last executing test programs:

3m45.58434313s ago: executing program 0 (id=96):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r3, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0)

3m45.52690588s ago: executing program 0 (id=97):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@norecovery}]}, 0x9, 0x60c, &(0x7f00000001c0)="$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")
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc0111"], 0x27c}}, 0x0)
stat(0x0, 0x0)

3m45.382079793s ago: executing program 0 (id=101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x15}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x0, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000700)=[{&(0x7f0000000800)=""/215, 0xd7}]}, 0x0, 0x0, 0x800004, 0x10030, 0x0, 0x0})
sendmsg$NFT_BATCH(r0, 0x0, 0x4048010)

3m45.285183114s ago: executing program 0 (id=104):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_open_dev$vcsa(0x0, 0x3, 0x103400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f000005", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780), 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3m45.239865805s ago: executing program 0 (id=108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

3m45.072629407s ago: executing program 0 (id=112):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

3m45.052520628s ago: executing program 32 (id=112):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

3m20.173257706s ago: executing program 2 (id=661):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4040, &(0x7f0000000180)={[{@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x30}}, {@nodelalloc}, {@nodioread_nolock}, {@noblock_validity}, {@max_dir_size_kb}]}, 0xfe, 0x475, &(0x7f0000002480)="$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")
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x0, 0x20, 0x0})
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000500000000007f080000000095225cec26195d0cecdbf08f5e37587be152234e70853c1b1fa09fe07297293ee6562f0800dd347b3a80d534c5a4f7f8a2cb2b854307f4cd9992ec0e8ee6a0deca46533db845c3eedc0d2f05f800516d76011ed32e4638b63bf5ced2996d580f449079d1339274bdc49142f1cc0060e1c6e3231d1c9404fc73c0a2c3c5d571f06951795dcd787e09e21bb272ac3183bed81cad854be0e8e21724e95c7cbb9a06f2a33d1e0b94afbb7821410ab39108ecae083e278e10"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x4, 0x7, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0xfffffff6, 0x4, 0x8, 0x4, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0x7fff, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x201, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x6}, {0x4, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x1, 0x3ff, 0x7, 0x7}, {0x5, 0x8001, 0x7, 0x1000, 0x6, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x3, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7f, 0xc494, 0x3, 0x5409}, {0x0, 0x8b, 0x3, 0xa, 0x6, 0x7f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0x9, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x0, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458f}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0x8001}, {0x80000001, 0x10, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0x0, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0xa, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0xc, 0xfeff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x4, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x4}, {0x80, 0xfffff001, 0x7, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2012, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x1, 0x3, 0x0, 0x2eba, 0xff}, {0x6, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x1, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x6, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7fff, 0x6}, {0x7, 0x6, 0x10000000, 0x80, 0x8, 0xfffffff7}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x6, 0x81, 0x5, 0x7f, 0x2}, {0x3, 0x4, 0x1, 0x2, 0x2, 0xfffffff3}, {0x1cff, 0x1, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0xbf53}, {0x4, 0x100, 0x5, 0x5, 0x4, 0x9}, {0x1, 0x7, 0x5, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x8, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0x1, 0x8, 0x3, 0x6b10165f}, {0xfffffffb, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x7f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0x0, 0x7, 0x1000, 0x7}, {0xfff, 0x0, 0x3, 0x3, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0x3, 0x4, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5ef}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0xfffffffc}, {0x8, 0x498, 0xffffff3a, 0x483, 0x4, 0x7}, {0x1, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7894, 0x4}, {0x8, 0x800, 0xfffffffe, 0x4, 0x7, 0x101}, {0xf512, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x8}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x3fe, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x8, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x200, 0xfffffffb, 0x8, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x2, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x800, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x9, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xf, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0x6, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0x10, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4b0, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x5, 0xffffffff}, {0x5388, 0x80000001, 0x1, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x2, 0x7224, 0x8, 0xfffff90e, 0x0, 0x7d6a7490}, {0x2, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {}, {0x0, 0x1}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0)

3m19.773237273s ago: executing program 2 (id=669):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0)

3m19.565716586s ago: executing program 2 (id=671):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8000c62)
write$binfmt_elf64(r0, 0x0, 0x478)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2)

3m19.29793137s ago: executing program 2 (id=674):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000640)='./file1\x00', 0x4800, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000000f00)="$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")
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

3m19.009524044s ago: executing program 2 (id=676):
r0 = gettid()
r1 = epoll_create1(0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
read$char_usb(r2, &(0x7f0000000240)=""/199, 0xc7)
finit_module(r2, 0x0, 0x0)
tkill(r0, 0x7)

3m18.619395891s ago: executing program 2 (id=680):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
unshare(0x66000080)
r2 = socket(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = dup2(r2, r2)
sendto$inet6(r3, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)

3m18.588759091s ago: executing program 33 (id=680):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
unshare(0x66000080)
r2 = socket(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = dup2(r2, r2)
sendto$inet6(r3, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)

2m51.262310529s ago: executing program 3 (id=1200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
semop(0x0, 0x0, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2m51.036305523s ago: executing program 3 (id=1205):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r4, 0x25, &(0x7f00000000c0))
r5 = dup2(r1, r0)
close_range(r5, 0xffffffffffffffff, 0x0)

2m50.912373755s ago: executing program 3 (id=1207):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

2m50.798266657s ago: executing program 3 (id=1208):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0xed, [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185002, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2m50.017994749s ago: executing program 3 (id=1227):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0xfe, 0x785, &(0x7f0000001900)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x4000002ab}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
write(r2, &(0x7f0000004200)='t', 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff000)
fallocate(r0, 0x0, 0x0, 0x1001f0)

2m49.627494645s ago: executing program 3 (id=1230):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

2m49.585081356s ago: executing program 34 (id=1230):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

4.642218926s ago: executing program 5 (id=3982):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4.579049667s ago: executing program 5 (id=3985):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x24)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.637894162s ago: executing program 5 (id=3990):
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdc, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000740)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x2}}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x0, 0x610, &(0x7f0000000a40)="$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")
keyctl$search(0x4, 0x0, 0x0, 0x0, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chmod(0x0, 0x22f)

3.568507793s ago: executing program 5 (id=3991):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = getpgid(0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd)

2.721899567s ago: executing program 6 (id=4000):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

1.944121639s ago: executing program 4 (id=4003):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ad, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340), 0x0)
io_uring_enter(r2, 0x3516, 0x0, 0x40, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_page_free_batched\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x51)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e})

1.93237426s ago: executing program 7 (id=4005):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x20000005)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
unlink(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x200000000000000)

1.851684751s ago: executing program 4 (id=4006):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x3f, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18)
r4 = io_uring_setup(0x792b, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
open(0x0, 0x0, 0x0)

1.842307281s ago: executing program 6 (id=4017):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2)
sendfile(r2, r1, 0x0, 0x7ffff000)
fallocate(r0, 0x1, 0x0, 0x1001f0)

1.785358012s ago: executing program 4 (id=4007):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x800000009)

1.779869392s ago: executing program 7 (id=4019):
ftruncate(0xffffffffffffffff, 0x2000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.060041513s ago: executing program 7 (id=4009):
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
acct(0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7833, 0x8000, 0xb196, 0x40, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x67, 0x0, 0xe8, 0x4, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x6d, [@loopback, @rand_addr=0x64010102]}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'erspan0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0)

1.059461773s ago: executing program 4 (id=4010):
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

929.535726ms ago: executing program 7 (id=4011):
r0 = gettid()
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4f72271c}, 0x18)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x11, 0x9, 0x300)

911.370706ms ago: executing program 1 (id=4013):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9080, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000040)='./file0/file0\x00', 0x20000200)
ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000100)={0xfffffffd, 0xffffffffffffffff, 0x6})

910.961726ms ago: executing program 6 (id=4014):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00020000000000000000008c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000001000))
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xc5, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd28, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x9}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x40094)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)

881.493097ms ago: executing program 1 (id=4015):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
unshare(0x2040600)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18)

844.785107ms ago: executing program 6 (id=4016):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

734.501199ms ago: executing program 1 (id=4018):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94)
r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

710.919379ms ago: executing program 1 (id=4020):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x20000005)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
unlink(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x200000000000000)

443.948353ms ago: executing program 6 (id=4021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r0}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1000002, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = dup3(r2, r3, 0x0)
sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)

385.158434ms ago: executing program 1 (id=4022):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
chdir(&(0x7f0000000200)='./file0\x00')
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2)

384.425064ms ago: executing program 5 (id=4023):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
r1 = semget$private(0x0, 0x5, 0x0)
semop(r1, &(0x7f0000000180)=[{0x0, 0xffff}, {0x1, 0xffff, 0x1800}], 0x2)
semop(r1, &(0x7f00000000c0)=[{0x0, 0xff}], 0x1)
semop(r1, &(0x7f00000000c0)=[{0x1, 0x4, 0x1000}], 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80ad}, 0x1c)
unshare(0x2040400)
r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r2)

307.969635ms ago: executing program 1 (id=4024):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

307.695215ms ago: executing program 6 (id=4025):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4000000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x0, 'dvmrp0\x00', {}, 0x7})

270.883625ms ago: executing program 5 (id=4026):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

132.127268ms ago: executing program 4 (id=4027):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
fsopen(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f00000009c0)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0")
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0x0, 0x0)
rt_sigaction(0x2b, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20)

18.40277ms ago: executing program 7 (id=4028):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000001600)={0x1, 0x80, 0x4, 0x0, 0x7, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xcc59, 0x5, 0x0, 0x5, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

17.62383ms ago: executing program 7 (id=4038):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r3)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

0s ago: executing program 4 (id=4029):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

kernel console output (not intermixed with test programs):

