last executing test programs:

2m24.650991308s ago: executing program 32 (id=437):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcd204af853963241, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)

2m23.357619652s ago: executing program 33 (id=459):
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000)

2m10.750771763s ago: executing program 0 (id=782):
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

2m10.648780482s ago: executing program 0 (id=794):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)

2m10.625642733s ago: executing program 0 (id=785):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r4], 0x20}}, 0x0)

2m10.409880531s ago: executing program 0 (id=790):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0)

2m10.390905652s ago: executing program 0 (id=791):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f})
r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a40)=""/4090, 0xa74}], 0x1)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

2m10.333634897s ago: executing program 0 (id=792):
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x4c)
getcwd(&(0x7f0000000140)=""/178, 0xb2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200)

2m10.329785437s ago: executing program 34 (id=792):
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x4c)
getcwd(&(0x7f0000000140)=""/178, 0xb2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200)

2m9.060288459s ago: executing program 1 (id=805):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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")
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

2m8.728445395s ago: executing program 1 (id=800):
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x401800, 0x4b)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

2m8.479888296s ago: executing program 1 (id=809):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)

2m8.431281449s ago: executing program 1 (id=811):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0)

2m8.401089002s ago: executing program 1 (id=813):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
process_mrelease(0xffffffffffffffff, 0x0)

2m8.345958366s ago: executing program 1 (id=815):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = inotify_init1(0x800)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000140))

2m8.325869688s ago: executing program 35 (id=815):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = inotify_init1(0x800)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000140))

1m43.315341644s ago: executing program 5 (id=1532):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)

1m43.248863909s ago: executing program 5 (id=1535):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
ptrace(0x11, r0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

1m42.376198969s ago: executing program 5 (id=1545):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

1m42.323699073s ago: executing program 5 (id=1547):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

1m42.323372333s ago: executing program 5 (id=1548):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m42.161410736s ago: executing program 5 (id=1563):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
execve(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

1m42.161239226s ago: executing program 36 (id=1563):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
execve(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

31.710467857s ago: executing program 9 (id=3641):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

31.593784048s ago: executing program 9 (id=3644):
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56d71, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x1, 0x8, 0xf1d5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa1d}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x48, 0xff}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)

31.45863301s ago: executing program 9 (id=3649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r4 = socket(0x2c, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)

31.382340276s ago: executing program 9 (id=3650):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=")
syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(0x0, 0x64842, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)

30.510877135s ago: executing program 9 (id=3666):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r4=>0x0})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x2f, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a545aa3ed6bab3"}})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xc, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

30.133668754s ago: executing program 9 (id=3669):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

30.093342237s ago: executing program 37 (id=3669):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

12.33619404s ago: executing program 2 (id=4070):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = timerfd_create(0x0, 0x0)
readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)

11.476354129s ago: executing program 2 (id=4097):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
waitid(0x3000000000000000, r2, 0x0, 0x8, 0x0)
waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

10.544917204s ago: executing program 2 (id=4118):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

10.262996717s ago: executing program 2 (id=4124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

10.177530634s ago: executing program 2 (id=4126):
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
tkill(r0, 0x28)
ioperm(0x284, 0x7f, 0xe3)
rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)

9.711639031s ago: executing program 2 (id=4135):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
mkdir(0x0, 0x16)
open(0x0, 0x48400, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'erspan0\x00', 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0)

9.71101263s ago: executing program 38 (id=4135):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
mkdir(0x0, 0x16)
open(0x0, 0x48400, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'erspan0\x00', 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0)

2.188544055s ago: executing program 4 (id=4308):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840)="33cb8840fad7d3dd6423ab2b0100f3686bd4d9c2a4c109954bce250139986f0ba385f6a3bb2160bf07ac647c60a60e0068d8ade0517bf62c70889c0df3c3492f29906574ffd35aaca52522560d8f3a0b5bcf1eef3a851bf8de5c6fba1612b89a44c22fe67ed5305a7e3113f2b33b4e51c30710d0cc53649b5e0acd51e6fb58738aaef28515e0e566d439c68c31648372e7eba9f21595e0aa4ed3cf3103eda9dac892b0f83688fe8e5a048a749402312f78a1c501eb3340650d9a07a67a62f4f5b84f7f9f6c066567507cd0db37490ff06446ed46e26cffab84522204cfad1f0f3ca41ea66f336df7c4288f0599b0c22f32af25dd0ea1d1b97d35130b022f756e64c1567fc22a7d99465588fbf9409d84a1e63f55824f86caee379f8853ed9de8876349fc7ee0579e29f7b019849bc96a1c035c411183b9600ba8434db9e1acc254ea6004e35a646f4679d80cd15e8a1d040dd96e50b634f2ad3493be53efd675de93fca19aa661333ac7e4e0d295fe22f7d7688cae1a72202ba0bf44d8e98176661794889b2b6cdd2102b12c02d47bad61319076b8b56b48e6eba7f6dd5441c69109a82b505e82bec7c9bf395b1ca97288f3c951ca2c1ce282b2", 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000400000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d77d551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba05c001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5b0384222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09b15c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d5264cb454df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c56f273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56070049d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc201cd07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c49fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86ecb838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65af167f8f13cd0fdbca9c645989c7be25679a34ba2850fe18990087360185f89c7911765497d0f919aeddefde84c13174b679a2e6ae991b6658d204f743b89eb5d580f6ac5a7f255cb8205a32b2bf38d144a6bdd3c72d403bfa7b103b418a540b1329b2b5d8fef2fc8c6634aeecb5614495b450a8fd510f06416fb0cfe99e4"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9fffe316844268cb89e14f086dd47e0ffff26123a03631177fbac141416e000030a440a9f03fc80000000000000000000000000002e01070b038da188fe25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x2c)

2.109807841s ago: executing program 4 (id=4309):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)

2.106798171s ago: executing program 4 (id=4312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

2.045502016s ago: executing program 4 (id=4313):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000040)={[{@errors_continue}, {}, {@orlov}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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")
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd4000bcc2542ded71038259ca17a8a414ef3d000000000000000000000000000000001000", "f28359738e229a4c66810000000000d300e6d6f0ffff1b000500", [0x204]})
creat(&(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0)

1.911991937s ago: executing program 4 (id=4320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

1.576910853s ago: executing program 7 (id=4332):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000000000", @ANYBLOB], 0x50)

1.535321797s ago: executing program 4 (id=4334):
io_setup(0x8f0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = open(0x0, 0x14d142, 0x0)
sendfile(r2, r2, 0x0, 0x800000009)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3)

1.534191187s ago: executing program 6 (id=4335):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x10)
sync()

1.49845458s ago: executing program 39 (id=4334):
io_setup(0x8f0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = open(0x0, 0x14d142, 0x0)
sendfile(r2, r2, 0x0, 0x800000009)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3)

1.407974507s ago: executing program 7 (id=4338):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}})

1.37030778s ago: executing program 6 (id=4340):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r0}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
ftruncate(r4, 0xee72)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

1.327671564s ago: executing program 7 (id=4342):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x40000000}, 0x18)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/75, 0x4b}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)

1.327170664s ago: executing program 6 (id=4343):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x8, 0x2, 0x9, 0x0, 0x2, 0x8060, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x9, 0x401, 0x30f9, 0x3, 0x5, 0x68, 0xb83, 0x0, 0xd, 0x0, 0x8000000000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.12687899s ago: executing program 7 (id=4346):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

1.028861778s ago: executing program 7 (id=4357):
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r0 = gettid()
ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f0000000400)={&(0x7f0000000680)="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", 0xff})
r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = timerfd_create(0x0, 0x0)
readv(r2, &(0x7f0000000380)=[{&(0x7f0000000d00)=""/161, 0xa1}], 0x1)

885.19175ms ago: executing program 3 (id=4353):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000006c0)={0xf6c447fee59251f4})
close_range(r2, r3, 0x0)

850.654202ms ago: executing program 3 (id=4355):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x7, 0x4)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="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", 0xfc}, {&(0x7f00000001c0)="7dc56831bc9a3cfbdd90576d74f54a7f37e2eaf3b3c441d367286039281aefcbf3f1cfe908e4abcdb59959c969811d7ba1", 0x31}, {&(0x7f0000000300)="acee4dd4e1204dfdd6ea6458e04cd660e2e15c8932b3873c69dfa7cedf434d986af9349add", 0x25}, {&(0x7f0000000500)="1627d3f3efcb54d0651205ce06a4", 0xe}], 0x4}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="68d74336cc293842abb9cb4ea587fc3ced207a5ba4b920fe64eb1892ca62235b67", 0x21}], 0x1, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)='Q', 0x1}], 0x1, &(0x7f0000000500)=ANY=[], 0x12b8}}], 0x3, 0x40)

797.935536ms ago: executing program 3 (id=4358):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

797.392456ms ago: executing program 8 (id=4359):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
creat(0x0, 0x48)
r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r2)

745.58428ms ago: executing program 3 (id=4360):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000007565000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

738.297591ms ago: executing program 8 (id=4369):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18)
r4 = fsmount(r1, 0x0, 0x0)
mknodat$loop(r4, &(0x7f0000000100)='./file0\x00', 0xc000, 0x0)

494.50134ms ago: executing program 6 (id=4361):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000000000", @ANYBLOB], 0x50)

490.244471ms ago: executing program 8 (id=4371):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0xfffffffe}, 0x94)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x200ed, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4c58, 0x5, 0x0, 0x4, 0x87, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xfb)

476.118392ms ago: executing program 3 (id=4372):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

396.711559ms ago: executing program 8 (id=4362):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

396.470498ms ago: executing program 3 (id=4363):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)

325.947484ms ago: executing program 6 (id=4364):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000000800034000000001"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000ffffffff"])

284.466117ms ago: executing program 8 (id=4365):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x0, 0xfffd}, 0x8, 0xfffffffe, 0x10, 0x0, 0x6, 0x6, 0x0})

217.391953ms ago: executing program 8 (id=4366):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
setitimer(0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
pidfd_send_signal(0xffffffffffffffff, 0x12, &(0x7f0000000140)={0x12, 0x10001, 0x804}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

58.328775ms ago: executing program 7 (id=4367):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)

