last executing test programs:

3.568764944s ago: executing program 3 (id=2998):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getitimer(0x2, 0x0)

3.537372174s ago: executing program 3 (id=3000):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r5, &(0x7f0000006500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0)

3.15692239s ago: executing program 1 (id=3004):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f0000000280), 0x0, 0x100, 0x0)
r4 = getpid()
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
sendmmsg$inet(r0, &(0x7f0000002a40)=[{{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0xab1}, 0x18)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)

2.574637029s ago: executing program 3 (id=3011):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40)

2.417068942s ago: executing program 3 (id=3013):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b0000000700000001000100490000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0)

2.274858374s ago: executing program 1 (id=3016):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x2, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000600)=ANY=[], 0x5000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0)

2.135386966s ago: executing program 1 (id=3018):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000880)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9}, {0x7, 0x1, 0xcab5, 0x6}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000)

2.003649148s ago: executing program 1 (id=3022):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc3000000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x400c0b0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
writev(r3, 0x0, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r4, 0x541b, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
lseek(r5, 0x2b, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x10000, 0x0, 0xfffffff9, 0xe0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xb, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018e878c78689a5e3a67dafbdfae7b2d7f1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)

1.88507275s ago: executing program 1 (id=3023):
ioperm(0x4, 0x1, 0x4000000000000020)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
ioctl$FITRIM(r2, 0x40086604, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190a01", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0xc4000}, 0x40000040)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r3 = open(&(0x7f0000000480)='.\x00', 0x0, 0x1c0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"])
close(0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})

1.717387973s ago: executing program 1 (id=3026):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f0000000280), 0x0, 0x100, 0x0)
r4 = getpid()
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
sendmmsg$inet(r0, &(0x7f0000002a40)=[{{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0xab1}, 0x18)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)

1.708373233s ago: executing program 4 (id=3027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)

1.658286144s ago: executing program 4 (id=3029):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x2, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000600)=ANY=[], 0x5000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0)

1.622291174s ago: executing program 3 (id=3030):
open(0x0, 0x1011c2, 0x101)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_ext_show_extent\x00'}, 0x18)
socket$inet6_udplite(0xa, 0x2, 0x88)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.551491135s ago: executing program 0 (id=3031):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe0f)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.477576466s ago: executing program 0 (id=3032):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000880)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9}, {0x7, 0x1, 0xcab5, 0x6}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000)

1.476995246s ago: executing program 4 (id=3033):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x54}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.446945477s ago: executing program 4 (id=3034):
r0 = geteuid()
r1 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000ac0)={[{@grpjquota}, {@barrier}, {@dax_never}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdda}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@/\\:^+^'}}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==")
connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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")
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00')
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r5, r1, 0xffffffffffffffff]}}], 0x70, 0x40801}, 0x20008980)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=<r6=>0x0)
statx(r1, &(0x7f0000000100)='.\x02\x00', 0x1000, 0x10, &(0x7f0000000900))
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32=r6], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0)
ioprio_get$pid(0x2, 0x0)
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.389043868s ago: executing program 0 (id=3035):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc3000000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x400c0b0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
writev(r3, 0x0, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r4, 0x541b, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
lseek(r5, 0x2b, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x10000, 0x0, 0xfffffff9, 0xe0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xb, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018e878c78689a5e3a67dafbdfae7b2d7f1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)

1.316131339s ago: executing program 0 (id=3036):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYBLOB="01e2889df0c88fda451b737cd9c7a40ee63a8d9e71c872882fecd5c0741b66c85aa0fac055bb7e78b78e5a672c04893ae927b25815c6f32ff2565b428847957c23", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e000200", @ANYRES64=r1, @ANYBLOB="7293f208", @ANYRES32=0x0, @ANYBLOB="10000000000000da8328b5d4b8611d761144e300582173d749284509b182d3d25a49a266064db0fad8f66c241bf200a9e8961349a0caccab202fab7b08b63ab34bcaee2a0be11f51a6779297996b6d62dbfdf737743e69355e006ddf368bb44d60b54e2f1bbc1cd3eec41913236b7d8bfebef4b35afba58f383dc427baaf675d055fad9fbc61b17d0eb49abbcd389200cbe6"], 0x44, 0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000030601010000000000000000020000050900020073797a300000000005000100010000000900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4880)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = mq_open(&(0x7f0000000740)='\x00', 0x2, 0x40, &(0x7f0000000780)={0x101, 0x7, 0x81, 0x8})
mq_timedreceive(r7, &(0x7f00000007c0)=""/21, 0x15, 0x25e, 0x0)

1.25468071s ago: executing program 4 (id=3037):
ioperm(0x4, 0x1, 0x4000000000000020)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
ioctl$FITRIM(r2, 0x40086604, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190a01", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0xc4000}, 0x40000040)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r3 = open(&(0x7f0000000480)='.\x00', 0x0, 0x1c0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"])
close(0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})

1.025949144s ago: executing program 2 (id=3039):
creat(&(0x7f0000000200)='./file0\x00', 0x2c)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xd)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8d, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

981.429864ms ago: executing program 2 (id=3040):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b0000000700000001000100490000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0)

565.155401ms ago: executing program 4 (id=3041):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

514.629792ms ago: executing program 3 (id=3042):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20)
sendfile(r3, r2, 0x0, 0x7ffff000)

472.173983ms ago: executing program 0 (id=3043):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe0f)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

344.855665ms ago: executing program 0 (id=3044):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x2, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000600)=ANY=[], 0x5000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0)

140.480358ms ago: executing program 2 (id=3045):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000880)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9}, {0x7, 0x1, 0xcab5, 0x6}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000)

67.603249ms ago: executing program 2 (id=3046):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc3000000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x400c0b0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
writev(r3, 0x0, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r4, 0x541b, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
lseek(r5, 0x2b, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x10000, 0x0, 0xfffffff9, 0xe0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xb, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018e878c78689a5e3a67dafbdfae7b2d7f1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)

28.698009ms ago: executing program 2 (id=3047):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x54}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=3048):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r5, &(0x7f0000006500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0)

kernel console output (not intermixed with test programs):