 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.627664][T12172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.650228][T12135] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.658529][T12135] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.682630][T12172] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3068: Allocating blocks 385-513 which overlap fs metadata
[  196.797747][T12135] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.806068][T12135] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.829009][T12172] EXT4-fs (loop1): pa ffff888106ccad90: logic 16, phys. 129, len 24
[  196.837108][T12172] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  197.416853][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.534461][T12177] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.602273][T12177] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.689784][T12177] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.715709][    C0] net_ratelimit: 43013 callbacks suppressed
[  197.715725][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:b8:c3:35:68:98, vlan:0)
[  197.729027][T12206] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3078'.
[  197.733738][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.754889][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.767027][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:b8:c3:35:68:98, vlan:0)
[  197.767700][T12201] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3078'.
[  197.779116][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.799421][T12206] loop1: detected capacity change from 0 to 128
[  197.800315][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.807855][T12206] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  197.818493][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:b8:c3:35:68:98, vlan:0)
[  197.831868][T12206] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.838577][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.851417][T12206] ext2 filesystem being mounted at /628/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.862532][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.884971][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:b8:c3:35:68:98, vlan:0)
[  197.907314][ T8226] usb 3-1: enqueue for inactive port 0
[  197.912850][ T8226] usb 3-1: enqueue for inactive port 0
[  197.956039][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.991901][ T8226] vhci_hcd: vhci_device speed not set
[  198.007164][T12213] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  198.017706][T12177] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.078701][T12177] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.128632][T12177] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.174556][T12177] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.204587][T12177] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.257195][T12232] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3091'.
[  198.533143][T12253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3100'.
[  198.542215][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3100'.
[  198.672874][T12262] 0ªX¹¦D: left allmulticast mode
[  198.799483][T12262] 8021q: adding VLAN 0 to HW filter on device team0
[  198.818632][T12262] batman_adv: batadv0: Interface activated: team0
[  199.084282][T12271] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  199.326057][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  199.601369][T12278] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  200.292682][T12313] loop7: detected capacity change from 0 to 4096
[  200.566525][T12313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.612254][ T1461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.211415][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.251775][T12333] bridge0: port 4(veth0_to_bridge) entered disabled state
[  201.259027][T12333] bridge0: port 3(team0) entered disabled state
[  201.265421][T12333] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.272538][T12333] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.292709][T12339] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3128'.
[  201.301782][T12339] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3128'.
[  201.313711][T12333] veth0_to_bridge: left allmulticast mode
[  201.319622][T12333] veth0_to_bridge: left promiscuous mode
[  201.325424][T12333] bridge0: port 4(veth0_to_bridge) entered disabled state
[  201.336426][T12333] team0: left allmulticast mode
[  201.341321][T12333] team_slave_0: left allmulticast mode
[  201.346808][T12333] team_slave_1: left allmulticast mode
[  201.352300][T12333] geneve1: left allmulticast mode
[  201.357479][T12333] bridge0: port 3(team0) entered disabled state
[  201.363931][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  201.363946][   T29] audit: type=1400 audit(1745175205.192:9046): avc:  denied  { getopt } for  pid=12338 comm="syz.7.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  201.390815][T12333] bridge_slave_1: left allmulticast mode
[  201.396553][T12333] bridge_slave_1: left promiscuous mode
[  201.402202][T12333] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.411572][T12333] bridge_slave_0: left promiscuous mode
[  201.417481][T12333] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.451270][T12351] loop4: detected capacity change from 0 to 512
[  201.451987][T12348] loop7: detected capacity change from 0 to 512
[  201.475127][T12348] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  201.477486][T12351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.483230][T12348] EXT4-fs (loop7): orphan cleanup on readonly fs
[  201.497133][T12351] ext4 filesystem being mounted at /625/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.502315][T12348] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3135: invalid indirect mapped block 256 (level 2)
[  201.525892][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3131'.
[  201.526052][T12348] EXT4-fs (loop7): 2 truncates cleaned up
[  201.541215][T12348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.573901][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.604142][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.670563][T12363] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3139'.
[  201.702620][T12369] loop4: detected capacity change from 0 to 128
[  201.828004][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3145'.
[  201.841321][T12378] vxlan1: entered promiscuous mode
[  201.932781][   T29] audit: type=1326 audit(1745175205.772:9047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  201.944030][T12385] loop6: detected capacity change from 0 to 512
[  201.956374][   T29] audit: type=1326 audit(1745175205.772:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  201.986049][   T29] audit: type=1326 audit(1745175205.772:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  202.009480][   T29] audit: type=1326 audit(1745175205.772:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  202.033065][   T29] audit: type=1326 audit(1745175205.772:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  202.051289][T12383] lo speed is unknown, defaulting to 1000
[  202.056619][   T29] audit: type=1326 audit(1745175205.772:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  202.085863][   T29] audit: type=1326 audit(1745175205.772:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  202.109460][   T29] audit: type=1326 audit(1745175205.772:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  202.133056][   T29] audit: type=1326 audit(1745175205.772:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.6.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  202.156785][T12383] vxcan1 speed is unknown, defaulting to 1000
[  202.182775][T12385] EXT4-fs (loop6): orphan cleanup on readonly fs
[  202.191585][T12386] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3148'.
[  202.208964][T12385] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3149: bg 0: block 248: padding at end of block bitmap is not set
[  202.229798][T12385] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3149: Failed to acquire dquot type 1
[  202.244794][T12385] EXT4-fs (loop6): 1 truncate cleaned up
[  202.254641][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3151'.
[  202.263723][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3151'.
[  202.274118][T12386] batadv1: entered allmulticast mode
[  202.304512][T12385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.357480][T12385] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  202.369547][T12395] netlink: 'syz.7.3153': attribute type 1 has an invalid length.
[  202.387303][T12385] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  202.389724][T12395] bond0: entered promiscuous mode
[  202.400887][T12395] bond_slave_1: entered promiscuous mode
[  202.408150][T12395] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  202.417222][T12395] bond3: (slave macvlan0): Enslaving as a backup interface with an up link
[  202.450646][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.631563][ T3380] IPVS: starting estimator thread 0...
[  202.638458][T12413] loop7: detected capacity change from 0 to 512
[  202.745884][T12414] IPVS: using max 2544 ests per chain, 127200 per kthread
[  202.836972][T12427] xt_hashlimit: max too large, truncated to 1048576
[  202.853509][T12428] lo speed is unknown, defaulting to 1000
[  202.861052][T12428] vxcan1 speed is unknown, defaulting to 1000
[  202.898008][T12434] loop4: detected capacity change from 0 to 512
[  202.915502][T12434] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  202.949414][T12434] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  202.965305][T12438] netlink: 'syz.7.3169': attribute type 3 has an invalid length.
[  202.978984][T12434] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.3162: corrupted inode contents
[  203.012118][T12434] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #11: comm syz.4.3162: mark_inode_dirty error
[  203.036661][T12434] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3162: invalid indirect mapped block 1 (level 1)
[  203.054727][T12449] netlink: 'syz.7.3173': attribute type 1 has an invalid length.
[  203.059737][T12434] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.3162: corrupted inode contents
[  203.074649][T12434] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  203.083462][T12434] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.3162: corrupted inode contents
[  203.097186][T12434] EXT4-fs error (device loop4): ext4_truncate:4255: inode #11: comm syz.4.3162: mark_inode_dirty error
[  203.102007][T12449] 8021q: adding VLAN 0 to HW filter on device bond4
[  203.108651][T12434] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  203.124134][T12434] EXT4-fs (loop4): 1 truncate cleaned up
[  203.130460][T12434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.147682][T12449] bond4: (slave dummy0): making interface the new active one
[  203.156528][T12449] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  203.196730][T12453] loop7: detected capacity change from 0 to 512
[  203.196923][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.203445][T12453] EXT4-fs: Ignoring removed oldalloc option
[  203.229583][T12453] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.3174: Parent and EA inode have the same ino 15
[  203.242428][T12453] EXT4-fs (loop7): Remounting filesystem read-only
[  203.249131][T12453] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -30)
[  203.259645][T12453] EXT4-fs (loop7): 1 orphan inode deleted
[  203.266020][T12453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.278468][T12453] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.319924][T12453] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3174'.
[  203.331183][T12453] bond0 (unregistering): left promiscuous mode
[  203.337421][T12453] bond_slave_1: left promiscuous mode
[  203.344201][T12453] bond3: (slave macvlan0): Releasing backup interface
[  203.353870][T12453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.363115][T12453] bond0 (unregistering): Released all slaves
[  203.394018][T12462] loop4: detected capacity change from 0 to 256
[  203.464102][T12466] loop7: detected capacity change from 0 to 512
[  203.471174][T12466] EXT4-fs (loop7): external journal device major/minor numbers have changed
[  203.484599][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3181'.
[  203.511099][T12466] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6
[  203.703804][T12489] lo speed is unknown, defaulting to 1000
[  203.710283][T12489] vxcan1 speed is unknown, defaulting to 1000
[  203.861699][T12502] lo speed is unknown, defaulting to 1000
[  203.868950][T12502] vxcan1 speed is unknown, defaulting to 1000
[  204.030975][T12508] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.040883][T12508] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.128227][T12508] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.138198][T12508] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.197402][T12508] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.207240][T12508] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.231464][T12522] loop7: detected capacity change from 0 to 128
[  204.257824][T12508] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.267748][T12508] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.340203][T12530] macvlan1: entered promiscuous mode
[  204.347005][T12530] ipvlan0: entered promiscuous mode
[  204.352675][T12530] ipvlan0: left promiscuous mode
[  204.358045][T12530] macvlan1: left promiscuous mode
[  204.369959][T12508] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.378252][T12508] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.389785][T12508] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.397998][T12508] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.413124][T12508] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.421381][T12508] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.433737][T12508] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.442081][T12508] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.818907][T12548] pim6reg1: entered promiscuous mode
[  204.824330][T12548] pim6reg1: entered allmulticast mode