0s ago: executing program 6 (id=4368):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000080)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
ioctl$TCSETSW2(r2, 0x5453, 0x0)

kernel console output (not intermixed with test programs):

ull),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2727,pid=11521,uid=0
[  132.683882][T11521] Memory cgroup out of memory: Killed process 11521 (syz.9.2727) total-vm:95808kB, anon-rss:944kB, file-rss:22180kB, shmem-rss:40kB, UID:0 pgtables:136kB oom_score_adj:1000
[  132.710616][T11600] 9pnet: p9_errstr2errno: server reported unknown error 
[  132.895025][T11625] bridge: RTM_NEWNEIGH with invalid ether address
[  132.944263][T11634] wg2: left promiscuous mode
[  132.948948][T11634] wg2: left allmulticast mode
[  132.969386][T11634] wg2: entered promiscuous mode
[  132.974423][T11634] wg2: entered allmulticast mode
[  132.992445][T11639] netlink: 'syz.6.2762': attribute type 1 has an invalid length.
[  133.039826][T11639] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.053981][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2762'.
[  133.086249][T11683] bond2 (unregistering): Released all slaves
[  133.450351][T11757] 8021q: adding VLAN 0 to HW filter on device team0
[  133.458205][T11757] tipc: Resetting bearer <eth:team0>
[  133.465604][T11757] tipc: Resetting bearer <eth:team0>
[  133.493650][T11757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.609810][T11782] veth0_vlan: entered allmulticast mode
[  133.626978][T11782] veth0_vlan: left promiscuous mode
[  133.632391][T11782] veth0_vlan: entered promiscuous mode
[  133.815175][T11809] wg2: entered promiscuous mode
[  133.820104][T11809] wg2: entered allmulticast mode
[  134.170322][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2820'.
[  134.797936][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2834'.
[  134.944685][T11918] loop9: detected capacity change from 0 to 2368
[  134.951323][T11918] iso9660: Bad value for 'check'
[  134.985771][T11925] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2844'.
[  135.008722][T11927] ÿÿÿÿÿÿ: renamed from vlan1
[  135.054682][T11943] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  135.081374][T11948] openvswitch: netlink: Message has 6 unknown bytes.
[  135.100348][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'.
[  135.212674][T11967] veth0_vlan: entered allmulticast mode
[  135.227518][T11967] ÿÿÿÿÿÿ: renamed from vlan1
[  135.305587][T11974] ÿÿÿÿÿÿ: renamed from vlan1
[  135.336358][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2863'.
[  135.411052][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2869'.
[  135.593228][T12018] bond2: entered promiscuous mode
[  135.598365][T12018] bond2: entered allmulticast mode
[  135.604503][T12018] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.613975][T12018] bond2 (unregistering): Released all slaves
[  135.641344][T12058] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.651131][T12058] 8021q: adding VLAN 0 to HW filter on device team0
[  135.673302][T12058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.907135][T12111] veth0_to_team: entered promiscuous mode
[  136.220272][T12128] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2889'.
[  136.249806][T12130] 0ªî{X¹¦: left allmulticast mode
[  136.267448][T12130] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  136.454438][   T29] kauditd_printk_skb: 102 callbacks suppressed
[  136.454452][   T29] audit: type=1326 audit(1756050574.292:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.462322][T12147] lo speed is unknown, defaulting to 1000
[  136.484959][   T29] audit: type=1326 audit(1756050574.292:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.514267][   T29] audit: type=1326 audit(1756050574.292:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.537841][   T29] audit: type=1326 audit(1756050574.292:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.561951][   T29] audit: type=1326 audit(1756050574.292:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.586050][   T29] audit: type=1326 audit(1756050574.292:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.610219][   T29] audit: type=1326 audit(1756050574.292:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.633802][   T29] audit: type=1326 audit(1756050574.292:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.658274][   T29] audit: type=1326 audit(1756050574.292:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.682688][   T29] audit: type=1326 audit(1756050574.292:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.9.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f31d51eebe9 code=0x7ffc0000
[  136.827555][T12183] loop7: detected capacity change from 0 to 512
[  136.864865][T12183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  136.922106][T12183] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.982887][T12185] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.2901'.
[  137.004690][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  137.015171][T12185] netlink: zone id is out of range
[  137.020302][T12185] netlink: set zone limit has 4 unknown bytes
[  137.030037][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2905'.
[  137.204468][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'.
[  137.319348][T12249] batman_adv: batadv0: Adding interface: dummy0
[  137.326401][T12249] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.352593][T12249] batman_adv: batadv0: Interface activated: dummy0
[  137.360981][T12249] batadv0: mtu less than device minimum
[  137.367106][T12249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.377854][T12249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.388564][T12249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.486916][T12268] netlink: 'syz.8.2935': attribute type 1 has an invalid length.
[  137.522658][T12268] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.540601][T12307] bond2 (unregistering): Released all slaves
[  137.617406][T12342] loop7: detected capacity change from 0 to 512
[  137.637363][T12342] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  137.658538][T12342] EXT4-fs (loop7): 1 truncate cleaned up
[  137.683659][T12342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.744839][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.797944][T12369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12369 comm=syz.3.2942
[  137.814239][T12371] netlink: 'syz.7.2945': attribute type 7 has an invalid length.
[  137.855615][T12377] syzkaller0: entered allmulticast mode
[  137.867687][T12377] syzkaller0 (unregistering): left allmulticast mode
[  137.941306][T12389] lo speed is unknown, defaulting to 1000
[  138.054862][T12419] lo speed is unknown, defaulting to 1000
[  138.187248][T12467] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  138.428616][T12479] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  138.440250][T12481] bond0: (slave dummy0): Releasing backup interface
[  138.456080][T12481] bridge_slave_0: left allmulticast mode
[  138.461845][T12481] bridge_slave_0: left promiscuous mode
[  138.467723][T12481] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.480851][T12481] bridge_slave_1: left allmulticast mode
[  138.486565][T12481] bridge_slave_1: left promiscuous mode
[  138.492336][T12481] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.504098][T12481] bond0: (slave bond_slave_0): Releasing backup interface
[  138.515663][T12481] bond0: (slave bond_slave_1): Releasing backup interface
[  138.524848][T12481] team0: Port device team_slave_0 removed
[  138.531352][T12481] team0: Port device team_slave_1 removed
[  138.537455][T12481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.545060][T12481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.557474][T12481] bond1: (slave bond2): Releasing backup interface
[  138.574896][T12481] bond4: (slave batadv1): Releasing active interface
[  138.581739][T12481] bond4: (slave batadv1): the permanent HWaddr of slave - d2:29:74:f0:d2:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  138.601336][T12481] bond4: (slave batadv2): making interface the new active one
[  138.614444][T12481] bond4: (slave batadv2): Releasing active interface
[  138.640585][T12483] bond2: entered promiscuous mode
[  138.646551][T12483] bond2: entered allmulticast mode
[  138.659613][T12483] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.680493][T12483] bond2 (unregistering): Released all slaves
[  138.716636][T12554] netlink: 'syz.7.2967': attribute type 1 has an invalid length.
[  138.736629][T12554] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.769242][T12554] bond6 (unregistering): Released all slaves
[  138.853772][T12629] loop9: detected capacity change from 0 to 2048
[  138.882592][T12629]  loop9: p1 < > p4
[  138.886994][T12629] loop9: p4 size 8388608 extends beyond EOD, truncated
[  139.031705][T12661] lo speed is unknown, defaulting to 1000
[  139.210574][T12705] loop9: detected capacity change from 0 to 512
[  139.249950][T12705] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  139.285567][T12705] EXT4-fs (loop9): 1 truncate cleaned up
[  139.301806][T12705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.325654][T12711] lo speed is unknown, defaulting to 1000
[  139.357677][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.559572][T12778] macvtap0: refused to change device tx_queue_len
[  139.653158][T12790] lo speed is unknown, defaulting to 1000
[  139.689629][T12812] loop9: detected capacity change from 0 to 512
[  139.713018][T12812] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.2996: inode #15: comm syz.9.2996: iget: illegal inode #
[  139.736251][T12812] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2996: couldn't read orphan inode 15 (err -117)
[  139.765594][T12812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.805972][T12812] EXT4-fs (loop9): shut down requested (2)
[  139.821202][T12812] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=12
[  139.844120][T12812] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=12
[  139.883095][T12841] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.900046][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.003146][T12841] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.065065][T12841] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.097915][T12879] bond0: (slave dummy0): Releasing backup interface
[  140.108742][T12841] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.155901][T12894] bond0: (slave bond_slave_0): Releasing backup interface
[  140.166664][T12894] bond0: (slave bond_slave_1): Releasing backup interface
[  140.180712][T12894] team0: Port device team_slave_0 removed
[  140.189319][T12894] team0: Port device team_slave_1 removed
[  140.231827][ T3593] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.263455][ T3593] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.277308][ T3593] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.293823][ T3593] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.527781][T12956] __nla_validate_parse: 3 callbacks suppressed
[  140.527799][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3010'.
[  140.547385][T12956] ip6gre1: entered allmulticast mode
[  140.711243][T12972] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.3022'.
[  140.716539][T12960] netlink: 4104 bytes leftover after parsing attributes in process `syz.7.3011'.
[  140.721155][T12972] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3022'.
[  140.730074][T12960] net_ratelimit: 16 callbacks suppressed
[  140.730088][T12960] netlink: zone id is out of range
[  140.749514][T12960] netlink: set zone limit has 4 unknown bytes
[  140.751787][T12975] lo speed is unknown, defaulting to 1000
[  140.860695][T13004] loop9: detected capacity change from 0 to 1024
[  140.879073][T13004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.900805][T13008] tipc: Started in network mode
[  140.905763][T13008] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  140.914733][T13008] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  140.926900][T13011] lo speed is unknown, defaulting to 1000
[  140.953467][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.017048][T13043] loop9: detected capacity change from 0 to 1024
[  141.034805][T13043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.047423][T13043] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.056681][T13064] 9pnet: p9_errstr2errno: server reported unknown error 
[  141.109948][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.150456][T13075] syzkaller0: entered allmulticast mode
[  141.158657][T13075] syzkaller0 (unregistering): left allmulticast mode
[  141.233169][T13085] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  141.543821][T13124] netlink: 'syz.8.3047': attribute type 13 has an invalid length.
[  141.573455][   T29] kauditd_printk_skb: 272 callbacks suppressed
[  141.573523][   T29] audit: type=1326 audit(1756050579.422:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13127 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  141.606956][   T29] audit: type=1326 audit(1756050579.422:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13127 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1856ae0b3a code=0x7ffc0000
[  141.631331][   T29] audit: type=1326 audit(1756050579.422:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13127 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1856add550 code=0x7ffc0000
[  141.655244][   T29] audit: type=1326 audit(1756050579.422:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13127 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  141.664052][T13133] syzkaller0: entered allmulticast mode
[  141.679511][   T29] audit: type=1326 audit(1756050579.422:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13127 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  141.714002][T13133] syzkaller0 (unregistering): left allmulticast mode
[  141.735352][T13144] loop7: detected capacity change from 0 to 1024
[  141.742921][T13144] EXT4-fs: Ignoring removed orlov option
[  141.750374][T13144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.817247][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3053'.
[  141.827945][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3053'.
[  141.988943][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.011356][T13159] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  142.344682][T13189] 9pnet: p9_errstr2errno: server reported unknown error 
