last executing test programs:

37.787829693s ago: executing program 1 (id=226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000240000000080500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000004c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x7, 0x30, 0x64, 0x0, 0x2, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast}, @redirect={0x5, 0x3, 0x0, @multicast2, {0x5, 0x4, 0x1, 0x2, 0x19e8, 0x66, 0x1, 0x6, 0x21, 0x0, @empty, @loopback}}}}}}}, 0x42)

37.710325943s ago: executing program 1 (id=228):
r0 = io_uring_setup(0x57ef, &(0x7f00000001c0)={0x0, 0x47, 0x40, 0x2, 0x327})
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3}, 0x10, 0x0}, 0x44895)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)

37.567289103s ago: executing program 1 (id=229):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

37.466957452s ago: executing program 1 (id=231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0)

37.332215451s ago: executing program 1 (id=232):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = syz_io_uring_setup(0x2e37, &(0x7f0000000080)={0x0, 0x492b, 0x10100, 0x10400, 0x0, 0x0, r2}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
io_uring_enter(r3, 0x567, 0xa1ff, 0x0, 0x0, 0x0)

37.073329681s ago: executing program 1 (id=238):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
fstat(r4, &(0x7f0000000800))

37.073042171s ago: executing program 32 (id=238):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
fstat(r4, &(0x7f0000000800))

33.590471123s ago: executing program 4 (id=332):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

33.436992022s ago: executing program 4 (id=337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e000000001b0103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58)
close(r2)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

33.383875382s ago: executing program 4 (id=340):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0)

33.332799332s ago: executing program 4 (id=341):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')

33.238306402s ago: executing program 4 (id=344):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x87\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\x83v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
close(r2)

32.997345791s ago: executing program 4 (id=349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1)

32.988726871s ago: executing program 33 (id=349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1)

21.437158003s ago: executing program 5 (id=632):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x8b008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x2, @perf_config_ext, 0x1a, 0x19fbcc0a, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x120)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4)

21.109187962s ago: executing program 5 (id=637):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

21.101747082s ago: executing program 5 (id=639):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000f908008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000010000000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00L'], 0x50)

21.070548622s ago: executing program 5 (id=641):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

20.985343481s ago: executing program 5 (id=643):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
kexec_load(0xfffffffffffffffe, 0x0, 0x0, 0x0)

20.733333731s ago: executing program 5 (id=651):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
shutdown(r0, 0x1)

20.733048281s ago: executing program 34 (id=651):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
shutdown(r0, 0x1)

4.658639522s ago: executing program 7 (id=1135):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4.540948391s ago: executing program 7 (id=1140):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x3010006, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xdb, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(r0, &(0x7f00000002c0)='./bus/file0\x00', 0x40)
renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0)

4.327238921s ago: executing program 7 (id=1145):
open(0x0, 0x14507e, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @loopback}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)

4.283553711s ago: executing program 7 (id=1147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=")
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

4.188100641s ago: executing program 7 (id=1149):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000400)={0x1d, r4, 0x2}, 0x18)

3.94453349s ago: executing program 7 (id=1156):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3.921597869s ago: executing program 35 (id=1156):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0)

646.561182ms ago: executing program 6 (id=1222):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffbfffffffff}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000015000000540001800d0001"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

472.359881ms ago: executing program 2 (id=1230):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

457.592001ms ago: executing program 0 (id=1231):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

444.841181ms ago: executing program 2 (id=1232):
fsopen(0x0, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0xfffffffd, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x800, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

405.761381ms ago: executing program 2 (id=1233):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[]}, 0x78)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0xd, 0x0, 0x5, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x1192a0, 0x8, 0x3, 0x6, 0x800, 0x8, 0xfffc, 0x0, 0x5, 0x0, 0x81}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xb6)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000c00)={[], [{@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'usrjquota='}}, {@appraise_type}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, ']/\\/'}}, {@obj_type={'obj_type', 0x3d, 'resgid'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xfb\x00\x81@&{\xc1[\x86\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@uid_gt}]}, 0x5, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=")
uname(&(0x7f0000000000)=""/105)
syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
lseek(r0, 0xa, 0x0)

389.879611ms ago: executing program 6 (id=1235):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001500)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

349.219411ms ago: executing program 6 (id=1236):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
fsync(r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0)

346.104181ms ago: executing program 3 (id=1246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2)
dup(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000140))
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0)

323.630221ms ago: executing program 0 (id=1238):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100), 0x4)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000180)=0x20007f, 0x4)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
write(r2, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef)

303.209251ms ago: executing program 3 (id=1239):
socket$igmp(0x2, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

301.116911ms ago: executing program 2 (id=1250):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x06'}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}], {0x14}}, 0x88}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")

298.632961ms ago: executing program 6 (id=1240):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x78)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

275.790541ms ago: executing program 8 (id=1241):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c"], 0x4b0}}, 0x0)

259.656201ms ago: executing program 0 (id=1242):
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000001c0)='personality\x00')
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r4)
readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)

259.417541ms ago: executing program 6 (id=1243):
socket$inet6(0xa, 0x2, 0x3a)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x8009, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x2})
write$UHID_INPUT(r0, &(0x7f00000008c0)={0x8, {"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", 0x1000}}, 0x1006)

225.893561ms ago: executing program 8 (id=1244):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

203.074511ms ago: executing program 8 (id=1245):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7014000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)

202.39648ms ago: executing program 0 (id=1257):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r1, r1, 0x21)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)

145.31167ms ago: executing program 2 (id=1247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)

135.36588ms ago: executing program 0 (id=1248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0)

124.52489ms ago: executing program 8 (id=1249):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd3, 0x3, 0x0, 0x245})
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r2, 0x20000005)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)

113.32434ms ago: executing program 3 (id=1251):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='hrtimer_start\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)

93.706441ms ago: executing program 6 (id=1252):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

85.50381ms ago: executing program 3 (id=1253):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

65.78116ms ago: executing program 2 (id=1254):
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

65.17107ms ago: executing program 0 (id=1265):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44100, 0xc005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1204}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0)

55.47051ms ago: executing program 8 (id=1255):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xffffffec, 0x294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x4, 0x2}]}, 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

23.3878ms ago: executing program 3 (id=1256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffff11a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

17.3763ms ago: executing program 8 (id=1258):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x3, 0x18, 0x20000000000000, 0x0, 0x8, 0x4009d})
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10)

0s ago: executing program 3 (id=1259):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)

kernel console output (not intermixed with test programs):

