]  loop1: p1 < > p4
[  208.913420][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  208.941460][T11742] netlink: 'syz.1.2828': attribute type 1 has an invalid length.
[  208.969005][T11742] bond22: entered promiscuous mode
[  208.974394][T11742] 8021q: adding VLAN 0 to HW filter on device bond22
[  208.991615][ T3004]  loop1: p1 < > p4
[  208.996163][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  209.156684][T11769] SELinux: ebitmap: truncated map
[  209.175052][T11769] SELinux: failed to load policy
[  209.199372][T11779] loop4: detected capacity change from 0 to 2048
[  209.238923][ T3307]  loop4: p1 < > p4
[  209.245685][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  209.257053][T11779]  loop4: p1 < > p4
[  209.261977][T11779] loop4: p4 size 8388608 extends beyond EOD, truncated
[  209.287995][T11779] netlink: 'syz.4.2843': attribute type 1 has an invalid length.
[  209.371092][T11789] binfmt_misc: register: failed to install interpreter file ./file2
[  209.379428][T11793] loop1: detected capacity change from 0 to 512
[  209.425385][T11793] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.541317][T11807] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  209.566484][T11807] loop4: detected capacity change from 0 to 256
[  209.573580][T11810] SELinux: ebitmap: truncated map
[  209.583736][T11810] SELinux: failed to load policy
[  209.621672][T11817] netlink: 'syz.1.2855': attribute type 1 has an invalid length.
[  209.632064][T11817] netlink: 'syz.1.2855': attribute type 3 has an invalid length.
[  209.640151][T11817] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  209.757928][T11802] chnl_net:caif_netlink_parms(): no params data found
[  209.765782][T11832] loop4: detected capacity change from 0 to 2048
[  209.790467][ T3307]  loop4: p1 < > p4
[  209.798029][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  209.813867][T11832]  loop4: p1 < > p4
[  209.820695][T11802] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.828121][T11802] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.828785][T11832] loop4: p4 size 8388608 extends beyond EOD, truncated
[  209.844936][T11802] bridge_slave_0: entered allmulticast mode
[  209.851885][T11802] bridge_slave_0: entered promiscuous mode
[  209.869946][T11802] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.877142][T11802] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.884747][T11802] bridge_slave_1: entered allmulticast mode
[  209.895494][T11802] bridge_slave_1: entered promiscuous mode
[  209.951616][T11802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.995011][T11843] SELinux: ebitmap: truncated map
[  210.004782][T11845] loop2: detected capacity change from 0 to 2048
[  210.012012][T11843] SELinux: failed to load policy
[  210.037132][   T29] kauditd_printk_skb: 432 callbacks suppressed
[  210.037150][   T29] audit: type=1326 audit(1748127949.069:13357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.069767][ T3499]  loop2: p1 < > p4
[  210.074282][ T3499] loop2: p4 size 8388608 extends beyond EOD, truncated
[  210.082880][  T139] bond0 (unregistering): Released all slaves
[  210.088234][   T29] audit: type=1326 audit(1748127949.069:13358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.112882][   T29] audit: type=1326 audit(1748127949.069:13359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.119745][  T139] bond1 (unregistering): Released all slaves
[  210.136546][   T29] audit: type=1326 audit(1748127949.069:13360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.136579][   T29] audit: type=1326 audit(1748127949.069:13361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.146938][  T139] bond2 (unregistering): Released all slaves
[  210.166895][   T29] audit: type=1326 audit(1748127949.069:13362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.166931][   T29] audit: type=1326 audit(1748127949.069:13363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.195888][  T139] bond3 (unregistering): Released all slaves
[  210.196952][   T29] audit: type=1326 audit(1748127949.069:13364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.224193][  T139] bond4 (unregistering): Released all slaves
[  210.244922][   T29] audit: type=1326 audit(1748127949.069:13365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.244957][   T29] audit: type=1326 audit(1748127949.069:13366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8504e969 code=0x7ffc0000
[  210.305722][T11854] loop0: detected capacity change from 0 to 256
[  210.329367][T11852] loop4: detected capacity change from 0 to 2048
[  210.342842][  T139] bond5 (unregistering): Released all slaves
[  210.352187][T11845]  loop2: p1 < > p4
[  210.360003][T11845] loop2: p4 size 8388608 extends beyond EOD, truncated
[  210.381703][ T3499]  loop4: p1 < > p4
[  210.401280][ T3499] loop4: p4 size 8388608 extends beyond EOD, truncated
[  210.412339][T11852]  loop4: p1 < > p4
[  210.416358][  T139] bond6 (unregistering): Released all slaves
[  210.431592][  T139] bond7 (unregistering): Released all slaves
[  210.442372][T11852] loop4: p4 size 8388608 extends beyond EOD, truncated
[  210.445747][  T139] bond8 (unregistering): Released all slaves
[  210.463028][  T139] bond9 (unregistering): Released all slaves
[  210.477798][  T139] bond10 (unregistering): Released all slaves
[  210.487353][  T139] bond11 (unregistering): Released all slaves
[  210.496319][  T139] bond12 (unregistering): Released all slaves
[  210.504825][  T139] bond13 (unregistering): Released all slaves
[  210.514012][  T139] bond14 (unregistering): Released all slaves
[  210.522748][  T139] bond15 (unregistering): Released all slaves
[  210.531609][  T139] bond16 (unregistering): Released all slaves
[  210.540130][  T139] bond17 (unregistering): Released all slaves
[  210.548233][  T139] bond18 (unregistering): Released all slaves
[  210.558195][  T139] bond19 (unregistering): Released all slaves
[  210.566647][  T139] bond20 (unregistering): Released all slaves
[  210.575664][  T139] bond21 (unregistering): Released all slaves
[  210.594078][  T139] bond22 (unregistering): (slave veth51): Releasing backup interface
[  210.602586][  T139] veth51: left promiscuous mode
[  210.608937][  T139] bond22 (unregistering): Released all slaves
[  210.617641][  T139] bond23 (unregistering): (slave veth55): Releasing backup interface
[  210.626007][  T139] veth55: left promiscuous mode
[  210.632038][  T139] bond23 (unregistering): Released all slaves
[  210.641219][  T139] bond24 (unregistering): (slave veth61): Releasing backup interface
[  210.649924][  T139] veth61: left promiscuous mode
[  210.655981][  T139] bond24 (unregistering): Released all slaves
[  210.666222][  T139] bond25 (unregistering): (slave veth63): Releasing backup interface
[  210.674495][  T139] veth63: left promiscuous mode
[  210.675077][T11862] loop1: detected capacity change from 0 to 128
[  210.687050][  T139] bond25 (unregistering): Released all slaves
[  210.697721][  T139] bond26 (unregistering): (slave veth65): Releasing backup interface
[  210.705998][  T139] veth65: left promiscuous mode