[  204.859192][T12550] loop1: detected capacity change from 0 to 512
[  205.094975][ T1461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  205.170768][T12560] loop1: detected capacity change from 0 to 512
[  205.216872][T12560] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  205.300520][T12560] EXT4-fs (loop1): 1 truncate cleaned up
[  205.319327][T12560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.515451][T12570] IPVS: Unknown mcast interface: vcan0
[  205.827103][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.974933][T12598] loop7: detected capacity change from 0 to 128
[  206.078259][T12602] syz.7.3230: attempt to access beyond end of device
[  206.078259][T12602] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128
[  206.114413][T12602] syz.7.3230: attempt to access beyond end of device
[  206.114413][T12602] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[  206.130203][T12606] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  206.151280][T12602] syz.7.3230: attempt to access beyond end of device
[  206.151280][T12602] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128
[  206.165727][T12610] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  206.179206][T12602] syz.7.3230: attempt to access beyond end of device
[  206.179206][T12602] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128
[  206.195642][T12602] syz.7.3230: attempt to access beyond end of device
[  206.195642][T12602] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128
[  206.209519][T12602] syz.7.3230: attempt to access beyond end of device
[  206.209519][T12602] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128
[  206.211660][T12614] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  206.222975][T12602] syz.7.3230: attempt to access beyond end of device
[  206.222975][T12602] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128
[  206.338969][T12602] syz.7.3230: attempt to access beyond end of device
[  206.338969][T12602] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128
[  206.356369][T12614] lo speed is unknown, defaulting to 1000
[  206.364574][T12602] syz.7.3230: attempt to access beyond end of device
[  206.364574][T12602] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128
[  206.364758][T12614] vxcan1 speed is unknown, defaulting to 1000
[  206.379396][ T3522] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  206.416044][T12602] syz.7.3230: attempt to access beyond end of device
[  206.416044][T12602] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128
[  206.464860][T12619] loop4: detected capacity change from 0 to 512
[  206.474689][T12621] lo speed is unknown, defaulting to 1000
[  206.500002][T12626] loop1: detected capacity change from 0 to 512
[  206.519510][T12619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  206.530999][T12626] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3240: bg 0: block 288: padding at end of block bitmap is not set
[  206.556346][   T29] kauditd_printk_skb: 126 callbacks suppressed
[  206.556361][   T29] audit: type=1326 audit(1745175210.402:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecc77d5127 code=0x7ffc0000
[  206.560714][T12619] EXT4-fs (loop4): 1 truncate cleaned up
[  206.562617][   T29] audit: type=1326 audit(1745175210.402:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecc777a359 code=0x7ffc0000
[  206.602468][T12621] vxcan1 speed is unknown, defaulting to 1000
[  206.615094][   T29] audit: type=1326 audit(1745175210.402:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecc77d5127 code=0x7ffc0000
[  206.644585][   T29] audit: type=1326 audit(1745175210.402:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecc777a359 code=0x7ffc0000
[  206.661954][T12619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.668063][   T29] audit: type=1326 audit(1745175210.402:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  206.681675][T12626] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  206.703870][   T29] audit: type=1326 audit(1745175210.402:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  206.716946][T12626] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3240: attempt to clear invalid blocks 1024 len 1
[  206.736117][   T29] audit: type=1326 audit(1745175210.402:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecc77d5127 code=0x7ffc0000
[  206.751367][T12626] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3240: invalid indirect mapped block 1819239214 (level 0)
[  206.772506][   T29] audit: type=1326 audit(1745175210.402:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecc777a359 code=0x7ffc0000
[  206.788472][T12626] EXT4-fs (loop1): 1 truncate cleaned up
[  206.809818][   T29] audit: type=1326 audit(1745175210.402:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecc77d5127 code=0x7ffc0000
[  206.809847][   T29] audit: type=1326 audit(1745175210.402:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.7.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecc777a359 code=0x7ffc0000
[  206.889798][T12626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.980858][T12642] lo speed is unknown, defaulting to 1000
[  206.988411][T12642] vxcan1 speed is unknown, defaulting to 1000
[  206.995426][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.073144][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.419138][T12670] loop4: detected capacity change from 0 to 512
[  207.437422][T12670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.450018][T12670] ext4 filesystem being mounted at /650/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  207.516332][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.564211][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.573964][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.727760][T12680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.735427][T12679] tipc: Resetting bearer <eth:syzkaller0>
[  207.747758][T12679] tipc: Disabling bearer <eth:syzkaller0>
[  207.805357][T12685] __nla_validate_parse: 5 callbacks suppressed
[  207.805371][T12685] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3263'.
[  208.056414][T12693] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  208.117476][T12693] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  208.166915][T12693] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  208.216869][T12693] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  208.277144][T12693] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  208.302306][T12693] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  208.316323][T12693] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  208.328486][T12693] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  208.410982][T12708] loop4: detected capacity change from 0 to 512
[  208.418111][T12708] EXT4-fs (loop4): filesystem is read-only
[  208.430727][T12709] xt_hashlimit: size too large, truncated to 1048576
[  208.734760][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'.
[  208.937821][T12709] Cannot find set identified by id 2 to match
[  208.984444][T12732] SELinux:  Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped).
[  209.013736][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3285'.
[  209.024616][T12732] loop1: detected capacity change from 0 to 2048
[  209.043304][T12732] ext4: Unknown parameter 'smackfsdef'
[  209.051709][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3285'.
[  209.383440][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3292'.
[  210.072110][T12773] SELinux: failed to load policy
[  210.170271][T12778] loop4: detected capacity change from 0 to 512
[  210.177236][T12778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  210.226088][T12782] geneve0: entered allmulticast mode
[  210.231992][T12778] EXT4-fs (loop4): 1 truncate cleaned up
[  210.238087][T12778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.259388][T12781] SELinux: ebitmap: truncated map
[  210.277367][T12781] SELinux: failed to load policy
[  210.325096][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.818671][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3309'.
[  210.846984][ T3529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  211.129857][T12802] vlan1: entered allmulticast mode
[  211.438454][T12819] netlink: 'syz.5.3318': attribute type 4 has an invalid length.
[  211.472859][T12821] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.786663][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  211.786676][   T29] audit: type=1326 audit(1745175215.632:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  211.900886][T12844] lo speed is unknown, defaulting to 1000
[  211.907259][T12844] vxcan1 speed is unknown, defaulting to 1000
[  211.948091][   T29] audit: type=1326 audit(1745175215.792:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  211.989177][   T29] audit: type=1326 audit(1745175215.792:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  212.012762][   T29] audit: type=1326 audit(1745175215.822:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  212.036310][   T29] audit: type=1326 audit(1745175215.822:9299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  212.059878][   T29] audit: type=1326 audit(1745175215.822:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  212.093092][T12821] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.103697][   T29] audit: type=1326 audit(1745175215.942:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  212.145715][   T29] audit: type=1326 audit(1745175215.972:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f80324c0a25 code=0x7ffc0000
[  212.169421][   T29] audit: type=1326 audit(1745175215.972:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  212.198449][T12821] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.235766][   T29] audit: type=1326 audit(1745175216.062:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  212.319569][T12821] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.346676][T12812] loop6: detected capacity change from 0 to 8192
[  212.357240][T12812] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  212.418241][T12821] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.448902][T12821] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.484621][T12821] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.517671][T12821] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.674144][T12883] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.836970][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3343'.
[  213.281738][T12921] loop7: detected capacity change from 0 to 164
[  213.339261][T12921] 9pnet: p9_errstr2errno: server reported unknown error ÿ
[  213.424546][T12929] loop1: detected capacity change from 0 to 2048
[  213.437239][T12931] C: renamed from team_slave_0
[  213.443525][T12931] netlink: 'syz.4.3351': attribute type 1 has an invalid length.
[  213.451537][T12931] net_ratelimit: 31108 callbacks suppressed
[  213.451547][T12931] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  213.494607][T12935] bridge: RTM_NEWNEIGH with invalid ether address
[  213.501808][T12929]  loop1: p1 < > p4
[  213.522514][T12929] loop1: p4 size 8388608 extends beyond EOD, truncated
[  213.857695][T12954] lo speed is unknown, defaulting to 1000
[  213.863873][T12954] vxcan1 speed is unknown, defaulting to 1000
[  213.879403][T12960] loop1: detected capacity change from 0 to 512
[  213.928042][T12960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  213.943184][T12960] ext4 filesystem being mounted at /678/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.043902][T12960] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.3361: corrupted inode contents
[  214.056012][T12960] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #19: comm syz.1.3361: mark_inode_dirty error
[  214.067552][T12960] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.3361: corrupted inode contents
[  214.082305][T12960] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.3361: mark_inode_dirty error
[  214.094506][T12960] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.3361: mark inode dirty (error -117)
[  214.108247][T12960] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117)
[  214.178110][T12974] SELinux: failed to load policy
[  214.187519][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  214.242822][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3368'.
[  214.569880][T12989] loop1: detected capacity change from 0 to 8192
[  214.578452][T12989] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.620976][T13002] loop4: detected capacity change from 0 to 512
[  214.638584][T13002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  214.660016][T13002] ext4 filesystem being mounted at /677/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.763744][T13016] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.3376: corrupted inode contents
[  214.782018][T13016] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #19: comm syz.4.3376: mark_inode_dirty error
[  214.799604][T13016] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.3376: corrupted inode contents
[  214.816830][T13016] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.3376: mark_inode_dirty error
[  214.869801][T13016] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.3376: mark inode dirty (error -117)
[  214.898434][T13016] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117)
[  214.956085][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  215.000071][T13037] lo speed is unknown, defaulting to 1000
[  215.006198][T13037] vxcan1 speed is unknown, defaulting to 1000
[  215.044888][T13043] syzkaller1: entered promiscuous mode
[  215.050455][T13043] syzkaller1: entered allmulticast mode
[  215.108591][T13039] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3383'.
[  215.233561][T13062] lo speed is unknown, defaulting to 1000
[  215.245753][T13062] vxcan1 speed is unknown, defaulting to 1000
[  215.424241][T13096] loop6: detected capacity change from 0 to 512
[  215.448186][T13096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  215.460816][T13096] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.547426][T13096] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.3396: corrupted inode contents
[  215.559445][T13096] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #19: comm syz.6.3396: mark_inode_dirty error