[  142.437374][   T29] audit: type=1326 audit(1756050580.282:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.8.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  142.461547][   T29] audit: type=1326 audit(1756050580.282:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.8.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  142.485867][   T29] audit: type=1326 audit(1756050580.282:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.8.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  142.509440][   T29] audit: type=1326 audit(1756050580.282:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  142.598039][   T29] audit: type=1326 audit(1756050580.382:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  142.837317][T13245] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3074'.
[  143.041289][T13275] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3079'.
[  143.273956][T13321] lo speed is unknown, defaulting to 1000
[  143.369391][T13321] loop7: detected capacity change from 0 to 8192
[  143.382754][T13321] msdos: Unknown parameter 'A'
[  143.493667][T13384] loop7: detected capacity change from 0 to 1024
[  143.513479][T13384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.535267][T13384] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.683778][ T3609] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set
[  143.698632][ T3609] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1728 with max blocks 64 with error 117
[  143.711383][ T3609] EXT4-fs (loop7): This should not happen!! Data will be lost
[  143.711383][ T3609] 
[  143.741808][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.771169][T13433] netlink: 'syz.3.3103': attribute type 12 has an invalid length.
[  143.971616][T13452] netlink: 'syz.3.3113': attribute type 1 has an invalid length.
[  144.002799][T13452] bond2: entered promiscuous mode
[  144.008416][T13452] 8021q: adding VLAN 0 to HW filter on device bond2
[  144.023239][T13452] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3113'.
[  144.033436][T13454] lo speed is unknown, defaulting to 1000
[  144.039034][T13452] batadv3: entered promiscuous mode
[  144.045147][T13452] batadv3: entered allmulticast mode
[  144.051616][T13452] 8021q: adding VLAN 0 to HW filter on device batadv3
[  144.060024][T13452] bond2: (slave batadv3): making interface the new active one
[  144.068633][T13452] bond2: (slave batadv3): Enslaving as an active interface with an up link
[  144.196430][T13535] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  144.275330][T13539] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.3121'.
[  145.119228][T13583] bridge: RTM_NEWNEIGH with invalid ether address
[  145.154069][T13604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13604 comm=syz.3.3142
[  145.350524][T13657] lo speed is unknown, defaulting to 1000
[  145.419991][T13682] vlan0: entered allmulticast mode
[  146.137452][T13746] loop7: detected capacity change from 0 to 4096
[  146.158231][T13746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.175433][T13756] __nla_validate_parse: 7 callbacks suppressed
[  146.175447][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3178'.
[  146.257320][T13765] EXT4-fs (loop7): shut down requested (0)
[  146.350829][T13770] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.400465][T13772] ------------[ cut here ]------------
[  146.406008][T13772] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0)(1)
[  146.422938][T13772] WARNING: CPU: 1 PID: 13772 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680
[  146.433355][T13772] Modules linked in:
[  146.437313][T13772] CPU: 1 UID: 0 PID: 13772 Comm: syz.3.3181 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  146.448752][T13772] Tainted: [W]=WARN
[  146.452585][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  146.462767][T13772] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[  146.469283][T13772] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  146.488937][T13772] RSP: 0018:ffffc9000a653440 EFLAGS: 00010292
[  146.495131][T13772] RAX: 11902b65f69a6100 RBX: ffff88810ed4d0b8 RCX: 0000000000080000
[  146.503167][T13772] RDX: ffffc90003dc7000 RSI: 00000000000092db RDI: 00000000000092dc
[  146.511137][T13772] RBP: 0000000000000010 R08: 0001c9000a65327f R09: 0000000000000000
[  146.519157][T13772] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810ed4d078
[  146.527595][T13772] R13: ffff888139d10000 R14: ffff888139d10000 R15: ffff88810ed4d0b0
[  146.535599][T13772] FS:  00007f185553f6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000
[  146.544590][T13772] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.551174][T13772] CR2: 00007f185553ef98 CR3: 000000012917a000 CR4: 00000000003506f0
[  146.559396][T13772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  146.567391][T13772] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  146.575425][T13772] Call Trace:
[  146.578700][T13772]  <TASK>
[  146.581634][T13772]  reg_set_min_max+0x1eb/0x260
[  146.586500][T13772]  check_cond_jmp_op+0x1080/0x16e0
[  146.591674][T13772]  do_check+0x332a/0x7a10
[  146.596067][T13772]  do_check_common+0xc3a/0x12a0
[  146.600995][T13772]  bpf_check+0x942b/0xd9e0
[  146.605610][T13772]  ? __rcu_read_unlock+0x4f/0x70
[  146.610643][T13772]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  146.616825][T13772]  ? alloc_pages_bulk_noprof+0x4b8/0x540
[  146.622771][T13772]  ? __vmap_pages_range_noflush+0xbb3/0xbd0
[  146.628671][T13772]  ? pcpu_block_update+0x232/0x3b0
[  146.633839][T13772]  ? _find_next_zero_bit+0x64/0xa0
[  146.639058][T13772]  ? pcpu_block_refresh_hint+0x157/0x170
[  146.644797][T13772]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  146.650878][T13772]  ? css_rstat_updated+0xb7/0x240
[  146.656019][T13772]  ? __rcu_read_unlock+0x4f/0x70
[  146.660964][T13772]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[  146.666988][T13772]  ? should_fail_ex+0x30/0x280
[  146.671775][T13772]  ? selinux_bpf_prog_load+0x36/0xf0
[  146.677098][T13772]  ? should_failslab+0x8c/0xb0
[  146.681993][T13772]  ? __kmalloc_cache_noprof+0x189/0x320
[  146.687598][T13772]  ? selinux_bpf_prog_load+0xbf/0xf0
[  146.692927][T13772]  ? security_bpf_prog_load+0x2c/0xa0
[  146.698363][T13772]  bpf_prog_load+0xedd/0x1070
[  146.703119][T13772]  ? security_bpf+0x2b/0x90
[  146.707746][T13772]  __sys_bpf+0x462/0x7b0
[  146.712035][T13772]  __x64_sys_bpf+0x41/0x50
[  146.716591][T13772]  x64_sys_call+0x2aea/0x2ff0
[  146.721276][T13772]  do_syscall_64+0xd2/0x200
[  146.725836][T13772]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  146.731991][T13772]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  146.737776][T13772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.743795][T13772] RIP: 0033:0x7f1856adebe9
[  146.748301][T13772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.768062][T13772] RSP: 002b:00007f185553f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  146.776528][T13772] RAX: ffffffffffffffda RBX: 00007f1856d05fa0 RCX: 00007f1856adebe9
[  146.784573][T13772] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  146.792686][T13772] RBP: 00007f1856b61e19 R08: 0000000000000000 R09: 0000000000000000
[  146.800782][T13772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.809126][T13772] R13: 00007f1856d06038 R14: 00007f1856d05fa0 R15: 00007ffc70d84b38
[  146.817238][T13772]  </TASK>
[  146.820266][T13772] ---[ end trace 0000000000000000 ]---
[  146.830909][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.908838][T13787] bond_slave_1: entered promiscuous mode
[  146.923366][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3187'.
[  146.940994][T13787] bond_slave_1 (unregistering): left promiscuous mode
[  146.973597][   T29] kauditd_printk_skb: 140 callbacks suppressed
[  146.973676][   T29] audit: type=1326 audit(1756050584.822:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.004143][   T29] audit: type=1326 audit(1756050584.822:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.031622][   T29] audit: type=1326 audit(1756050584.832:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.055704][   T29] audit: type=1326 audit(1756050584.832:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.079876][   T29] audit: type=1326 audit(1756050584.832:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.104037][   T29] audit: type=1326 audit(1756050584.832:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.128169][   T29] audit: type=1326 audit(1756050584.832:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.152268][   T29] audit: type=1326 audit(1756050584.832:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.176212][   T29] audit: type=1326 audit(1756050584.852:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.200126][   T29] audit: type=1326 audit(1756050584.852:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  147.251557][T13812] netlink: 'syz.8.3196': attribute type 9 has an invalid length.
[  147.484824][T13840] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3208'.
[  147.766513][T13871] netlink: 'syz.7.3212': attribute type 13 has an invalid length.
[  148.454356][T13939] lo speed is unknown, defaulting to 1000
[  148.573811][T13979] loop7: detected capacity change from 0 to 128
[  148.593132][T13979] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  148.610140][T13979] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  148.709269][T14011] lo speed is unknown, defaulting to 1000
[  149.057889][T14071] bond0: (slave dummy0): Releasing backup interface
[  149.074391][T14071] bridge_slave_0: left allmulticast mode
[  149.080176][T14071] bridge_slave_0: left promiscuous mode
[  149.086562][T14071] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.108767][T14071] bridge_slave_1: left allmulticast mode
[  149.114478][T14071] bridge_slave_1: left promiscuous mode
[  149.120262][T14071] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.134562][T14071] bond0: (slave bond_slave_0): Releasing backup interface
[  149.143262][T14078] loop9: detected capacity change from 0 to 2048
[  149.151334][T14071] bond0: (slave bond_slave_1): Releasing backup interface
[  149.171905][T14071] team0: Port device team_slave_0 removed
[  149.181345][T14078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.194450][T14071] team0: Port device team_slave_1 removed
[  149.203804][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3231'.
[  149.213463][T14071] bond1: (slave batadv0): Releasing active interface
[  149.220191][T14071] bond1: (slave batadv0): the permanent HWaddr of slave - 82:d8:c5:30:0c:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  149.239609][T14071] bond1: (slave batadv1): making interface the new active one
[  149.248858][T14071] bond1: (slave batadv1): Releasing active interface
[  149.271640][T14073] bridge0: entered allmulticast mode
[  149.300437][ T7605] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  149.319299][ T7605] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  149.353121][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3243'.
[  149.353909][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.401898][T14105] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3244'.
[  149.406603][T14116] netlink: 'syz.8.3245': attribute type 1 has an invalid length.
[  149.411713][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3244'.
[  149.419894][T14116] netlink: 161700 bytes leftover after parsing attributes in process `syz.8.3245'.
[  149.427597][T14105] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3244'.
[  149.541737][T14121] loop9: detected capacity change from 0 to 4096
[  149.573444][T14121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.583582][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3253'.
[  149.610347][T14143] bond_slave_1: entered promiscuous mode
[  149.623695][T14143] bond_slave_1 (unregistering): left promiscuous mode
[  149.665075][T14155] EXT4-fs (loop9): shut down requested (0)
[  149.834422][T14172] loop7: detected capacity change from 0 to 2048
[  149.854948][T14172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.906380][ T5646] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  149.924313][ T5646] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  149.946127][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.956202][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.026008][T14197] netlink: 'syz.7.3270': attribute type 1 has an invalid length.
[  150.059257][T14197] 8021q: adding VLAN 0 to HW filter on device bond6
[  150.087308][T14235] bond6: (slave gretap1): making interface the new active one
[  150.097873][T14235] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  150.176908][T14240] hub 6-0:1.0: USB hub found
[  150.192707][T14240] hub 6-0:1.0: 8 ports detected
[  150.915913][T14396] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008
[  150.928790][T14400] rdma_op ffff888125af7980 conn xmit_rdma 0000000000000000
[  151.096924][T14452] lo speed is unknown, defaulting to 1000
[  151.183995][T14494] loop9: detected capacity change from 0 to 1024
[  151.207442][T14494] EXT4-fs: Ignoring removed orlov option
[  151.241867][T14494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.302136][T14514] __nla_validate_parse: 11 callbacks suppressed
[  151.302150][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3309'.
[  151.373237][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.635438][T14580] loop7: detected capacity change from 0 to 512
[  151.724591][T14595] loop7: detected capacity change from 0 to 128
[  151.747663][T14595] bio_check_eod: 224 callbacks suppressed
[  151.747680][T14595] syz.7.3323: attempt to access beyond end of device
[  151.747680][T14595] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128
[  151.778300][T14595] syz.7.3323: attempt to access beyond end of device
[  151.778300][T14595] loop7: rw=2049, sector=144, nr_sectors = 2 limit=128
[  151.791787][T14595] buffer_io_error: 2 callbacks suppressed
[  151.791822][T14595] Buffer I/O error on dev loop7, logical block 72, lost async page write
[  151.956140][T14630] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.996069][T14630] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.053764][T14656] wg2: left promiscuous mode
[  152.058501][T14656] wg2: left allmulticast mode
[  152.065095][T14656] veth0_vlan: left allmulticast mode
[  152.071755][T14656] team1: left promiscuous mode
[  152.076598][T14656] team1: left allmulticast mode
[  152.081794][T14656] bond4: left promiscuous mode
[  152.086741][T14656] batadv1: left promiscuous mode
[  152.091760][T14656] batadv1: left allmulticast mode
[  152.096982][T14656] batadv2: left promiscuous mode
[  152.101909][T14656] batadv2: left allmulticast mode
[  152.110548][T14630] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.184676][T14630] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.248208][   T29] kauditd_printk_skb: 277 callbacks suppressed