[  210.711975][  T139] bond26 (unregistering): Released all slaves
[  210.721428][  T139] bond27 (unregistering): (slave veth67): Releasing backup interface
[  210.729747][  T139] veth67: left promiscuous mode
[  210.735419][  T139] bond27 (unregistering): Released all slaves
[  210.744908][  T139] bond28 (unregistering): (slave veth69): Releasing backup interface
[  210.753552][  T139] veth69: left promiscuous mode
[  210.759553][  T139] bond28 (unregistering): Released all slaves
[  210.768063][  T139] bond29 (unregistering): Released all slaves
[  210.776550][  T139] bond30 (unregistering): Released all slaves
[  210.785093][  T139] bond31 (unregistering): Released all slaves
[  210.794634][T11802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.819064][ T3004]  loop4: p1 < > p4
[  210.827096][ T3004] loop4: p4 size 8388608 extends beyond EOD, truncated
[  210.857502][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  210.870319][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  210.886890][  T139] tipc: Left network mode
[  210.893034][T11802] team0: Port device team_slave_0 added
[  210.907273][ T3004]  loop2: p1 < > p4
[  210.912568][T11802] team0: Port device team_slave_1 added
[  210.919531][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated
[  210.942639][T11870] loop1: detected capacity change from 0 to 2048
[  210.961867][T11802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.968983][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.995274][T11802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.007673][T11802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.014709][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.025157][ T3004]  loop1: p1 < > p4
[  211.040976][T11802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.068168][  T139] hsr_slave_0: left promiscuous mode
[  211.073759][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  211.084681][  T139] hsr_slave_1: left promiscuous mode
[  211.092594][T11874] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  211.107190][ T3004]  loop1: p1 < > p4
[  211.115397][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  211.130707][T11870]  loop1: p1 < > p4
[  211.136640][T11870] loop1: p4 size 8388608 extends beyond EOD, truncated
[  211.172347][T11883] loop0: detected capacity change from 0 to 512
[  211.192031][T11884] loop2: detected capacity change from 0 to 2048
[  211.192072][T11881] loop4: detected capacity change from 0 to 128
[  211.209547][ T3004]  loop1: p1 < > p4
[  211.209748][T11883] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.218588][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  211.231615][T11884]  loop2: p1 < > p4
[  211.235922][T11881] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.251969][T11884] loop2: p4 size 8388608 extends beyond EOD, truncated
[  211.513560][T11900] loop1: detected capacity change from 0 to 2048
[  211.539386][T11895] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  211.551512][ T3307]  loop1: p1 < > p4
[  211.563464][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated
[  211.575700][T11802] hsr_slave_0: entered promiscuous mode
[  211.584272][T11802] hsr_slave_1: entered promiscuous mode
[  211.590759][T11802] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.598847][T11802] Cannot create hsr debugfs directory
[  211.609364][T11897] loop0: detected capacity change from 0 to 256
[  211.621644][T11900]  loop1: p1 < > p4
[  211.626546][T11904] SELinux: ebitmap: truncated map
[  211.632015][T11900] loop1: p4 size 8388608 extends beyond EOD, truncated
[  211.644395][T11904] SELinux: failed to load policy
[  211.756798][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  211.768064][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  211.841716][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  211.855461][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  211.985729][T11946] loop0: detected capacity change from 0 to 128
[  212.025727][T11948] SELinux: ebitmap: truncated map
[  212.032270][T11948] SELinux: failed to load policy
[  212.056996][T11946] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.177277][T11965] loop2: detected capacity change from 0 to 2048
[  212.204609][T11802] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  212.243273][T11802] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  212.248996][ T3499]  loop2: p1 < > p4
[  212.254491][ T3499] loop2: p4 size 8388608 extends beyond EOD, truncated
[  212.264417][T11802] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  212.273561][T11978] __nla_validate_parse: 27 callbacks suppressed
[  212.273577][T11978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2904'.
[  212.294105][T11965]  loop2: p1 < > p4
[  212.302286][T11965] loop2: p4 size 8388608 extends beyond EOD, truncated
[  212.309623][T11802] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  212.320228][T11982] netlink: 'syz.4.2906': attribute type 1 has an invalid length.
[  212.341841][T11982] netlink: 'syz.4.2906': attribute type 3 has an invalid length.
[  212.349767][T11982] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2906'.
[  212.358992][T11982] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  212.362313][T11983] SELinux: ebitmap: truncated map
[  212.395325][T11983] SELinux: failed to load policy
[  212.443347][T11965] bond28: entered promiscuous mode
[  212.449435][T11965] 8021q: adding VLAN 0 to HW filter on device bond28
[  212.453992][T11986] loop0: detected capacity change from 0 to 2048
[  212.503766][T11987] veth91: entered promiscuous mode
[  212.518209][T11987] bond28: (slave veth91): Enslaving as an active interface with an up link
[  212.531738][T11986]  loop0: p1 < > p4
[  212.544192][ T3004]  loop2: p1 < > p4
[  212.548798][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated
[  212.559949][T11986] loop0: p4 size 8388608 extends beyond EOD, truncated
[  212.600350][T11998] loop4: detected capacity change from 0 to 512
[  212.627969][T11802] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.640816][T11802] 8021q: adding VLAN 0 to HW filter on device team0
[  212.652588][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  212.653419][T11998] EXT4-fs (loop4): orphan cleanup on readonly fs
[  212.665116][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  212.685904][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.693183][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.705753][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2911'.
[  212.746116][T11998] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2910: bad orphan inode 13
[  212.748079][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.763356][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.788609][T11998] ext4_test_bit(bit=12, block=18) = 1
[  212.790743][T12014] loop0: detected capacity change from 0 to 1024
[  212.794022][T11998] is_bad_inode(inode)=0
[  212.794034][T11998] NEXT_ORPHAN(inode)=2130706432
[  212.794044][T11998] max_ino=32
[  212.794053][T11998] i_nlink=1
[  212.842038][T12015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2911'.