][ T3604] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.68: couldn't read orphan inode 15 (err -117)
[   34.671864][ T3604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.685764][ T3607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.710467][ T3607] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   34.723006][ T3607] EXT4-fs (loop2): This should not happen!! Data will be lost
[   34.723006][ T3607] 
[   34.732734][ T3607] EXT4-fs (loop2): Total free blocks count 0
[   34.738774][ T3607] EXT4-fs (loop2): Free/Dirty block details
[   34.744721][ T3607] EXT4-fs (loop2): free_blocks=0
[   34.749730][ T3607] EXT4-fs (loop2): dirty_blocks=0
[   34.754789][ T3607] EXT4-fs (loop2): Block reservation details
[   34.760889][ T3607] EXT4-fs (loop2): i_reserved_data_blocks=0
[   34.785937][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.822820][ T3621] mmap: syz.2.73 (3621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   34.994676][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.086358][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.093878][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.101332][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.142358][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.149821][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.157305][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.164713][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.172093][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.179497][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.187046][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.194445][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.201998][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.209426][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.216852][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.224280][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.231682][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.239084][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.246540][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.329189][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.336657][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.344123][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.351558][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.358984][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.366416][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.373824][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.381375][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.388786][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.396265][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.403824][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.411283][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.418777][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.419330][ T3641] loop3: detected capacity change from 0 to 2048
[   35.426193][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.426220][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.447447][ T3442] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.463478][ T3442] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   35.482965][ T3630] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   35.565193][ T3641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.679483][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.859598][ T3661] rdma_op ffff8881181f6180 conn xmit_rdma 0000000000000000
[   35.871330][ T3658] loop0: detected capacity change from 0 to 512
[   35.902054][ T3658] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   35.921751][ T3658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   35.934290][ T3658] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.88: corrupted in-inode xattr: e_value size too large
[   35.956324][ T3658] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.88: couldn't read orphan inode 15 (err -117)
[   35.992545][ T3658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.012706][ T3675] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   36.021140][ T3675] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   36.052042][ T3675] syz.2.95 (3675) used greatest stack depth: 10760 bytes left
[   36.069438][ T3678] 
@ÿ: renamed from bond_slave_0 (while UP)
[   36.086627][ T3680] syz.4.97 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   36.140170][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.223307][ T3704] sctp: [Deprecated]: syz.1.108 (pid 3704) Use of int in max_burst socket option.
[   36.223307][ T3704] Use struct sctp_assoc_value instead
[   36.241603][ T3704] netlink: 'syz.1.108': attribute type 39 has an invalid length.
[   36.333664][ T3716] loop4: detected capacity change from 0 to 512
[   36.342839][ T3718] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in;
[   36.342839][ T3718]    program syz.2.114 not setting count and/or reply_len properly
[   36.364337][ T3716] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.377485][ T3716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.444354][ T3716] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   36.465981][ T3716] EXT4-fs (loop4): 1 truncate cleaned up
[   36.472103][ T3716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.491432][ T3728] syz.0.118 (3728) used greatest stack depth: 9648 bytes left
[   36.557754][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.809204][ T3759] loop1: detected capacity change from 0 to 512
[   36.816243][ T3759] EXT4-fs: Ignoring removed orlov option
[   36.847021][ T3757] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   36.847290][ T3759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.854090][ T2964] IPVS: starting estimator thread 0...
[   36.905908][ T3759] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.955376][ T3765] IPVS: using max 2304 ests per chain, 115200 per kthread
[   36.980482][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.043459][ T3775] syz.1.139[3775] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.043622][ T3775] syz.1.139[3775] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.055744][ T3775] syz.1.139[3775] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.090363][ T3778] loop3: detected capacity change from 0 to 128
[   37.126992][ T3778] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.149303][ T3781] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   37.210186][ T3778] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   37.303980][ T3783] loop2: detected capacity change from 0 to 1024
[   37.332546][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.352214][ T3792] netlink: 332 bytes leftover after parsing attributes in process `syz.1.146'.
[   37.362614][ T3792] netlink: 'syz.1.146': attribute type 9 has an invalid length.
[   37.364538][   T29] kauditd_printk_skb: 350 callbacks suppressed
[   37.364555][   T29] audit: type=1400 audit(1737487562.682:488): avc:  denied  { read } for  pid=3789 comm="syz.1.146" dev="nsfs" ino=4026532752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.370289][ T3792] netlink: 108 bytes leftover after parsing attributes in process `syz.1.146'.
[   37.370304][ T3792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.146'.
[   37.416222][   T29] audit: type=1400 audit(1737487562.682:489): avc:  denied  { open } for  pid=3789 comm="syz.1.146" path="net:[4026532752]" dev="nsfs" ino=4026532752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.416254][ T3783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.416290][   T29] audit: type=1400 audit(1737487562.682:490): avc:  denied  { create } for  pid=3786 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.416314][   T29] audit: type=1400 audit(1737487562.682:491): avc:  denied  { bind } for  pid=3786 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.564396][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.582680][ T3804] loop1: detected capacity change from 0 to 512
[   37.628246][ T3804] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.148: corrupted xattr block 255: invalid header
[   37.648155][ T3804] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   37.658154][ T3804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.670812][ T3804] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.148: corrupted xattr block 255: invalid header
[   37.715079][ T3804] SELinux: (dev loop1, type ext4) getxattr errno 117
[   37.745876][ T3804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.755237][   T29] audit: type=1400 audit(1737487563.082:492): avc:  denied  { mount } for  pid=3820 comm="syz.4.156" name="/" dev="ramfs" ino=5470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   37.796831][   T29] audit: type=1326 audit(1737487563.132:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eaf25d29 code=0x7ffc0000
[   37.849232][   T29] audit: type=1326 audit(1737487563.132:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe0eaf25d29 code=0x7ffc0000
[   37.872581][   T29] audit: type=1326 audit(1737487563.132:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eaf25d29 code=0x7ffc0000
[   37.895869][   T29] audit: type=1326 audit(1737487563.132:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eaf25d29 code=0x7ffc0000
[   37.919369][   T29] audit: type=1326 audit(1737487563.132:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe0eaf25d29 code=0x7ffc0000
[   37.946467][ T3831] bridge0: port 3(vlan2) entered blocking state
[   37.952763][ T3831] bridge0: port 3(vlan2) entered disabled state
[   37.967039][ T3831] vlan2: entered allmulticast mode
[   37.981309][ T3833] 9pnet_fd: Insufficient options for proto=fd
[   37.987655][ T3831] vlan2: left allmulticast mode
[   38.006064][ T3835] syz.2.163[3835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.006216][ T3835] syz.2.163[3835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.019077][ T3835] syz.2.163[3835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.019698][ T3837] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[   38.368780][ T3864] ªªªªªª: renamed from vlan0 (while UP)
[   38.530243][ T3878] sd 0:0:1:0: device reset
[   38.661773][ T3887] loop4: detected capacity change from 0 to 512
[   38.668752][ T3887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   38.681952][ T3887] EXT4-fs (loop4): 1 truncate cleaned up
[   38.699472][ T3887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.712926][ T3887] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.770429][ T3901] Zero length message leads to an empty skb
[   38.824939][    C1] hrtimer: interrupt took 9340 ns
[   39.030566][ T3935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.207'.
[   39.149018][ T3955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.216'.
[   39.269286][ T3977] xt_hashlimit: size too large, truncated to 1048576
[   39.286988][ T3979] syz.1.226 uses obsolete (PF_INET,SOCK_PACKET)
[   39.557942][ T3989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   39.632140][ T3993] =======================================================
[   39.632140][ T3993] WARNING: The mand mount option has been deprecated and
[   39.632140][ T3993]          and is ignored by this kernel. Remove the mand
[   39.632140][ T3993]          option from the mount to silence this warning.
[   39.632140][ T3993] =======================================================
[   39.870668][ T4000] loop3: detected capacity change from 0 to 512
[   39.877319][ T4000] EXT4-fs: Ignoring removed i_version option
[   39.883754][ T4000] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   39.894072][ T4000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002]
[   39.903098][ T4000] System zones: 1-12
[   39.907210][ T4000] EXT4-fs (loop3): orphan cleanup on readonly fs
[   39.914700][ T4000] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.235: invalid indirect mapped block 12 (level 1)
[   39.934875][ T4000] EXT4-fs (loop3): Remounting filesystem read-only
[   39.941794][ T4000] EXT4-fs (loop3): 1 truncate cleaned up
[   39.950028][ T4005] SELinux: security_context_str_to_sid (u) failed with errno=-22
[   39.958561][ T4000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   39.977318][ T4000] SELinux: (dev loop3, type ext4) getxattr errno 5
[   39.985045][ T4000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   40.084303][ T4013] loop3: detected capacity change from 0 to 128
[   40.097993][ T4015] process 'syz.0.241' launched './file1' with NULL argv: empty string added
[   40.230276][ T4023] loop2: detected capacity change from 0 to 8192
[   40.286032][ T4023]  loop2: p1 p2 p3
[   40.289815][ T4023] loop2: p1 size 67108864 extends beyond EOD, truncated
[   40.309769][ T4023] loop2: p2 start 98631679 is beyond EOD, truncated
[   40.316548][ T4023] loop2: p3 size 423702036 extends beyond EOD, truncated
[   40.336129][ T4046] syz.4.251[4046] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.336192][ T4046] syz.4.251[4046] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.354317][ T4046] syz.4.251[4046] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.367543][ T4009] chnl_net:caif_netlink_parms(): no params data found
[   40.458727][ T4059] all: renamed from bridge_slave_0 (while UP)
[   40.482785][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.489948][ T4009] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.494046][ T4062] loop0: detected capacity change from 0 to 256
[   40.509934][ T4009] bridge_slave_0: entered allmulticast mode
[   40.519310][ T4062] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   40.528586][ T4009] bridge_slave_0: entered promiscuous mode
[   40.536755][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.543805][ T4009] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.551039][ T4009] bridge_slave_1: entered allmulticast mode
[   40.559876][ T4009] bridge_slave_1: entered promiscuous mode