[  152.248221][   T29] audit: type=1400 audit(1756050590.092:6461): avc:  denied  { create } for  pid=14694 comm="syz.7.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  152.255512][ T3636] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.321599][   T29] audit: type=1400 audit(1756050590.132:6462): avc:  denied  { setopt } for  pid=14694 comm="syz.7.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  152.341244][   T29] audit: type=1400 audit(1756050590.132:6463): avc:  denied  { bind } for  pid=14694 comm="syz.7.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  152.341542][ T3636] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.360766][   T29] audit: type=1400 audit(1756050590.132:6464): avc:  denied  { name_bind } for  pid=14694 comm="syz.7.3333" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  152.360859][   T29] audit: type=1400 audit(1756050590.132:6465): avc:  denied  { node_bind } for  pid=14694 comm="syz.7.3333" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  152.360877][   T29] audit: type=1400 audit(1756050590.132:6466): avc:  denied  { getopt } for  pid=14694 comm="syz.7.3333" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  152.360896][   T29] audit: type=1400 audit(1756050590.132:6467): avc:  denied  { write } for  pid=14694 comm="syz.7.3333" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  152.472164][   T29] audit: type=1400 audit(1756050590.302:6468): avc:  denied  { create } for  pid=14710 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  152.491100][   T29] audit: type=1400 audit(1756050590.312:6469): avc:  denied  { write } for  pid=14710 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  152.492441][ T3636] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.521293][ T3636] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.622893][T14728] ±ÿ: renamed from bond_slave_0
[  152.657693][T14734] netlink: 'syz.3.3341': attribute type 1 has an invalid length.
[  152.659042][T14736] rdma_op ffff88811a861180 conn xmit_rdma 0000000000000000
[  152.673817][   T29] audit: type=1400 audit(1756050590.502:6470): avc:  denied  { create } for  pid=14735 comm="syz.9.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  152.717657][T14734] 8021q: adding VLAN 0 to HW filter on device bond4
[  152.765819][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3341'.
[  152.806156][T14790] loop7: detected capacity change from 0 to 128
[  152.821110][T14790] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.835095][T14790] ext4 filesystem being mounted at /463/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.846450][T14734] bond4 (unregistering): Released all slaves
[  152.873132][T14792] loop9: detected capacity change from 0 to 512
[  152.887386][T14792] EXT4-fs error (device loop9): __ext4_iget:5464: inode #17: block 1803188595: comm syz.9.3349: invalid block
[  152.899546][T14792] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3349: couldn't read orphan inode 17 (err -117)
[  152.913022][T14792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.921304][ T5646] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.975849][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.124407][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3362'.
[  153.172863][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3362'.
[  153.237696][T14885] loop7: detected capacity change from 0 to 256
[  153.277878][T14892] lo speed is unknown, defaulting to 1000
[  153.435795][T14942] loop9: detected capacity change from 0 to 764
[  153.444734][T14942] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  153.472160][T14942] Symlink component flag not implemented
[  153.492097][T14942] Symlink component flag not implemented (7)
[  153.802464][T14947] loop7: detected capacity change from 0 to 2048
[  153.839805][T14947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.032916][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.374672][T15013] wg2: left promiscuous mode
[  154.379321][T15013] wg2: left allmulticast mode
[  154.403566][T15013] veth0_vlan: left allmulticast mode
[  154.533912][T15015] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.571576][T15027] lo speed is unknown, defaulting to 1000
[  154.633585][T15015] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.678774][T15068] netlink: 'syz.8.3412': attribute type 1 has an invalid length.
[  154.706485][T15068] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.715311][T15015] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.733425][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3412'.
[  154.745713][T15068] bond2 (unregistering): Released all slaves
[  154.777852][T15110] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3414'.
[  154.787116][T15110] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3414'.
[  154.796816][T15015] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.902430][ T3636] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.913766][ T3636] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.943013][ T3636] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.959904][ T3636] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.974658][T15165] loop9: detected capacity change from 0 to 512
[  154.984133][T15165] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  154.994125][T15165] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[  155.010176][T15163] ip6gre1: left allmulticast mode
[  155.023567][T15165] netlink: zone id is out of range
[  155.031204][T15165] netlink: zone id is out of range
[  155.036889][T15165] netlink: zone id is out of range
[  155.042050][T15165] netlink: zone id is out of range
[  155.048727][T15165] netlink: zone id is out of range
[  155.054668][ T1049] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec
[  155.064629][T15165] netlink: zone id is out of range
[  155.070127][T15165] netlink: zone id is out of range
[  155.076107][T15165] netlink: zone id is out of range
[  155.081754][T15165] netlink: zone id is out of range
[  155.088772][T15165] netlink: zone id is out of range
[  155.255515][T15195] lo speed is unknown, defaulting to 1000
[  155.364994][T15218] lo speed is unknown, defaulting to 1000
[  155.773584][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3440'.
[  155.790350][T15286] ip6gre1: entered allmulticast mode
[  155.859169][T15309] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3445'.
[  155.876239][T15314] tipc: New replicast peer: 255.255.255.255
[  155.882296][T15314] tipc: Enabled bearer <udp:s>, priority 10
[  156.325835][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3461'.
[  156.349143][T15377] hsr_slave_0: left promiscuous mode
[  156.358048][T15377] hsr_slave_1: left promiscuous mode
[  156.546791][T15437] netlink: 'syz.8.3471': attribute type 13 has an invalid length.
[  156.564203][T15437] gretap0: refused to change device tx_queue_len
[  156.601345][T15441] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3473'.
[  156.638398][T15446] netlink: 'syz.9.3475': attribute type 1 has an invalid length.
[  156.659422][T15446] 8021q: adding VLAN 0 to HW filter on device bond1
[  156.666286][T15481] netlink: 'syz.8.3478': attribute type 1 has an invalid length.
[  156.675552][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3475'.
[  156.702278][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3478'.
[  156.702922][T15446] bond1 (unregistering): Released all slaves
[  156.726876][T15555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3479'.
[  156.729793][T15481] 8021q: adding VLAN 0 to HW filter on device batadv2
[  156.761937][T15559] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  156.800040][T15481] bond2: (slave batadv2): Enslaving as a backup interface with an up link
[  156.811800][T15560] bond2 (unregistering): (slave batadv2): Releasing backup interface
[  156.827305][T15560] bond2 (unregistering): Released all slaves
[  156.878479][T15606] loop7: detected capacity change from 0 to 1024
[  156.892711][ T3404] tipc: Node number set to 456861071
[  156.894652][T15606] EXT4-fs: Ignoring removed orlov option
[  156.920257][T15606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.221098][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.322304][   T29] kauditd_printk_skb: 264 callbacks suppressed
[  157.322319][   T29] audit: type=1400 audit(1756050595.172:6735): avc:  denied  { read write } for  pid=15660 comm="syz.7.3506" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  157.356843][   T29] audit: type=1400 audit(1756050595.172:6736): avc:  denied  { open } for  pid=15660 comm="syz.7.3506" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  157.385822][   T29] audit: type=1400 audit(1756050595.232:6737): avc:  denied  { create } for  pid=15662 comm="syz.3.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.406199][   T29] audit: type=1400 audit(1756050595.232:6738): avc:  denied  { write } for  pid=15662 comm="syz.3.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.426860][   T29] audit: type=1400 audit(1756050595.232:6739): avc:  denied  { mount } for  pid=15662 comm="syz.3.3507" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  157.449240][   T29] audit: type=1400 audit(1756050595.232:6740): avc:  denied  { mount } for  pid=15662 comm="syz.3.3507" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  157.848298][T15676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15676 comm=syz.9.3511
[  157.864446][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3511'.
[  157.892071][   T29] audit: type=1400 audit(1756050595.732:6741): avc:  denied  { nlmsg_write } for  pid=15675 comm="syz.9.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.967740][   T29] audit: type=1400 audit(1756050595.812:6742): avc:  denied  { create } for  pid=15716 comm="syz.9.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  157.990167][T15720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15720 comm=syz.8.3513
[  158.053976][T15727] loop9: detected capacity change from 0 to 2048
[  158.065434][T15727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.214162][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.250704][T15752] netlink: 'syz.7.3525': attribute type 1 has an invalid length.
[  158.280275][T15752] 8021q: adding VLAN 0 to HW filter on device bond7
[  158.288466][T15754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.290659][   T29] audit: type=1400 audit(1756050596.142:6743): avc:  denied  { shutdown } for  pid=15790 comm="syz.8.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  158.300676][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3525'.
[  158.325090][T15754] tipc: Disabling bearer <eth:syzkaller0>
[  158.336139][   T29] audit: type=1400 audit(1756050596.162:6744): avc:  denied  { write } for  pid=15790 comm="syz.8.3527" lport=52247 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  158.369453][T15752] bond7 (unregistering): Released all slaves
[  158.414270][T15831] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3530'.
[  158.430789][T15831] 0ªî{X¹¦: renamed from gretap0
[  158.438509][T15831] 0ªî{X¹¦: entered allmulticast mode
[  158.481002][T15841] loop7: detected capacity change from 0 to 2048
[  158.490873][T15839] lo speed is unknown, defaulting to 1000
[  158.502205][ T3414] lo speed is unknown, defaulting to 1000
[  158.507977][ T3414] syz0: Port: 1 Link DOWN
[  158.517442][T15837] hub 6-0:1.0: USB hub found
[  158.521831][T15841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.535434][T15837] hub 6-0:1.0: 8 ports detected
[  158.541816][T15847] netlink: 'syz.3.3536': attribute type 13 has an invalid length.
[  158.559426][T15847] gretap0: refused to change device tx_queue_len
[  158.567050][ T3404] lo speed is unknown, defaulting to 1000
[  158.572854][ T3404] syz0: Port: 1 Link ACTIVE
[  158.613648][T15871] lo speed is unknown, defaulting to 1000
[  158.717034][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.756416][T15903] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3540'.
[  158.771384][T15903] x_tables: ip_tables: udp match: only valid for protocol 17
[  158.815933][T15912] loop7: detected capacity change from 0 to 1024
[  158.825052][T15912] EXT4-fs: Ignoring removed orlov option
[  158.830965][T15912] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  158.854998][T15912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.004630][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.016894][T15934] netlink: 'syz.9.3549': attribute type 1 has an invalid length.
[  159.055147][T15934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.087834][T15934] bond2: (slave batadv0): Enslaving as a backup interface with an up link
[  159.119020][T15982] bond2 (unregistering): (slave batadv0): Releasing backup interface
[  159.128249][T15983] loop7: detected capacity change from 0 to 1024
[  159.145081][T15982] bond2 (unregistering): Released all slaves
[  159.156198][T15983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.200063][T15983] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.308551][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.469522][T16056] netlink: 'syz.6.3568': attribute type 1 has an invalid length.
[  159.485175][T16056] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.501526][T16056] bond2 (unregistering): Released all slaves
[  159.503405][T16095] loop9: detected capacity change from 0 to 1024
[  159.515742][T16095] EXT4-fs: Ignoring removed orlov option
[  159.524572][T16095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.590550][T16130] loop7: detected capacity change from 0 to 512
[  159.600789][T16130] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.3569: error while reading EA inode 32 err=-116
[  159.615581][T16130] EXT4-fs (loop7): Remounting filesystem read-only
[  159.622934][T16130] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  159.645112][T16130] EXT4-fs (loop7): 1 orphan inode deleted
[  159.651354][T16130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.815848][T16156] bridge0: entered promiscuous mode
[  159.832471][T16156] macsec0: entered promiscuous mode
[  159.838832][T16156] bridge0: port 1(macsec0) entered blocking state
[  159.846007][T16156] bridge0: port 1(macsec0) entered disabled state
[  159.853084][T16156] macsec0: entered allmulticast mode
[  159.855724][ T7605] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.867717][T16156] macsec0: left allmulticast mode
[  159.874401][T16156] bridge0: left promiscuous mode
[  159.910378][T16169] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  159.918077][T16169] 0ªî{X¹¦: entered allmulticast mode
[  160.189190][T16190] wg2: entered promiscuous mode
[  160.194249][T16190] wg2: entered allmulticast mode
[  160.329080][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.343741][T16196] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  160.354959][T16196] 1ªî{X¹¦: entered allmulticast mode
[  160.364714][T16196] net_ratelimit: 159 callbacks suppressed
[  160.364729][T16196] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  160.428892][T16200] lo speed is unknown, defaulting to 1000