_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.455496][T15284] EXT4-fs (loop1): 1 truncate cleaned up
[  373.461718][T15284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.501303][   T29] audit: type=1326 audit(1750092274.601:14661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.525073][   T29] audit: type=1326 audit(1750092274.601:14662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.548574][   T29] audit: type=1326 audit(1750092274.601:14663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.572246][   T29] audit: type=1326 audit(1750092274.601:14664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.595882][   T29] audit: type=1326 audit(1750092274.601:14665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.619483][   T29] audit: type=1326 audit(1750092274.601:14666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.643073][   T29] audit: type=1326 audit(1750092274.601:14667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.733210][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  373.738498][ T2997] loop3: partition table partially beyond EOD, truncated
[  373.762104][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  373.764570][T15325] loop0: detected capacity change from 0 to 512
[  373.768740][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  373.783473][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  373.790920][T15325] EXT4-fs: dax option not supported
[  373.801695][   T29] audit: type=1326 audit(1750092274.969:14668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15324 comm="syz.0.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.832659][   T29] audit: type=1326 audit(1750092275.000:14669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15324 comm="syz.0.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  373.860939][T15325] loop0: detected capacity change from 0 to 512
[  373.868801][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  373.874113][ T2997] loop3: partition table partially beyond EOD, truncated
[  373.876460][T15325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  373.882941][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  373.894183][T15325] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  373.896562][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  373.904856][T15325] System zones: 0-2, 18-18, 34-34
[  373.918707][T15325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.932899][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  374.004915][T15325] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  374.023338][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.036537][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  374.041956][ T2997] loop3: partition table partially beyond EOD, truncated
[  374.056789][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  374.063341][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  374.072681][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  374.232849][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.251596][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  374.256936][ T2997] loop3: partition table partially beyond EOD, truncated
[  374.666354][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  374.672903][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  374.682295][T15417] loop2: detected capacity change from 0 to 512
[  374.701832][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  374.715191][T15417] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2671: casefold flag without casefold feature
[  374.739427][T15417] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2671: couldn't read orphan inode 15 (err -117)
[  374.773523][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2672'.
[  374.786556][T15417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.812878][T15432] loop4: detected capacity change from 0 to 1024
[  374.824472][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  374.826775][T15417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.829739][ T2997] loop3: partition table partially beyond EOD, truncated
[  374.842242][T15432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.846336][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  374.864825][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  374.949522][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  374.956598][T15452] loop0: detected capacity change from 0 to 512
[  374.957072][T15452] EXT4-fs: dax option not supported
[  374.970621][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.008467][T15452] loop0: detected capacity change from 0 to 512
[  375.009466][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2676'.
[  375.025057][T15452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  375.040918][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  375.046251][ T2997] loop3: partition table partially beyond EOD, truncated
[  375.055504][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  375.062004][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  375.072379][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  375.075383][T15467] loop4: detected capacity change from 0 to 1024
[  375.087301][T15452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  375.107928][T15452] System zones: 0-2, 18-18, 34-34
[  375.123511][T15452] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.231420][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  375.233688][T15491] loop2: detected capacity change from 0 to 512
[  375.236740][ T2997] loop3: partition table partially beyond EOD, truncated
[  375.250723][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  375.257233][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  375.265906][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  375.317380][T15511] lo speed is unknown, defaulting to 1000
[  375.369774][T15511] loop1: detected capacity change from 0 to 512
[  375.376681][T15511] EXT4-fs: Ignoring removed mblk_io_submit option
[  375.383274][T15511] EXT4-fs: Ignoring removed bh option
[  375.392430][T15511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  375.477018][T15511] EXT4-fs (loop1): 1 truncate cleaned up
[  375.498697][T15491] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2682: bg 0: block 5: invalid block bitmap
[  375.577929][T15544] bond2: entered promiscuous mode
[  375.583133][T15544] bond2: entered allmulticast mode
[  375.596618][T15491] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  375.649111][T15544] 8021q: adding VLAN 0 to HW filter on device bond2
[  375.658024][T15491] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2682: invalid indirect mapped block 3 (level 2)
[  375.674636][T15544] bond2 (unregistering): Released all slaves
[  375.687556][T15590] loop4: detected capacity change from 0 to 1024
[  375.698288][T15586] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  375.713096][T15491] EXT4-fs (loop2): 2 truncates cleaned up
[  375.876903][T15641] loop2: detected capacity change from 0 to 1024
[  375.893163][T15641] EXT4-fs: Ignoring removed orlov option
[  375.898889][T15641] EXT4-fs: Ignoring removed nomblk_io_submit option
[  376.067253][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'.
[  376.101686][T15661] loop4: detected capacity change from 0 to 512
[  376.114577][T15663] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.146809][T15663] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.175650][T15659] loop0: detected capacity change from 0 to 1024
[  376.183815][T15663] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.197122][T15661] EXT4-fs (loop4): 1 orphan inode deleted
[  376.205663][   T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[  376.228260][T15663] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.253142][T15661] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.276706][T15663] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.288704][T15663] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.300605][T15663] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.312538][T15663] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.332241][T15661] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  376.361110][T15661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2691'.
[  376.534341][T15720] loop4: detected capacity change from 0 to 512
[  376.576109][T15720] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2697: casefold flag without casefold feature
[  376.617940][T15720] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2697: couldn't read orphan inode 15 (err -117)
[  376.749393][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'.
[  376.787809][T15750] loop4: detected capacity change from 0 to 1024
[  377.047022][T15770] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  377.070904][T15776] loop0: detected capacity change from 0 to 512
[  377.146760][T15776] EXT4-fs (loop0): 1 orphan inode deleted
[  377.156819][T15778] bond4: entered promiscuous mode
[  377.162085][T15778] bond4: entered allmulticast mode
[  377.167758][  T407] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[  377.181653][T15776] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.201970][T15778] 8021q: adding VLAN 0 to HW filter on device bond4
[  377.214196][T15778] bond4 (unregistering): Released all slaves
[  377.261017][T15860] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2708'.
[  377.318769][T15776] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  377.326519][T15824] lo speed is unknown, defaulting to 1000
[  377.647987][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  377.653296][ T2997] loop3: partition table partially beyond EOD, truncated
[  377.656449][T15912] loop2: detected capacity change from 0 to 512
[  377.674917][T15912] EXT4-fs: dax option not supported
[  377.688742][T15912] loop2: detected capacity change from 0 to 512
[  377.764540][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  377.771093][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  377.778740][T15912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  377.791266][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  377.801562][T15912] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  377.840896][T15912] System zones: 0-2, 18-18, 34-34
[  377.851878][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2717'.
[  377.881664][T15912] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.892923][T15941] loop4: detected capacity change from 0 to 1024
[  377.899697][T15945] loop0: detected capacity change from 0 to 512