[   40.560763][ T4066] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   40.611979][ T4009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.632348][ T4072] syz.2.263[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.632421][ T4072] syz.2.263[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.645582][ T4009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.666151][ T4072] syz.2.263[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.703159][ T4009] team0: Port device team_slave_0 added
[   40.753557][ T4009] team0: Port device team_slave_1 added
[   40.780837][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_0
[   40.787865][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.787925][ T4009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   40.795509][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_1
[   40.831625][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.857782][ T4009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.908283][ T4009] hsr_slave_0: entered promiscuous mode
[   40.914312][ T4009] hsr_slave_1: entered promiscuous mode
[   40.914682][ T4009] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   40.914697][ T4009] Cannot create hsr debugfs directory
[   40.995386][ T4091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'.
[   41.042962][ T4009] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   41.047526][ T4009] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   41.069951][ T4009] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   41.079436][ T4009] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   41.096603][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.096639][ T4009] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.096726][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.096755][ T4009] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.189089][ T4009] 8021q: adding VLAN 0 to HW filter on device bond0
[   41.199407][ T4009] 8021q: adding VLAN 0 to HW filter on device team0
[   41.214298][  T344] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.235500][ T4102] loop2: detected capacity change from 0 to 256
[   41.238402][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.242277][ T4102] FAT-fs (loop2): bogus number of FAT sectors
[   41.250123][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.256169][ T4102] FAT-fs (loop2): Can't find a valid FAT filesystem
[   41.275666][ T4009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   41.286180][ T4009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   41.460176][ T4009] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.550630][ T4122] ref_ctr increment failed for inode: 0x148 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888108b76f40
[   41.550998][ T4116] uprobe: syz.4.281:4116 failed to unregister, leaking uprobe
[   41.622010][ T4134] loop2: detected capacity change from 0 to 256
[   41.634686][ T4134] FAT-fs (loop2): Directory bread(block 64) failed
[   41.635008][ T4134] FAT-fs (loop2): Directory bread(block 65) failed
[   41.635041][ T4134] FAT-fs (loop2): Directory bread(block 66) failed
[   41.635135][ T4134] FAT-fs (loop2): Directory bread(block 67) failed
[   41.635158][ T4134] FAT-fs (loop2): Directory bread(block 68) failed
[   41.635174][ T4134] FAT-fs (loop2): Directory bread(block 69) failed
[   41.635195][ T4134] FAT-fs (loop2): Directory bread(block 70) failed
[   41.635219][ T4134] FAT-fs (loop2): Directory bread(block 71) failed
[   41.635250][ T4134] FAT-fs (loop2): Directory bread(block 72) failed
[   41.635273][ T4134] FAT-fs (loop2): Directory bread(block 73) failed
[   41.702127][ T4009] veth0_vlan: entered promiscuous mode
[   41.707649][ T4009] veth1_vlan: entered promiscuous mode
[   41.722570][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'.
[   41.739615][ T4009] veth0_macvtap: entered promiscuous mode
[   41.741217][ T4009] veth1_macvtap: entered promiscuous mode
[   41.754033][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.754056][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.754068][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.754084][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.754096][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.754193][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.754204][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.754220][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.754231][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.754247][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.755068][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.758140][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.758210][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.758222][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.758239][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.758251][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.758264][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.758273][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.758285][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.758295][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.758333][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.758884][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.760576][ T4009] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.760732][ T4009] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.760760][ T4009] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.760795][ T4009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.901872][ T4156] random: crng reseeded on system resumption
[   42.132614][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.133156][ T4164] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[   42.134014][ T4164] bond0: (slave sit0): Error -95 calling set_mac_address
[   42.221778][ T4175] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[   42.221910][ T4174] IPVS: stopping master sync thread 4175 ...
[   42.398240][   T29] kauditd_printk_skb: 468 callbacks suppressed
[   42.398256][   T29] audit: type=1326 audit(1737487567.732:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eaf25d29 code=0x7ffc0000
[   42.402908][ T4202] loop3: detected capacity change from 0 to 164
[   42.406701][   T29] audit: type=1326 audit(1737487567.732:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0eaf25d29 code=0x7ffc0000
[   42.441113][ T4202] syz.3.302: attempt to access beyond end of device
[   42.441113][ T4202] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   42.457183][   T29] audit: type=1326 audit(1737487567.732:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0eaf25d63 code=0x7ffc0000
[   42.457219][   T29] audit: type=1326 audit(1737487567.732:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0eaf247df code=0x7ffc0000
[   42.517286][   T29] audit: type=1326 audit(1737487567.732:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe0eaf25db7 code=0x7ffc0000
[   42.540446][   T29] audit: type=1326 audit(1737487567.732:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0eaf24690 code=0x7ffc0000
[   42.545845][ T4202] syz.3.302: attempt to access beyond end of device
[   42.545845][ T4202] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[   42.563661][   T29] audit: type=1326 audit(1737487567.732:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0eaf2592b code=0x7ffc0000
[   42.596839][   T29] audit: type=1326 audit(1737487567.762:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0eaf2498a code=0x7ffc0000
[   42.623617][   T29] audit: type=1326 audit(1737487567.762:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0eaf2498a code=0x7ffc0000
[   42.646858][   T29] audit: type=1326 audit(1737487567.762:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe0eaf24597 code=0x7ffc0000
[   42.678269][ T4213] loop5: detected capacity change from 0 to 512
[   42.707334][ T4213] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   42.766166][ T4213] EXT4-fs (loop5): 1 truncate cleaned up
[   42.781063][ T4213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.839892][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.843724][ T4237] loop0: detected capacity change from 0 to 512
[   42.929008][ T4237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.967536][ T4237] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.990063][ T4249] loop3: detected capacity change from 0 to 2048
[   43.000736][ T4237] EXT4-fs (loop0): shut down requested (0)
[   43.022399][ T4255] program syz.2.314 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.048256][ T4249]  loop3: p1 < > p4
[   43.054128][ T4249] loop3: p4 size 8388608 extends beyond EOD, truncated
[   43.061727][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.084220][ T4255] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   43.112180][ T4249] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   43.216175][ T4273] loop5: detected capacity change from 0 to 1024
[   43.238583][ T4273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.264142][ T4278] syzkaller0: entered promiscuous mode
[   43.269636][ T4273] EXT4-fs warning (device loop5): ext4_rename_delete:3742: inode #18: comm syz.5.322: Deleting old file: nlink 3, error=-2
[   43.282559][ T4278] syzkaller0: entered allmulticast mode
[   43.305644][ T4009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.310423][ T4285] loop2: detected capacity change from 0 to 512
[   43.323479][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'.
[   43.380583][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.397042][ T4285] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.412463][ T4293] : renamed from bond0 (while UP)
[   43.553958][ T4304] loop3: detected capacity change from 0 to 128
[   43.606799][ T4307] loop3: detected capacity change from 0 to 512
[   43.615749][ T4307] EXT4-fs: Ignoring removed oldalloc option
[   43.647662][ T4307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002]
[   43.656741][ T4307] System zones: 1-3, 19-19, 35-38
[   43.665233][ T4313] loop0: detected capacity change from 0 to 128
[   43.673162][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.682824][ T4307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.695473][ T4313] ref_ctr_offset mismatch. inode: 0x11 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[   43.695598][ T4307] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.753536][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.763330][ T4318] loop6: detected capacity change from 0 to 7
[   43.770006][ T4318] Buffer I/O error on dev loop6, logical block 0, async page read
[   43.778340][ T4318] Buffer I/O error on dev loop6, logical block 0, async page read
[   43.786503][ T4318]  loop6: unable to read partition table
[   43.827635][ T4318] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[   43.827635][ T4318] 
) failed (rc=-5)
[   43.939690][ T4331] loop0: detected capacity change from 0 to 1024
[   43.951997][ T4331] EXT4-fs: Ignoring removed nobh option
[   43.958160][ T4331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   43.980858][ T4331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.015925][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.031106][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.087158][ T4336] netlink: 'syz.0.348': attribute type 13 has an invalid length.
[   44.169411][ T4340] loop3: detected capacity change from 0 to 512
[   44.233741][ T4340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.266740][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.274041][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.284428][ T4340] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.338843][ T4340] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   44.363678][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.392012][ T4363] loop5: detected capacity change from 0 to 512
[   44.410681][ T4363] EXT4-fs: Ignoring removed oldalloc option
[   44.419383][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.426972][ T4363] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   44.442014][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.456237][ T4363] EXT4-fs (loop5): 1 truncate cleaned up
[   44.467315][ T4363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.554441][ T4336] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.563709][ T4336] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.573057][ T4336] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.582228][ T4336] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.598558][ T4009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.675228][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.817553][ T4390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4390 comm=syz.5.358
[   44.831377][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.358'.
[   44.840320][ T4390] netlink: 'syz.5.358': attribute type 30 has an invalid length.
[   44.858430][ T4390] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   44.867667][ T4390] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   44.918523][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.934607][ T4400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.947614][ T4401] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.363'.
[   44.957656][ T4396] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.363'.
[   44.975955][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.995844][ T4400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.020056][ T4341] chnl_net:caif_netlink_parms(): no params data found
[   45.055029][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.062164][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.069436][ T4341] bridge_slave_0: entered allmulticast mode
[   45.075874][ T4341] bridge_slave_0: entered promiscuous mode
[   45.082770][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.089923][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.097186][ T4341] bridge_slave_1: entered allmulticast mode
[   45.103898][ T4341] bridge_slave_1: entered promiscuous mode
[   45.112558][ T4400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.142516][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.156444][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.174195][   T11] bridge_slave_1: left allmulticast mode
[   45.179987][   T11] bridge_slave_1: left promiscuous mode