[  160.681365][T16248] loop7: detected capacity change from 0 to 512
[  160.694859][T16248] EXT4-fs: Ignoring removed oldalloc option
[  160.700822][T16248] EXT4-fs: inline encryption not supported
[  160.707369][T16248] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.714756][T16248] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  160.729006][T16253] bridge: RTM_NEWNEIGH with invalid ether address
[  160.743077][T16248] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3609: bg 0: block 64: padding at end of block bitmap is not set
[  160.763986][T16248] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3609: Failed to acquire dquot type 0
[  160.778192][T16248] EXT4-fs (loop7): 1 truncate cleaned up
[  160.784348][T16248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.825197][ T5646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.040810][T16295] tipc: New replicast peer: 255.255.255.83
[  161.047634][T16295] tipc: Enabled bearer <udp:£>, priority 10
[  161.071145][T16301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.080175][T16301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.148952][T16311] hsr_slave_0: left promiscuous mode
[  161.155288][T16311] hsr_slave_1: left promiscuous mode
[  161.179980][T16315] lo speed is unknown, defaulting to 1000
[  161.740017][T16366] netlink: 'gtp': attribute type 30 has an invalid length.
[  161.796893][T16372] __nla_validate_parse: 8 callbacks suppressed
[  161.796909][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3643'.
[  162.067229][T16391] loop9: detected capacity change from 0 to 512
[  162.103951][T16391] EXT4-fs: Ignoring removed mblk_io_submit option
[  162.124153][T16391] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  162.152624][T16391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002]
[  162.160629][T16391] System zones: 1-12
[  162.184488][T16391] EXT4-fs (loop9): 1 truncate cleaned up
[  162.190686][T16391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.204839][T16404] lo speed is unknown, defaulting to 1000
[  162.259580][T16391] lo speed is unknown, defaulting to 1000
[  162.355297][   T29] kauditd_printk_skb: 166 callbacks suppressed
[  162.355313][   T29] audit: type=1326 audit(1756050600.202:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.385778][   T29] audit: type=1326 audit(1756050600.202:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.409984][   T29] audit: type=1326 audit(1756050600.202:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.434183][   T29] audit: type=1326 audit(1756050600.202:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.458533][   T29] audit: type=1326 audit(1756050600.202:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.483083][   T29] audit: type=1326 audit(1756050600.202:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.507149][   T29] audit: type=1326 audit(1756050600.202:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.531249][   T29] audit: type=1326 audit(1756050600.202:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.555615][   T29] audit: type=1326 audit(1756050600.202:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.579811][   T29] audit: type=1326 audit(1756050600.202:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.6.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  162.742897][T16471] @: renamed from vlan0
[  162.907031][T16460] Set syz1 is full, maxelem 65536 reached
[  162.930651][ T7605] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /412/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.985469][ T7605] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.015445][ T7605] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /412/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.064521][ T7605] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.068995][T16492] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.093551][T16492] 8021q: adding VLAN 0 to HW filter on device team0
[  163.103521][T16492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.110806][ T7605] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /412/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.147204][ T7605] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.169574][ T7605] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /412/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.193531][ T7605] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.214132][ T7605] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /412/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.235856][ T7605] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.314259][ T8475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.354721][T16500] syzkaller1: entered promiscuous mode
[  163.360232][T16500] syzkaller1: entered allmulticast mode
[  163.543505][T16512] lo speed is unknown, defaulting to 1000
[  163.544786][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3681'.
[  163.696511][T16512] chnl_net:caif_netlink_parms(): no params data found
[  163.754817][T16512] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.761935][T16512] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.769707][T16512] bridge_slave_0: entered allmulticast mode
[  163.776481][T16512] bridge_slave_0: entered promiscuous mode
[  163.783563][T16512] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.790618][T16512] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.798039][T16512] bridge_slave_1: entered allmulticast mode
[  163.804678][T16512] bridge_slave_1: entered promiscuous mode
[  163.823717][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.834473][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.835463][T16728] netlink: 'syz.6.3686': attribute type 1 has an invalid length.
[  163.861828][T16728] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.878771][T16512] team0: Port device team_slave_0 added
[  163.885671][T16512] team0: Port device team_slave_1 added
[  163.907657][T16728] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.914977][T16728] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  163.926666][T16728] bond2: (slave vti0): Error -95 calling set_mac_address
[  163.936859][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.944457][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.970850][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.982705][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.989642][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.016031][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.043298][T16512] hsr_slave_0: entered promiscuous mode
[  164.049335][T16512] hsr_slave_1: entered promiscuous mode
[  164.056161][T16512] debugfs: 'hsr0' already exists in 'hsr'
[  164.061883][T16512] Cannot create hsr debugfs directory
[  164.417226][T16512] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  164.431054][T16512] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  164.443838][T16512] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  164.453742][T16512] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  164.489155][T16512] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.500985][T16512] 8021q: adding VLAN 0 to HW filter on device team0
[  164.510658][  T412] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.517735][  T412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.530372][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.537441][ T3642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.592838][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3694'.
[  164.669061][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.707904][T16963] lo speed is unknown, defaulting to 1000
[  164.824479][T16993] netlink: 536 bytes leftover after parsing attributes in process `syz.8.3698'.
[  164.864207][T16512] veth0_vlan: entered promiscuous mode
[  164.881460][T16993] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3698'.
[  164.923626][T16512] veth1_vlan: entered promiscuous mode
[  164.946846][T16512] veth0_macvtap: entered promiscuous mode
[  164.969064][T16512] veth1_macvtap: entered promiscuous mode
[  165.004971][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.036631][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.056299][  T412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.087248][  T412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.115388][  T412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.144249][  T412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.204262][T17014] lo speed is unknown, defaulting to 1000
[  165.430699][   T23] IPVS: starting estimator thread 0...
[  165.466397][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3707'.
[  165.522269][T17045] IPVS: using max 3072 ests per chain, 153600 per kthread
[  165.565129][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3712'.
[  165.608856][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'.
[  165.704204][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3726'.
[  165.722043][ T3414] IPVS: starting estimator thread 0...
[  165.811105][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3720'.
[  165.822793][T17077] IPVS: using max 2688 ests per chain, 134400 per kthread
[  165.831402][T17089] loop7: detected capacity change from 0 to 128
[  165.850722][T17089] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (18424!=39978)
[  165.860578][T17089] EXT4-fs (loop7): group descriptors corrupted!
[  165.883952][T17092] netlink: 'gtp': attribute type 30 has an invalid length.
[  165.990113][T17123] bridge0: port 1(veth1_to_hsr) entered blocking state
[  165.997243][T17123] bridge0: port 1(veth1_to_hsr) entered disabled state
[  166.014454][T17123] veth1_to_hsr: entered allmulticast mode
[  166.023649][T17123] veth1_to_hsr: entered promiscuous mode
[  166.033891][T17123] veth1_to_hsr (unregistering): left allmulticast mode
[  166.040853][T17123] veth1_to_hsr (unregistering): left promiscuous mode
[  166.047849][T17123] bridge0: port 1(veth1_to_hsr) entered disabled state
[  166.200152][T17141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.229978][T17141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.350761][T17150] netlink: 'syz.3.3738': attribute type 1 has an invalid length.
[  166.369012][T17150] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.390818][T17150] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.403226][T17150] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  166.425137][T17150] bond4: (slave vti0): Error -95 calling set_mac_address
[  166.561552][T17199] vlan2: entered allmulticast mode
[  166.865727][T17231] loop7: detected capacity change from 0 to 512
[  166.881543][T17231] EXT4-fs: Ignoring removed mblk_io_submit option
[  166.896855][T17231] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  166.936213][T17231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002]
[  166.951607][T17231] System zones: 1-12
[  166.974241][T17231] EXT4-fs (loop7): 1 truncate cleaned up
[  167.000657][T17231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.080022][T17231] lo speed is unknown, defaulting to 1000
[  167.571777][T17286] netlink: 'syz.8.3761': attribute type 10 has an invalid length.
[  167.580919][T17286] team0: Port device dummy0 added
[  167.587898][T17286] netlink: 'syz.8.3761': attribute type 10 has an invalid length.
[  167.597237][T17286] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  167.612155][T17286] team0: Failed to send options change via netlink (err -105)
[  167.620802][T17286] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  167.630919][T17286] team0: Port device dummy0 removed
[  167.637858][T17286] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  167.669708][   T29] kauditd_printk_skb: 123 callbacks suppressed
[  167.669793][   T29] audit: type=1400 audit(1756050605.512:7042): avc:  denied  { mount } for  pid=17291 comm="syz.8.3763" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  167.710269][ T5646] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /518/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  167.741020][ T5646] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  167.764499][T17295] __nla_validate_parse: 1 callbacks suppressed
[  167.764514][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3766'.
[  167.771545][ T5646] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /518/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  167.805314][T17295] 8021q: adding VLAN 0 to HW filter on device bond3
[  167.832873][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3766'.
[  167.844848][ T5646] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  167.872429][T17331] bond3 (unregistering): Released all slaves
[  167.889739][ T5646] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /518/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  167.914255][ T5646] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  167.937050][ T5646] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /518/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  167.975300][ T5646] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  167.998833][ T5646] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /518/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  168.026238][ T5646] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  168.117389][   T29] audit: type=1326 audit(1756050605.962:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  168.143564][   T29] audit: type=1326 audit(1756050605.962:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  168.167254][   T29] audit: type=1326 audit(1756050605.962:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  168.190895][   T29] audit: type=1326 audit(1756050605.962:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  168.214623][   T29] audit: type=1326 audit(1756050605.962:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  168.238356][   T29] audit: type=1326 audit(1756050605.962:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  168.261923][   T29] audit: type=1326 audit(1756050605.962:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  168.285433][   T29] audit: type=1326 audit(1756050605.962:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1856ad5ba7 code=0x7ffc0000
[  168.308893][   T29] audit: type=1326 audit(1756050605.962:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1856a7ade9 code=0x7ffc0000
[  168.354961][T17244] syz_tun (unregistering): left allmulticast mode
[  168.388448][T17387] loop2: detected capacity change from 0 to 1024
[  168.403358][T17387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.418122][T17244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.443273][T17387] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3775: Allocating blocks 449-513 which overlap fs metadata
[  168.462871][T17382] EXT4-fs (loop2): pa ffff88810591bbd0: logic 48, phys. 177, len 21