[  215.570994][T13096] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.3396: corrupted inode contents
[  215.583012][T13096] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.3396: mark_inode_dirty error
[  215.595071][T13096] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.3396: mark inode dirty (error -117)
[  215.608512][T13096] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117)
[  215.637535][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  215.975065][T13117] lo speed is unknown, defaulting to 1000
[  215.981375][T13117] vxcan1 speed is unknown, defaulting to 1000
[  216.019485][T13125] loop6: detected capacity change from 0 to 512
[  216.047466][T13125] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3414: bg 0: block 288: padding at end of block bitmap is not set
[  216.062235][T13125] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  216.071914][T13125] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3414: attempt to clear invalid blocks 1024 len 1
[  216.085441][T13125] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3414: invalid indirect mapped block 1819239214 (level 0)
[  216.100290][T13125] EXT4-fs (loop6): 1 truncate cleaned up
[  216.106380][T13125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.136704][T13121] loop1: detected capacity change from 0 to 1764
[  216.145149][T13121] veth0: entered promiscuous mode
[  216.150751][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3419'.
[  216.160581][T13121] veth0 (unregistering): left promiscuous mode
[  216.279006][T13129] lo speed is unknown, defaulting to 1000
[  216.285132][T13129] vxcan1 speed is unknown, defaulting to 1000
[  216.285132][T13133] lo speed is unknown, defaulting to 1000
[  216.325143][T13133] vxcan1 speed is unknown, defaulting to 1000
[  216.336691][T13136] syzkaller1: entered promiscuous mode
[  216.342225][T13136] syzkaller1: entered allmulticast mode
[  216.471886][T13141] lo speed is unknown, defaulting to 1000
[  216.478157][T13141] vxcan1 speed is unknown, defaulting to 1000
[  216.622159][T13149] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  216.628698][T13149] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  216.636527][T13149] vhci_hcd vhci_hcd.0: Device attached
[  216.643706][T13149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  216.652810][T13149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  216.661895][T13149] netlink: 'syz.7.3417': attribute type 10 has an invalid length.
[  216.702294][T13150] vhci_hcd: connection closed
[  216.702705][ T3529] vhci_hcd: stop threads
[  216.703758][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.707423][ T3529] vhci_hcd: release socket
[  216.725010][ T3529] vhci_hcd: disconnect device
[  216.786045][T13160] loop1: detected capacity change from 0 to 256
[  216.818863][   T29] kauditd_printk_skb: 188 callbacks suppressed
[  216.818875][   T29] audit: type=1326 audit(1745175220.662:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.4.3418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a64d1e169 code=0x0
[  216.856184][T13164] loop6: detected capacity change from 0 to 128
[  216.877937][T13165] syzkaller0: entered promiscuous mode
[  216.883444][T13165] syzkaller0: entered allmulticast mode
[  216.890458][T13167] all: renamed from lo (while UP)
[  216.931388][T13169] loop6: detected capacity change from 0 to 512
[  216.950899][T13169] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  216.958916][T13169] EXT4-fs (loop6): orphan cleanup on readonly fs
[  216.965531][T13169] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3425: invalid indirect mapped block 256 (level 2)
[  216.979258][T13169] EXT4-fs (loop6): 2 truncates cleaned up
[  216.985503][T13169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  217.010910][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.121332][T13180] lo speed is unknown, defaulting to 1000
[  217.127696][T13180] vxcan1 speed is unknown, defaulting to 1000
[  217.152851][T13184] vlan1: entered allmulticast mode
[  217.158074][T13184] bond0: entered allmulticast mode
[  217.163202][T13184] bond2: entered allmulticast mode
[  217.166949][   T29] audit: type=1326 audit(1745175221.012:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.6.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  217.169710][T13184] bridge0: port 1(vlan1) entered blocking state
[  217.193035][   T29] audit: type=1326 audit(1745175221.032:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.6.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  217.198056][T13184] bridge0: port 1(vlan1) entered disabled state
[  217.221478][   T29] audit: type=1326 audit(1745175221.032:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.6.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  217.251290][   T29] audit: type=1326 audit(1745175221.032:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.6.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  217.309090][T13194] loop7: detected capacity change from 0 to 1024
[  217.355995][T13194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.371832][T13194] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  217.389843][T13194] EXT4-fs (loop7): Remounting filesystem read-only
[  217.397426][T13194] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[  217.415456][   T29] audit: type=1326 audit(1745175221.252:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.7.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  217.440097][   T29] audit: type=1326 audit(1745175221.252:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.7.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  217.463651][   T29] audit: type=1326 audit(1745175221.252:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.7.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  217.487255][   T29] audit: type=1326 audit(1745175221.302:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.7.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  217.580865][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.630665][T13217] geneve0: entered allmulticast mode
[  217.786970][T13224] lo speed is unknown, defaulting to 1000
[  217.787682][   T29] audit: type=1326 audit(1745175221.632:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.6.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  217.819239][T13224] vxcan1 speed is unknown, defaulting to 1000
[  217.826619][T13230] loop6: detected capacity change from 0 to 2048
[  217.856508][T13233] syzkaller1: entered promiscuous mode
[  217.862001][T13233] syzkaller1: entered allmulticast mode
[  217.890044][T13242] all: renamed from lo (while UP)
[  217.899016][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3445'.
[  217.899901][T13230] EXT4-fs (loop6): failed to initialize system zone (-117)
[  217.915705][T13232] 
: (slave bond_slave_1): Releasing backup interface
[  217.929051][T13232] bond_slave_1 (unregistering): left promiscuous mode
[  217.937743][T13230] EXT4-fs (loop6): mount failed
[  217.949569][T13246] loop4: detected capacity change from 0 to 512
[  217.957176][T13246] EXT4-fs: Ignoring removed i_version option
[  217.966560][T13244] IPv4: Oversized IP packet from 127.202.26.0
[  217.991548][T13246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.017873][T13251] xt_hashlimit: size too large, truncated to 1048576
[  218.021418][T13246] ext4 filesystem being mounted at /687/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.024585][T13251] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  218.078065][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.189216][T13271] lo speed is unknown, defaulting to 1000
[  218.202945][T13271] vxcan1 speed is unknown, defaulting to 1000
[  218.220838][T13273] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  218.567945][T13295] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.577804][T13295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.618140][T13296] netlink: 'syz.1.3468': attribute type 10 has an invalid length.
[  218.625988][T13296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'.
[  218.635823][T13296] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.644188][T13296] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.652573][T13296] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.661534][T13296] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  218.672717][T13295] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.716817][T13295] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.776891][T13295] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.844308][T13295] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.859895][T13295] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.872288][T13295] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.884008][T13295] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  218.949029][T13302] lo speed is unknown, defaulting to 1000
[  218.954987][T13302] vxcan1 speed is unknown, defaulting to 1000
[  219.014464][T13308] dccp_v6_rcv: dropped packet with invalid checksum
[  219.197525][T13314] loop1: detected capacity change from 0 to 512
[  219.207183][T13314] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  219.216433][T13314] EXT4-fs (loop1): orphan cleanup on readonly fs
[  219.225252][T13314] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  219.245338][T13314] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  219.252632][T13314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3486: bg 0: block 40: padding at end of block bitmap is not set
[  219.267785][T13314] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  219.279000][T13314] EXT4-fs (loop1): 1 truncate cleaned up
[  219.285085][T13314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  219.307495][T13322] loop4: detected capacity change from 0 to 512
[  219.314056][T13322] ext4: Unknown parameter 'audit'
[  219.325284][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.345164][T13320] siw: device registration error -23
[  219.389171][T13320] loop7: detected capacity change from 0 to 8192
[  219.395721][T13324] lo speed is unknown, defaulting to 1000
[  219.406205][T13324] vxcan1 speed is unknown, defaulting to 1000
[  219.442105][T13328] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3480'.
[  219.928135][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3489'.
[  219.971737][T13357] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  219.997986][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3501'.
[  220.039784][T13366] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  220.052404][T13366] loop4: detected capacity change from 0 to 512
[  220.059077][T13366] EXT4-fs: Ignoring removed oldalloc option
[  220.065462][T13366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  220.076819][T13366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  220.084876][T13366] System zones: 1-12
[  220.093189][T13366] EXT4-fs (loop4): 1 truncate cleaned up
[  220.100286][T13366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.347576][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.386607][T13380] lo speed is unknown, defaulting to 1000
[  220.393128][T13380] vxcan1 speed is unknown, defaulting to 1000
[  220.409723][T13381] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3510'.
[  220.427573][T13382] lo: entered promiscuous mode
[  220.432435][T13382] lo: entered allmulticast mode
[  220.631074][T13392] xt_hashlimit: size too large, truncated to 1048576
[  220.637817][T13392] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  220.847030][T13408] loop7: detected capacity change from 0 to 2048
[  220.857335][T13408] EXT4-fs (loop7): failed to initialize system zone (-117)
[  220.864783][T13408] EXT4-fs (loop7): mount failed
[  221.237871][T13432] xt_hashlimit: size too large, truncated to 1048576
[  221.244768][T13432] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  221.439867][T13447] loop1: detected capacity change from 0 to 128
[  221.528295][T13454] bio_check_eod: 27 callbacks suppressed
[  221.528329][T13454] syz.1.3528: attempt to access beyond end of device
[  221.528329][T13454] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  221.562953][T13454] syz.1.3528: attempt to access beyond end of device
[  221.562953][T13454] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  221.577623][T13454] syz.1.3528: attempt to access beyond end of device
[  221.577623][T13454] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  221.626323][T13454] syz.1.3528: attempt to access beyond end of device
[  221.626323][T13454] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  221.652263][T13454] syz.1.3528: attempt to access beyond end of device
[  221.652263][T13454] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  221.693830][T13454] syz.1.3528: attempt to access beyond end of device
[  221.693830][T13454] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  221.710756][T13454] syz.1.3528: attempt to access beyond end of device
[  221.710756][T13454] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  221.724323][T13454] syz.1.3528: attempt to access beyond end of device
[  221.724323][T13454] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  221.739190][T13454] syz.1.3528: attempt to access beyond end of device
[  221.739190][T13454] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  221.753723][T13454] syz.1.3528: attempt to access beyond end of device
[  221.753723][T13454] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  222.120796][T13456] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3531'.
[  222.324241][T13476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3540'.
[  222.338940][T13479] xt_hashlimit: max too large, truncated to 1048576
[  222.431617][T13486] lo speed is unknown, defaulting to 1000
[  222.437951][T13486] vxcan1 speed is unknown, defaulting to 1000
[  222.484026][T13491] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3542'.
[  222.530855][T13491] batadv1: entered allmulticast mode
[  222.684816][T13497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.729619][T13497] syzkaller0: MTU too low for tipc bearer
[  222.735540][T13497] tipc: Disabling bearer <eth:syzkaller0>
[  222.783968][T13505] netlink: 'syz.1.3548': attribute type 1 has an invalid length.
[  222.840208][T13505] bond0: entered promiscuous mode