[   45.185638][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.193399][   T11] bridge_slave_0: left allmulticast mode
[   45.199115][   T11] bridge_slave_0: left promiscuous mode
[   45.204916][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.337183][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.348112][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.358116][   T11] bond0 (unregistering): Released all slaves
[   45.376995][ T4400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.390680][ T4341] team0: Port device team_slave_0 added
[   45.398051][ T4412] can0: slcan on pts0.
[   45.399007][ T4341] team0: Port device team_slave_1 added
[   45.424251][   T11] hsr_slave_0: left promiscuous mode
[   45.430231][   T11] hsr_slave_1: left promiscuous mode
[   45.436772][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.444214][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.451909][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.459357][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.466798][ T4412] can0 (unregistered): slcan off pts0.
[   45.472425][   T11] veth1_macvtap: left promiscuous mode
[   45.478001][   T11] veth0_macvtap: left promiscuous mode
[   45.483534][   T11] veth1_vlan: left promiscuous mode
[   45.488850][   T11] veth0_vlan: left promiscuous mode
[   45.552858][   T11] team0 (unregistering): Port device team_slave_1 removed
[   45.562414][   T11] team0 (unregistering): Port device team_slave_0 removed
[   45.599293][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.606328][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.632595][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.647195][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.654162][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.680216][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.694227][ T4414] vlan2: entered promiscuous mode
[   45.699781][ T4414] : (slave vlan2): Opening slave failed
[   45.728206][ T4341] hsr_slave_0: entered promiscuous mode
[   45.734336][ T4341] hsr_slave_1: entered promiscuous mode
[   45.744028][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.751888][ T4341] Cannot create hsr debugfs directory
[   45.763021][ T4419] syz.3.370[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.763160][ T4419] syz.3.370[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.774833][ T4419] syz.3.370[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.776366][ T4400] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.810110][ T4421] loop5: detected capacity change from 0 to 256
[   45.813220][ T4400] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.856797][ T4400] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.885656][ T4400] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.953711][ T4431] loop0: detected capacity change from 0 to 256
[   45.960677][ T4431] FAT-fs (loop0): bogus number of FAT sectors
[   45.966861][ T4431] FAT-fs (loop0): Can't find a valid FAT filesystem
[   45.986020][ T4433] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.374'.
[   46.021502][ T4428] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.374'.
[   46.067767][ T4341] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   46.081259][ T4341] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   46.097536][ T4440] vlan2: entered promiscuous mode
[   46.103245][ T4440] bond0: (slave vlan2): Opening slave failed
[   46.113885][ T4341] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   46.121128][ T4443] netlink: 332 bytes leftover after parsing attributes in process `syz.3.380'.
[   46.126382][ T4341] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   46.130533][ T4443] netlink: 'syz.3.380': attribute type 9 has an invalid length.
[   46.144762][ T4443] netlink: 108 bytes leftover after parsing attributes in process `syz.3.380'.
[   46.153783][ T4443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.380'.
[   46.187704][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.382'.
[   46.231309][ T4451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.286995][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.299150][ T4451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.299926][ T4461] loop0: detected capacity change from 0 to 256
[   46.320540][ T4341] 8021q: adding VLAN 0 to HW filter on device team0
[   46.323172][ T4461] FAT-fs (loop0): Directory bread(block 64) failed
[   46.334177][ T4462] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.388'.
[   46.345069][ T4461] FAT-fs (loop0): Directory bread(block 65) failed
[   46.345485][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.351780][ T4461] FAT-fs (loop0): Directory bread(block 66) failed
[   46.358806][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.367181][ T4461] FAT-fs (loop0): Directory bread(block 67) failed
[   46.379231][ T4461] FAT-fs (loop0): Directory bread(block 68) failed
[   46.387535][ T4461] FAT-fs (loop0): Directory bread(block 69) failed
[   46.394076][ T4461] FAT-fs (loop0): Directory bread(block 70) failed
[   46.399623][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.402206][ T4461] FAT-fs (loop0): Directory bread(block 71) failed
[   46.407654][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.418277][ T4464] loop5: detected capacity change from 0 to 256
[   46.421905][ T4461] FAT-fs (loop0): Directory bread(block 72) failed
[   46.430336][ T4464] FAT-fs (loop5): bogus number of FAT sectors
[   46.436855][ T4461] FAT-fs (loop0): Directory bread(block 73) failed
[   46.440457][ T4464] FAT-fs (loop5): Can't find a valid FAT filesystem
[   46.458411][ T4451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.511485][ T4341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.522017][ T4341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.548211][ T4451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.618087][ T4473] loop0: detected capacity change from 0 to 512
[   46.624611][ T4473] EXT4-fs: Ignoring removed oldalloc option
[   46.638296][ T4451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.651152][ T4451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.661140][ T4473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002]
[   46.663758][ T4451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.681944][ T4451] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.691409][ T4473] System zones: 1-3, 19-19, 35-38
[   46.696112][ T4482] vlan2: entered promiscuous mode
[   46.701866][ T4482] bond0: entered promiscuous mode
[   46.707021][ T4482] bond_slave_0: entered promiscuous mode
[   46.712878][ T4482] bond_slave_1: entered promiscuous mode
[   46.719531][ T4482] bond0: left promiscuous mode
[   46.720112][ T4473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.724336][ T4482] bond_slave_0: left promiscuous mode
[   46.737042][ T4473] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.742242][ T4482] bond_slave_1: left promiscuous mode
[   46.784400][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.805653][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.925994][ T4499] xt_CT: No such helper "syz0"
[   46.993517][ T4513] loop5: detected capacity change from 0 to 256
[   47.004449][ T4341] veth0_vlan: entered promiscuous mode
[   47.027715][ T4341] veth1_vlan: entered promiscuous mode
[   47.051057][ T4513] FAT-fs (loop5): Directory bread(block 64) failed
[   47.058392][ T4513] FAT-fs (loop5): Directory bread(block 65) failed
[   47.062305][ T4341] veth0_macvtap: entered promiscuous mode
[   47.076120][ T4513] FAT-fs (loop5): Directory bread(block 66) failed
[   47.082690][ T4513] FAT-fs (loop5): Directory bread(block 67) failed
[   47.087413][ T4341] veth1_macvtap: entered promiscuous mode
[   47.094861][ T4513] FAT-fs (loop5): Directory bread(block 68) failed
[   47.101641][ T4513] FAT-fs (loop5): Directory bread(block 69) failed
[   47.108487][ T4513] FAT-fs (loop5): Directory bread(block 70) failed
[   47.115649][ T4513] FAT-fs (loop5): Directory bread(block 71) failed
[   47.122291][ T4513] FAT-fs (loop5): Directory bread(block 72) failed
[   47.128890][ T4513] FAT-fs (loop5): Directory bread(block 73) failed
[   47.143246][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.153847][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.163777][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.174300][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.184140][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.194624][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.204469][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.214946][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.228021][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.239098][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.249659][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.259495][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.270040][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.279986][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.290447][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.300278][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.310784][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.321612][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.332262][ T4341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.341257][ T4341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.350153][ T4341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.359305][ T4341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.407511][   T29] kauditd_printk_skb: 199 callbacks suppressed
[   47.407529][   T29] audit: type=1326 audit(1737487572.742:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa360cce7 code=0x7ffc0000
[   47.440439][   T29] audit: type=1326 audit(1737487572.772:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa35b1f29 code=0x7ffc0000
[   47.463798][   T29] audit: type=1326 audit(1737487572.772:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa360cce7 code=0x7ffc0000
[   47.487134][   T29] audit: type=1326 audit(1737487572.772:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa35b1f29 code=0x7ffc0000
[   47.510510][   T29] audit: type=1326 audit(1737487572.772:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8aa3615d29 code=0x7ffc0000
[   47.535668][   T29] audit: type=1326 audit(1737487572.872:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa360cce7 code=0x7ffc0000
[   47.558989][   T29] audit: type=1326 audit(1737487572.872:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa35b1f29 code=0x7ffc0000
[   47.582250][   T29] audit: type=1326 audit(1737487572.872:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8aa3615d29 code=0x7ffc0000
[   47.606088][   T29] audit: type=1326 audit(1737487572.942:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa360cce7 code=0x7ffc0000
[   47.629521][   T29] audit: type=1326 audit(1737487572.942:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.5.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa35b1f29 code=0x7ffc0000
[   47.779939][ T4371] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   47.787698][ T4541] loop3: detected capacity change from 0 to 1024
[   47.794560][ T4541] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.801438][ T4371] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   47.803405][ T4541] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   47.823635][ T4541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.874515][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.031217][ T4564] macvtap0: entered promiscuous mode
[   48.037285][ T4564] macvtap0: left promiscuous mode
[   48.118300][ T4576] sctp: [Deprecated]: syz.3.428 (pid 4576) Use of int in max_burst socket option.
[   48.118300][ T4576] Use struct sctp_assoc_value instead
[   48.135000][ T4576] netlink: 'syz.3.428': attribute type 39 has an invalid length.
[   48.162875][ T4580] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.217441][ T4580] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.459613][ T4600] syz_tun: entered allmulticast mode
[   48.483915][ T4600] syz_tun (unregistering): left allmulticast mode
[   48.683813][ T4604] loop5: detected capacity change from 0 to 512
[   48.697215][ T4604] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.441: bg 0: block 248: padding at end of block bitmap is not set
[   48.711857][ T4604] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.441: Failed to acquire dquot type 1
[   48.723783][ T4604] EXT4-fs (loop5): 1 truncate cleaned up
[   48.729968][ T4604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.742856][ T4604] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.756916][ T4604] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.441: deleted inode referenced: 12
[   48.778081][ T4604] syz.5.441 (4604) used greatest stack depth: 9280 bytes left
[   48.786278][ T4009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.187296][ T4580] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.067245][ T4580] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.132187][ T4580] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.151016][ T4580] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.162768][ T4580] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.175811][ T4580] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.230591][ T4643] geneve0: entered promiscuous mode
[   50.235906][ T4643] geneve0: entered allmulticast mode
[   50.515900][ T4687] netlink: zone id is out of range
[   50.521100][ T4687] netlink: zone id is out of range
[   50.526518][ T4687] netlink: set zone limit has 4 unknown bytes
[   50.529988][ T4689] loop6: detected capacity change from 0 to 512
[   50.542089][ T4689] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.481: invalid indirect mapped block 256 (level 2)
[   50.558465][ T4689] EXT4-fs (loop6): 2 truncates cleaned up
[   50.565020][ T4689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.578569][ T4689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.593092][ T4693] pim6reg: entered allmulticast mode
[   50.599208][ T4693] pim6reg: left allmulticast mode
[   50.702673][ T4699] loop6: detected capacity change from 0 to 2048