[  168.470893][T17382] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  168.499838][T17396] lo speed is unknown, defaulting to 1000
[  168.506772][T16512] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.649612][T17400] lo speed is unknown, defaulting to 1000
[  168.738747][ T3646] bond6 (unregistering): (slave gretap1): Releasing active interface
[  169.002997][T17498] 9pnet: Could not find request transport: f0x0000000000000006
[  169.129966][T17512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3796'.
[  169.143870][ T3646] bond0 (unregistering): Released all slaves
[  169.151669][ T3646] bond1 (unregistering): Released all slaves
[  169.159896][ T3646] bond2 (unregistering): Released all slaves
[  169.170189][ T3646] bond3 (unregistering): Released all slaves
[  169.178339][ T3646] bond4 (unregistering): Released all slaves
[  169.187014][ T3646] bond5 (unregistering): Released all slaves
[  169.195229][ T3646] bond6 (unregistering): Released all slaves
[  169.260477][ T3646] tipc: Left network mode
[  169.271088][T17400] chnl_net:caif_netlink_parms(): no params data found
[  169.302861][ T3646] hsr_slave_0: left promiscuous mode
[  169.313796][ T3646] hsr_slave_1: left promiscuous mode
[  169.443933][T17610] ipvlan0: entered promiscuous mode
[  169.450553][T17610] bridge0: port 1(ipvlan0) entered blocking state
[  169.457189][T17610] bridge0: port 1(ipvlan0) entered disabled state
[  169.467968][T17610] ipvlan0: entered allmulticast mode
[  169.473738][T17610] ipvlan0: left allmulticast mode
[  169.598933][T17400] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.606165][T17400] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.621632][T17400] bridge_slave_0: entered allmulticast mode
[  169.628326][T17400] bridge_slave_0: entered promiscuous mode
[  169.636235][T17634] lo speed is unknown, defaulting to 1000
[  169.636634][T17400] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.649244][T17400] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.656559][T17400] bridge_slave_1: entered allmulticast mode
[  169.663171][T17400] bridge_slave_1: entered promiscuous mode
[  169.726122][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.770368][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.813850][T17400] team0: Port device team_slave_0 added
[  169.820473][T17400] team0: Port device team_slave_1 added
[  169.866706][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.873825][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.899801][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.965669][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.972678][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.998638][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.225606][T17799] lo speed is unknown, defaulting to 1000
[  170.257974][T17845] netlink: 'syz.2.3814': attribute type 1 has an invalid length.
[  170.356698][T17400] hsr_slave_0: entered promiscuous mode
[  170.364221][T17400] hsr_slave_1: entered promiscuous mode
[  170.370603][T17400] debugfs: 'hsr0' already exists in 'hsr'
[  170.376421][T17400] Cannot create hsr debugfs directory
[  170.382880][T17861] vlan1: entered promiscuous mode
[  170.387979][T17861] vlan1: entered allmulticast mode
[  170.393246][T17861] veth0_vlan: entered allmulticast mode
[  170.558608][T17955] lo speed is unknown, defaulting to 1000
[  170.855069][T17400] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  170.864887][T17400] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  170.873639][T17400] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  170.882742][T17400] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  170.932059][T17400] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.955757][T17400] 8021q: adding VLAN 0 to HW filter on device team0
[  170.967547][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.974637][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.986548][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.993685][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.070114][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.210637][T17400] veth0_vlan: entered promiscuous mode
[  171.216990][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3829'.
[  171.219199][T17400] veth1_vlan: entered promiscuous mode
[  171.239340][T18042] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.256189][T17400] veth0_macvtap: entered promiscuous mode
[  171.261973][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'.
[  171.263820][T17400] veth1_macvtap: entered promiscuous mode
[  171.279617][T18042] bond1 (unregistering): Released all slaves
[  171.301858][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.313037][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.324217][ T3601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.336272][ T3646] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.346491][ T3646] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.357496][ T3646] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.497581][T18134] loop7: detected capacity change from 0 to 1024
[  171.541920][T18134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.583518][T18145] loop2: detected capacity change from 0 to 128
[  171.598173][T18134] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3839: Allocating blocks 449-513 which overlap fs metadata
[  171.636800][T18133] EXT4-fs (loop7): pa ffff88810591bb60: logic 48, phys. 177, len 21
[  171.645560][T18133] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  171.667636][T17400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.711435][T18154] tipc: Started in network mode
[  171.717107][T18154] tipc: Node identity 2a49785a46da, cluster identity 4711
[  171.724320][T18154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.733148][T18153] tipc: Resetting bearer <eth:syzkaller0>
[  171.744763][T18153] tipc: Disabling bearer <eth:syzkaller0>
[  171.993689][T18191] ref_ctr increment failed for inode: 0xcf2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810995f8c0
[  172.005954][T18190] uprobe: syz.6.3856:18190 failed to unregister, leaking uprobe
[  172.115197][ T3646] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.127639][ T3646] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.138833][ T3646] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.150936][ T3646] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.235249][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3861'.
[  172.356321][T18227] loop2: detected capacity change from 0 to 512
[  172.365641][T18227] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  172.384967][T18227] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.3866: iget: bad i_size value: -6917529027641081756
[  172.398783][T18227] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3866: couldn't read orphan inode 17 (err -117)
[  172.416907][T18227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.448693][T18227] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3866: bg 0: block 65: padding at end of block bitmap is not set
[  172.480295][T18227] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3866: Failed to acquire dquot type 0
[  172.558136][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3870'.
[  172.588024][T16512] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.636998][T18246] netlink: 'syz.6.3874': attribute type 49 has an invalid length.
[  172.717620][T18263] loop2: detected capacity change from 0 to 1024
[  172.724728][T18263] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.731224][T18263] EXT4-fs: Ignoring removed bh option
[  172.756150][T18263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.771582][   T29] kauditd_printk_skb: 834 callbacks suppressed
[  172.771597][   T29] audit: type=1400 audit(1756050610.622:7883): avc:  denied  { lock } for  pid=18262 comm="syz.2.3879" path="/36/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  172.771793][T18263] SELinux:  Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped).
[  172.777904][   T29] audit: type=1400 audit(1756050610.622:7884): avc:  denied  { mac_admin } for  pid=18262 comm="syz.2.3879" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  172.839523][   T29] audit: type=1400 audit(1756050610.652:7885): avc:  denied  { relabelto } for  pid=18262 comm="syz.2.3879" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0"
[  172.881235][T16512] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.909190][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3883'.
[  172.964899][   T29] audit: type=1400 audit(1756050610.812:7886): avc:  denied  { name_bind } for  pid=18289 comm="syz.3.3886" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  173.007347][   T29] audit: type=1326 audit(1756050610.852:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  173.031996][   T29] audit: type=1326 audit(1756050610.852:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  173.056418][   T29] audit: type=1326 audit(1756050610.852:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  173.080500][   T29] audit: type=1326 audit(1756050610.852:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  173.106042][   T29] audit: type=1326 audit(1756050610.882:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  173.129919][   T29] audit: type=1326 audit(1756050610.882:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  173.358319][T18318] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3896'.
[  173.780189][T18354] pim6reg1: entered promiscuous mode
[  173.785568][T18354] pim6reg1: entered allmulticast mode
[  174.414019][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3916'.
[  174.935415][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3930'.
[  175.167726][T18462] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3940'.
[  175.191563][T18462] 
Dödªî{Xè‚: renamed from 
30ªî{X¹¦ (while UP)
[  175.226324][T18462] A link change request failed with some changes committed already. Interface 
Dödªî{Xè‚ may have been left with an inconsistent configuration, please check.
[  175.541359][ T3646] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.574103][ T3646] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.594253][ T3646] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.608215][ T3646] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.219772][T18585] delete_channel: no stack
[  177.484108][T18598] lo speed is unknown, defaulting to 1000
[  177.899895][T18618] bridge0: entered promiscuous mode
[  177.920577][T18618] macvtap1: entered allmulticast mode
[  177.926039][T18618] bridge0: entered allmulticast mode
[  177.951331][T18618] bridge0: port 3(macvtap1) entered blocking state
[  177.957986][T18618] bridge0: port 3(macvtap1) entered disabled state
[  177.993836][T18618] bridge0: left allmulticast mode
[  177.998985][T18618] bridge0: left promiscuous mode
[  178.081674][   T29] kauditd_printk_skb: 182 callbacks suppressed
[  178.081689][   T29] audit: type=1400 audit(1756050615.922:8075): avc:  denied  { ioctl } for  pid=18630 comm="syz.6.3990" path="socket:[43998]" dev="sockfs" ino=43998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  178.224540][T18642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3993'.
[  178.336227][   T29] audit: type=1326 audit(1756050616.182:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.7.3997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96e290ebe9 code=0x0
[  178.497632][T18661] wg2: entered promiscuous mode
[  178.502817][T18661] wg2: entered allmulticast mode
[  178.672889][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4007'.
[  178.718365][T18675] netlink: 'syz.2.4008': attribute type 1 has an invalid length.
[  178.790622][T18675] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.231817][   T29] audit: type=1326 audit(1756050617.072:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.284846][   T29] audit: type=1326 audit(1756050617.072:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.308468][   T29] audit: type=1326 audit(1756050617.072:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.311348][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4020'.
[  179.332029][   T29] audit: type=1326 audit(1756050617.072:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.332097][   T29] audit: type=1326 audit(1756050617.072:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.332118][   T29] audit: type=1326 audit(1756050617.072:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.332195][   T29] audit: type=1326 audit(1756050617.072:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.332214][   T29] audit: type=1326 audit(1756050617.072:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f96e290ebe9 code=0x7ffc0000
[  179.477123][T18750] loop7: detected capacity change from 0 to 512
[  179.496321][T18748] loop2: detected capacity change from 0 to 164
[  179.516456][T18748] wÞ¡ÿ: attempt to access beyond end of device
[  179.516456][T18748] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  179.530858][T18750] EXT4-fs (loop7): too many log groups per flexible block group
[  179.531264][T18748] wÞ¡ÿ: attempt to access beyond end of device
[  179.531264][T18748] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  179.539081][T18750] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  179.577403][T18750] EXT4-fs (loop7): mount failed
[  179.798162][T18794] lo speed is unknown, defaulting to 1000
[  179.989484][T18837] loop2: detected capacity change from 0 to 512
[  180.016996][T18837] msdos: Bad value for 'uid'
[  180.021704][T18837] msdos: Bad value for 'uid'
[  180.086844][T18862] netlink: 'syz.8.4051': attribute type 3 has an invalid length.
[  180.094860][T18862] netlink: 'syz.8.4051': attribute type 3 has an invalid length.
[  180.176985][T18883] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4056'.
[  180.849924][T19015] lo speed is unknown, defaulting to 1000
[  180.910639][T19036] siw: device registration error -23
[  180.959960][T19045] netlink: 'syz.2.4066': attribute type 1 has an invalid length.
[  180.976374][T19047] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.4065'.
[  180.985689][T19047] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4065'.
[  181.029487][T19045] bond2: entered promiscuous mode
[  181.035199][T19045] bond2: entered allmulticast mode
[  181.057906][T19045] 8021q: adding VLAN 0 to HW filter on device bond2
[  181.080901][T19045] ip6gretap1: entered promiscuous mode
[  181.087304][T19045] ip6gretap1: entered allmulticast mode
[  181.098865][T19045] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  181.142826][ T3604] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  181.184514][T19020] macvtap1: entered allmulticast mode
[  181.189971][T19020] bridge0: entered allmulticast mode
[  181.198897][T19020] bridge0: port 1(macvtap1) entered blocking state