[  222.845263][T13505] gretap1: entered promiscuous mode
[  222.852925][   T29] kauditd_printk_skb: 83 callbacks suppressed
[  222.852935][   T29] audit: type=1326 audit(1745175226.692:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.7.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecc77d5127 code=0x7ffc0000
[  222.917276][T13505] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  222.942076][T13505] bond4: (slave macvlan0): Enslaving as a backup interface with an up link
[  222.965412][   T29] audit: type=1326 audit(1745175226.722:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.7.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecc777a359 code=0x7ffc0000
[  222.988883][   T29] audit: type=1326 audit(1745175226.722:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.7.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecc77d5127 code=0x7ffc0000
[  223.012780][   T29] audit: type=1326 audit(1745175226.722:9588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.7.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecc777a359 code=0x7ffc0000
[  223.036416][   T29] audit: type=1326 audit(1745175226.722:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.7.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  223.060039][   T29] audit: type=1326 audit(1745175226.732:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.7.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  223.083572][   T29] audit: type=1326 audit(1745175226.732:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.7.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  223.195205][   T29] audit: type=1326 audit(1745175227.022:9592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8032485127 code=0x7ffc0000
[  223.218691][   T29] audit: type=1326 audit(1745175227.022:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f803242a359 code=0x7ffc0000
[  223.242246][   T29] audit: type=1326 audit(1745175227.022:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8032485127 code=0x7ffc0000
[  223.312904][T13523] bridge0: port 3(veth0_to_bridge) entered blocking state
[  223.320265][T13523] bridge0: port 3(veth0_to_bridge) entered disabled state
[  223.348379][T13523] veth0_to_bridge: entered allmulticast mode
[  223.354872][T13523] veth0_to_bridge: entered promiscuous mode
[  223.360677][T13527] netlink: 'syz.6.3558': attribute type 1 has an invalid length.
[  223.373153][T13525] netlink: 'syz.1.3557': attribute type 3 has an invalid length.
[  223.414420][T13527] 8021q: adding VLAN 0 to HW filter on device bond2
[  223.448014][T13529] batman_adv: batadv0: Interface deactivated: dummy0
[  223.465379][T13529] batman_adv: batadv0: Removing interface: dummy0
[  223.519918][T13538] loop1: detected capacity change from 0 to 512
[  223.526867][T13538] EXT4-fs: Ignoring removed oldalloc option
[  223.529998][T13529] bond2: (slave dummy0): making interface the new active one
[  223.541753][T13529] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  223.546230][T13538] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.3564: Parent and EA inode have the same ino 15
[  223.552681][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3565'.
[  223.572556][T13538] EXT4-fs (loop1): Remounting filesystem read-only
[  223.579118][T13538] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -30)
[  223.599060][T13538] EXT4-fs (loop1): 1 orphan inode deleted
[  223.605183][T13538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.618451][T13538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.631568][T13546] loop6: detected capacity change from 0 to 512
[  223.644568][T13546] EXT4-fs (loop6): external journal device major/minor numbers have changed
[  223.653753][T13538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3564'.
[  223.695411][T13553] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  223.703813][T13546] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6
[  223.774207][T13562] netlink: 'syz.5.3572': attribute type 10 has an invalid length.
[  223.782115][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3572'.
[  223.792083][T13562] batadv0: entered promiscuous mode
[  223.799200][T13562] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  223.820801][T13562] batman_adv: batadv0: Adding interface: dummy0
[  223.827864][T13562] batman_adv: batadv0: Interface activated: dummy0
[  223.855101][T13562] batadv0: mtu less than device minimum
[  223.861089][T13562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.871604][T13562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.882190][T13562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.892862][T13562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.903409][T13562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.914035][T13562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.924556][T13562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.040671][T13571] lo speed is unknown, defaulting to 1000
[  224.048409][T13571] vxcan1 speed is unknown, defaulting to 1000
[  224.062365][T13575] loop6: detected capacity change from 0 to 512
[  224.078294][T13575] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  224.114139][T13575] EXT4-fs (loop6): 1 truncate cleaned up
[  224.127017][T13575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.187419][T13585] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.247336][T13585] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.307038][T13585] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.367128][T13585] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.427030][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.442488][T13585] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.473405][T13585] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.475964][T13594] loop4: detected capacity change from 0 to 2048
[  224.506784][T13585] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.519941][T13585] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.534691][T13594] EXT4-fs (loop4): failed to initialize system zone (-117)
[  224.543672][T13594] EXT4-fs (loop4): mount failed
[  224.666888][T13609] netlink: 'syz.4.3587': attribute type 10 has an invalid length.
[  224.674796][T13609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3587'.
[  224.689588][T13609] batadv0: entered promiscuous mode
[  224.694824][T13609] batadv0: entered allmulticast mode
[  224.702437][T13609] bridge0: port 1(batadv0) entered blocking state
[  224.708918][T13609] bridge0: port 1(batadv0) entered disabled state
[  224.716827][T13609] bridge0: port 1(batadv0) entered blocking state
[  224.723332][T13609] bridge0: port 1(batadv0) entered forwarding state
[  224.743143][T13614] batman_adv: batadv0: Adding interface: dummy0
[  224.750404][T13614] batman_adv: batadv0: Interface activated: dummy0
[  224.776862][T13609] net_ratelimit: 12 callbacks suppressed
[  224.776873][T13609] batadv0: mtu less than device minimum
[  224.788450][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.798898][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.809520][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.819956][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.830583][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.841093][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.851614][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.862053][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.872748][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  224.897339][T13621] tipc: Started in network mode
[  224.902257][T13621] tipc: Node identity eab02d180254, cluster identity 4711
[  224.909508][T13621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.920030][T13621] syzkaller0: MTU too low for tipc bearer
[  224.925852][T13621] tipc: Disabling bearer <eth:syzkaller0>
[  225.019859][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3591'.
[  225.226457][ T3510] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  225.235752][ T3510] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  225.815295][T13647] loop4: detected capacity change from 0 to 512
[  225.823131][T13647] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  225.846258][T13647] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6
[  225.903375][T13657] vlan0: entered allmulticast mode
[  225.973279][T13665] netlink: 'syz.7.3606': attribute type 10 has an invalid length.
[  225.981199][T13665] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3606'.
[  226.005611][T13665] bond4: (slave dummy0): Releasing active interface
[  226.181314][T13672] loop7: detected capacity change from 0 to 512
[  226.197209][T13672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.211442][T13672] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.273040][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.510699][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3612'.
[  226.519676][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3612'.
[  226.778199][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'.
[  226.788646][T13693] batman_adv: batadv0: Interface deactivated: team0
[  226.795273][T13693] batman_adv: batadv0: Removing interface: team0
[  226.802631][T13693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.812604][T13693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.172954][T13710] netlink: 'syz.4.3629': attribute type 1 has an invalid length.
[  227.220384][T13710] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.254884][T13710] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.286432][T13710] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  227.309225][T13710] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  227.420269][T13715] loop1: detected capacity change from 0 to 512
[  227.428629][T13704] loop6: detected capacity change from 0 to 512
[  227.440756][T13715] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002]
[  227.450592][T13715] System zones: 0-2, 18-18, 34-35
[  227.458456][T13704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.471349][T13704] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.486762][T13715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.500325][T13715] ext4 filesystem being mounted at /734/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  227.561700][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.635488][T13732] all: renamed from lo
[  227.679513][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.727481][T13741] bridge: RTM_NEWNEIGH with invalid ether address
[  228.468135][ T3384] IPVS: starting estimator thread 0...
[  228.559542][T13764] IPVS: using max 2688 ests per chain, 134400 per kthread
[  228.677464][T13769] loop7: detected capacity change from 0 to 512
[  228.792252][T13769] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002]
[  228.819209][T13775] loop6: detected capacity change from 0 to 1024
[  228.825810][T13769] System zones: 0-2, 18-18, 34-35
[  228.905442][T13769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.968598][T13775] EXT4-fs: Ignoring removed orlov option
[  228.974361][T13775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  229.045099][T13769] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  229.092758][T13775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.165420][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.209561][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.250479][T13797] loop4: detected capacity change from 0 to 512
[  229.260004][T13797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  229.273315][T13797] EXT4-fs (loop4): 1 truncate cleaned up
[  229.281439][T13797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.425628][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.519433][   T29] kauditd_printk_skb: 213 callbacks suppressed
[  229.519447][   T29] audit: type=1326 audit(1745175233.362:9808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.568231][   T29] audit: type=1326 audit(1745175233.402:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.591785][   T29] audit: type=1326 audit(1745175233.402:9810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09e2735127 code=0x7ffc0000
[  229.615262][   T29] audit: type=1326 audit(1745175233.402:9811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09e26da359 code=0x7ffc0000
[  229.638695][   T29] audit: type=1326 audit(1745175233.402:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.662226][   T29] audit: type=1326 audit(1745175233.402:9813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.685827][   T29] audit: type=1326 audit(1745175233.402:9814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.709305][   T29] audit: type=1326 audit(1745175233.402:9815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.714208][T13814] loop7: detected capacity change from 0 to 1024
[  229.732789][   T29] audit: type=1326 audit(1745175233.402:9816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.732820][   T29] audit: type=1326 audit(1745175233.402:9817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  229.756048][T13814] EXT4-fs: Ignoring removed nobh option
[  229.791660][T13814] EXT4-fs: Ignoring removed bh option
[  229.827929][T13814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.069763][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.103190][T13829] loop4: detected capacity change from 0 to 512
[  230.111558][T13829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.124499][T13829] ext4 filesystem being mounted at /731/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.185553][T13839] __nla_validate_parse: 5 callbacks suppressed
[  230.185565][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3670'.
[  230.214154][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.258287][T13841] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3672'.
[  230.304930][T13841] 
 (unregistering): left promiscuous mode
[  230.311000][T13841] bond_slave_0: left promiscuous mode
[  230.329361][T13841] bond1: (slave macvlan2): Releasing backup interface
[  230.353023][T13841] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.380672][T13841] 
 (unregistering): Released all slaves
[  230.399985][T13845] hsr0: entered promiscuous mode
[  230.449348][T13853] loop4: detected capacity change from 0 to 512
[  230.641545][T13861] netlink: 'syz.4.3679': attribute type 1 has an invalid length.