[   50.716311][ T4699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.733295][ T4699] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   50.745757][ T4699] EXT4-fs (loop6): This should not happen!! Data will be lost
[   50.745757][ T4699] 
[   50.755437][ T4699] EXT4-fs (loop6): Total free blocks count 0
[   50.761493][ T4699] EXT4-fs (loop6): Free/Dirty block details
[   50.767407][ T4699] EXT4-fs (loop6): free_blocks=0
[   50.772364][ T4699] EXT4-fs (loop6): dirty_blocks=0
[   50.777433][ T4699] EXT4-fs (loop6): Block reservation details
[   50.783486][ T4699] EXT4-fs (loop6): i_reserved_data_blocks=0
[   50.802557][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.870262][ T4709] loop6: detected capacity change from 0 to 128
[   50.879136][ T4709] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.893206][ T4709] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   50.934258][ T4341] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.956057][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   50.963639][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   50.971192][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   50.978907][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   50.986371][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   50.993902][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.001376][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.008926][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.016524][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.023955][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.031392][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.038903][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.046431][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.053852][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.061306][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.068772][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.076242][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.083647][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.091400][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.098926][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.106351][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.113762][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.121225][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.128657][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.136218][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.143620][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.151046][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.158533][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.166063][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.173509][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.180994][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.188429][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.195984][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.203446][ T4344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.213533][ T4344] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   51.256583][ T4728] loop6: detected capacity change from 0 to 512
[   51.272962][ T4728] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.496: bg 0: block 248: padding at end of block bitmap is not set
[   51.297822][ T4728] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.496: Failed to acquire dquot type 1
[   51.320117][ T4728] EXT4-fs (loop6): 1 truncate cleaned up
[   51.326434][ T4728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.339494][ T4728] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.340788][ T4738] syz.5.500[4738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.353854][ T4738] syz.5.500[4738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.365525][ T4728] EXT4-fs error (device loop6): ext4_lookup:1817: inode #2: comm syz.6.496: deleted inode referenced: 12
[   51.372020][ T4738] syz.5.500[4738] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.397250][ T4728] syz.6.496 (4728) used greatest stack depth: 9272 bytes left
[   51.417512][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.642561][ T4765] loop3: detected capacity change from 0 to 2048
[   51.658405][ T4765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.678331][ T4765] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   51.690732][ T4765] EXT4-fs (loop3): This should not happen!! Data will be lost
[   51.690732][ T4765] 
[   51.700401][ T4765] EXT4-fs (loop3): Total free blocks count 0
[   51.706564][ T4765] EXT4-fs (loop3): Free/Dirty block details
[   51.712518][ T4765] EXT4-fs (loop3): free_blocks=0
[   51.717585][ T4765] EXT4-fs (loop3): dirty_blocks=0
[   51.722616][ T4765] EXT4-fs (loop3): Block reservation details
[   51.728619][ T4765] EXT4-fs (loop3): i_reserved_data_blocks=0
[   51.863056][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.022523][ T4773] __nla_validate_parse: 1 callbacks suppressed
[   52.022586][ T4773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'.
[   52.037822][ T4773] tipc: Invalid UDP bearer configuration
[   52.037878][ T4773] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   52.204088][ T4778] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   52.347453][ T4784] loop3: detected capacity change from 0 to 1024
[   52.369763][ T4784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.557461][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.636001][ T4805] loop3: detected capacity change from 0 to 128
[   52.656675][ T4805] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   52.686325][ T4805] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   52.736435][   T29] kauditd_printk_skb: 888 callbacks suppressed
[   52.736452][   T29] audit: type=1326 audit(1737487578.062:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.797080][   T29] audit: type=1326 audit(1737487578.102:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.820647][   T29] audit: type=1326 audit(1737487578.102:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.844100][   T29] audit: type=1326 audit(1737487578.102:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.867567][   T29] audit: type=1326 audit(1737487578.102:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.890931][   T29] audit: type=1326 audit(1737487578.102:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.914254][   T29] audit: type=1326 audit(1737487578.102:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.937722][   T29] audit: type=1326 audit(1737487578.102:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.961181][   T29] audit: type=1326 audit(1737487578.102:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   52.984756][   T29] audit: type=1326 audit(1737487578.102:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   53.039589][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.191685][ T4857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.549'.
[   53.287813][ T4866] bridge: RTM_NEWNEIGH with invalid ether address
[   53.296026][ T4868] xt_hashlimit: max too large, truncated to 1048576
[   53.303569][ T4868] Cannot find set identified by id 0 to match
[   53.484372][ T4888] netlink: 48 bytes leftover after parsing attributes in process `syz.5.565'.
[   53.545355][ T4893] netem: change failed
[   53.764195][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'.
[   53.790968][ T4923] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.560700][ T4939] loop6: detected capacity change from 0 to 512
[   54.561536][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'.
[   54.577219][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'.
[   54.587891][ T4939] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.589: casefold flag without casefold feature
[   54.601049][ T4939] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.589: couldn't read orphan inode 15 (err -117)
[   54.643068][ T4939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.684572][ T4953] loop5: detected capacity change from 0 to 128
[   54.746940][ T4953] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.770258][ T4953] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   54.786125][ T4961] netlink: 'syz.3.596': attribute type 5 has an invalid length.
[   54.830236][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.864596][ T4969] loop3: detected capacity change from 0 to 512
[   54.878562][ T4009] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.896655][ T4969] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.610: casefold flag without casefold feature
[   54.932370][ T4969] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.610: couldn't read orphan inode 15 (err -117)
[   54.946781][ T4983] loop5: detected capacity change from 0 to 128
[   54.956752][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.975930][ T4983] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.989321][ T4983] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   55.041095][ T4009] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   55.087410][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.144327][ T5001] veth0_to_team: entered promiscuous mode
[   55.150231][ T5001] veth0_to_team: entered allmulticast mode
[   55.276089][ T5019] loop5: detected capacity change from 0 to 512
[   55.291363][ T5019] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.619: casefold flag without casefold feature
[   55.305870][ T5019] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.619: couldn't read orphan inode 15 (err -117)
[   55.342226][ T5019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.378059][ T5030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5030 comm=syz.2.622
[   55.390626][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[   55.399641][ T5030] netlink: 'syz.2.622': attribute type 7 has an invalid length.
[   55.410456][ T5030] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.418851][ T5030] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.427069][ T5030] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.435466][ T5030] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.444042][ T5030] vxlan0: entered promiscuous mode
[   55.454006][ T5032] loop3: detected capacity change from 0 to 512
[   55.460858][ T5032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   55.473899][ T5032] EXT4-fs (loop3): 1 truncate cleaned up
[   55.484684][ T5032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.500142][ T4009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.506801][ T5032] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #15: comm syz.3.624: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   55.541074][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.594176][ T5047] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   55.594379][ T5046] netlink: 'syz.3.630': attribute type 4 has an invalid length.
[   55.604240][ T5047] syzkaller0: entered promiscuous mode
[   55.615418][ T5047] syzkaller0: entered allmulticast mode
[   55.633668][ T5046] netlink: 'syz.3.630': attribute type 4 has an invalid length.
[   55.644371][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.651878][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.659375][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.667445][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.670099][ T5051] uprobe: syz.3.633:5051 failed to unregister, leaking uprobe
[   55.674872][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.675037][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.697330][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.704840][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.712241][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.719726][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.727186][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.734614][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.742058][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.749503][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.757469][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.765018][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.772418][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.779841][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.787331][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.794760][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.802230][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.809652][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.817206][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.824620][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.832110][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.839811][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.847268][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.854713][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.862346][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.869859][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   55.879252][    T8] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID vffffff.fd Device [syz0] on syz1
[   55.903246][ T5050] uprobe: syz.3.633:5050 failed to unregister, leaking uprobe
[   55.924813][ T5061] syz.5.637[5061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.925158][ T5061] syz.5.637[5061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.937340][ T5061] syz.5.637[5061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.032670][ T5067] loop5: detected capacity change from 0 to 4096
[   56.052708][ T5067] EXT4-fs: test_dummy_encryption option not supported
[   56.142990][ T5070] loop3: detected capacity change from 0 to 8192
[   56.152262][ T5074] Process accounting resumed
[   56.182758][ T5070] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP
[   56.182758][ T5070] n'º|$@OOݱµ’-®+·el'
[   56.270467][ T5084] vhci_hcd: default hub control req: 800c v0000 i0000 l0