[  212.856427][T12014] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  212.867663][T12014] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  212.885379][T11998] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  212.912272][T12030] netlink: 'syz.1.2913': attribute type 1 has an invalid length.
[  212.920899][T12014] JBD2: no valid journal superblock found
[  212.921113][T11998] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2910: bg 0: block 248: padding at end of block bitmap is not set
[  212.926776][T12014] EXT4-fs (loop0): Could not load journal inode
[  212.944443][T12030] loop1: detected capacity change from 0 to 512
[  212.953579][T11802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.960260][T12030] EXT4-fs: Ignoring removed nobh option
[  212.989817][T11998] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2910: Failed to acquire dquot type 1
[  213.010164][T12030] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2913: invalid indirect mapped block 256 (level 2)
[  213.025110][T12014] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  213.031956][T12030] EXT4-fs (loop1): 2 truncates cleaned up
[  213.045449][T12030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2913: bg 0: block 5: invalid block bitmap
[  213.081609][T11998] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  213.100796][T11802] veth0_vlan: entered promiscuous mode
[  213.122684][T11802] veth1_vlan: entered promiscuous mode
[  213.140669][T12047] netlink: 'syz.0.2915': attribute type 1 has an invalid length.
[  213.153848][T11802] veth0_macvtap: entered promiscuous mode
[  213.160886][T12049] loop4: detected capacity change from 0 to 2048
[  213.162990][T11802] veth1_macvtap: entered promiscuous mode
[  213.177438][T12047] loop0: detected capacity change from 0 to 512
[  213.185625][T12047] EXT4-fs: Ignoring removed nobh option
[  213.198310][T11802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.208929][ T3307]  loop4: p1 < > p4
[  213.215957][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  213.216970][T12047] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2915: invalid indirect mapped block 256 (level 2)
[  213.238249][T11802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.247402][T11802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.256509][T11802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.265297][T11802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.268739][T12049]  loop4: p1 < > p4
[  213.274234][T11802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.278960][T12049] loop4: p4 size 8388608 extends beyond EOD, truncated
[  213.297992][T12047] EXT4-fs (loop0): 2 truncates cleaned up
[  213.299247][T12051] SELinux: ebitmap: truncated map
[  213.315741][T12051] SELinux: failed to load policy
[  213.329445][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'.
[  213.339492][T12049] netlink: 'syz.4.2917': attribute type 1 has an invalid length.
[  213.373945][T12047] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2915: bg 0: block 5: invalid block bitmap
[  213.394601][T12056] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  213.400944][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  213.406537][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  213.430214][T12056] SELinux: failed to load policy
[  213.472701][T12063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2921'.
[  213.499397][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2921'.
[  213.509601][T12066] loop2: detected capacity change from 0 to 1024
[  213.516753][T12066] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  213.527723][T12066] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  213.542544][T12066] JBD2: no valid journal superblock found
[  213.548343][T12066] EXT4-fs (loop2): Could not load journal inode
[  213.557619][T12066] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  213.652048][T12076] netlink: 'syz.3.2926': attribute type 1 has an invalid length.
[  213.672125][T12076] loop3: detected capacity change from 0 to 512
[  213.681656][T12076] EXT4-fs: Ignoring removed nobh option
[  213.719441][T12076] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2926: invalid indirect mapped block 256 (level 2)
[  213.733777][T12076] EXT4-fs (loop3): 2 truncates cleaned up
[  213.742548][T12076] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2926: bg 0: block 5: invalid block bitmap
[  213.835651][T12084] SELinux: ebitmap: truncated map
[  213.851946][T12084] SELinux: failed to load policy
[  213.920868][T12092] loop3: detected capacity change from 0 to 1024
[  213.957453][T12090] loop4: detected capacity change from 0 to 1024
[  213.969152][T12090] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  213.980342][T12090] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  213.990199][T12092] EXT4-fs: Ignoring sb option on remount
[  213.995880][T12092] EXT4-fs: Ignoring removed orlov option
[  214.032378][T12092] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  214.083566][T12092] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  214.088611][T12090] JBD2: no valid journal superblock found
[  214.097762][T12090] EXT4-fs (loop4): Could not load journal inode
[  214.107803][T12103] netlink: 'syz.0.2937': attribute type 1 has an invalid length.
[  214.117668][T12103] netlink: 'syz.0.2937': attribute type 3 has an invalid length.
[  214.125593][T12103] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2937'.
[  214.134826][T12103] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  214.172188][T12090] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  214.448030][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'.
[  214.503120][T12132] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  214.517490][T12133] loop0: detected capacity change from 0 to 128
[  214.543391][T12132] loop1: detected capacity change from 0 to 256
[  214.595980][T12138] netlink: 'syz.0.2948': attribute type 1 has an invalid length.
[  214.637830][T12138] netlink: 'syz.0.2948': attribute type 3 has an invalid length.
[  214.645972][T12138] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2948'.