[  181.205587][T19020] bridge0: port 1(macvtap1) entered disabled state
[  181.214969][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4073'.
[  181.225884][T19020] bridge0: left allmulticast mode
[  181.238893][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4073'.
[  181.263431][ T3614] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  181.403301][T19119] netlink: 'syz.6.4081': attribute type 7 has an invalid length.
[  181.411100][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4081'.
[  181.676202][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4085'.
[  181.725663][T19140] veth0_to_team: entered promiscuous mode
[  181.820650][T19148] lo speed is unknown, defaulting to 1000
[  181.919547][T19171] bridge: RTM_NEWNEIGH with invalid ether address
[  182.038618][T19192] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.172885][T19159] bridge0: entered promiscuous mode
[  182.193496][T19159] macvtap1: entered allmulticast mode
[  182.198991][T19159] bridge0: entered allmulticast mode
[  182.232502][T19159] bridge0: port 3(macvtap1) entered blocking state
[  182.239111][T19159] bridge0: port 3(macvtap1) entered disabled state
[  182.252572][T19159] bridge0: left allmulticast mode
[  182.257665][T19159] bridge0: left promiscuous mode
[  182.336755][T19210] ref_ctr increment failed for inode: 0x11f1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005bf40
[  182.360475][T19209] uprobe: syz.3.4104:19209 failed to unregister, leaking uprobe
[  182.409041][T19220] netlink: 'syz.6.4107': attribute type 3 has an invalid length.
[  182.423603][T19220] netlink: 'syz.6.4107': attribute type 3 has an invalid length.
[  182.511692][T19226] vlan0: entered allmulticast mode
[  182.750305][T19238] lo speed is unknown, defaulting to 1000
[  182.930125][T19272] netlink: 'syz.7.4127': attribute type 1 has an invalid length.
[  182.970596][T19273] pim6reg1: entered promiscuous mode
[  182.975981][T19273] pim6reg1: entered allmulticast mode
[  182.999014][T19272] bond1: entered promiscuous mode
[  183.004173][T19272] bond1: entered allmulticast mode
[  183.016224][T19272] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.037418][T19272] ip6gretap1: entered promiscuous mode
[  183.043099][T19272] ip6gretap1: entered allmulticast mode
[  183.049574][T19272] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  183.082472][   T29] kauditd_printk_skb: 891 callbacks suppressed
[  183.082485][   T29] audit: type=1326 audit(1756050620.932:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48b81c5ba7 code=0x7ffc0000
[  183.083907][T19322] loop7: detected capacity change from 0 to 512
[  183.088805][   T29] audit: type=1326 audit(1756050620.932:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b816ade9 code=0x7ffc0000
[  183.112602][T19322] msdos: Bad value for 'uid'
[  183.118463][   T29] audit: type=1326 audit(1756050620.932:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  183.141842][T19322] msdos: Bad value for 'uid'
[  183.154006][ T3617] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  183.197167][   T29] audit: type=1326 audit(1756050621.002:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48b81c5ba7 code=0x7ffc0000
[  183.220730][   T29] audit: type=1326 audit(1756050621.002:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b816ade9 code=0x7ffc0000
[  183.244190][   T29] audit: type=1326 audit(1756050621.002:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  183.267813][   T29] audit: type=1326 audit(1756050621.002:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48b81c5ba7 code=0x7ffc0000
[  183.291229][   T29] audit: type=1326 audit(1756050621.002:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b816ade9 code=0x7ffc0000
[  183.304898][T19268] macvtap0: entered allmulticast mode
[  183.314789][   T29] audit: type=1326 audit(1756050621.002:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  183.321165][T19268] bridge0: port 1(macvtap0) entered blocking state
[  183.343724][   T29] audit: type=1326 audit(1756050621.032:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19244 comm="syz.8.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48b81c5ba7 code=0x7ffc0000
[  183.350229][T19268] bridge0: port 1(macvtap0) entered disabled state
[  183.352376][ T3614] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  183.631645][T19354] geneve2: entered promiscuous mode
[  183.637922][ T3601] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.646372][ T3601] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.662406][ T3601] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.670653][ T3601] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.715961][ T3601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.759133][ T3601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.782632][T19365] __nla_validate_parse: 2 callbacks suppressed
[  183.782718][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4138'.
[  183.835205][ T3601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.876624][ T3601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.977400][T19368] lo speed is unknown, defaulting to 1000
[  183.985839][ T3601] bridge_slave_1: left allmulticast mode
[  183.991492][ T3601] bridge_slave_1: left promiscuous mode
[  183.997282][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.008791][ T3601] bridge_slave_0: left allmulticast mode
[  184.014888][ T3601] bridge_slave_0: left promiscuous mode
[  184.020672][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.036369][T19393] loop7: detected capacity change from 0 to 8192
[  184.108135][ T3601] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  184.117182][ T3601] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  184.126205][ T3601] ip6gretap1 (unregistering): left promiscuous mode
[  184.132940][ T3601] ip6gretap1 (unregistering): left allmulticast mode
[  184.248085][ T3601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.258869][ T3601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.268901][ T3601] bond0 (unregistering): Released all slaves
[  184.277987][ T3601] bond1 (unregistering): Released all slaves
[  184.287357][ T3601] bond2 (unregistering): Released all slaves
[  184.296926][T19415] siw: device registration error -23
[  184.302981][T19383] macvtap1: entered allmulticast mode
[  184.308426][T19383] bridge0: entered allmulticast mode
[  184.325253][T19383] bridge0: port 1(macvtap1) entered blocking state
[  184.332081][T19383] bridge0: port 1(macvtap1) entered disabled state
[  184.343806][T19383] bridge0: left allmulticast mode
[  184.381749][ T3601] hsr_slave_0: left promiscuous mode
[  184.396402][ T3601] hsr_slave_1: left promiscuous mode
[  184.404892][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.412382][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.422644][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.430055][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.469922][ T3601] veth1_macvtap: left promiscuous mode
[  184.482076][ T3601] veth0_macvtap: left promiscuous mode
[  184.487844][ T3601] veth1_vlan: left promiscuous mode
[  184.509341][T19446] loop7: detected capacity change from 0 to 512
[  184.516546][T19446] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  184.589165][ T3601] team0 (unregistering): Port device team_slave_1 removed
[  184.599290][ T3601] team0 (unregistering): Port device team_slave_0 removed
[  184.641850][T19451] bridge: RTM_NEWNEIGH with invalid ether address
[  184.649115][T19452] netlink: 'syz.8.4150': attribute type 4 has an invalid length.
[  184.744608][T19368] chnl_net:caif_netlink_parms(): no params data found
[  184.820558][T19368] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.827782][T19368] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.839101][T19368] bridge_slave_0: entered allmulticast mode
[  184.845861][T19368] bridge_slave_0: entered promiscuous mode
[  184.852820][T19368] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.859993][T19368] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.867362][T19368] bridge_slave_1: entered allmulticast mode
[  184.873948][T19368] bridge_slave_1: entered promiscuous mode
[  184.906727][T19368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.926638][T19368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.971378][T19368] team0: Port device team_slave_0 added
[  184.981786][T19368] team0: Port device team_slave_1 added
[  185.015690][T19368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.022765][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.048804][T19368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.060310][T19368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.067416][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.093719][T19368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.127750][T19368] hsr_slave_0: entered promiscuous mode
[  185.134906][T19368] hsr_slave_1: entered promiscuous mode
[  185.140907][T19368] debugfs: 'hsr0' already exists in 'hsr'
[  185.146731][T19368] Cannot create hsr debugfs directory
[  185.370783][T19368] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  185.386698][T19368] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  185.396110][T19368] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  185.405571][T19368] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  185.445661][T19368] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.458983][T19368] 8021q: adding VLAN 0 to HW filter on device team0
[  185.469537][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.476739][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.489066][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.496149][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.669797][T19368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.908655][T19368] veth0_vlan: entered promiscuous mode
[  185.919630][T19368] veth1_vlan: entered promiscuous mode
[  185.963863][T19368] veth0_macvtap: entered promiscuous mode
[  185.976640][T19368] veth1_macvtap: entered promiscuous mode
[  186.011486][T19368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.037731][T19368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.073477][ T3631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.103000][ T3631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.135430][ T3631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.175029][T19968] loop4: detected capacity change from 0 to 2048
[  186.181824][ T3631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.211606][T19948] lo speed is unknown, defaulting to 1000
[  186.223714][T19966] loop7: detected capacity change from 0 to 164
[  186.289008][T19977] netlink: 'syz.8.4178': attribute type 4 has an invalid length.
[  186.325595][T19968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.383044][T19966] syz.7.4177: attempt to access beyond end of device
[  186.383044][T19966] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  186.402434][T19368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.407584][T19966] syz.7.4177: attempt to access beyond end of device
[  186.407584][T19966] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164
[  186.535263][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4183'.
[  186.581398][T20016] loop4: detected capacity change from 0 to 2048
[  186.624361][T20016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  186.700159][T19368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  186.721595][T20032] loop7: detected capacity change from 0 to 2048
[  186.754642][T20044] veth0_vlan: entered allmulticast mode
[  186.760535][T20032] EXT4-fs (loop7): failed to initialize system zone (-117)
[  186.774294][T20044] veth0_vlan: left promiscuous mode
[  186.788152][T20032] EXT4-fs (loop7): mount failed
[  186.788447][T20044] veth0_vlan: entered promiscuous mode
[  186.801184][T20042] netlink: 'syz.3.4190': attribute type 21 has an invalid length.
[  186.836537][T20042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4190'.
[  186.857505][T20032] geneve2: entered promiscuous mode
[  186.901573][T20055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1674 sclass=netlink_route_socket pid=20055 comm=syz.8.4192
[  186.974102][T20069] veth0: entered promiscuous mode
[  186.987466][T20068] veth0: left promiscuous mode
[  187.048764][T20077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4193'.
[  187.418400][T20127] loop4: detected capacity change from 0 to 128
[  187.448970][T20127] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.451164][T20129] lo speed is unknown, defaulting to 1000
[  187.502339][T20127] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.550917][T19368] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.136485][   T29] kauditd_printk_skb: 332 callbacks suppressed
[  188.136498][   T29] audit: type=1400 audit(1756050625.982:9318): avc:  denied  { write } for  pid=20161 comm="syz.8.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  188.384855][   T29] audit: type=1326 audit(1756050626.232:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20173 comm="syz.6.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  188.410022][   T29] audit: type=1326 audit(1756050626.252:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20173 comm="syz.6.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  188.433646][   T29] audit: type=1326 audit(1756050626.252:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20173 comm="syz.6.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  188.457219][   T29] audit: type=1326 audit(1756050626.252:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20173 comm="syz.6.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0557ddebe9 code=0x7ffc0000
[  188.542153][   T29] audit: type=1326 audit(1756050626.292:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  188.565728][   T29] audit: type=1326 audit(1756050626.292:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  188.589942][   T29] audit: type=1326 audit(1756050626.292:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  188.613618][   T29] audit: type=1326 audit(1756050626.292:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  188.637216][   T29] audit: type=1326 audit(1756050626.292:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1856adebe9 code=0x7ffc0000
[  188.642158][T20185] loop4: detected capacity change from 0 to 512
[  188.715819][T20185] EXT4-fs (loop4): orphan cleanup on readonly fs
[  188.723278][T20185] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4230: bad orphan inode 13
[  188.743691][T20185] ext4_test_bit(bit=12, block=18) = 1
[  188.749128][T20185] is_bad_inode(inode)=0
[  188.753366][T20185] NEXT_ORPHAN(inode)=2130706432
[  188.754103][T20194] veth0_vlan: left promiscuous mode
[  188.758260][T20185] max_ino=32
[  188.758270][T20185] i_nlink=1