[  377.909488][T15945] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2720: casefold flag without casefold feature
[  377.926469][T15945] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2720: couldn't read orphan inode 15 (err -117)
[  377.982194][T15955] loop1: detected capacity change from 0 to 1024
[  377.989711][T15955] EXT4-fs: Ignoring removed orlov option
[  377.995609][T15955] EXT4-fs: Ignoring removed nomblk_io_submit option
[  378.296036][T15984] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  378.348767][   T29] kauditd_printk_skb: 237 callbacks suppressed
[  378.348865][   T29] audit: type=1326 audit(1750092279.735:14905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa387fe929 code=0x7ffc0000
[  378.441428][   T29] audit: type=1326 audit(1750092279.777:14906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ffa387fe929 code=0x7ffc0000
[  378.465112][   T29] audit: type=1326 audit(1750092279.777:14907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa387fe929 code=0x7ffc0000
[  378.492685][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'.
[  378.540101][T16000] loop1: detected capacity change from 0 to 256
[  378.556386][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  378.561709][ T2997] loop3: partition table partially beyond EOD, truncated
[  378.571485][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  378.577998][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  378.607121][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  378.702562][T16018] loop1: detected capacity change from 0 to 1024
[  378.723227][T16018] EXT4-fs: Ignoring removed bh option
[  378.741299][T16018] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  378.778571][T16018] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.2731: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  378.821262][T16018] EXT4-fs (loop1): Remounting filesystem read-only
[  378.941882][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  378.947185][ T2997] loop3: partition table partially beyond EOD, truncated
[  378.960792][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  378.967362][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  378.983711][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  378.992725][T16041] netlink: 'syz.4.2733': attribute type 3 has an invalid length.
[  378.995774][   T29] audit: type=1326 audit(1750092280.418:14908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16044 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa387fe929 code=0x7ffc0000
[  379.024318][   T29] audit: type=1326 audit(1750092280.418:14909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16044 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffa387fe929 code=0x7ffc0000
[  379.031248][T16049] loop0: detected capacity change from 0 to 512
[  379.051664][   T29] audit: type=1326 audit(1750092280.428:14910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16044 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa387fe929 code=0x7ffc0000
[  379.078092][   T29] audit: type=1326 audit(1750092280.428:14911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16044 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa387fe929 code=0x7ffc0000
[  379.104746][T16049] EXT4-fs: Ignoring removed mblk_io_submit option
[  379.111343][T16049] EXT4-fs: Ignoring removed bh option
[  379.123256][T16049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  379.136618][T16049] EXT4-fs (loop0): 1 truncate cleaned up
[  379.173110][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  379.178400][ T2997] loop3: partition table partially beyond EOD, truncated
[  379.178639][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2740'.
[  379.196580][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  379.203096][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  379.216280][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  379.226068][T16073] loop1: detected capacity change from 0 to 1024
[  379.239033][T16072] loop2: detected capacity change from 0 to 512
[  379.295780][T16072] EXT4-fs (loop2): 1 orphan inode deleted
[  379.307157][T16072] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.317646][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  379.317662][ T2997] loop3: partition table partially beyond EOD, truncated
[  379.317732][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  379.317761][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  379.319326][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  379.350968][   T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  379.360895][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[  379.403797][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  379.409137][ T2997] loop3: partition table partially beyond EOD, truncated
[  379.424137][T16123] loop4: detected capacity change from 0 to 512
[  379.444987][T16123] EXT4-fs: dax option not supported
[  379.455608][T16127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2746'.
[  379.466320][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  379.472848][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  379.489188][T16123] loop4: detected capacity change from 0 to 512
[  379.508289][T16072] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  379.519745][T16135] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2738'.
[  379.529045][T16123] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  379.529161][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  379.589843][T16123] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  379.612690][T16123] System zones: 0-2, 18-18, 34-34
[  379.620248][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  379.625503][ T2997] loop3: partition table partially beyond EOD, truncated
[  379.634428][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  379.641177][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  379.649131][T16123] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.650348][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  379.726232][T16166] loop0: detected capacity change from 0 to 128
[  379.764830][T16166] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  379.772807][T16166] FAT-fs (loop0): Filesystem has been set read-only
[  379.807888][T16166] syz.0.2747: attempt to access beyond end of device
[  379.807888][T16166] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  379.890897][T16166] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  379.898863][T16166] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  379.994992][   T29] audit: type=1326 audit(1750092281.467:14912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16169 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9cce929 code=0x7ffc0000
[  380.018703][   T29] audit: type=1326 audit(1750092281.467:14913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16169 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f45d9cce929 code=0x7ffc0000
[  380.137970][T16170] bond2: entered promiscuous mode
[  380.143142][T16170] bond2: entered allmulticast mode
[  380.149104][T16170] 8021q: adding VLAN 0 to HW filter on device bond2
[  380.159677][T16170] bond2 (unregistering): Released all slaves
[  380.189262][T16185] xt_CT: No such helper "pptp"
[  380.212728][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2752'.
[  380.225359][T16256] loop4: detected capacity change from 0 to 1024
[  380.265780][T16258] loop1: detected capacity change from 0 to 1024
[  380.473379][T16287] loop0: detected capacity change from 0 to 1024
[  380.484419][T16287] EXT4-fs: Ignoring removed bh option
[  380.506310][T16287] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  380.530653][T16298] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.586981][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  380.592476][ T2997] loop3: partition table partially beyond EOD, truncated
[  380.601151][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  380.601567][T16298] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.607725][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  380.627807][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  380.630864][T16287] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.2758: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  380.685199][T16298] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.736517][T16298] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.767808][T16323] lo speed is unknown, defaulting to 1000
[  380.822089][T16323] loop2: detected capacity change from 0 to 512
[  380.829017][T16323] EXT4-fs: Ignoring removed mblk_io_submit option
[  380.835498][T16323] EXT4-fs: Ignoring removed bh option
[  380.846919][T16323] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  380.876809][T16298] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.891231][T16298] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.905295][T16298] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.918753][T16298] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.005517][T16323] EXT4-fs (loop2): 1 truncate cleaned up
[  381.194885][T16287] EXT4-fs (loop0): Remounting filesystem read-only
[  381.212187][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  381.217482][ T2997] loop3: partition table partially beyond EOD, truncated
[  381.233375][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  381.239934][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  381.252658][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  381.296023][T16366] bond4: entered promiscuous mode
[  381.301193][T16366] bond4: entered allmulticast mode
[  381.306961][T16366] 8021q: adding VLAN 0 to HW filter on device bond4
[  381.317596][T16366] bond4 (unregistering): Released all slaves
[  381.327329][T16371] loop4: detected capacity change from 0 to 1024
[  381.356905][T16371] EXT4-fs: Ignoring removed orlov option
[  381.362695][T16371] EXT4-fs: Ignoring removed nomblk_io_submit option
[  381.471091][T16463] bond3: entered promiscuous mode
[  381.476260][T16463] bond3: entered allmulticast mode
[  381.485812][T16463] 8021q: adding VLAN 0 to HW filter on device bond3
[  381.492570][T16480] loop1: detected capacity change from 0 to 128
[  381.514376][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  381.525213][T16480] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  381.533134][T16480] FAT-fs (loop1): Filesystem has been set read-only
[  381.540009][T16480] syz.1.2768: attempt to access beyond end of device
[  381.540009][T16480] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  381.577871][T16518] loop0: detected capacity change from 0 to 256