[  214.655391][T12138] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  214.714484][T12114] chnl_net:caif_netlink_parms(): no params data found
[  214.890055][T12177] loop1: detected capacity change from 0 to 2048
[  214.900041][ T3415] bond0 (unregistering): Released all slaves
[  214.909184][ T3415] bond1 (unregistering): Released all slaves
[  214.917887][ T3415] bond2 (unregistering): Released all slaves
[  214.924622][ T3307]  loop1: p1 < > p4
[  214.927392][ T3415] bond3 (unregistering): Released all slaves
[  214.931279][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated
[  214.937072][ T3415] bond4 (unregistering): Released all slaves
[  214.950411][ T3415] bond5 (unregistering): Released all slaves
[  214.959048][T12177]  loop1: p1 < > p4
[  214.959767][ T3415] bond6 (unregistering): Released all slaves
[  214.963725][T12177] loop1: p4 size 8388608 extends beyond EOD, truncated
[  214.971974][ T3415] bond7 (unregistering): Released all slaves
[  214.989997][ T3415] bond8 (unregistering): Released all slaves
[  215.001394][T12183] loop0: detected capacity change from 0 to 128
[  215.027545][ T3415] bond9 (unregistering): Released all slaves
[  215.036230][ T3415] bond10 (unregistering): (slave veth29): Releasing backup interface
[  215.044545][ T3415] veth29: left promiscuous mode
[  215.050893][ T3415] bond10 (unregistering): Released all slaves
[  215.060494][ T3415] bond11 (unregistering): (slave veth41): Releasing backup interface
[  215.068735][ T3415] veth41: left promiscuous mode
[  215.074615][ T3415] bond11 (unregistering): Released all slaves
[  215.124401][ T3004]  loop1: p1 < > p4
[  215.129742][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  215.187060][T12114] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.194312][T12114] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.206523][T12114] bridge_slave_0: entered allmulticast mode
[  215.213967][T12114] bridge_slave_0: entered promiscuous mode
[  215.221047][ T3415] tipc: Left network mode
[  215.249749][T12193] loop1: detected capacity change from 0 to 2048
[  215.270599][T12194] SELinux: failed to load policy
[  215.280060][ T3497]  loop1: p1 < > p4
[  215.285902][T12190] C: renamed from team_slave_0 (while UP)
[  215.294318][T12190] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  215.309821][T12114] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.316933][T12114] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.324518][ T3497] loop1: p4 size 8388608 extends beyond EOD, truncated
[  215.332578][T12114] bridge_slave_1: entered allmulticast mode
[  215.348300][T12193]  loop1: p1 < > p4
[  215.352796][T12114] bridge_slave_1: entered promiscuous mode
[  215.363570][T12193] loop1: p4 size 8388608 extends beyond EOD, truncated
[  215.383628][ T3415] hsr_slave_0: left promiscuous mode
[  215.390540][ T3415] hsr_slave_1: left promiscuous mode
[  215.414524][ T3004]  loop1: p1 < > p4
[  215.419524][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  215.476554][T12209] loop3: detected capacity change from 0 to 2048
[  215.499895][T12209]  loop3: p1 < > p4
[  215.505425][T12209] loop3: p4 size 8388608 extends beyond EOD, truncated
[  215.586843][   T29] kauditd_printk_skb: 249 callbacks suppressed
[  215.586862][   T29] audit: type=1326 audit(1748136144.628:13614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.619434][   T29] audit: type=1326 audit(1748136144.628:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.643414][   T29] audit: type=1326 audit(1748136144.638:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.667260][   T29] audit: type=1326 audit(1748136144.638:13617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.691863][   T29] audit: type=1326 audit(1748136144.678:13618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.715665][   T29] audit: type=1326 audit(1748136144.678:13619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.739907][   T29] audit: type=1326 audit(1748136144.688:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.763793][   T29] audit: type=1326 audit(1748136144.688:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.787862][   T29] audit: type=1326 audit(1748136144.688:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12212 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c312e969 code=0x7ffc0000
[  215.845511][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.856919][ T3004]  loop1: p1 < > p4
[  215.861704][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  215.872862][T12219] loop2: detected capacity change from 0 to 2048
[  215.884363][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.935759][ T3004]  loop2: p1 < > p4
[  215.943486][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated
[  215.953647][T12219]  loop2: p1 < > p4
[  215.954611][T12114] team0: Port device team_slave_0 added
[  215.958159][T12219] loop2: p4 size 8388608 extends beyond EOD, truncated
[  215.980727][T12114] team0: Port device team_slave_1 added
[  215.983220][ T3004]  loop2: p1 < > p4
[  215.992472][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated
[  216.041312][T12219] bond29: entered promiscuous mode
[  216.046856][T12219] 8021q: adding VLAN 0 to HW filter on device bond29
[  216.081451][ T3004]  loop2: p1 < > p4
[  216.087323][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated
[  216.088048][T12219] veth95: entered promiscuous mode
[  216.101261][T12219] bond29: (slave veth95): Enslaving as an active interface with an up link
[  216.119873][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.126975][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.136652][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  216.153195][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.184336][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  216.220363][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.227445][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.253936][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.288922][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  216.290461][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  216.350268][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  216.352520][T12114] hsr_slave_0: entered promiscuous mode
[  216.362362][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  216.367819][T12114] hsr_slave_1: entered promiscuous mode
[  216.397337][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  216.399914][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  216.550877][T12258] loop2: detected capacity change from 0 to 128
[  216.642583][T12278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  217.063575][T12114] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  217.073012][T12114] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  217.084075][T12114] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  217.093763][T12114] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  217.205731][T12322] loop1: detected capacity change from 0 to 128
[  217.321301][T12114] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.334695][T12114] 8021q: adding VLAN 0 to HW filter on device team0
[  217.342266][T12338] __nla_validate_parse: 18 callbacks suppressed
[  217.342285][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2993'.
[  217.376848][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.384090][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.401846][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.409328][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.428045][T12345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2993'.
[  217.429195][T12114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.447481][T12114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.581084][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.620306][   T29] audit: type=1326 audit(1748136146.668:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a26ae969 code=0x7ffc0000
[  217.762078][T12383] loop0: detected capacity change from 0 to 512
[  217.801298][T12383] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.890581][T12383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2998'.
[  217.896684][T12114] veth0_vlan: entered promiscuous mode
[  217.925592][T12114] veth1_vlan: entered promiscuous mode
[  217.977948][T12114] veth0_macvtap: entered promiscuous mode
[  218.007280][T12114] veth1_macvtap: entered promiscuous mode
[  218.026937][T12403] loop3: detected capacity change from 0 to 512
[  218.034193][T12403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  218.047352][T12114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.064948][T12403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3000: bg 0: block 384: padding at end of block bitmap is not set
[  218.077819][T12114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.090070][T12114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.090696][T12403] EXT4-fs (loop3): Remounting filesystem read-only
[  218.098851][T12114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.112290][T12403] EXT4-fs (loop3): 1 truncate cleaned up
[  218.114157][T12114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.128651][T12114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.251426][T12439] validate_nla: 6 callbacks suppressed
[  218.251443][T12439] netlink: 'syz.4.2940': attribute type 1 has an invalid length.
[  218.270626][T12439] loop4: detected capacity change from 0 to 512
[  218.280788][T12439] EXT4-fs: Ignoring removed nobh option
[  218.289895][T12441] SELinux: ebitmap: truncated map
[  218.296194][T12441] SELinux: failed to load policy
[  218.307988][T12439] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2940: invalid indirect mapped block 256 (level 2)
[  218.340388][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'.
[  218.349405][T12446] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3005'.
[  218.358512][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3005'.
[  218.388764][T12439] EXT4-fs (loop4): 2 truncates cleaned up
[  218.420162][T12439] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2940: bg 0: block 5: invalid block bitmap
[  218.477067][T12460] loop4: detected capacity change from 0 to 512
[  218.519467][T12460] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.584803][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3010'.
[  218.768351][T12473] SELinux: ebitmap: truncated map
[  218.774927][T12473] SELinux: failed to load policy
[  218.791996][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3014'.