[  230.659500][T13861] 8021q: adding VLAN 0 to HW filter on device bond1
[  230.677312][T13861] batman_adv: batadv0: Interface deactivated: dummy0
[  230.692688][T13861] batman_adv: batadv0: Removing interface: dummy0
[  230.704835][T13861] bond1: (slave dummy0): making interface the new active one
[  230.713762][T13861] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  230.731337][T13866] vlan0: entered allmulticast mode
[  230.883374][T13869] lo speed is unknown, defaulting to 1000
[  230.889527][T13869] vxcan1 speed is unknown, defaulting to 1000
[  230.929027][T13870] loop1: detected capacity change from 0 to 512
[  230.937114][T13870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3680: bg 0: block 288: padding at end of block bitmap is not set
[  230.951516][T13870] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  230.960763][T13870] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3680: attempt to clear invalid blocks 1024 len 1
[  230.974241][T13870] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3680: invalid indirect mapped block 1819239214 (level 0)
[  230.988437][T13870] EXT4-fs (loop1): 1 truncate cleaned up
[  230.994425][T13870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.270561][T13878] lo speed is unknown, defaulting to 1000
[  231.276626][T13878] vxcan1 speed is unknown, defaulting to 1000
[  231.291107][T13876] bond_slave_1: entered promiscuous mode
[  231.305979][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3695'.
[  231.318478][T13876] bond_slave_1 (unregistering): left promiscuous mode
[  231.402723][T13878] siw: device registration error -23
[  231.513743][T13888] loop4: detected capacity change from 0 to 1024
[  231.513962][T13891] siw: device registration error -23
[  231.520519][T13888] EXT4-fs: Ignoring removed orlov option
[  231.531238][T13888] EXT4-fs: Ignoring removed nomblk_io_submit option
[  231.557660][T13888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.625021][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.635134][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.961645][T13913] loop4: detected capacity change from 0 to 1024
[  232.051675][T13913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.098953][T13925] loop6: detected capacity change from 0 to 512
[  232.146520][T13927] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  232.156045][T13925] ext4: Unknown parameter 'audit'
[  232.191173][T13913] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  232.238745][T13913] EXT4-fs (loop4): Remounting filesystem read-only
[  232.264021][T13913] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[  232.309908][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'.
[  232.348407][T13938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  232.387893][T13941] vlan0: entered allmulticast mode
[  232.394787][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.418261][T13945] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  232.426641][T13945] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  232.434919][T13945] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  232.443275][T13945] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  232.452727][T13945] geneve2: entered promiscuous mode
[  232.458048][T13945] geneve2: entered allmulticast mode
[  232.480544][T13943] lo speed is unknown, defaulting to 1000
[  232.502026][T13943] vxcan1 speed is unknown, defaulting to 1000
[  232.559344][T13952] siw: device registration error -23
[  232.967184][T13970] lo speed is unknown, defaulting to 1000
[  232.973260][T13970] vxcan1 speed is unknown, defaulting to 1000
[  233.012486][T13971] loop7: detected capacity change from 0 to 512
[  233.024212][T13971] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3714: bg 0: block 288: padding at end of block bitmap is not set
[  233.038725][T13971] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  233.048683][T13971] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3714: attempt to clear invalid blocks 1024 len 1
[  233.062567][T13971] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3714: invalid indirect mapped block 1819239214 (level 0)
[  233.076937][T13971] EXT4-fs (loop7): 1 truncate cleaned up
[  233.082964][T13971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.396975][T13975] loop1: detected capacity change from 0 to 1024
[  233.403978][T13975] EXT4-fs: Ignoring removed orlov option
[  233.409849][T13975] EXT4-fs: Ignoring removed nomblk_io_submit option
[  233.427250][T13975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.482528][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.500319][T13986] syzkaller0: entered promiscuous mode
[  233.505935][T13986] syzkaller0: entered allmulticast mode
[  233.627677][T13998] loop6: detected capacity change from 0 to 1024
[  233.645244][T13998] EXT4-fs: Ignoring removed nobh option
[  233.650888][T13998] EXT4-fs: Ignoring removed bh option
[  233.685067][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.707260][T13998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.731349][T13999] xt_connbytes: Forcing CT accounting to be enabled
[  233.758925][T13999] set match dimension is over the limit!
[  233.780694][T13998] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.3719: Allocating blocks 497-513 which overlap fs metadata
[  234.440873][ T5372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.968308][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  234.968325][   T29] audit: type=1400 audit(1745175238.812:9921): avc:  denied  { relabelto } for  pid=14039 comm="syz.7.3730" name="rdma.current" dev="tmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  235.002972][T14043] loop1: detected capacity change from 0 to 8192
[  235.011970][   T29] audit: type=1400 audit(1745175238.812:9922): avc:  denied  { associate } for  pid=14039 comm="syz.7.3730" name="rdma.current" dev="tmpfs" ino=2773 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":"
[  235.120761][   T29] audit: type=1400 audit(1745175238.962:9923): avc:  denied  { unlink } for  pid=6865 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  235.264328][   T29] audit: type=1326 audit(1745175239.102:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  235.287963][   T29] audit: type=1326 audit(1745175239.102:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  235.311467][   T29] audit: type=1326 audit(1745175239.102:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  235.336203][   T29] audit: type=1326 audit(1745175239.102:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e273e169 code=0x7ffc0000
[  235.361975][T14075] ref_ctr increment failed for inode: 0xae5 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005bc80
[  235.373731][T14074] uprobe: syz.7.3749:14074 failed to unregister, leaking uprobe
[  235.391240][T14065] loop6: detected capacity change from 0 to 8192
[  235.527605][T14065] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  235.535209][T14065] FAT-fs (loop6): Filesystem has been set read-only
[  235.547118][T14082] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  235.573882][   T29] audit: type=1326 audit(1745175239.412:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.7.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  235.597586][   T29] audit: type=1326 audit(1745175239.412:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.7.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  235.623016][   T29] audit: type=1326 audit(1745175239.412:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.7.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  235.982094][T14100] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.069128][T14100] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.145980][T14112] tipc: New replicast peer: 10.1.1.2
[  236.151374][T14112] tipc: Enabled bearer <udp:syz0>, priority 10
[  236.161231][T14114] selinux_netlink_send: 149 callbacks suppressed
[  236.161243][T14114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14114 comm=+}[@
[  236.179760][T14114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14114 comm=+}[@
[  236.197698][T14100] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.247475][T14100] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.268316][T14122] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  236.307145][T14100] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.319666][T14100] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.334341][T14100] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.347130][T14100] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.552179][T14146] vlan0: entered promiscuous mode
[  236.557420][T14146] bridge0: entered promiscuous mode
[  236.562751][T14146] vlan0: entered allmulticast mode
[  236.567997][T14146] bridge0: entered allmulticast mode
[  236.586021][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3777'.
[  236.595218][T14146] bond1: (slave dummy0): Releasing active interface
[  236.629024][T14146] bridge0: port 1(batadv0) entered disabled state
[  236.646974][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3777'.
[  236.657677][T14146] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.666332][T14146] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.674768][T14146] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.683313][T14146] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.717774][T14146] team0: Port device geneve1 removed
[  236.773346][T14154] lo speed is unknown, defaulting to 1000
[  236.779490][T14154] vxcan1 speed is unknown, defaulting to 1000
[  236.798297][T14150] syzkaller0: entered promiscuous mode
[  236.803810][T14150] syzkaller0: entered allmulticast mode
[  236.832037][T14156] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  236.928215][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3781'.
[  236.947529][T14168] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.017443][T14168] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.078702][T14168] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.117017][T14168] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.257559][T14168] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.293822][T14168] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.387173][T14168] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.481353][T14168] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.780776][T14182] loop1: detected capacity change from 0 to 8192
[  237.805317][T14182] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  237.925299][T14182] netlink: 'gtp': attribute type 27 has an invalid length.
[  237.969210][T14182] bond2: left promiscuous mode
[  237.974050][T14182] bond2: left allmulticast mode
[  237.978968][T14182] geneve2: left promiscuous mode
[  237.983993][T14182] geneve2: left allmulticast mode
[  237.989364][T14182] bond3: left promiscuous mode
[  237.994183][T14182] bridge5: left promiscuous mode
[  238.029034][T14182] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.037434][T14182] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.045827][T14182] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.054164][T14182] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.103239][T14200] loop7: detected capacity change from 0 to 1024
[  238.115689][T14182] vxlan0: left promiscuous mode
[  238.136540][T14200] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  238.137496][T14182] bond0: left promiscuous mode
[  238.146331][T14200] EXT4-fs (loop7): group descriptors corrupted!
[  238.151035][T14182] gretap1: left promiscuous mode
[  238.377595][T14218] lo speed is unknown, defaulting to 1000
[  238.384056][T14220] loop1: detected capacity change from 0 to 512
[  238.402617][T14218] vxcan1 speed is unknown, defaulting to 1000
[  238.527628][T14220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.545754][T14220] ext4 filesystem being mounted at /764/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.612361][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.806462][T14267] loop4: detected capacity change from 0 to 8192
[  239.964043][T14271] xt_hashlimit: size too large, truncated to 1048576
[  240.244286][   T29] kauditd_printk_skb: 374 callbacks suppressed
[  240.244299][   T29] audit: type=1326 audit(1745175244.082:10305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.277142][   T29] audit: type=1326 audit(1745175244.122:10306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.300792][   T29] audit: type=1326 audit(1745175244.122:10307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.324438][   T29] audit: type=1326 audit(1745175244.122:10308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.348002][   T29] audit: type=1326 audit(1745175244.122:10309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.371655][   T29] audit: type=1326 audit(1745175244.122:10310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.395345][   T29] audit: type=1326 audit(1745175244.122:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.418956][   T29] audit: type=1326 audit(1745175244.122:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.442588][   T29] audit: type=1326 audit(1745175244.122:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.466237][   T29] audit: type=1326 audit(1745175244.122:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fecc77de169 code=0x7ffc0000
[  240.551795][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x1
[  240.559261][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.566766][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.574279][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.581704][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.589134][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.596630][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.604106][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.611617][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.613174][T14289] netlink: 'syz.5.3826': attribute type 10 has an invalid length.
[  240.619019][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x2
[  240.619043][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.619064][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.619083][   T10] hid-generic C990:0003:007F.0006: unknown main item tag 0x0