[  381.619749][T16463] bond3 (unregistering): Released all slaves
[  381.627683][T16480] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  381.635709][T16480] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  381.655376][T16521] loop2: detected capacity change from 0 to 1024
[  381.689192][T16366] lo speed is unknown, defaulting to 1000
[  381.818434][T16593] loop4: detected capacity change from 0 to 512
[  381.846133][T16593] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2771: casefold flag without casefold feature
[  381.875775][T16593] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2771: couldn't read orphan inode 15 (err -117)
[  381.905536][T16602] loop1: detected capacity change from 0 to 512
[  381.942648][T16613] xt_CT: No such helper "pptp"
[  381.968548][T16602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2773: bg 0: block 5: invalid block bitmap
[  381.981111][T16623] loop2: detected capacity change from 0 to 512
[  381.997066][T16623] EXT4-fs: dax option not supported
[  382.003844][T16627] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.026222][T16602] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  382.040570][T16627] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.054160][T16602] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2773: invalid indirect mapped block 3 (level 2)
[  382.075202][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  382.076292][T16602] EXT4-fs (loop1): 2 truncates cleaned up
[  382.080456][ T2997] loop3: partition table partially beyond EOD, truncated
[  382.103210][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  382.109797][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  382.117650][T16627] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.119497][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  382.157133][T16658] loop2: detected capacity change from 0 to 1024
[  382.171047][T16627] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.173066][T16658] EXT4-fs: Ignoring removed orlov option
[  382.186722][T16658] EXT4-fs: Ignoring removed nomblk_io_submit option
[  382.192390][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  382.198633][ T2997] loop3: partition table partially beyond EOD, truncated
[  382.206128][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  382.212636][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  382.222218][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  382.245463][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  382.250930][ T2997] loop3: partition table partially beyond EOD, truncated
[  382.258317][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  382.264907][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  382.274976][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  382.292054][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'.
[  382.305874][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  382.311266][ T2997] loop3: partition table partially beyond EOD, truncated
[  382.318645][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  382.325169][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  382.335665][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  382.363105][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  382.368376][ T2997] loop3: partition table partially beyond EOD, truncated
[  382.376244][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  382.379327][T16721] loop2: detected capacity change from 0 to 512
[  382.382742][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  382.392594][T16721] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2785: casefold flag without casefold feature
[  382.398863][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  382.410673][T16721] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2785: couldn't read orphan inode 15 (err -117)
[  382.437164][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  382.442439][ T2997] loop3: partition table partially beyond EOD, truncated
[  382.458959][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  382.465511][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  382.476428][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  382.495704][T16734] bond4: entered promiscuous mode
[  382.500841][T16734] bond4: entered allmulticast mode
[  382.515507][T16734] 8021q: adding VLAN 0 to HW filter on device bond4
[  382.555707][T16734] bond4 (unregistering): Released all slaves
[  382.811388][T16820] loop2: detected capacity change from 0 to 512
[  382.833423][T16820] EXT4-fs: Ignoring removed i_version option
[  382.955722][T16825] lo speed is unknown, defaulting to 1000
[  382.988696][T16825] loop0: detected capacity change from 0 to 512
[  382.995494][T16825] EXT4-fs: Ignoring removed mblk_io_submit option
[  383.002022][T16825] EXT4-fs: Ignoring removed bh option
[  383.018174][T16825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  383.038850][T16856] loop1: detected capacity change from 0 to 512
[  383.171996][T16825] EXT4-fs (loop0): 1 truncate cleaned up
[  383.269183][T16856] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2790: casefold flag without casefold feature
[  383.347933][T16856] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2790: couldn't read orphan inode 15 (err -117)
[  383.419138][   T29] kauditd_printk_skb: 241 callbacks suppressed
[  383.419153][   T29] audit: type=1326 audit(1750092285.069:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.449069][   T29] audit: type=1326 audit(1750092285.069:15156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.507130][T16873] bond3: entered promiscuous mode
[  383.512223][T16873] bond3: entered allmulticast mode
[  383.542377][   T29] audit: type=1326 audit(1750092285.111:15157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.553185][T16873] 8021q: adding VLAN 0 to HW filter on device bond3
[  383.566122][   T29] audit: type=1326 audit(1750092285.111:15158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.596243][   T29] audit: type=1326 audit(1750092285.111:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.619896][   T29] audit: type=1326 audit(1750092285.132:15160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.643621][   T29] audit: type=1326 audit(1750092285.132:15161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.667403][   T29] audit: type=1326 audit(1750092285.132:15162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.691253][   T29] audit: type=1326 audit(1750092285.132:15163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.691324][T16913] loop0: detected capacity change from 0 to 1024
[  383.721393][   T29] audit: type=1326 audit(1750092285.142:15164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  383.749313][T16916] loop1: detected capacity change from 0 to 512
[  383.762650][T16873] bond3 (unregistering): Released all slaves
[  383.774600][T16916] EXT4-fs: dax option not supported
[  383.852978][T16916] loop1: detected capacity change from 0 to 512
[  383.903595][T16916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  383.943746][T16913] lo speed is unknown, defaulting to 1000
[  383.963959][T16916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  383.994044][T16916] System zones: 0-2, 18-18, 34-34
[  384.021188][T16916] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.039986][T16994] loop2: detected capacity change from 0 to 1024
[  384.078947][T16994] EXT4-fs: Ignoring removed orlov option
[  384.084793][T16994] EXT4-fs: Ignoring removed nomblk_io_submit option
[  384.113448][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'.
[  384.170588][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  384.175877][ T2997] loop3: partition table partially beyond EOD, truncated
[  384.184039][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  384.190649][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  384.199485][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  384.363387][T17017] bond3: entered promiscuous mode
[  384.368562][T17017] bond3: entered allmulticast mode
[  384.377399][T17017] 8021q: adding VLAN 0 to HW filter on device bond3
[  384.394584][T17073] loop0: detected capacity change from 0 to 1024
[  384.406636][T17017] bond3 (unregistering): Released all slaves
[  384.602922][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  384.608283][ T2997] loop3: partition table partially beyond EOD, truncated
[  384.617281][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  384.623898][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  384.647418][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  384.659270][  T407] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.715954][T17120] lo speed is unknown, defaulting to 1000
[  384.772492][T16627] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.799601][  T407] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.830493][T16627] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.842318][T16627] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.853839][T16627] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.863275][T17146] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.919831][  T407] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.939612][T17146] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.006969][T17146] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.021676][  T407] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.050085][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  385.055487][ T2997] loop3: partition table partially beyond EOD, truncated
[  385.062783][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  385.069276][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  385.079174][T17146] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.091152][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  385.173626][T17120] chnl_net:caif_netlink_parms(): no params data found
[  385.186079][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'.
[  385.222038][T17146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.224409][T17307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'.
[  385.260422][  T407] bridge_slave_1: left allmulticast mode
[  385.266211][  T407] bridge_slave_1: left promiscuous mode
[  385.271943][  T407] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.299675][  T407] bridge_slave_0: left allmulticast mode
[  385.305626][  T407] bridge_slave_0: left promiscuous mode
[  385.311569][  T407] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.438782][  T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  385.454861][  T407] bond_slave_0: left promiscuous mode