[  218.805187][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3015'.
[  218.898879][T12470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3015'.
[  218.975520][T12493] loop4: detected capacity change from 0 to 2048
[  219.019083][ T3307]  loop4: p1 < > p4
[  219.023572][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  219.035512][T12493]  loop4: p1 < > p4
[  219.042434][T12493] loop4: p4 size 8388608 extends beyond EOD, truncated
[  219.050875][ T3415] bond0 (unregistering): Released all slaves
[  219.063913][ T3415] bond1 (unregistering): Released all slaves
[  219.073923][ T3415] bond2 (unregistering): Released all slaves
[  219.086571][ T3415] bond3 (unregistering): Released all slaves
[  219.105226][ T3415] bond4 (unregistering): Released all slaves
[  219.111945][T12493] netlink: 'syz.4.3022': attribute type 1 has an invalid length.
[  219.114937][ T3415] bond5 (unregistering): Released all slaves
[  219.128089][ T3415] bond6 (unregistering): Released all slaves
[  219.136990][ T3415] bond7 (unregistering): Released all slaves
[  219.145682][ T3415] bond8 (unregistering): Released all slaves
[  219.154172][ T3415] bond9 (unregistering): Released all slaves
[  219.162331][ T3415] bond10 (unregistering): Released all slaves
[  219.171427][ T3415] bond11 (unregistering): Released all slaves
[  219.180344][ T3415] bond12 (unregistering): Released all slaves
[  219.188919][ T3415] bond13 (unregistering): Released all slaves
[  219.197978][ T3415] bond14 (unregistering): (slave veth41): Releasing backup interface
[  219.206594][ T3415] veth41: left promiscuous mode
[  219.213167][ T3415] bond14 (unregistering): Released all slaves
[  219.221268][ T3415] bond15 (unregistering): Released all slaves
[  219.230648][ T3415] bond16 (unregistering): (slave veth47): Releasing backup interface
[  219.239101][ T3415] veth47: left promiscuous mode
[  219.244822][ T3415] bond16 (unregistering): Released all slaves
[  219.253866][ T3415] bond17 (unregistering): (slave veth51): Releasing backup interface
[  219.263118][ T3415] veth51: left promiscuous mode
[  219.268764][ T3415] bond17 (unregistering): Released all slaves
[  219.277619][ T3415] bond18 (unregistering): (slave veth55): Releasing backup interface
[  219.285963][ T3415] veth55: left promiscuous mode
[  219.291880][ T3415] bond18 (unregistering): Released all slaves
[  219.354389][ T3415] tipc: Left network mode
[  219.370140][ T3415] hsr_slave_0: left promiscuous mode
[  219.376112][ T3415] hsr_slave_1: left promiscuous mode
[  219.450308][T12514] loop2: detected capacity change from 0 to 2048
[  219.511225][ T3307]  loop2: p1 < > p4
[  219.515313][T12521] loop3: detected capacity change from 0 to 128
[  219.516912][ T3307] loop2: p4 size 8388608 extends beyond EOD, truncated
[  219.534973][T12514]  loop2: p1 < > p4
[  219.540037][T12514] loop2: p4 size 8388608 extends beyond EOD, truncated
[  219.560563][T12514] netlink: 'syz.2.3024': attribute type 1 has an invalid length.
[  219.644261][T12525] SELinux: ebitmap: truncated map
[  219.659614][ T3004]  loop4: p1 < > p4
[  219.664139][T12525] SELinux: failed to load policy
[  219.672583][ T3004] loop4: p4 size 8388608 extends beyond EOD, truncated
[  219.697537][T12514] bond30: entered promiscuous mode
[  219.725482][T12514] 8021q: adding VLAN 0 to HW filter on device bond30
[  219.732571][T12536] loop1: detected capacity change from 0 to 2048
[  219.773809][T12538] netlink: 'syz.4.3031': attribute type 1 has an invalid length.
[  219.791784][T12538] loop4: detected capacity change from 0 to 512
[  219.811629][ T3004]  loop1: p1 < > p4
[  219.811647][T12538] EXT4-fs: Ignoring removed nobh option
[  219.827070][T12538] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3031: invalid indirect mapped block 256 (level 2)
[  219.831056][T12475] chnl_net:caif_netlink_parms(): no params data found
[  219.852736][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  219.863217][T12538] EXT4-fs (loop4): 2 truncates cleaned up
[  219.871945][T12538] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3031: bg 0: block 5: invalid block bitmap
[  219.888383][ T3004]  loop1: p1 < > p4
[  219.896499][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated
[  219.908132][T12536]  loop1: p1 < > p4
[  219.921874][T12536] loop1: p4 size 8388608 extends beyond EOD, truncated
[  219.965252][T12562] loop3: detected capacity change from 0 to 2048
[  220.008916][T12475] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.016172][T12475] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.019024][T12562]  loop3: p1 < > p4
[  220.036507][T12475] bridge_slave_0: entered allmulticast mode
[  220.044344][T12475] bridge_slave_0: entered promiscuous mode
[  220.052658][T12475] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.059838][T12475] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.060470][T12562] loop3: p4 size 8388608 extends beyond EOD, truncated
[  220.068350][T12475] bridge_slave_1: entered allmulticast mode
[  220.081571][T12475] bridge_slave_1: entered promiscuous mode
[  220.103184][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.114374][T12572] SELinux: ebitmap: truncated map
[  220.119884][ T3004]  loop3: p1 < > p4
[  220.124313][T12572] SELinux: failed to load policy
[  220.129555][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated
[  220.138242][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.151374][T12573] loop4: detected capacity change from 0 to 512
[  220.176839][T12573] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  220.206213][ T3004]  loop3: p1 < > p4
[  220.211721][T12475] team0: Port device team_slave_0 added
[  220.220013][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated
[  220.228633][T12475] team0: Port device team_slave_1 added
[  220.247268][T12573] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3037: bg 0: block 384: padding at end of block bitmap is not set
[  220.266006][T12573] EXT4-fs (loop4): Remounting filesystem read-only
[  220.273110][T12573] EXT4-fs (loop4): 1 truncate cleaned up
[  220.288722][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.291491][T12583] SELinux: failed to load policy
[  220.295712][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.327322][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.383679][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  220.389316][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.400918][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.404127][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  220.427074][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.541577][T12475] hsr_slave_0: entered promiscuous mode
[  220.551389][T12475] hsr_slave_1: entered promiscuous mode
[  220.571851][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.594829][T12475] Cannot create hsr debugfs directory
[  220.610360][T12603] loop1: detected capacity change from 0 to 128