[  188.762441][T20185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  188.766649][T20194] veth0_vlan: entered promiscuous mode
[  188.797576][T20185] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  188.824028][T20185] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4230: bg 0: block 248: padding at end of block bitmap is not set
[  188.840549][T20185] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4230: Failed to acquire dquot type 1
[  188.854859][T20185] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  188.887865][T20196] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  188.912911][T19368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.063357][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4242'.
[  189.159845][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4243'.
[  189.185494][T20236] vlan2: entered allmulticast mode
[  189.200853][T20236] dummy0: entered allmulticast mode
[  189.545944][T20254] lo speed is unknown, defaulting to 1000
[  189.764653][T20305] lo speed is unknown, defaulting to 1000
[  189.871828][T20339] loop4: detected capacity change from 0 to 512
[  189.885723][T20339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.898696][T20339] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.949931][T19368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.257392][T20367] lo: entered allmulticast mode
[  190.266514][T20367] dvmrp8: entered allmulticast mode
[  190.272589][T20367] lo: left allmulticast mode
[  190.277247][T20367] dvmrp8: left allmulticast mode
[  191.299101][T20455] ALSA: seq fatal error: cannot create timer (-19)
[  191.316974][T20455] netdevsim netdevsim7: Direct firmware load for ..€ failed with error -2
[  191.392358][T20469] loop4: detected capacity change from 0 to 2048
[  191.399481][T20469] EXT4-fs: Ignoring removed orlov option
[  191.424230][T20469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.443996][T20469] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.499496][T20487] netlink: 'syz.6.4318': attribute type 30 has an invalid length.
[  191.512381][T20469] loop4: detected capacity change from 2048 to 0
[  191.519471][    C1] I/O error, dev loop4, sector 768 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  191.529842][    C1] I/O error, dev loop4, sector 768 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  191.549231][    C1] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  191.560560][    C1] I/O error, dev loop4, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  191.570158][    C1] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  191.579700][T19368] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 4: comm syz-executor: unable to read itable block
[  191.594335][T19368] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure
[  191.603362][T19368] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  191.636702][    C1] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.646325][    C1] I/O error, dev loop4, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.655905][    C1] I/O error, dev loop4, sector 20 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  191.671601][ T3611] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #18: block 5: comm kworker/u8:29: unable to read itable block
[  191.696592][    C1] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.706220][    C1] I/O error, dev loop4, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.716887][ T3611] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #19: block 5: comm kworker/u8:29: unable to read itable block
[  191.735242][ T3611] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 4: comm kworker/u8:29: unable to read itable block
[  191.750406][T19368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.814954][T20516] netlink: 'syz.6.4329': attribute type 30 has an invalid length.
[  191.839863][T20518] netlink: 'syz.8.4330': attribute type 4 has an invalid length.
[  191.909456][ T3611] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.954683][ T3611] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.027336][ T3611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.085696][ T3611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.187038][ T3611] bridge_slave_1: left allmulticast mode
[  192.192767][ T3611] bridge_slave_1: left promiscuous mode
[  192.198397][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.228468][ T3611] bridge_slave_0: left allmulticast mode
[  192.234315][ T3611] bridge_slave_0: left promiscuous mode
[  192.240131][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.321263][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4345'.
[  192.444356][ T3611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.456317][ T3611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.466658][ T3611] bond0 (unregistering): Released all slaves
[  192.491561][T20537] lo speed is unknown, defaulting to 1000
[  192.506073][T20588] tipc: Started in network mode
[  192.510969][T20588] tipc: Node identity 2, cluster identity 4711
[  192.517254][T20588] tipc: Node number set to 2
[  192.569825][ T3611] hsr_slave_0: left promiscuous mode
[  192.577654][ T3611] hsr_slave_1: left promiscuous mode
[  192.590762][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.598288][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.613692][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.621177][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.641633][ T3611] veth1_macvtap: left promiscuous mode
[  192.648506][ T3611] veth0_macvtap: left promiscuous mode
[  192.670343][ T3611] veth1_vlan: left promiscuous mode
[  192.676470][ T3611] veth0_vlan: left promiscuous mode
[  192.747786][ T3611] team0 (unregistering): Port device team_slave_1 removed
[  192.759554][ T3611] team0 (unregistering): Port device team_slave_0 removed
[  192.791879][T20556] lo speed is unknown, defaulting to 1000
[  192.964869][T20537] chnl_net:caif_netlink_parms(): no params data found
[  193.047332][T20537] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.054603][T20537] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.061888][T20537] bridge_slave_0: entered allmulticast mode
[  193.068636][T20537] bridge_slave_0: entered promiscuous mode
[  193.076824][T20537] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.084020][T20537] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.104996][T20537] bridge_slave_1: entered allmulticast mode
[  193.111667][T20537] bridge_slave_1: entered promiscuous mode
[  193.143661][T20537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.150150][T20824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4364'.
[  193.163230][T20537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.186822][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4364'.
[  193.207688][   T29] kauditd_printk_skb: 497 callbacks suppressed
[  193.207701][   T29] audit: type=1326 audit(1756050631.052:9823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.247790][T20537] team0: Port device team_slave_0 added
[  193.254304][   T29] audit: type=1326 audit(1756050631.082:9824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.278434][   T29] audit: type=1326 audit(1756050631.082:9825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.281833][T20537] team0: Port device team_slave_1 added
[  193.302060][   T29] audit: type=1326 audit(1756050631.082:9826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.331069][   T29] audit: type=1326 audit(1756050631.092:9827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.354581][   T29] audit: type=1326 audit(1756050631.092:9828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.378277][   T29] audit: type=1326 audit(1756050631.092:9829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.418311][T20866] loop7: detected capacity change from 0 to 1024
[  193.434252][T20866] EXT4-fs: Ignoring removed orlov option
[  193.440400][   T29] audit: type=1326 audit(1756050631.102:9830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.463926][   T29] audit: type=1326 audit(1756050631.102:9831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.487731][   T29] audit: type=1326 audit(1756050631.102:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20827 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b81cebe9 code=0x7ffc0000
[  193.516035][T20866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.546933][T20537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.553947][T20537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.580035][T20537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.591541][T20537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.598630][T20537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.624727][T20537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.646671][T20888] ==================================================================
[  193.654775][T20888] BUG: KCSAN: data-race in filemap_read / filemap_read
[  193.661624][T20888] 
[  193.663954][T20888] read to 0xffff88811902da68 of 8 bytes by task 20866 on cpu 1:
[  193.671574][T20888]  filemap_read+0x6f/0xa00
[  193.675983][T20888]  generic_file_read_iter+0x79/0x330
[  193.681273][T20888]  ext4_file_read_iter+0x1cc/0x290
[  193.686397][T20888]  copy_splice_read+0x442/0x660
[  193.691243][T20888]  splice_direct_to_actor+0x290/0x680
[  193.696617][T20888]  do_splice_direct+0xda/0x150
[  193.701479][T20888]  do_sendfile+0x380/0x650
[  193.705897][T20888]  __x64_sys_sendfile64+0x105/0x150
[  193.711091][T20888]  x64_sys_call+0x2bb0/0x2ff0
[  193.715758][T20888]  do_syscall_64+0xd2/0x200
[  193.720782][T20888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.726665][T20888] 
[  193.728970][T20888] write to 0xffff88811902da68 of 8 bytes by task 20888 on cpu 0:
[  193.736666][T20888]  filemap_read+0x974/0xa00
[  193.741248][T20888]  generic_file_read_iter+0x79/0x330
[  193.746517][T20888]  ext4_file_read_iter+0x1cc/0x290
[  193.751621][T20888]  copy_splice_read+0x442/0x660
[  193.756470][T20888]  splice_direct_to_actor+0x290/0x680
[  193.761924][T20888]  do_splice_direct+0xda/0x150
[  193.766673][T20888]  do_sendfile+0x380/0x650
[  193.771088][T20888]  __x64_sys_sendfile64+0x105/0x150
[  193.776279][T20888]  x64_sys_call+0x2bb0/0x2ff0
[  193.780954][T20888]  do_syscall_64+0xd2/0x200
[  193.785469][T20888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.791350][T20888] 
[  193.793655][T20888] value changed: 0x0000000000000162 -> 0x0000000000000163
[  193.800742][T20888] 
[  193.803121][T20888] Reported by Kernel Concurrency Sanitizer on:
[  193.809279][T20888] CPU: 0 UID: 0 PID: 20888 Comm: syz.7.4367 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  193.820656][T20888] Tainted: [W]=WARN
[  193.824535][T20888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  193.834581][T20888] ==================================================================
[  193.900410][T20537] hsr_slave_0: entered promiscuous mode
[  193.917639][T20537] hsr_slave_1: entered promiscuous mode
[  193.969457][T20537] debugfs: 'hsr0' already exists in 'hsr'
[  193.975275][T20537] Cannot create hsr debugfs directory
[  193.992589][ T3611] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.053101][ T3611] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.118828][ T3611] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.167011][T20888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.182884][ T3611] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.504130][ T3611] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  194.512986][ T3611] bond0 (unregistering): Released all slaves
[  194.520970][ T3611] bond1 (unregistering): Released all slaves
[  194.583744][ T3611] tipc: Left network mode
[  194.591048][ T3611] hsr_slave_0: left promiscuous mode
[  194.596754][ T3611] hsr_slave_1: left promiscuous mode
[  194.963738][ T3611] IPVS: stop unused estimator thread 0...
[  195.035633][ T3611] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.094693][ T3611] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.134423][ T3611] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.194145][ T3611] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.284583][ T3611] bridge_slave_1: left allmulticast mode
[  195.290246][ T3611] bridge_slave_1: left promiscuous mode
[  195.296032][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.303740][ T3611] bridge_slave_0: left allmulticast mode
[  195.310172][ T3611] bridge_slave_0: left promiscuous mode
[  195.315890][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.325080][ T3611] bridge_slave_1: left allmulticast mode
[  195.330842][ T3611] bridge_slave_1: left promiscuous mode
[  195.336585][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.344296][ T3611] bridge_slave_0: left allmulticast mode
[  195.349935][ T3611] bridge_slave_0: left promiscuous mode
[  195.355807][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.389312][ T3611] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  195.398353][ T3611] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  195.406918][ T3611] ip6gretap1 (unregistering): left promiscuous mode
[  195.413847][ T3611] ip6gretap1 (unregistering): left allmulticast mode
[  195.514148][ T3611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.523893][ T3611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.534273][ T3611] bond0 (unregistering): Released all slaves
[  195.542344][ T3611] bond1 (unregistering): Released all slaves
[  195.583856][ T3611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.593323][ T3611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.602657][ T3611] bond0 (unregistering): Released all slaves
[  195.654600][ T3611] tipc: Left network mode
[  195.662248][ T3611] hsr_slave_0: left promiscuous mode
[  195.667867][ T3611] hsr_slave_1: left promiscuous mode
[  195.673463][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.680817][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.688283][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.695694][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.703350][ T3611] hsr_slave_0: left promiscuous mode
[  195.708891][ T3611] hsr_slave_1: left promiscuous mode
[  195.714610][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.722077][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.731754][ T3611] veth1_macvtap: left promiscuous mode
[  195.737276][ T3611] veth0_macvtap: left promiscuous mode
[  195.742859][ T3611] veth1_vlan: left promiscuous mode
[  195.748053][ T3611] veth0_vlan: left promiscuous mode
[  195.800030][ T3611] team0 (unregistering): Port device team_slave_1 removed
[  195.810604][ T3611] team0 (unregistering): Port device team_slave_0 removed
[  195.843786][ T3611] team0 (unregistering): Port device team_slave_1 removed
[  195.853257][ T3611] team0 (unregistering): Port device team_slave_0 removed