[  385.468441][  T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.488566][T17322] loop4: detected capacity change from 0 to 1024
[  385.495269][  T407] bond_slave_1: left promiscuous mode
[  385.511816][  T407] bond0 (unregistering): Released all slaves
[  385.533242][  T407] bond1 (unregistering): Released all slaves
[  385.553015][  T407] bond2 (unregistering): Released all slaves
[  385.579096][  T407] bond3 (unregistering): Released all slaves
[  385.597920][  T407] bond4 (unregistering): Released all slaves
[  385.625797][T17146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.668392][T17321] bond2: entered promiscuous mode
[  385.673567][T17321] bond2: entered allmulticast mode
[  385.682881][T17321] 8021q: adding VLAN 0 to HW filter on device bond2
[  385.702080][T17321] bond2 (unregistering): Released all slaves
[  385.731265][T17146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.747606][  T407] hsr_slave_0: left promiscuous mode
[  385.759294][  T407] hsr_slave_1: left promiscuous mode
[  385.778973][  T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.786523][  T407] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.812227][  T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.819790][  T407] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.833099][  T407] veth1_macvtap: left promiscuous mode
[  385.838729][  T407] veth0_macvtap: left promiscuous mode
[  385.844264][  T407] veth1_vlan: left promiscuous mode
[  385.851129][  T407] veth0_vlan: left promiscuous mode
[  386.002238][  T407] team0 (unregistering): Port device team_slave_1 removed
[  386.057613][  T407] team0 (unregistering): Port device team_slave_0 removed
[  386.088814][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  386.094133][ T2997] loop3: partition table partially beyond EOD, truncated
[  386.113556][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  386.120058][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  386.151018][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  386.192176][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  386.197538][ T2997] loop3: partition table partially beyond EOD, truncated
[  386.208757][T17146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.220889][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  386.227540][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  386.238802][ T3403] lo speed is unknown, defaulting to 1000
[  386.239775][ T2997] loop3: p5 size 8388352 extends beyond EOD, 
[  386.244732][ T3403] infiniband syz0: ib_query_port failed (-19)
[  386.244741][ T2997] truncated
[  386.268386][T17120] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.275581][T17120] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.282917][T17120] bridge_slave_0: entered allmulticast mode
[  386.289895][T17120] bridge_slave_0: entered promiscuous mode
[  386.311637][T17487] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.324516][T17120] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.331646][T17120] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.384772][T17120] bridge_slave_1: entered allmulticast mode
[  386.391147][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  386.396386][ T2997] loop3: partition table partially beyond EOD, truncated
[  386.411724][T17120] bridge_slave_1: entered promiscuous mode
[  386.422755][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  386.429292][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  386.453571][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  386.466105][T17487] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.521437][T17565] loop4: detected capacity change from 0 to 512
[  386.528158][T17565] EXT4-fs: Ignoring removed mblk_io_submit option
[  386.534802][T17565] EXT4-fs: Ignoring removed bh option
[  386.541590][T17487] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.541997][T17565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  386.562799][  T407] IPVS: stop unused estimator thread 0...
[  386.571184][T17120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.588996][T17565] EXT4-fs (loop4): 1 truncate cleaned up
[  386.611352][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  386.616729][ T2997] loop3: partition table partially beyond EOD, truncated
[  386.620148][T17576] bond4: entered promiscuous mode
[  386.628967][T17576] bond4: entered allmulticast mode
[  386.635749][T17576] 8021q: adding VLAN 0 to HW filter on device bond4
[  386.636617][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  386.648961][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  386.658977][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  386.668392][T17576] bond4 (unregistering): Released all slaves
[  386.689580][T17487] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.708246][T17120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.729442][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  386.734733][ T2997] loop3: partition table partially beyond EOD, truncated
[  386.746838][T17499] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  386.766720][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  386.773345][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  386.783647][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  386.792278][T17120] team0: Port device team_slave_0 added
[  386.799650][T17120] team0: Port device team_slave_1 added
[  386.841946][T17487] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.856496][T17487] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.980460][T17487] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.992217][T17487] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.000998][T17120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.008206][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.034318][T17120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.091703][T17120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.094273][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  387.098837][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.133709][T17120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.243179][T17120] hsr_slave_0: entered promiscuous mode
[  387.270954][T17120] hsr_slave_1: entered promiscuous mode
[  387.280914][T17120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.288852][T17805] xt_CT: No such helper "pptp"
[  387.293700][T17823] xt_CT: No such helper "pptp"
[  387.328074][T17120] Cannot create hsr debugfs directory
[  387.366896][T17830] loop2: detected capacity change from 0 to 512
[  387.384702][T17840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2825'.
[  387.411710][T17847] loop0: detected capacity change from 0 to 512
[  387.433944][T17847] EXT4-fs: dax option not supported
[  387.483186][T17830] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2824: casefold flag without casefold feature
[  387.510086][T17847] loop0: detected capacity change from 0 to 512
[  387.527079][T17830] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2824: couldn't read orphan inode 15 (err -117)
[  387.613336][T17847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  387.668662][T17847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  387.750324][T17847] System zones: 0-2, 18-18, 34-34
[  387.823616][T17847] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.970785][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  387.976070][ T2997] loop3: partition table partially beyond EOD, truncated
[  387.986119][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  387.992659][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  388.025811][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  388.139207][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'.
[  388.187547][T17998] loop0: detected capacity change from 0 to 1024
[  388.194155][T17981] loop2: detected capacity change from 0 to 256
[  388.201913][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2833'.
[  388.211764][T17959] bond3: entered promiscuous mode
[  388.216843][T17959] bond3: entered allmulticast mode
[  388.226616][T17959] 8021q: adding VLAN 0 to HW filter on device bond3
[  388.255371][T17959] bond3 (unregistering): Released all slaves
[  388.261801][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'.
[  388.337055][T17120] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  388.348221][T18036] loop4: detected capacity change from 0 to 1024
[  388.354665][   T29] kauditd_printk_skb: 228 callbacks suppressed
[  388.354679][   T29] audit: type=1326 audit(1750092290.245:15393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  388.384598][   T29] audit: type=1326 audit(1750092290.245:15394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  388.434868][T17120] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  388.474101][T18097] FAULT_INJECTION: forcing a failure.
[  388.474101][T18097] name failslab, interval 1, probability 0, space 0, times 0
[  388.486873][T18097] CPU: 0 UID: 0 PID: 18097 Comm: syz.2.2835 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  388.486899][T18097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  388.486912][T18097] Call Trace:
[  388.486919][T18097]  <TASK>
[  388.486927][T18097]  __dump_stack+0x1d/0x30
[  388.486988][T18097]  dump_stack_lvl+0xe8/0x140
[  388.487007][T18097]  dump_stack+0x15/0x1b
[  388.487027][T18097]  should_fail_ex+0x265/0x280
[  388.487067][T18097]  should_failslab+0x8c/0xb0
[  388.487165][T18097]  kmem_cache_alloc_noprof+0x50/0x310
[  388.487267][T18097]  ? alloc_empty_file+0x76/0x200
[  388.487363][T18097]  alloc_empty_file+0x76/0x200
[  388.487404][T18097]  alloc_file_pseudo+0xc6/0x160
[  388.487437][T18097]  __shmem_file_setup+0x1de/0x210
[  388.487475][T18097]  shmem_file_setup+0x3b/0x50
[  388.487513][T18097]  __se_sys_memfd_create+0x2c3/0x590
[  388.487581][T18097]  __x64_sys_memfd_create+0x31/0x40
[  388.487622][T18097]  x64_sys_call+0x122f/0x2fb0
[  388.487649][T18097]  do_syscall_64+0xd2/0x200
[  388.487693][T18097]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  388.487767][T18097]  ? clear_bhb_loop+0x40/0x90
[  388.487794][T18097]  ? clear_bhb_loop+0x40/0x90
[  388.487827][T18097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.487906][T18097] RIP: 0033:0x7f0fcd82e929
[  388.487923][T18097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.487943][T18097] RSP: 002b:00007f0fcbe96e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  388.487966][T18097] RAX: ffffffffffffffda RBX: 00000000000005aa RCX: 00007f0fcd82e929