[   56.295989][   T28] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.369075][   T28] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.448047][   T28] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.508213][   T28] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.638373][   T28] bridge_slave_1: left allmulticast mode
[   56.644054][   T28] bridge_slave_1: left promiscuous mode
[   56.649737][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.680905][   T28] bridge_slave_0: left allmulticast mode
[   56.686755][   T28] bridge_slave_0: left promiscuous mode
[   56.692486][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.879031][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.897655][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.907319][   T28] bond0 (unregistering): Released all slaves
[   57.046097][   T28] hsr_slave_0: left promiscuous mode
[   57.054798][   T28] hsr_slave_1: left promiscuous mode
[   57.056454][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'.
[   57.069214][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.076677][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.084474][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.092070][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.104829][   T28] veth1_macvtap: left promiscuous mode
[   57.110362][   T28] veth0_macvtap: left promiscuous mode
[   57.115950][   T28] veth1_vlan: left promiscuous mode
[   57.121260][   T28] veth0_vlan: left promiscuous mode
[   57.131543][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.661'.
[   57.182105][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.661'.
[   57.236338][   T28] team0 (unregistering): Port device team_slave_1 removed
[   57.246405][   T28] team0 (unregistering): Port device team_slave_0 removed
[   57.370988][ T5131] ip6_vti0: entered promiscuous mode
[   57.376699][ T5131] vlan2: entered promiscuous mode
[   57.382792][ T5131] ip6_vti0: left promiscuous mode
[   57.475689][ T5095] chnl_net:caif_netlink_parms(): no params data found
[   57.496452][ T5136] pim6reg1: entered promiscuous mode
[   57.501852][ T5136] pim6reg1: entered allmulticast mode
[   57.621276][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.628577][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.658618][ T5095] bridge_slave_0: entered allmulticast mode
[   57.666682][ T5095] bridge_slave_0: entered promiscuous mode
[   57.684585][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.692028][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.708418][ T5095] bridge_slave_1: entered allmulticast mode
[   57.715926][ T5095] bridge_slave_1: entered promiscuous mode
[   57.776680][   T29] kauditd_printk_skb: 669 callbacks suppressed
[   57.776698][   T29] audit: type=1400 audit(1737487583.112:2748): avc:  denied  { create } for  pid=5163 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   57.806259][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.815445][ T5147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.827132][ T5147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.827874][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.844339][   T29] audit: type=1400 audit(1737487583.112:2749): avc:  denied  { create } for  pid=5163 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   57.864948][   T29] audit: type=1400 audit(1737487583.142:2750): avc:  denied  { ioctl } for  pid=5146 comm="syz.0.669" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   57.895445][   T29] audit: type=1400 audit(1737487583.222:2751): avc:  denied  { setopt } for  pid=5163 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   57.922374][ T5095] team0: Port device team_slave_0 added
[   57.929396][ T5095] team0: Port device team_slave_1 added
[   57.955113][   T29] audit: type=1400 audit(1737487583.282:2752): avc:  denied  { write } for  pid=5163 comm="syz.3.676" path="socket:[11436]" dev="sockfs" ino=11436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   57.979561][   T29] audit: type=1400 audit(1737487583.282:2753): avc:  denied  { nlmsg_read } for  pid=5163 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   58.028322][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.035364][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.061735][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.078192][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.085277][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.111353][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.159501][ T5095] hsr_slave_0: entered promiscuous mode
[   58.166177][ T5095] hsr_slave_1: entered promiscuous mode
[   58.172283][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.180573][ T5095] Cannot create hsr debugfs directory
[   58.283564][ T5095] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   58.308966][ T5095] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   58.318343][ T5095] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   58.328839][ T5095] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   58.377310][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.391639][ T5095] 8021q: adding VLAN 0 to HW filter on device team0
[   58.405585][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.412648][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.427514][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.434661][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.458914][ T5180] netlink: 96 bytes leftover after parsing attributes in process `syz.0.682'.
[   58.503278][   T29] audit: type=1400 audit(1737487583.832:2754): avc:  denied  { block_suspend } for  pid=5177 comm="syz.6.681" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.511237][ T5185] tipc: Started in network mode
[   58.529764][ T5185] tipc: Node identity 4afcdfd5c76a, cluster identity 4711
[   58.537009][ T5185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.548848][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.568858][ T5188] loop3: detected capacity change from 0 to 512
[   58.588727][ T5185] tipc: Resetting bearer <eth:syzkaller0>
[   58.596401][ T5184] tipc: Disabling bearer <eth:syzkaller0>
[   58.617803][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.626986][ T5188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.640348][   T29] audit: type=1400 audit(1737487583.972:2755): avc:  denied  { mount } for  pid=5187 comm="syz.3.685" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   58.640410][ T5188] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.692545][   T29] audit: type=1326 audit(1737487584.022:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.3.685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0eaf25d29 code=0x0
[   58.727579][   T29] audit: type=1400 audit(1737487584.052:2757): avc:  denied  { create } for  pid=5200 comm="syz.6.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.749498][ T5206] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   58.863343][ T5227] syz.6.694[5227] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.863569][ T5227] syz.6.694[5227] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.863577][ T5095] veth0_vlan: entered promiscuous mode
[   58.866399][ T5095] veth1_vlan: entered promiscuous mode
[   58.886467][ T5227] syz.6.694[5227] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.903460][ T5095] veth0_macvtap: entered promiscuous mode
[   58.924200][ T5095] veth1_macvtap: entered promiscuous mode
[   58.937123][ T5227] team0 (unregistering): Port device team_slave_0 removed
[   58.946287][ T5227] team0 (unregistering): Port device team_slave_1 removed
[   58.962074][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.972755][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.982626][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.993192][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.003073][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.013675][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.023531][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.034070][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.044606][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.054724][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.065241][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.075094][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.085591][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.095481][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.105942][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.115838][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.126415][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.137929][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.148307][ T5095] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.157175][ T5095] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.165988][ T5095] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.174746][ T5095] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.178772][ T5232] loop6: detected capacity change from 0 to 512
[   59.200068][ T5232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.213121][ T5232] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.405961][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.775262][ T5278] block device autoloading is deprecated and will be removed.
[   59.802670][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'.
[   59.818427][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'.
[   60.103287][ T5304] pimreg: entered allmulticast mode
[   60.110653][ T5304] pimreg: left allmulticast mode
[   60.230044][ T5316] syz.7.729[5316] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.230153][ T5316] syz.7.729[5316] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.245754][ T5316] syz.7.729[5316] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.264396][ T5316] veth2: entered allmulticast mode
[   60.318859][ T5232] syz.6.696 (5232) used greatest stack depth: 7168 bytes left
[   60.332088][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.344824][ T5326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5326 comm=syz.3.733
[   60.401095][ T5334] loop3: detected capacity change from 0 to 2048
[   60.407912][ T5334] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.436566][ T5334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.510635][ T5342] loop7: detected capacity change from 0 to 8192
[   60.575379][ T5342]  loop7: p1 < > p3 < p5 > p4
[   60.580120][ T5342] loop7: partition table partially beyond EOD, truncated
[   60.588715][ T5342] loop7: p1 start 4294967040 is beyond EOD, truncated
[   60.606352][ T5348] syz.2.741[5348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.606417][ T5348] syz.2.741[5348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.617782][ T5348] syz.2.741[5348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.665755][ T5353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.743'.
[   60.909184][ T5371] netlink: 12 bytes leftover after parsing attributes in process `syz.7.748'.
[   60.935489][ T5372] IPv6: Can't replace route, no match found
[   61.062230][ T5397] loop7: detected capacity change from 0 to 512
[   61.068911][ T5397] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   61.078926][ T5400] netlink: 'syz.3.763': attribute type 4 has an invalid length.
[   61.123299][ T5397] loop7: detected capacity change from 0 to 512
[   61.139099][ T5397] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[   61.190819][ T5407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.767'.
[   61.199810][ T5407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.767'.
[   61.257825][ T5416] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   61.307348][ T5424] loop7: detected capacity change from 0 to 512
[   61.328219][ T5424] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.485758][ T5446] loop6: detected capacity change from 0 to 512
[   61.519743][ T5457] xt_hashlimit: size too large, truncated to 1048576
[   61.528287][ T5446] EXT4-fs (loop6): too many log groups per flexible block group
[   61.536017][ T5446] EXT4-fs (loop6): failed to initialize mballoc (-12)
[   61.549518][ T5446] EXT4-fs (loop6): mount failed
[   61.888514][ T5508] pim6reg1: entered promiscuous mode
[   61.893966][ T5508] pim6reg1: entered allmulticast mode
[   62.080808][ T5520] __nla_validate_parse: 8 callbacks suppressed
[   62.080895][ T5520] netlink: 24 bytes leftover after parsing attributes in process `syz.7.799'.
[   62.133889][ T5528] syz_tun: entered allmulticast mode
[   62.162155][ T5528] syz_tun (unregistering): left allmulticast mode
[   62.194326][ T5534] smc: net device bond0 applied user defined pnetid SYZ2
[   62.202086][ T5534] smc: net device bond0 erased user defined pnetid SYZ2
[   62.437784][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.816'.
[   62.501933][ T4344] IPVS: starting estimator thread 0...
[   62.531371][ T5564] capability: warning: `syz.6.819' uses deprecated v2 capabilities in a way that may be insecure
[   62.594890][ T5562] IPVS: using max 2112 ests per chain, 105600 per kthread
[   62.610180][ T5571] netlink: 3 bytes leftover after parsing attributes in process `syz.2.823'.
[   62.619816][ T5571] 0ªX¹¦À: renamed from caif0
[   62.634885][ T5571] 0ªX¹¦À: entered allmulticast mode
[   62.640337][ T5571] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   62.848507][ T5588] raw_sendmsg: syz.2.829 forgot to set AF_INET. Fix it!
[   62.960626][   T29] kauditd_printk_skb: 113 callbacks suppressed
[   62.960691][   T29] audit: type=1400 audit(1737487588.292:2871): avc:  denied  { create } for  pid=5594 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   62.994552][ T5597] tipc: Started in network mode
[   62.999653][ T5597] tipc: Node identity 1, cluster identity 4711
[   63.006159][ T5597] tipc: Node number set to 1