[  240.619477][   T10] hid-generic C990:0003:007F.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  240.666362][T14289] team0: left promiscuous mode
[  240.671125][T14289] team_slave_0: left promiscuous mode
[  240.676618][T14289] team_slave_1: left promiscuous mode
[  240.682112][T14289] geneve1: left promiscuous mode
[  240.682150][T14290] loop1: detected capacity change from 0 to 512
[  240.707379][T14290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  240.715236][T14289] batman_adv: batadv0: Adding interface: team0
[  240.726053][T14289] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  240.739445][T14290] ext4 filesystem being mounted at /774/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.797872][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  240.825016][T14299] loop4: detected capacity change from 0 to 512
[  240.835144][T14298] loop1: detected capacity change from 0 to 512
[  240.868200][T14299] EXT4-fs (loop4): too many log groups per flexible block group
[  240.875914][T14299] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  240.884725][T14298] EXT4-fs (loop1): 1 orphan inode deleted
[  240.891253][T14298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.904546][ T3476] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1
[  240.916708][T14299] EXT4-fs (loop4): mount failed
[  240.922160][T14298] ext4 filesystem being mounted at /775/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.957292][T14298] bridge0: port 2(macvlan1) entered blocking state
[  240.964011][T14298] bridge0: port 2(macvlan1) entered disabled state
[  240.975604][T14298] macvlan1: entered allmulticast mode
[  240.981038][T14298] bridge0: entered allmulticast mode
[  240.997694][T14298] macvlan1: left allmulticast mode
[  241.002827][T14298] bridge0: left allmulticast mode
[  241.073666][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.169814][T14316] hub 2-0:1.0: USB hub found
[  241.175603][T14316] hub 2-0:1.0: 8 ports detected
[  241.294932][T14323] loop7: detected capacity change from 0 to 512
[  241.329353][T14323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.342287][T14323] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.368676][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.381300][T14328] netlink: 'syz.6.3837': attribute type 4 has an invalid length.
[  241.389085][T14328] netlink: 'syz.6.3837': attribute type 4 has an invalid length.
[  241.396859][T14328] netlink: 'syz.6.3837': attribute type 8 has an invalid length.
[  241.404606][T14328] netlink: 'syz.6.3837': attribute type 9 has an invalid length.
[  241.412381][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3837'.
[  241.415077][T14336] loop7: detected capacity change from 0 to 128
[  241.429658][T14336] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  241.442442][T14336] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.508697][T14341] lo speed is unknown, defaulting to 1000
[  241.514795][T14341] vxcan1 speed is unknown, defaulting to 1000
[  241.583028][T14345] lo speed is unknown, defaulting to 1000
[  241.590102][T14345] vxcan1 speed is unknown, defaulting to 1000
[  241.605347][ T6865] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  241.773691][T14352] gtp0: entered promiscuous mode
[  241.824105][T14351] netlink: 'syz.5.3843': attribute type 13 has an invalid length.
[  241.969356][T14351] 8021q: adding VLAN 0 to HW filter on device team0
[  241.976430][T14351] batman_adv: batadv0: Interface activated: team0
[  241.982905][T14351] net_ratelimit: 10 callbacks suppressed
[  241.982916][T14351] batadv0: mtu less than device minimum
[  241.994586][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.005110][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.015518][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.025933][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.036494][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.046905][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.057444][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.067924][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.078303][T14351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  242.264463][T14361] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  242.271040][T14361] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  242.278700][T14361] vhci_hcd vhci_hcd.0: Device attached
[  242.285121][T14361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  242.294175][T14361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  242.304229][T14361] netlink: 'syz.4.3849': attribute type 10 has an invalid length.
[  242.325329][T14361] batman_adv: batadv0: Adding interface: team0
[  242.331565][T14361] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  242.358473][T14362] vhci_hcd: connection closed
[  242.358568][ T3476] vhci_hcd: stop threads
[  242.365345][T14367] netlink: 'syz.5.3850': attribute type 1 has an invalid length.
[  242.367672][ T3476] vhci_hcd: release socket
[  242.379860][ T3476] vhci_hcd: disconnect device
[  242.393048][T14371] vlan0: entered promiscuous mode
[  242.398168][T14371] bridge0: entered promiscuous mode
[  242.403592][T14371] vlan0: entered allmulticast mode
[  242.408743][T14371] bridge0: entered allmulticast mode
[  242.418256][T14367] bond0: entered promiscuous mode
[  242.423321][T14367] bond2: entered promiscuous mode
[  242.428609][T14367] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  242.436777][T14367] bond3: (slave macvlan2): Enslaving as a backup interface with an up link
[  242.452790][T14372] bond2: (slave dummy0): Releasing active interface
[  242.463485][T14372] bridge0: port 2(batadv0) entered disabled state
[  242.474170][T14372] bridge_slave_0: left promiscuous mode
[  242.479925][T14372] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.491327][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.498836][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.507177][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.514571][T14372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.532958][T14377] loop1: detected capacity change from 0 to 764
[  242.540492][T14372] bond1: (slave ip6gretap1): Releasing active interface
[  242.600639][T14381] lo speed is unknown, defaulting to 1000
[  242.607379][T14381] vxcan1 speed is unknown, defaulting to 1000
[  242.619376][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3857'.
[  242.629967][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3857'.
[  242.648616][T14385] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3855'.
[  242.662841][T14385] batadv0: entered allmulticast mode
[  242.962782][T14393] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.972656][T14393] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  243.097304][T14393] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.107156][T14393] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  243.157130][T14393] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.167091][T14393] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  243.217792][T14393] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.227564][T14393] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  243.240372][T14400] tipc: Cannot configure node identity twice
[  243.295290][T14393] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.303607][T14393] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  243.315565][T14393] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.323923][T14393] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  243.335468][T14393] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.343779][T14393] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  243.354871][T14393] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.363265][T14393] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  243.402086][T14402] netlink: 'syz.4.3864': attribute type 1 has an invalid length.
[  243.458076][T14402] bond0: entered promiscuous mode
[  243.463396][T14402] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  243.476659][T14408] xt_connbytes: Forcing CT accounting to be enabled
[  243.483274][T14408] set match dimension is over the limit!
[  243.491909][T14402] bond2: (slave macvlan2): Enslaving as a backup interface with a down link
[  243.655393][T14415] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  243.679871][T14415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  243.966862][T14418] loop1: detected capacity change from 0 to 764
[  244.040480][T14420] set match dimension is over the limit!
[  244.067351][T14422] bridge0: entered allmulticast mode
[  244.086518][T14424] vlan0: entered promiscuous mode
[  244.091574][T14424] bridge0: entered promiscuous mode
[  244.096860][T14424] vlan1: entered promiscuous mode
[  244.102155][T14424] vlan0: entered allmulticast mode
[  244.107297][T14424] bridge0: entered allmulticast mode
[  244.137167][T14425] batman_adv: batadv0: Interface deactivated: team0
[  244.151356][T14425] batman_adv: batadv0: Removing interface: team0
[  244.167851][T14425] batman_adv: batadv0: Interface deactivated: dummy0
[  244.174676][T14425] batman_adv: batadv0: Removing interface: dummy0
[  244.183812][T14429] netlink: 'syz.6.3872': attribute type 10 has an invalid length.
[  244.215368][T14425] team0: Port device team_slave_0 removed
[  244.239760][T14425] team0: Port device team_slave_1 removed
[  244.246790][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.254297][T14425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.263024][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.270497][T14425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.283693][T14425] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.292142][T14425] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.300612][T14425] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.309053][T14425] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.321613][T14425] team0: Port device geneve1 removed
[  244.329984][T14425] bond0: (slave bond2): Releasing backup interface
[  244.336794][T14425] bond2: left promiscuous mode
[  244.341625][T14425] bond2: left allmulticast mode
[  244.350547][T14425] vlan1: left promiscuous mode
[  244.355486][T14425] bridge0: port 1(vlan1) entered disabled state
[  244.365329][T14425] bond3: (slave macvlan2): Releasing backup interface
[  244.373090][T14425] bond0: left promiscuous mode
[  244.403616][ T8226] vxcan1 speed is unknown, defaulting to 1000
[  244.443668][T14435] bridge0: port 1(macvlan3) entered blocking state
[  244.450372][T14435] bridge0: port 1(macvlan3) entered disabled state
[  244.457032][T14435] macvlan3: entered allmulticast mode
[  244.462908][T14435] macvlan3: left allmulticast mode
[  244.587860][T14443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.028178][T14452] syzkaller0: entered promiscuous mode
[  245.033700][T14452] syzkaller0: entered allmulticast mode
[  245.173375][T14457] lo speed is unknown, defaulting to 1000
[  245.194476][T14459] SELinux: ebitmap: truncated map
[  245.203887][T14460] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3883'.
[  245.207039][T14457] vxcan1 speed is unknown, defaulting to 1000
[  245.216589][T14460] batadv0: entered allmulticast mode
[  245.254107][T14459] SELinux: failed to load policy
[  245.882205][T14475] xt_connbytes: Forcing CT accounting to be enabled
[  245.934308][T14475] Cannot find set identified by id 0 to match
[  246.345125][   T29] kauditd_printk_skb: 248 callbacks suppressed
[  246.345158][   T29] audit: type=1326 audit(1745175250.182:10562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746dce169 code=0x7ffc0000
[  246.438452][   T29] audit: type=1326 audit(1745175250.232:10563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0746dce169 code=0x7ffc0000
[  246.462234][   T29] audit: type=1326 audit(1745175250.232:10564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746dce169 code=0x7ffc0000
[  246.485836][   T29] audit: type=1326 audit(1745175250.232:10565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746dce169 code=0x7ffc0000
[  246.758968][T14490] loop1: detected capacity change from 0 to 128
[  246.769625][   T29] audit: type=1326 audit(1745175250.612:10566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.6.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  246.811348][T14493] syzkaller0: entered promiscuous mode
[  246.816893][T14493] syzkaller0: entered allmulticast mode
[  246.836086][T14490] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  246.836765][   T29] audit: type=1326 audit(1745175250.612:10567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.6.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  246.872330][   T29] audit: type=1326 audit(1745175250.612:10568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.6.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  246.875951][T14490] ext4 filesystem being mounted at /789/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.895925][   T29] audit: type=1326 audit(1745175250.612:10569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.6.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  246.895955][   T29] audit: type=1326 audit(1745175250.612:10570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.6.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  246.953567][   T29] audit: type=1326 audit(1745175250.612:10571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.6.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  246.977952][T14486] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  247.015098][T14488] bridge0: port 1(macvlan0) entered blocking state
[  247.021784][T14488] bridge0: port 1(macvlan0) entered disabled state
[  247.029231][T14488] macvlan0: entered allmulticast mode
[  247.035277][T14488] macvlan0: left allmulticast mode
[  247.045790][T14486] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  247.102858][T14486] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  247.147021][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  247.161181][T14501] netlink: 'syz.5.3897': attribute type 4 has an invalid length.
[  247.168977][T14501] netlink: 'syz.5.3897': attribute type 4 has an invalid length.
[  247.176746][T14501] netlink: 'syz.5.3897': attribute type 8 has an invalid length.
[  247.184640][T14501] netlink: 'syz.5.3897': attribute type 9 has an invalid length.