[  220.777580][T12616] SELinux: ebitmap: truncated map
[  220.790071][T12616] SELinux: failed to load policy
[  220.800704][T12623] loop3: detected capacity change from 0 to 512
[  220.854046][T12623] EXT4-fs mount: 45 callbacks suppressed
[  220.854066][T12623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.938722][T12623] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.989829][T12623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.010545][T12475] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  221.022110][T12475] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  221.031559][T12475] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  221.067231][T12475] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  221.087898][   T29] kauditd_printk_skb: 54 callbacks suppressed
[  221.087916][   T29] audit: type=1326 audit(1748140245.121:13678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.094834][T12645] loop2: detected capacity change from 0 to 128
[  221.126524][ T3393] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  221.159061][ T3393] hid-generic 0000:0000:0000.003F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  221.185800][   T29] audit: type=1326 audit(1748140245.161:13679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.209900][   T29] audit: type=1326 audit(1748140245.161:13680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.233736][   T29] audit: type=1326 audit(1748140245.161:13681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.255344][T12475] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.258012][   T29] audit: type=1326 audit(1748140245.161:13682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.288651][   T29] audit: type=1326 audit(1748140245.161:13683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.303277][T12475] 8021q: adding VLAN 0 to HW filter on device team0
[  221.312422][   T29] audit: type=1326 audit(1748140245.161:13684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.323752][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.342995][   T29] audit: type=1326 audit(1748140245.161:13685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.350195][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.362775][T12656] fido_id[12656]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  221.373793][   T29] audit: type=1326 audit(1748140245.161:13686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff009e969 code=0x7ffc0000
[  221.408137][T12475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  221.418720][   T29] audit: type=1326 audit(1748140245.221:13687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12621 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a26ae969 code=0x7ffc0000
[  221.428828][T12475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.437518][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.470038][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.651757][T12667] loop2: detected capacity change from 0 to 128
[  221.689550][T12672] loop4: detected capacity change from 0 to 128
[  221.764671][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.817097][T12702] loop3: detected capacity change from 0 to 512
[  221.881664][T12702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.918133][T12699] loop2: detected capacity change from 0 to 128
[  221.939649][T12702] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.945659][T12475] veth0_vlan: entered promiscuous mode
[  221.978971][T12475] veth1_vlan: entered promiscuous mode
[  221.979671][T12702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.020219][T12475] veth0_macvtap: entered promiscuous mode
[  222.059459][T12475] veth1_macvtap: entered promiscuous mode
[  222.090890][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.132473][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.152217][T12475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.161194][T12475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.170082][T12475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.179043][T12475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.292822][T12745] loop3: detected capacity change from 0 to 256
[  222.351090][T12765] __nla_validate_parse: 22 callbacks suppressed
[  222.351110][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3013'.
[  222.406266][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3075'.
[  222.429776][T12765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3013'.
[  222.669076][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3081'.
[  222.770971][T12808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3081'.
[  223.015980][T12828] loop3: detected capacity change from 0 to 512
[  223.025841][T12828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  223.044473][T12828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3083: bg 0: block 384: padding at end of block bitmap is not set
[  223.079047][T12828] EXT4-fs (loop3): Remounting filesystem read-only
[  223.085872][T12828] EXT4-fs (loop3): 1 truncate cleaned up
[  223.092160][T12828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.095941][T12837] SELinux: failed to load policy
[  223.107023][T12828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.355825][T12841] chnl_net:caif_netlink_parms(): no params data found
[  223.433259][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3090'.
[  223.465529][ T3625] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0
[  223.479581][ T3625] hid-generic 0000:0000:0000.0040: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  223.531316][T12864] fido_id[12864]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  223.614180][T12870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3090'.
[  223.628667][  T139] bond0 (unregistering): Released all slaves
[  223.648193][  T139] bond1 (unregistering): Released all slaves
[  223.668875][  T139] bond2 (unregistering): Released all slaves
[  223.688186][  T139] bond3 (unregistering): Released all slaves
[  223.707758][  T139] bond4 (unregistering): Released all slaves
[  223.714201][T12876] loop0: detected capacity change from 0 to 2048
[  223.731201][  T139] bond5 (unregistering): Released all slaves
[  223.750904][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'.
[  223.768182][  T139] bond6 (unregistering): Released all slaves
[  223.775205][ T3307]  loop0: p1 < > p4
[  223.780395][ T3307] loop0: p4 size 8388608 extends beyond EOD, truncated
[  223.791576][  T139] bond7 (unregistering): Released all slaves
[  223.801022][T12876]  loop0: p1 < > p4
[  223.804500][  T139] bond8 (unregistering): Released all slaves
[  223.814173][  T139] bond9 (unregistering): Released all slaves
[  223.822106][T12876] loop0: p4 size 8388608 extends beyond EOD, truncated
[  223.824227][  T139] bond10 (unregistering): Released all slaves
[  223.840977][  T139] bond11 (unregistering): Released all slaves
[  223.851581][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3092'.