[   63.014108][ T5593] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.026832][   T29] audit: type=1400 audit(1737487588.312:2872): avc:  denied  { create } for  pid=5596 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   63.354741][   T29] audit: type=1326 audit(1737487588.682:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.378186][   T29] audit: type=1326 audit(1737487588.682:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.401529][   T29] audit: type=1326 audit(1737487588.682:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.424920][   T29] audit: type=1326 audit(1737487588.682:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.448331][   T29] audit: type=1326 audit(1737487588.682:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.544721][   T29] audit: type=1326 audit(1737487588.712:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.568143][   T29] audit: type=1326 audit(1737487588.712:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.591515][   T29] audit: type=1326 audit(1737487588.712:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b7af5d29 code=0x7ffc0000
[   63.736651][ T5619] ALSA: seq fatal error: cannot create timer (-19)
[   63.877579][ T4344] kernel write not supported for file bpf-prog (pid: 4344 comm: kworker/1:7)
[   64.046131][ T5645] loop3: detected capacity change from 0 to 128
[   64.052540][ T5647] netlink: 'syz.6.855': attribute type 4 has an invalid length.
[   64.075698][ T5647] netlink: 'syz.6.855': attribute type 4 has an invalid length.
[   64.116242][ T5645] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   64.222040][ T5649] loop6: detected capacity change from 0 to 8192
[   64.244046][ T5649] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP
[   64.244046][ T5649] n'º|$@OOݱµ’-®+·el'
[   64.365161][ T5657] syz.6.858[5657] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.365227][ T5657] syz.6.858[5657] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.394996][ T5657] syz.6.858[5657] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.562988][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.865'.
[   64.702477][ T5674] loop6: detected capacity change from 0 to 512
[   64.717894][ T5674] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   64.766919][ T5674] EXT4-fs (loop6): 1 truncate cleaned up
[   65.034608][ T5685] netlink: 'syz.2.869': attribute type 4 has an invalid length.
[   65.137797][ T5687] loop6: detected capacity change from 0 to 164
[   65.148898][ T5687] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.163778][ T5687] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.208160][ T5687] rock: directory entry would overflow storage
[   65.214361][ T5687] rock: sig=0x4f50, size=4, remaining=3
[   65.220003][ T5687] iso9660: Corrupted directory entry in block 4 of inode 1792
[   65.749236][ T5711] syzkaller0: entered promiscuous mode
[   65.754927][ T5711] syzkaller0: entered allmulticast mode
[   65.795271][ T5720] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[   66.138760][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.894'.
[   66.164918][ T5745] bridge_slave_1: left allmulticast mode
[   66.170758][ T5745] bridge_slave_1: left promiscuous mode
[   66.176514][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.210124][ T5745] bridge_slave_0: left allmulticast mode
[   66.215891][ T5745] bridge_slave_0: left promiscuous mode
[   66.221620][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.493772][ T5765] lo: entered promiscuous mode
[   66.499092][ T5765] lo: entered allmulticast mode
[   66.504256][ T5765] lo: left allmulticast mode
[   66.508953][ T5765] lo: left promiscuous mode
[   66.556340][ T5769] netlink: 68 bytes leftover after parsing attributes in process `syz.7.903'.
[   66.556660][ T5768] binfmt_misc: register: failed to install interpreter file ./file0
[   66.704499][ T5789] loop7: detected capacity change from 0 to 512
[   66.711544][ T5789] EXT4-fs (loop7): #blocks per group too big: 65280
[   66.732874][ T5793] netlink: 96 bytes leftover after parsing attributes in process `syz.0.914'.
[   66.897013][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz2'.
[   67.343018][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'.
[   67.745192][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.753719][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.121500][ T5894] netlink: 'syz.3.956': attribute type 1 has an invalid length.
[   68.143573][   T29] kauditd_printk_skb: 625 callbacks suppressed
[   68.143590][   T29] audit: type=1400 audit(1737487593.472:3506): avc:  denied  { read } for  pid=5897 comm="syz.2.958" name="/" dev="configfs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.147336][ T5894] bond0: entered promiscuous mode
[   68.177745][   T29] audit: type=1400 audit(1737487593.482:3507): avc:  denied  { open } for  pid=5897 comm="syz.2.958" path="/" dev="configfs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.181220][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.204655][ T5900] syz.0.959[5900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.206515][ T5900] syz.0.959[5900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.231203][   T29] audit: type=1400 audit(1737487593.562:3508): avc:  denied  { create } for  pid=5892 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   68.234395][ T5900] syz.0.959[5900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.248959][ T5894] loop3: detected capacity change from 0 to 1024
[   68.274162][   T29] audit: type=1400 audit(1737487593.572:3509): avc:  denied  { getopt } for  pid=5892 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   68.281755][ T5894] EXT4-fs: Ignoring removed i_version option
[   68.334904][ T5894] EXT4-fs: Ignoring removed oldalloc option
[   68.341997][   T29] audit: type=1400 audit(1737487593.652:3510): avc:  denied  { sys_ptrace } for  pid=5901 comm="syz.2.960" capability=19  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   68.352183][ T5894] ext3: Unknown parameter 'obj_user'
[   68.407209][ T5910] ref_ctr increment failed for inode: 0x4a0 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888108b75f80
[   68.410165][ T5894] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.431731][   T29] audit: type=1400 audit(1737487593.742:3511): avc:  denied  { cpu } for  pid=5909 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   68.438692][ T5894] bond0: (slave bond1): making interface the new active one
[   68.458160][ T5894] bond1: entered promiscuous mode
[   68.464367][ T5909] uprobe: syz.2.963:5909 failed to unregister, leaking uprobe
[   68.466296][ T5894] bond0: (slave bond1): Enslaving as an active interface with an up link
[   68.532646][ T5920] syz.6.968[5920] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.532783][ T5920] syz.6.968[5920] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.562904][ T5924] bridge0: port 3(vlan2) entered blocking state
[   68.580497][ T5924] bridge0: port 3(vlan2) entered disabled state
[   68.594361][ T5920] syz.6.968[5920] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.611248][ T5924] vlan2: entered allmulticast mode
[   68.622434][   T29] audit: type=1400 audit(1737487593.922:3512): avc:  denied  { ioctl } for  pid=5912 comm="syz.0.965" path="socket:[13654]" dev="sockfs" ino=13654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   68.666340][ T5924] vlan2: left allmulticast mode
[   68.673848][   T29] audit: type=1326 audit(1737487593.962:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   68.697315][   T29] audit: type=1326 audit(1737487593.962:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   68.720982][   T29] audit: type=1326 audit(1737487593.962:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5069065d29 code=0x7ffc0000
[   68.899250][ T5949] vlan2: entered allmulticast mode
[   68.925939][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'.
[   69.074358][ T5972] syz.6.991[5972] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.175966][ T5985] loop6: detected capacity change from 0 to 1024
[   69.196650][ T5985] EXT4-fs: Ignoring removed orlov option
[   69.202396][ T5985] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.235408][ T5985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0082]
[   69.244854][ T5985] EXT4-fs mount: 7 callbacks suppressed
[   69.244871][ T5985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.363406][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'.
[   69.372394][ T6006] tipc: Invalid UDP bearer configuration
[   69.372404][ T6006] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   69.437960][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.530322][ T6027] bpf_get_probe_write_proto: 2 callbacks suppressed
[   69.530338][ T6027] syz.3.1012[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.537979][ T6027] syz.3.1012[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.549512][ T6027] syz.3.1012[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.563057][ T6027] syz.3.1012[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.574715][ T6027] syz.3.1012[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.586388][ T6027] syz.3.1012[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.621029][ T6031] futex_wake_op: syz.3.1014 tries to shift op by -1; fix this program
[   69.830621][ T6052] @: renamed from vlan0 (while UP)
[   69.993860][ T6068] loop7: detected capacity change from 0 to 512
[   70.001178][ T6074] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   70.007195][ T6068] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   70.046175][ T6076] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.056450][ T6068] EXT4-fs (loop7): 1 truncate cleaned up
[   70.066511][ T6068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.116714][ T6076] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.140943][ T6084] loop6: detected capacity change from 0 to 1024
[   70.168803][ T6084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.180112][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'.
[   70.205245][ T5095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.224095][ T6092] bridge0: port 3(bond0) entered blocking state
[   70.230467][ T6092] bridge0: port 3(bond0) entered disabled state
[   70.237045][ T6092] bond0: entered allmulticast mode
[   70.242239][ T6092] bond_slave_0: entered allmulticast mode
[   70.248140][ T6092] bond_slave_1: entered allmulticast mode
[   70.255487][ T6092] bond0: entered promiscuous mode
[   70.260577][ T6092] bond_slave_0: entered promiscuous mode
[   70.266395][ T6092] bond_slave_1: entered promiscuous mode
[   70.272462][ T6092] bridge0: port 3(bond0) entered blocking state
[   70.278783][ T6092] bridge0: port 3(bond0) entered forwarding state
[   70.298353][ T6094] loop7: detected capacity change from 0 to 1024
[   70.298810][ T6076] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.318116][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.324307][ T6094] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   70.338065][ T6094] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   70.348001][ T6096] bond0: left allmulticast mode
[   70.348081][ T6094] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   70.352960][ T6096] bond_slave_0: left allmulticast mode
[   70.368852][ T6096] bond_slave_1: left allmulticast mode
[   70.374351][ T6096] bond0: left promiscuous mode
[   70.379246][ T6096] bond_slave_0: left promiscuous mode
[   70.384794][ T6096] bond_slave_1: left promiscuous mode
[   70.385436][ T6094] EXT4-fs (loop7): invalid journal inode
[   70.390470][ T6096] bridge0: port 3(bond0) entered disabled state
[   70.403836][ T6094] EXT4-fs (loop7): can't get journal size
[   70.407538][ T6100] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1044'.
[   70.410876][ T6094] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.1040: blocks 2-2 from inode overlap system zone
[   70.434710][ T6076] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.444711][ T6094] EXT4-fs (loop7): failed to initialize system zone (-117)
[   70.451947][ T6094] EXT4-fs (loop7): mount failed
[   70.522490][ T6076] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.557827][ T6076] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.569648][ T6076] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.586481][ T6076] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.621907][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1053'.
[   70.631609][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1053'.
[   70.656002][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1053'.
[   70.665242][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1053'.
[   70.695956][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1053'.
[   70.834046][ T6147] syz.0.1061[6147] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.834139][ T6147] syz.0.1061[6147] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.846246][ T6147] syz.0.1061[6147] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.919463][ T6163] netem: change failed
[   71.117355][ T6184] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.228355][ T6197] netlink: 'syz.7.1082': attribute type 9 has an invalid length.
[   71.294219][ T6205] syzkaller0: entered allmulticast mode
[   71.306266][ T6205] syzkaller0 (unregistering): left allmulticast mode
[   71.340599][ T6211] loop7: detected capacity change from 0 to 1024
[   71.347993][ T6208] netlink: 'syz.0.1090': attribute type 5 has an invalid length.
[   71.386732][ T6211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.449008][ T5095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.622397][ T6232] ebtables: ebtables: counters copy to user failed while replacing table
[   71.639017][ T6241] batadv0: entered promiscuous mode
[   71.651784][ T6241] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   71.667740][ T6241] bond0: (slave macvlan2): Enslaving as a backup interface with an up link
[   71.781705][ T6250] veth0_to_team: entered promiscuous mode
[   71.787805][ T6250] veth0_to_team: entered allmulticast mode
[   71.974573][ T6272] loop3: detected capacity change from 0 to 128
[   72.003457][ T6272] wireguard0: entered promiscuous mode
[   72.008999][ T6272] wireguard0: entered allmulticast mode
[   72.237736][ T6294] ieee802154 phy0 wpan0: encryption failed: -22
[   72.254985][ T6298] loop7: detected capacity change from 0 to 512
[   72.279597][ T6298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.295798][ T6298] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   72.328902][ T5095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.349476][ T6308] __nla_validate_parse: 7 callbacks suppressed