[  247.192394][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3897'.
[  247.209231][T14486] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  247.283131][T14486] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  247.294599][T14486] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  247.306869][T14486] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  247.319235][T14486] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  247.361263][T14514] netlink: 'syz.1.3912': attribute type 13 has an invalid length.
[  247.390571][T14514] 8021q: adding VLAN 0 to HW filter on device team0
[  247.407542][T14514] net_ratelimit: 31 callbacks suppressed
[  247.407552][T14514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.633932][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x1
[  247.641411][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.648841][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.656260][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.663706][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.671181][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.947548][T14537] loop4: detected capacity change from 0 to 512
[  247.964063][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.971678][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.979095][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  247.986500][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x2
[  247.994000][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  248.001473][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  248.008960][ T3359] hid-generic C990:0003:007F.0007: unknown main item tag 0x0
[  248.080387][ T3359] hid-generic C990:0003:007F.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  248.081652][T14537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  248.123129][T14518] loop7: detected capacity change from 0 to 8192
[  248.133017][T14537] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.184617][T14518] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  248.268837][T14541] loop7: detected capacity change from 0 to 1024
[  248.278333][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  248.296634][T14541] EXT4-fs: Ignoring removed nobh option
[  248.302236][T14541] EXT4-fs: Ignoring removed bh option
[  248.347878][T14541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.420392][T14541] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3909: Allocating blocks 497-513 which overlap fs metadata
[  248.507405][T14541] EXT4-fs (loop7): pa ffff888106ccaee0: logic 1, phys. 321, len 12
[  248.515395][T14541] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 1, pa_free 2
[  248.536099][T14541] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt.
[  248.582102][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.632728][T14545] hub 2-0:1.0: USB hub found
[  248.637514][T14545] hub 2-0:1.0: 8 ports detected
[  248.672712][T14556] loop4: detected capacity change from 0 to 128
[  248.683617][T14554] lo speed is unknown, defaulting to 1000
[  248.690660][T14554] vxcan1 speed is unknown, defaulting to 1000
[  248.701186][T14556] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  248.759219][T14556] ext4 filesystem being mounted at /782/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.861195][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  248.978192][T14576] loop1: detected capacity change from 0 to 256
[  249.969939][T14591] lo speed is unknown, defaulting to 1000
[  249.993589][T14594] gtp0: entered promiscuous mode
[  250.014052][T14591] vxcan1 speed is unknown, defaulting to 1000
[  250.320372][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3930'.
[  250.389739][T14602] sch_tbf: burst 88 is lower than device veth15 mtu (1514) !
[  251.108734][T14620] loop7: detected capacity change from 0 to 128
[  251.135206][T14621] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  252.564906][   T29] kauditd_printk_skb: 84 callbacks suppressed
[  252.564918][   T29] audit: type=1326 audit(1745175256.402:10656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.663404][   T29] audit: type=1326 audit(1745175256.442:10657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.687020][   T29] audit: type=1326 audit(1745175256.442:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.710727][   T29] audit: type=1326 audit(1745175256.442:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.734271][   T29] audit: type=1326 audit(1745175256.442:10660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.757893][   T29] audit: type=1326 audit(1745175256.442:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.781567][   T29] audit: type=1326 audit(1745175256.442:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.805160][   T29] audit: type=1326 audit(1745175256.442:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.828776][   T29] audit: type=1326 audit(1745175256.492:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.852407][   T29] audit: type=1326 audit(1745175256.502:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803248e169 code=0x7ffc0000
[  252.969086][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'.
[  252.978691][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3952'.
[  253.063240][T14669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.113348][T14674] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  253.113364][T14674] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  253.113373][T14674] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  253.485363][T14689] loop1: detected capacity change from 0 to 512
[  253.492130][T14689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  253.525485][T14689] EXT4-fs (loop1): 1 truncate cleaned up
[  253.525915][T14689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.686936][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.717231][T14693] loop1: detected capacity change from 0 to 2048
[  253.717485][T14693] EXT4-fs: Ignoring removed bh option
[  253.745449][T14693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.783673][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.319109][T14704] C: renamed from team_slave_0
[  254.329750][T14704] netlink: 'syz.5.3980': attribute type 1 has an invalid length.
[  254.337593][T14704] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  254.862023][T14715] lo speed is unknown, defaulting to 1000
[  254.881301][T14715] vxcan1 speed is unknown, defaulting to 1000
[  254.951162][T14722] siw: device registration error -23
[  254.965266][T14721] lo speed is unknown, defaulting to 1000
[  254.971519][T14721] vxcan1 speed is unknown, defaulting to 1000
[  255.252804][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3978'.
[  255.261929][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'.
[  255.262068][T14732] lo speed is unknown, defaulting to 1000
[  255.293542][T14737] loop4: detected capacity change from 0 to 2048
[  255.308731][T14732] vxcan1 speed is unknown, defaulting to 1000
[  255.326407][T14737] EXT4-fs: Ignoring removed bh option
[  255.339827][T14737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.406701][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.234949][T14758] loop7: detected capacity change from 0 to 128
[  256.294511][T14758] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.309822][T14758] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.449729][T14768] loop4: detected capacity change from 0 to 2048
[  256.468576][T14768] ext4: Unknown parameter 'smackfsdef'
[  256.481719][ T6865] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  256.540783][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3994'.
[  256.565605][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3994'.
[  256.657548][T14777] lo speed is unknown, defaulting to 1000
[  256.672823][T14777] vxcan1 speed is unknown, defaulting to 1000
[  257.250392][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3999'.
[  257.261224][T14788] xt_CT: You must specify a L4 protocol and not use inversions on it
[  257.937865][T14795] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4012'.
[  257.946897][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4012'.
[  257.955856][T14795] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4012'.
[  257.965360][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4002'.
[  257.980258][T14795] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4012'.
[  257.993188][T14797] sch_tbf: burst 88 is lower than device veth13 mtu (1514) !
[  258.028518][T14801] .: renamed from bond0
[  258.041504][T14803] loop7: detected capacity change from 0 to 512
[  258.048371][T14803] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  258.061311][T14803] EXT4-fs (loop7): 1 truncate cleaned up
[  258.074454][T14803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.200228][ T6865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.280853][T14813] loop4: detected capacity change from 0 to 512
[  258.329875][T14813] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  258.482723][T14813] EXT4-fs (loop4): 1 truncate cleaned up
[  258.499785][T14813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.847783][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.901693][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'.
[  258.936219][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4008'.
[  259.055431][T14830] IPv6: NLM_F_CREATE should be specified when creating new route
[  259.080589][T14830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  259.087835][T14830] IPv6: NLM_F_CREATE should be set when creating new route
[  259.095140][T14830] IPv6: NLM_F_CREATE should be set when creating new route
[  259.143181][T14834] IPVS: Error connecting to the multicast addr
[  259.597055][T14850] IPv6: NLM_F_CREATE should be specified when creating new route
[  259.605547][T14850] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[  259.614576][   T29] kauditd_printk_skb: 87 callbacks suppressed
[  259.614587][   T29] audit: type=1400 audit(1745175263.452:10753): avc:  denied  { relabelto } for  pid=14848 comm="syz.1.4022" name="818" dev="tmpfs" ino=4369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  259.647206][   T29] audit: type=1400 audit(1745175263.452:10754): avc:  denied  { associate } for  pid=14848 comm="syz.1.4022" name="818" dev="tmpfs" ino=4369 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0"
[  259.687786][   T29] audit: type=1400 audit(1745175263.492:10755): avc:  denied  { write } for  pid=3313 comm="syz-executor" name="818" dev="tmpfs" ino=4369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  259.713653][   T29] audit: type=1400 audit(1745175263.492:10756): avc:  denied  { remove_name } for  pid=3313 comm="syz-executor" name="memory.events.local" dev="tmpfs" ino=4374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  259.741296][   T29] audit: type=1400 audit(1745175263.492:10757): avc:  denied  { rmdir } for  pid=3313 comm="syz-executor" name="818" dev="tmpfs" ino=4369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  259.782201][T14854] lo speed is unknown, defaulting to 1000
[  259.790593][T14854] vxcan1 speed is unknown, defaulting to 1000
[  259.796721][T14858] lo speed is unknown, defaulting to 1000
[  259.828262][T14858] vxcan1 speed is unknown, defaulting to 1000
[  259.834421][   T29] audit: type=1400 audit(1745175263.672:10758): avc:  denied  { ioctl } for  pid=14861 comm="syz.4.4027" path="socket:[45721]" dev="sockfs" ino=45721 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  259.838720][T14862] loop4: detected capacity change from 0 to 512
[  259.880542][T14862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  259.898295][T14866] xt_policy: too many policy elements
[  259.925499][T14862] EXT4-fs (loop4): 1 truncate cleaned up
[  259.931687][T14862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.958817][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.007665][    C0] ==================================================================
[  260.015754][    C0] BUG: KCSAN: data-race in do_sys_poll / pollwake
[  260.022168][    C0] 
[  260.024473][    C0] read to 0xffffc90002733bd0 of 4 bytes by task 14871 on cpu 1:
[  260.032083][    C0]  do_sys_poll+0x9f1/0xc80
[  260.036482][    C0]  __se_sys_ppoll+0x1b5/0x1f0
[  260.041144][    C0]  __x64_sys_ppoll+0x67/0x80
[  260.045717][    C0]  x64_sys_call+0x2c89/0x2e10
[  260.050398][    C0]  do_syscall_64+0xc9/0x1a0
[  260.054892][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.060771][    C0] 
[  260.063084][    C0] write to 0xffffc90002733bd0 of 4 bytes by interrupt on cpu 0:
[  260.070699][    C0]  pollwake+0xc1/0x110
[  260.074750][    C0]  __wake_up+0x65/0xb0
[  260.078810][    C0]  bpf_ringbuf_notify+0x22/0x30
[  260.083667][    C0]  irq_work_run+0xe1/0x2d0
[  260.088081][    C0]  __sysvec_irq_work+0x23/0x1a0
[  260.092924][    C0]  sysvec_irq_work+0x66/0x80
[  260.097506][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  260.102427][    C0]  default_send_IPI_self+0x38/0x80
[  260.107529][    C0]  arch_irq_work_raise+0x48/0x50
[  260.112460][    C0]  __irq_work_queue_local+0x82/0x1d0
[  260.117734][    C0]  irq_work_queue+0x85/0x120
[  260.122310][    C0]  bpf_ringbuf_discard+0xcd/0xf0
[  260.127232][    C0]  bpf_prog_fe0ed97373b08409+0x47/0x4b
[  260.132678][    C0]  bpf_trace_run3+0x10e/0x1d0
[  260.137336][    C0]  __traceiter_kmem_cache_free+0x33/0x50
[  260.142958][    C0]  kmem_cache_free+0x243/0x2e0
[  260.147711][    C0]  __d_free+0x2f/0x40
[  260.151682][    C0]  rcu_core+0x5a6/0xc20
[  260.155825][    C0]  rcu_core_si+0xd/0x20
[  260.159961][    C0]  handle_softirqs+0xbf/0x280
[  260.164618][    C0]  run_ksoftirqd+0x1c/0x30
[  260.169019][    C0]  smpboot_thread_fn+0x345/0x560
[  260.173967][    C0]  kthread+0x4b7/0x540
[  260.178024][    C0]  ret_from_fork+0x4b/0x60
[  260.182434][    C0]  ret_from_fork_asm+0x1a/0x30
[  260.187185][    C0] 
[  260.189492][    C0] value changed: 0x00000001 -> 0x00000000
[  260.195186][    C0] 
[  260.197493][    C0] Reported by Kernel Concurrency Sanitizer on:
[  260.203643][    C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) 
[  260.215957][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  260.226031][    C0] ==================================================================