[  388.487983][T18097] RDX: 00007f0fcbe96ef0 RSI: 0000000000000000 RDI: 00007f0fcd8b14cc
[  388.487999][T18097] RBP: 0000200000001940 R08: 00007f0fcbe96bb7 R09: 00007f0fcbe96e40
[  388.488078][T18097] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040
[  388.488094][T18097] R13: 00007f0fcbe96ef0 R14: 00007f0fcbe96eb0 R15: 0000200000000100
[  388.488112][T18097]  </TASK>
[  388.495851][T17120] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  388.745125][T17120] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  388.870157][T17120] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.892453][T17120] 8021q: adding VLAN 0 to HW filter on device team0
[  388.933686][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.940798][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.965642][T18135] loop0: detected capacity change from 0 to 512
[  388.984649][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.991954][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.001543][T18135] EXT4-fs: dax option not supported
[  389.010505][   T29] audit: type=1326 audit(1750092290.938:15395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  389.034222][   T29] audit: type=1326 audit(1750092290.938:15396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  389.055071][T17120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  389.057925][   T29] audit: type=1326 audit(1750092290.938:15397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  389.068271][T17120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.276016][   T29] audit: type=1326 audit(1750092290.938:15398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  389.299848][   T29] audit: type=1326 audit(1750092290.938:15399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd6eb39e963 code=0x7ffc0000
[  389.323579][   T29] audit: type=1326 audit(1750092290.938:15400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd6eb39d3df code=0x7ffc0000
[  389.347077][   T29] audit: type=1326 audit(1750092290.938:15401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd6eb39e9b7 code=0x7ffc0000
[  389.370708][   T29] audit: type=1326 audit(1750092290.938:15402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.0.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6eb39d290 code=0x7ffc0000
[  389.385210][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  389.399586][ T2997] loop3: partition table partially beyond EOD, truncated
[  389.428160][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  389.434646][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  389.548951][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  389.601919][T17120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.660229][T18185] loop0: detected capacity change from 0 to 128
[  389.727913][T18181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2842'.
[  390.299673][   T51] kworker/u8:3: attempt to access beyond end of device
[  390.299673][   T51] loop0: rw=1, sector=145, nr_sectors = 896 limit=128
[  390.338324][T17120] veth0_vlan: entered promiscuous mode
[  390.349779][T18219] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  390.375230][T17120] veth1_vlan: entered promiscuous mode
[  390.430903][T18229] loop4: detected capacity change from 0 to 512
[  390.443191][T18229] EXT4-fs: Ignoring removed i_version option
[  390.458348][T18230] loop0: detected capacity change from 0 to 512
[  390.468447][T17120] veth0_macvtap: entered promiscuous mode
[  390.495350][T18229] EXT4-fs mount: 72 callbacks suppressed
[  390.495369][T18229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.504671][T17120] veth1_macvtap: entered promiscuous mode
[  390.525286][T18230] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2847: casefold flag without casefold feature
[  390.552038][T18230] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2847: couldn't read orphan inode 15 (err -117)
[  390.591269][T17120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.607966][T18230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.624716][T17120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.652670][T17120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.661571][T17120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.670332][T17120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.679164][T17120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.694735][T18230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.867321][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  390.872595][ T2997] loop3: partition table partially beyond EOD, truncated
[  390.898631][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  390.905298][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  390.925662][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  390.970800][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'.
[  391.021225][T18277] loop1: detected capacity change from 0 to 512
[  391.027918][T18277] EXT4-fs: Ignoring removed mblk_io_submit option
[  391.034449][T18277] EXT4-fs: Ignoring removed bh option
[  391.057137][T18277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  391.074379][T18277] EXT4-fs (loop1): 1 truncate cleaned up
[  391.080629][T18277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.102345][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  391.107810][ T2997] loop3: partition table partially beyond EOD, truncated
[  391.123257][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  391.129781][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  391.143487][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  391.175965][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  391.181272][ T2997] loop3: partition table partially beyond EOD, truncated
[  391.188802][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  391.195333][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  391.223783][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  391.327098][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.362294][T18331] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  391.621198][T18365] loop4: detected capacity change from 0 to 512
[  391.634357][T18370] loop2: detected capacity change from 0 to 128
[  391.657850][T18370] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  391.665827][T18370] FAT-fs (loop2): Filesystem has been set read-only
[  391.681867][T18370] syz.2.2856: attempt to access beyond end of device
[  391.681867][T18370] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  391.723553][T17120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.729983][T18370] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  391.739414][T18365] EXT4-fs (loop4): 1 orphan inode deleted
[  391.740392][T18370] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  391.753130][ T3441] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[  391.771395][T18365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.784186][T18365] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  391.822558][T18365] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  391.846146][T18387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2855'.
[  391.850433][T18386] loop1: detected capacity change from 0 to 512
[  391.906549][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.907810][T18386] EXT4-fs: dax option not supported
[  391.923267][T18395] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.990528][T18395] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.014107][T18413] bond0: entered promiscuous mode
[  392.019392][T18413] bond_slave_0: entered promiscuous mode
[  392.025219][T18413] bond_slave_1: entered promiscuous mode
[  392.048507][T18395] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.084533][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  392.089887][ T2997] loop3: partition table partially beyond EOD, truncated
[  392.097988][T18395] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.120140][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  392.126724][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  392.142598][T18395] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.154639][T18395] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.166061][T18395] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.177842][T18395] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.182676][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  392.350004][T18444] xt_CT: No such helper "pptp"
[  392.352557][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  392.360040][ T2997] loop3: partition table partially beyond EOD, truncated
[  392.384377][T18465] loop2: detected capacity change from 0 to 512
[  392.391003][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  392.397536][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  392.500667][T18465] EXT4-fs: dax option not supported
[  392.538707][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  392.572377][T18465] loop2: detected capacity change from 0 to 512
[  392.685606][T18465] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  392.771825][T18465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  392.784347][T18465] System zones: 0-2, 18-18, 34-34
[  392.801032][T18465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.829842][T18465] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.843383][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  392.845427][T18515] bond2: entered promiscuous mode
[  392.848672][ T2997] loop3: partition table partially beyond EOD, truncated
[  392.853732][T18515] bond2: entered allmulticast mode
[  392.866254][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  392.872712][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  392.881669][T18515] 8021q: adding VLAN 0 to HW filter on device bond2
[  392.892990][T18564] loop4: detected capacity change from 0 to 1024
[  392.899938][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  392.908429][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.920115][T18523] SELinux: syz.1.2875 (18523) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  392.936578][T18515] bond2 (unregistering): Released all slaves
[  392.979629][T18612] loop2: detected capacity change from 0 to 1024
[  393.050030][T18616] loop1: detected capacity change from 0 to 512
[  393.092377][T18612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.120795][T18616] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2877: casefold flag without casefold feature
[  393.139461][T18616] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2877: couldn't read orphan inode 15 (err -117)