[   72.349490][ T6308] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1132'.
[   72.411749][ T6315] loop6: detected capacity change from 0 to 512
[   72.412429][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1135'.
[   72.428233][ T6315] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.1134: casefold flag without casefold feature
[   72.446554][ T6315] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1134: couldn't read orphan inode 15 (err -117)
[   72.461019][ T6315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.506733][ T6322] Process accounting resumed
[   72.544576][ T6327] vhci_hcd: default hub control req: 800c v0000 i0000 l0
[   72.584558][ T6328] loop7: detected capacity change from 0 to 8192
[   72.675064][ T6328] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP
[   72.675064][ T6328] n'º|$@OOݱµ’-®+·el'
[   72.736572][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.837098][ T6342] loop7: detected capacity change from 0 to 4096
[   72.843926][ T6342] EXT4-fs: test_dummy_encryption option not supported
[   73.023451][ T6358] netlink: 'syz.6.1155': attribute type 1 has an invalid length.
[   73.038522][ T6358] bond1: entered promiscuous mode
[   73.043883][ T6358] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.068500][ T6358] loop6: detected capacity change from 0 to 1024
[   73.075756][ T6358] EXT4-fs: Ignoring removed i_version option
[   73.081823][ T6358] EXT4-fs: Ignoring removed oldalloc option
[   73.089177][ T6358] ext3: Unknown parameter 'obj_user'
[   73.162078][ T6358] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.172794][ T6358] bond1: (slave bond2): making interface the new active one
[   73.180189][ T6358] bond2: entered promiscuous mode
[   73.186946][ T6358] bond1: (slave bond2): Enslaving as an active interface with an up link
[   73.245049][   T29] kauditd_printk_skb: 192 callbacks suppressed
[   73.245064][   T29] audit: type=1400 audit(1737487598.582:3708): avc:  denied  { mounton } for  pid=6365 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   73.313659][ T6370] ip6_vti0: entered promiscuous mode
[   73.319358][ T6370] vlan0: entered promiscuous mode
[   73.334500][ T6370] ip6_vti0: left promiscuous mode
[   73.396989][ T6381] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1162'.
[   73.496710][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1166'.
[   73.558344][ T6365] chnl_net:caif_netlink_parms(): no params data found
[   73.639083][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.646500][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.666700][ T6365] bridge_slave_0: entered allmulticast mode
[   73.673415][ T6365] bridge_slave_0: entered promiscuous mode
[   73.682415][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.689647][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.696994][ T6365] bridge_slave_1: entered allmulticast mode
[   73.703574][ T6365] bridge_slave_1: entered promiscuous mode
[   73.730902][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.743325][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.784118][ T6365] team0: Port device team_slave_0 added
[   73.805295][ T6365] team0: Port device team_slave_1 added
[   73.812258][   T29] audit: type=1400 audit(1737487599.142:3709): avc:  denied  { create } for  pid=6416 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.834395][   T29] audit: type=1400 audit(1737487599.142:3710): avc:  denied  { ioctl } for  pid=6416 comm="syz.0.1174" path="socket:[15542]" dev="sockfs" ino=15542 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.859615][   T29] audit: type=1400 audit(1737487599.142:3711): avc:  denied  { setopt } for  pid=6416 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.879796][   T29] audit: type=1400 audit(1737487599.142:3712): avc:  denied  { bind } for  pid=6416 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.909665][ T6421] loop6: detected capacity change from 0 to 512
[   73.924095][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.932799][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.942995][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.945331][ T6421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.950151][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.962627][ T6421] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   73.988403][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.009681][ T6423] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   74.019088][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.026090][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.035954][   T29] audit: type=1400 audit(1737487599.372:3713): avc:  denied  { remount } for  pid=6420 comm="syz.6.1186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   74.052160][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.083234][ T6421] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   74.101993][ T6365] hsr_slave_0: entered promiscuous mode
[   74.108138][   T29] audit: type=1326 audit(1737487599.432:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6427 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd60e15d29 code=0x7ffc0000
[   74.131613][   T29] audit: type=1326 audit(1737487599.442:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6427 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fdd60e15d29 code=0x7ffc0000
[   74.155694][ T6365] hsr_slave_1: entered promiscuous mode
[   74.155893][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.161621][   T29] audit: type=1326 audit(1737487599.442:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6427 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd60e15d29 code=0x7ffc0000
[   74.193712][   T29] audit: type=1326 audit(1737487599.442:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6427 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd60e15d29 code=0x7ffc0000
[   74.217345][ T6365] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.224931][ T6365] Cannot create hsr debugfs directory
[   74.279223][  T344] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.306619][ T6365] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   74.315672][ T6365] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   74.324327][ T6365] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   74.335199][  T344] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.346308][ T6365] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   74.383471][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.392866][  T344] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.409583][ T6365] 8021q: adding VLAN 0 to HW filter on device team0
[   74.418803][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.425917][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.436899][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.443956][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.454015][  T344] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.592192][  T344] bridge_slave_1: left allmulticast mode
[   74.598000][  T344] bridge_slave_1: left promiscuous mode
[   74.603772][  T344] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.614215][  T344] bridge_slave_0: left allmulticast mode
[   74.620059][  T344] bridge_slave_0: left promiscuous mode
[   74.625811][  T344] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.727978][  T344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.739552][  T344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.749533][  T344] bond0 (unregistering): Released all slaves
[   74.760500][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.789678][  T344] hsr_slave_0: left promiscuous mode
[   74.800251][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'.
[   74.810099][  T344] hsr_slave_1: left promiscuous mode
[   74.828236][  T344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.835845][  T344] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.856687][  T344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.864115][  T344] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.878773][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'.
[   74.890730][  T344] veth1_macvtap: left promiscuous mode
[   74.896255][  T344] veth0_macvtap: left promiscuous mode
[   74.901830][  T344] veth1_vlan: left promiscuous mode
[   74.907163][  T344] veth0_vlan: left promiscuous mode
[   75.029602][ T6468] syz.0.1191[6468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.030015][ T6468] syz.0.1191[6468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.044715][  T344] team0 (unregistering): Port device team_slave_1 removed
[   75.048573][ T6468] syz.0.1191[6468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.068818][  T344] team0 (unregistering): Port device team_slave_0 removed
[   75.252263][ T6365] veth0_vlan: entered promiscuous mode
[   75.260207][ T6365] veth1_vlan: entered promiscuous mode
[   75.275561][ T6365] veth0_macvtap: entered promiscuous mode
[   75.284205][ T6365] veth1_macvtap: entered promiscuous mode
[   75.294498][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.305077][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.315042][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.325576][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.335451][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.346010][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.355952][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.366511][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.377548][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.386052][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.396591][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.406533][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.417097][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.427060][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.437566][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.447564][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.458039][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.468794][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.485863][ T6365] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.494723][ T6365] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.503572][ T6365] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.512361][ T6365] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.591841][ T6485] ip6_vti0: entered promiscuous mode
[   75.603304][ T6485] vlan0: entered promiscuous mode
[   75.612036][ T6485] ip6_vti0: left promiscuous mode
[   75.680714][ T6497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6497 comm=syz.2.1199
[   75.687054][ T6494] pimreg: entered allmulticast mode
[   75.706364][ T6494] pimreg: left allmulticast mode
[   75.741379][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1201'.
[   75.979761][ T6534] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1211'.
[   76.096448][ T6543] syz.8.1215[6543] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.096520][ T6543] syz.8.1215[6543] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.109822][ T6543] syz.8.1215[6543] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.135238][ T6541] loop6: detected capacity change from 0 to 8192
[   76.803501][ T6600] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   76.823020][ T6608] loop6: detected capacity change from 0 to 512
[   76.870750][ T6608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.910985][ T6608] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.978708][ T4341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.029083][ T6636] syz.0.1265[6636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   77.029173][ T6636] syz.0.1265[6636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   77.052621][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1252'.
[   77.079329][ T6636] syz.0.1265[6636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   77.111745][ T6636] veth6: entered allmulticast mode
[   77.143811][    C1] ==================================================================
[   77.151945][    C1] BUG: KCSAN: data-race in can_receive / can_receive
[   77.158677][    C1] 
[   77.161018][    C1] read-write to 0xffff8881041054e8 of 8 bytes by interrupt on cpu 0:
[   77.169104][    C1]  can_receive+0x62/0x1f0
[   77.173559][    C1]  canfd_rcv+0xe7/0x180
[   77.177729][    C1]  __netif_receive_skb+0x123/0x280
[   77.182845][    C1]  process_backlog+0x22e/0x440
[   77.187611][    C1]  __napi_poll+0x63/0x3c0
[   77.191943][    C1]  net_rx_action+0x3a1/0x7f0
[   77.196549][    C1]  handle_softirqs+0xbf/0x280
[   77.201254][    C1]  run_ksoftirqd+0x1c/0x30
[   77.205670][    C1]  smpboot_thread_fn+0x31c/0x4c0
[   77.210708][    C1]  kthread+0x1d1/0x210
[   77.214782][    C1]  ret_from_fork+0x4b/0x60
[   77.219209][    C1]  ret_from_fork_asm+0x1a/0x30
[   77.223977][    C1] 
[   77.226321][    C1] read-write to 0xffff8881041054e8 of 8 bytes by interrupt on cpu 1:
[   77.234381][    C1]  can_receive+0x62/0x1f0
[   77.238720][    C1]  canfd_rcv+0xe7/0x180
[   77.242875][    C1]  __netif_receive_skb+0x123/0x280
[   77.248010][    C1]  process_backlog+0x22e/0x440
[   77.252805][    C1]  __napi_poll+0x63/0x3c0
[   77.257150][    C1]  net_rx_action+0x3a1/0x7f0
[   77.261749][    C1]  handle_softirqs+0xbf/0x280
[   77.266447][    C1]  run_ksoftirqd+0x1c/0x30
[   77.270896][    C1]  smpboot_thread_fn+0x31c/0x4c0
[   77.275851][    C1]  kthread+0x1d1/0x210
[   77.279919][    C1]  ret_from_fork+0x4b/0x60
[   77.284341][    C1]  ret_from_fork_asm+0x1a/0x30
[   77.289106][    C1] 
[   77.291440][    C1] value changed: 0x0000000000000d07 -> 0x0000000000000d08
[   77.298539][    C1] 
[   77.300861][    C1] Reported by Kernel Concurrency Sanitizer on:
[   77.307027][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0
[   77.317264][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   77.327323][    C1] ==================================================================
[   77.338847][ T6642] smc: net device bond0 applied user defined pnetid SYZ2
[   77.347260][ T6647] smc: net device bond0 erased user defined pnetid SYZ2