[  223.880000][  T139] bond12 (unregistering): Released all slaves
[  223.894005][  T139] bond13 (unregistering): Released all slaves
[  223.907604][  T139] bond14 (unregistering): Released all slaves
[  223.917491][T12889] loop3: detected capacity change from 0 to 128
[  223.924732][  T139] bond15 (unregistering): Released all slaves
[  223.936709][  T139] bond16 (unregistering): Released all slaves
[  223.949749][  T139] bond17 (unregistering): Released all slaves
[  223.958454][  T139] bond18 (unregistering): Released all slaves
[  223.967181][  T139] bond19 (unregistering): Released all slaves
[  223.976259][  T139] bond20 (unregistering): Released all slaves
[  223.986425][  T139] bond21 (unregistering): Released all slaves
[  223.995632][  T139] bond22 (unregistering): (slave veth59): Releasing backup interface
[  224.004096][  T139] veth59: left promiscuous mode
[  224.010651][  T139] bond22 (unregistering): Released all slaves
[  224.019958][  T139] bond23 (unregistering): (slave veth61): Releasing backup interface
[  224.028335][  T139] veth61: left promiscuous mode
[  224.034341][  T139] bond23 (unregistering): Released all slaves
[  224.045097][  T139] bond24 (unregistering): (slave veth65): Releasing backup interface
[  224.053539][  T139] veth65: left promiscuous mode
[  224.064259][  T139] bond24 (unregistering): Released all slaves
[  224.090030][  T139] bond25 (unregistering): (slave veth67): Releasing backup interface
[  224.098716][  T139] veth67: left promiscuous mode
[  224.105090][  T139] bond25 (unregistering): Released all slaves
[  224.119863][  T139] bond26 (unregistering): (slave veth71): Releasing backup interface
[  224.128198][  T139] veth71: left promiscuous mode
[  224.134934][  T139] bond26 (unregistering): Released all slaves
[  224.144367][  T139] bond27 (unregistering): (slave veth79): Releasing backup interface
[  224.153039][  T139] veth79: left promiscuous mode
[  224.158304][  T139] bond27 (unregistering): Released all slaves
[  224.166713][  T139] bond28 (unregistering): (slave veth91): Releasing backup interface
[  224.175470][  T139] veth91: left promiscuous mode
[  224.181545][  T139] bond28 (unregistering): Released all slaves
[  224.192839][  T139] bond29 (unregistering): (slave veth95): Releasing backup interface
[  224.201440][  T139] veth95: left promiscuous mode
[  224.207025][  T139] bond29 (unregistering): Released all slaves
[  224.216111][  T139] bond30 (unregistering): Released all slaves
[  224.224372][T12841] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.231600][T12841] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.238915][T12841] bridge_slave_0: entered allmulticast mode
[  224.245870][T12841] bridge_slave_0: entered promiscuous mode
[  224.253224][T12841] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.260504][T12841] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.267900][T12841] bridge_slave_1: entered allmulticast mode
[  224.274712][T12841] bridge_slave_1: entered promiscuous mode
[  224.312783][T12897] loop4: detected capacity change from 0 to 256
[  224.341739][  T139] tipc: Left network mode
[  224.355548][T12841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.375021][T12841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.385280][ T3004]  loop0: p1 < > p4
[  224.393811][  T139] hsr_slave_0: left promiscuous mode
[  224.393849][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated
[  224.408258][  T139] hsr_slave_1: left promiscuous mode
[  224.431542][T12903] netlink: 'syz.3.3096': attribute type 1 has an invalid length.
[  224.469576][T12906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3097'.
[  224.470885][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  224.492944][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  224.570204][T12912] loop4: detected capacity change from 0 to 1024
[  224.583316][  T139] pim6reg9 (unregistering): left allmulticast mode
[  224.590103][T12912] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  224.601083][T12912] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  224.612831][T12912] JBD2: no valid journal superblock found
[  224.618649][T12912] EXT4-fs (loop4): Could not load journal inode
[  224.628659][T12912] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  224.745958][T12903] netlink: 'syz.3.3096': attribute type 3 has an invalid length.
[  224.755051][T12903] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  224.781240][T12841] team0: Port device team_slave_0 added
[  224.790169][T12841] team0: Port device team_slave_1 added
[  224.811257][T12920] netlink: 'syz.3.3102': attribute type 1 has an invalid length.
[  224.850918][T12920] loop3: detected capacity change from 0 to 512
[  224.857797][T12920] EXT4-fs: Ignoring removed nobh option
[  224.865085][T12841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.872349][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.898537][T12841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.921106][T12841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.928157][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.954373][T12841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.969519][T12920] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3102: invalid indirect mapped block 256 (level 2)
[  225.004056][T12920] EXT4-fs (loop3): 2 truncates cleaned up
[  225.024220][T12841] hsr_slave_0: entered promiscuous mode
[  225.038054][T12841] hsr_slave_1: entered promiscuous mode
[  225.038954][T12920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.045043][T12841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.064112][T12841] Cannot create hsr debugfs directory
[  225.080555][T12920] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3102: bg 0: block 5: invalid block bitmap
[  225.124073][T11802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.390547][T12841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  225.410724][T12841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  225.420511][T12841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  225.432272][T12841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  225.496783][T12841] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.560518][T12841] 8021q: adding VLAN 0 to HW filter on device team0
[  225.583652][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.591057][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.614075][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.621320][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.663375][T12969] loop4: detected capacity change from 0 to 2048
[  225.672640][T12841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.729912][ T3307]  loop4: p1 < > p4
[  225.741389][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  225.772779][T12841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.792033][T12969]  loop4: p1 < > p4
[  225.799966][T12985] loop1: detected capacity change from 0 to 1024
[  225.807034][T12969] loop4: p4 size 8388608 extends beyond EOD, truncated
[  225.868559][T12985] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  225.879790][T12985] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  225.894323][T12969] netlink: 'syz.4.3108': attribute type 1 has an invalid length.
[  225.907604][T12969] bond1: entered promiscuous mode
[  225.931437][T12969] 8021q: adding VLAN 0 to HW filter on device bond1
[  225.952631][T12985] JBD2: no valid journal superblock found
[  225.958409][T12985] EXT4-fs (loop1): Could not load journal inode
[  226.028954][T12985] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  226.099605][ T3004]  loop4: p1 < > p4
[  226.105050][T12841] veth0_vlan: entered promiscuous mode
[  226.111231][ T3004] loop4: p4 size 8388608 extends beyond EOD, truncated
[  226.136696][T12841] veth1_vlan: entered promiscuous mode
[  226.193990][T13027] loop4: detected capacity change from 0 to 2048
[  226.201636][T13033] netlink: 'syz.0.3114': attribute type 1 has an invalid length.