[  393.161771][T18616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.177792][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  393.183168][ T2997] loop3: partition table partially beyond EOD, truncated
[  393.191279][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  393.197793][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  393.205510][T18616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.216720][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  393.265452][   T29] kauditd_printk_skb: 141 callbacks suppressed
[  393.265470][   T29] audit: type=1326 audit(1750092295.400:15543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18650 comm="syz.3.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.314222][   T29] audit: type=1326 audit(1750092295.442:15544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18650 comm="syz.3.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.337808][   T29] audit: type=1326 audit(1750092295.442:15545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18650 comm="syz.3.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.361693][   T29] audit: type=1326 audit(1750092295.442:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18650 comm="syz.3.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.385235][   T29] audit: type=1326 audit(1750092295.442:15547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18650 comm="syz.3.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.455450][   T29] audit: type=1326 audit(1750092295.599:15548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.494258][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  393.499628][ T2997] loop3: partition table partially beyond EOD, truncated
[  393.507592][   T29] audit: type=1326 audit(1750092295.599:15549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.531536][   T29] audit: type=1326 audit(1750092295.599:15550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.555435][   T29] audit: type=1326 audit(1750092295.599:15551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.555470][   T29] audit: type=1326 audit(1750092295.599:15552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff047ade929 code=0x7ffc0000
[  393.557746][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  393.557770][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  393.558475][T18670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.560337][ T2997] loop3: p5 size 8388352 extends beyond EOD, 
[  393.620163][T18668] loop0: detected capacity change from 0 to 512
[  393.620790][ T2997] truncated
[  393.656281][T18680] xt_CT: No such helper "pptp"
[  393.672839][T18668] EXT4-fs (loop0): 1 orphan inode deleted
[  393.679627][T18668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.695761][T18670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.708084][T18668] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.719402][ T1667] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  393.730921][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  393.736302][ T2997] loop3: partition table partially beyond EOD, truncated
[  393.744060][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  393.750819][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  393.759808][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  393.792785][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  393.798101][ T2997] loop3: partition table partially beyond EOD, truncated
[  393.806199][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  393.812807][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  393.819894][T18668] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  393.821823][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  393.829952][T18670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.856751][T18681] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2884'.
[  393.886298][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.886898][T18713] netlink: 'syz.4.2888': attribute type 3 has an invalid length.
[  393.940938][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.952219][T18670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.079635][T18714] bond4: entered promiscuous mode
[  394.084719][T18714] bond4: entered allmulticast mode
[  394.090257][T18714] 8021q: adding VLAN 0 to HW filter on device bond4
[  394.102481][T18714] bond4 (unregistering): Released all slaves
[  394.136265][T18774] loop0: detected capacity change from 0 to 512
[  394.138133][T18670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.165143][T18670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.283854][T18774] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2891: casefold flag without casefold feature
[  394.288331][T18670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.308954][T18670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.326223][T18831] loop2: detected capacity change from 0 to 512
[  394.429823][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  394.432375][T18774] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2891: couldn't read orphan inode 15 (err -117)
[  394.435087][ T2997] loop3: partition table partially beyond EOD, truncated
[  394.455191][T18831] EXT4-fs: Ignoring removed mblk_io_submit option
[  394.462106][T18831] EXT4-fs: Ignoring removed bh option
[  394.468201][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  394.474676][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  394.490026][T18831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  394.501916][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  394.510842][T18774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.539835][T18831] EXT4-fs (loop2): 1 truncate cleaned up
[  394.546602][T18831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.573521][T18774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.641471][T18889] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.743936][T18889] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.807265][T18906] loop4: detected capacity change from 0 to 512
[  394.815109][T18889] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.857595][T18906] EXT4-fs: dax option not supported
[  394.887245][T18906] loop4: detected capacity change from 0 to 512
[  394.904102][T18906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  394.916150][T18889] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.949653][T18906] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  394.995482][T18906] System zones: 0-2, 18-18, 34-34
[  395.242653][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  395.247270][T18906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.248006][ T2997] loop3: partition table partially beyond EOD, truncated
[  395.275944][T18906] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  395.286393][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  395.286418][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  395.288281][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  395.387805][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.451301][T18948] loop4: detected capacity change from 0 to 1024
[  395.473188][T18948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.500534][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.621415][T18957] FAULT_INJECTION: forcing a failure.
[  395.621415][T18957] name failslab, interval 1, probability 0, space 0, times 0
[  395.634205][T18957] CPU: 0 UID: 0 PID: 18957 Comm: syz.2.2902 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  395.634263][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  395.634277][T18957] Call Trace:
[  395.634284][T18957]  <TASK>
[  395.634357][T18957]  __dump_stack+0x1d/0x30
[  395.634381][T18957]  dump_stack_lvl+0xe8/0x140
[  395.634405][T18957]  dump_stack+0x15/0x1b
[  395.634421][T18957]  should_fail_ex+0x265/0x280
[  395.634451][T18957]  ? qdisc_get_rtab+0x1a5/0x2d0
[  395.634513][T18957]  should_failslab+0x8c/0xb0
[  395.634536][T18957]  __kmalloc_cache_noprof+0x4c/0x320
[  395.634616][T18957]  qdisc_get_rtab+0x1a5/0x2d0
[  395.634749][T18957]  tbf_change+0x16f/0xcd0
[  395.634863][T18957]  ? stack_trace_save+0x5e/0x90
[  395.634901][T18957]  ? __list_add_valid_or_report+0x38/0xe0
[  395.634939][T18957]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  395.634978][T18957]  ? rtnetlink_rcv+0x1c/0x30
[  395.635074][T18957]  ? netlink_unicast+0x59e/0x670
[  395.635102][T18957]  ? netlink_sendmsg+0x58b/0x6b0
[  395.635200][T18957]  ? __sock_sendmsg+0x142/0x180
[  395.635238][T18957]  ? read_tsc+0x9/0x20
[  395.635278][T18957]  ? __pfx_tbf_init+0x10/0x10
[  395.635362][T18957]  tbf_init+0x72/0x90
[  395.635397][T18957]  qdisc_create+0x58e/0x9e0
[  395.635430][T18957]  tc_modify_qdisc+0xe2c/0x1380
[  395.635472][T18957]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  395.635550][T18957]  rtnetlink_rcv_msg+0x657/0x6d0
[  395.635586][T18957]  netlink_rcv_skb+0x123/0x220
[  395.635692][T18957]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  395.635729][T18957]  rtnetlink_rcv+0x1c/0x30
[  395.635755][T18957]  netlink_unicast+0x59e/0x670
[  395.635836][T18957]  netlink_sendmsg+0x58b/0x6b0
[  395.635894][T18957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.635929][T18957]  __sock_sendmsg+0x142/0x180
[  395.636016][T18957]  ____sys_sendmsg+0x31e/0x4e0
[  395.636057][T18957]  ___sys_sendmsg+0x17b/0x1d0
[  395.636098][T18957]  __x64_sys_sendmsg+0xd4/0x160
[  395.636128][T18957]  x64_sys_call+0x2999/0x2fb0
[  395.636209][T18957]  do_syscall_64+0xd2/0x200
[  395.636228][T18957]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  395.636254][T18957]  ? clear_bhb_loop+0x40/0x90
[  395.636274][T18957]  ? clear_bhb_loop+0x40/0x90
[  395.636379][T18957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.636407][T18957] RIP: 0033:0x7f0fcd82e929
[  395.636427][T18957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.636445][T18957] RSP: 002b:00007f0fcbe97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.636514][T18957] RAX: ffffffffffffffda RBX: 00007f0fcda55fa0 RCX: 00007f0fcd82e929
[  395.636555][T18957] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  395.636571][T18957] RBP: 00007f0fcbe97090 R08: 0000000000000000 R09: 0000000000000000
[  395.636587][T18957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.636599][T18957] R13: 0000000000000000 R14: 00007f0fcda55fa0 R15: 00007ffcdf7fb368
[  395.636617][T18957]  </TASK>
[  395.636642][T18957] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  395.947732][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  395.953147][ T2997] loop3: partition table partially beyond EOD, truncated