[  226.211795][T12841] veth0_macvtap: entered promiscuous mode
[  226.227124][T12841] veth1_macvtap: entered promiscuous mode
[  226.241050][T13033] loop0: detected capacity change from 0 to 512
[  226.249460][ T3307]  loop4: p1 < > p4
[  226.254614][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  226.272800][T12841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.281515][T13033] EXT4-fs: Ignoring removed nobh option
[  226.300113][T13033] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3114: invalid indirect mapped block 256 (level 2)
[  226.324197][T13027]  loop4: p1 < > p4
[  226.329674][T12841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.350905][T13027] loop4: p4 size 8388608 extends beyond EOD, truncated
[  226.359501][T13033] EXT4-fs (loop0): 2 truncates cleaned up
[  226.365896][T13033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.372416][T12841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.387571][T12841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.396442][T12841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.405824][T12841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.415818][T13040] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  226.416743][T13033] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3114: bg 0: block 5: invalid block bitmap
[  226.437971][ T3004]  loop4: p1 < > p4
[  226.463119][ T3004] loop4: p4 size 8388608 extends beyond EOD, truncated
[  226.471235][T12475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.503852][T13043] loop3: detected capacity change from 0 to 256
[  226.547214][T13053] loop4: detected capacity change from 0 to 2048
[  226.609053][ T3307]  loop4: p1 < > p4
[  226.613629][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  226.626317][T13053]  loop4: p1 < > p4
[  226.633101][T13053] loop4: p4 size 8388608 extends beyond EOD, truncated
[  226.660251][T13064] loop2: detected capacity change from 0 to 128
[  226.756244][ T3004]  loop4: p1 < > p4
[  226.769718][ T3004] loop4: p4 size 8388608 extends beyond EOD, truncated
[  226.853296][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  226.869000][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  226.897993][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  226.898718][T13081] loop0: detected capacity change from 0 to 2048
[  226.911090][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  226.932629][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  226.947219][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  226.966103][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  226.969555][T13079] loop4: detected capacity change from 0 to 512
[  227.002263][T13081]  loop0: p1 < > p4
[  227.007668][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  227.022272][T13081] loop0: p4 size 8388608 extends beyond EOD, truncated
[  227.034612][T13079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  227.071218][T13081] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  227.091604][ T3004]  loop0: p1 < > p4
[  227.101879][T13079] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3123: bg 0: block 384: padding at end of block bitmap is not set
[  227.116584][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated
[  227.188819][T13079] EXT4-fs (loop4): Remounting filesystem read-only
[  227.196097][T13079] EXT4-fs (loop4): 1 truncate cleaned up
[  227.202569][T13079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.219320][T13079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.392788][T13090] loop0: detected capacity change from 0 to 512
[  227.401059][T13090] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  227.412581][T13090] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3128: bg 0: block 384: padding at end of block bitmap is not set
[  227.431368][T13090] EXT4-fs (loop0): Remounting filesystem read-only
[  227.438042][T13090] EXT4-fs (loop0): 1 truncate cleaned up
[  227.444498][T13090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.457680][T13090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.551362][T13098] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  227.582804][T13098] loop3: detected capacity change from 0 to 256
[  227.927612][T13107] SELinux: failed to load policy
[  227.956024][T13113] netlink: 'syz.2.3136': attribute type 1 has an invalid length.
[  227.967284][T13113] C: renamed from team_slave_0 (while UP)
[  227.975946][T13113] netlink: 'syz.2.3136': attribute type 3 has an invalid length.
[  227.983785][T13113] __nla_validate_parse: 13 callbacks suppressed
[  227.983801][T13113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3136'.
[  228.012222][T13113] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  228.092152][T13124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3141'.
[  228.133543][T13124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3141'.
[  228.135475][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'.
[  228.181865][T13133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'.
[  228.190879][T13129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3144'.
[  228.224326][T13133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3145'.
[  228.282056][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  228.386964][T13138] loop4: detected capacity change from 0 to 128
[  228.507449][T13155] loop4: detected capacity change from 0 to 2048
[  228.550698][ T3307]  loop4: p1 < > p4
[  228.552543][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'.
[  228.564128][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated
[  228.564245][ T2993] ==================================================================
[  228.579291][ T2993] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
[  228.587155][ T2993] 
[  228.589590][ T2993] write to 0xffffffff8686f828 of 8 bytes by task 3307 on cpu 0:
[  228.597346][ T2993]  prb_reserve_in_last+0x861/0xb80
[  228.602508][ T2993]  vprintk_store+0x494/0x860
[  228.607112][ T2993]  vprintk_emit+0x178/0x650
[  228.611637][ T2993]  vprintk_default+0x26/0x30
[  228.616284][ T2993]  vprintk+0x1d/0x30
[  228.620194][ T2993]  _printk+0x79/0xa0
[  228.624243][ T2993]  bdev_disk_changed+0x8d9/0xcb0
[  228.629207][ T2993]  blkdev_get_whole+0x1f5/0x2d0
[  228.634074][ T2993]  bdev_open+0x280/0x7e0
[  228.638332][ T2993]  blkdev_open+0x259/0x290
[  228.642764][ T2993]  do_dentry_open+0x646/0xa20
[  228.647539][ T2993]  vfs_open+0x37/0x1e0
[  228.651700][ T2993]  path_openat+0x1c5e/0x2170
[  228.656302][ T2993]  do_filp_open+0x109/0x230
[  228.660818][ T2993]  do_sys_openat2+0xa6/0x110
[  228.665502][ T2993]  __x64_sys_openat+0xf2/0x120
[  228.670372][ T2993]  x64_sys_call+0x1af/0x2fb0
[  228.674992][ T2993]  do_syscall_64+0xd0/0x1a0
[  228.679587][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.685574][ T2993] 
[  228.687994][ T2993] read to 0xffffffff8686f820 of 16 bytes by task 2993 on cpu 1:
[  228.695646][ T2993]  _prb_read_valid+0x1bc/0x920
[  228.700478][ T2993]  prb_read_valid+0x3c/0x60
[  228.705006][ T2993]  syslog_print+0x146/0x540
[  228.709608][ T2993]  do_syslog+0x52b/0x7e0
[  228.713866][ T2993]  __x64_sys_syslog+0x41/0x50
[  228.718649][ T2993]  x64_sys_call+0x2ea0/0x2fb0
[  228.723340][ T2993]  do_syscall_64+0xd0/0x1a0
[  228.727944][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.733850][ T2993] 
[  228.736180][ T2993] Reported by Kernel Concurrency Sanitizer on:
[  228.742333][ T2993] CPU: 1 UID: 0 PID: 2993 Comm: klogd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  228.754503][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  228.764742][ T2993] ==================================================================
[  228.782311][T13158] loop3: detected capacity change from 0 to 512
[  228.796893][T13155]  loop4: p1 < > p4
[  228.802024][T13155] loop4: p4 size 8388608 extends beyond EOD, truncated
[  228.811014][T13158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  228.833452][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3151'.
[  228.849216][T13158] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3152: bg 0: block 384: padding at end of block bitmap is not set
[  228.870285][T13158] EXT4-fs (loop3): Remounting filesystem read-only
[  228.877496][T13158] EXT4-fs (loop3): 1 truncate cleaned up
[  228.883903][T13158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.906500][T13158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.916306][T13157] loop0: detected capacity change from 0 to 128