[  396.000905][T18962] bond4: entered promiscuous mode
[  396.006022][T18962] bond4: entered allmulticast mode
[  396.011896][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  396.018373][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  396.025992][T18962] 8021q: adding VLAN 0 to HW filter on device bond4
[  396.035703][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  396.046717][T18962] bond4 (unregistering): Released all slaves
[  396.084210][T19012] $H�: renamed from bond0
[  396.098297][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  396.103664][ T2997] loop3: partition table partially beyond EOD, truncated
[  396.111646][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  396.118449][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  396.135397][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  396.328816][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.393133][T19104] loop4: detected capacity change from 0 to 512
[  396.404888][ T6697] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.410288][T19104] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2908: casefold flag without casefold feature
[  396.422721][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  396.428177][T19104] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2908: couldn't read orphan inode 15 (err -117)
[  396.432590][ T2997] loop3: partition table partially beyond EOD, truncated
[  396.453548][T19104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.463348][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  396.467299][T19104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.472509][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  396.495088][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  396.504922][ T6697] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.536882][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  396.542160][ T2997] loop3: partition table partially beyond EOD, truncated
[  396.549752][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  396.556431][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  396.572481][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  396.572497][ T6697] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.639464][ T6697] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.678317][T19068] chnl_net:caif_netlink_parms(): no params data found
[  396.850897][T19068] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.855254][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2913'.
[  396.858046][T19068] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.860438][T19068] bridge_slave_0: entered allmulticast mode
[  396.880799][T19068] bridge_slave_0: entered promiscuous mode
[  396.887918][ T6697] bridge_slave_1: left allmulticast mode
[  396.893610][ T6697] bridge_slave_1: left promiscuous mode
[  396.899433][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.906712][T19310] loop4: detected capacity change from 0 to 1024
[  396.913788][ T6697] bridge_slave_0: left allmulticast mode
[  396.919505][ T6697] bridge_slave_0: left promiscuous mode
[  396.924441][T19310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.925294][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.041365][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.063804][ T6697] bond_slave_0: left promiscuous mode
[  397.080493][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.115191][ T6697] bond_slave_1: left promiscuous mode
[  397.127004][ T6697] bond0 (unregistering): Released all slaves
[  397.144511][ T6697] bond1 (unregistering): Released all slaves
[  397.183477][ T6697] bond2 (unregistering): Released all slaves
[  397.195024][T19323] xt_CT: No such helper "pptp"
[  397.212312][T19068] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.219595][T19068] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.244472][T19068] bridge_slave_1: entered allmulticast mode
[  397.253038][T19068] bridge_slave_1: entered promiscuous mode
[  397.276462][ T6697] hsr_slave_0: left promiscuous mode
[  397.283179][ T6697] hsr_slave_1: left promiscuous mode
[  397.294697][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.302238][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.333892][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2917'.
[  397.344895][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  397.350137][ T2997] loop3: partition table partially beyond EOD, truncated
[  397.358419][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  397.364973][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  397.372621][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.380119][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.396474][ T6697] veth1_macvtap: left promiscuous mode
[  397.403422][ T6697] veth0_macvtap: left promiscuous mode
[  397.409085][ T6697] veth1_vlan: left promiscuous mode
[  397.414795][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  397.427611][T19360] loop0: detected capacity change from 0 to 1024
[  397.456675][ T6697] veth0_vlan: left promiscuous mode
[  397.553504][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  397.558782][ T2997] loop3: partition table partially beyond EOD, truncated
[  397.577319][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  397.583936][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  397.617800][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  397.695307][ T6697] team0 (unregistering): Port device team_slave_1 removed
[  397.749375][ T6697] team0 (unregistering): Port device team_slave_0 removed
[  397.803599][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.871931][T18889] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.913011][T19353] bond0: entered promiscuous mode
[  397.918223][T19353] bond0: entered allmulticast mode
[  397.923862][T19353] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.934396][T19353] bond0 (unregistering): Released all slaves
[  397.956184][T18889] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.966883][T19068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.986510][T19068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.004904][T18889] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.029322][T19412] bond2: entered promiscuous mode
[  398.034488][T19412] bond2: entered allmulticast mode
[  398.040418][T19412] 8021q: adding VLAN 0 to HW filter on device bond2
[  398.060255][T19412] bond2 (unregistering): Released all slaves
[  398.087035][T19482] loop4: detected capacity change from 0 to 1024
[  398.167053][T18889] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.176069][   T29] kauditd_printk_skb: 212 callbacks suppressed
[  398.176089][   T29] audit: type=1326 audit(1750092300.565:15764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19409 comm="syz.4.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9cce929 code=0x7ffc0000
[  398.205978][   T29] audit: type=1326 audit(1750092300.565:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19409 comm="syz.4.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9cce929 code=0x7ffc0000
[  398.243454][T19068] team0: Port device team_slave_0 added
[  398.258720][T19068] team0: Port device team_slave_1 added
[  398.277870][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  398.283154][ T2997] loop3: partition table partially beyond EOD, truncated
[  398.322209][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  398.328860][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  398.356180][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  398.423294][   T29] audit: type=1326 audit(1750092300.691:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.1.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.447076][   T29] audit: type=1326 audit(1750092300.691:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.1.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.470781][   T29] audit: type=1326 audit(1750092300.702:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.1.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.494343][   T29] audit: type=1326 audit(1750092300.702:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.1.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.526520][T19068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.526968][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  398.533608][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.538846][ T2997] loop3: partition table partially beyond EOD, 
[  398.564814][T19068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.566250][T19068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.571075][ T2997] truncated
[  398.591867][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.617844][T19068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.628529][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  398.635220][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  398.638378][T19635] xt_CT: No such helper "pptp"
[  398.645975][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  398.663130][   T29] audit: type=1326 audit(1750092301.069:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19647 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.748624][   T29] audit: type=1326 audit(1750092301.101:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19647 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.772371][   T29] audit: type=1326 audit(1750092301.101:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19647 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.796129][   T29] audit: type=1326 audit(1750092301.101:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19647 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb6e89de929 code=0x7ffc0000
[  398.797095][T19696] loop0: detected capacity change from 0 to 512
[  398.825024][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  398.828631][ T6697] IPVS: stop unused estimator thread 0...
[  398.831257][ T2997] loop3: partition table partially beyond EOD, truncated
[  398.846532][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  398.853081][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  398.857991][T19696] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2930: bg 0: block 5: invalid block bitmap
[  398.862181][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  398.874760][T19696] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  398.890751][T19696] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2930: invalid indirect mapped block 3 (level 2)
[  398.906117][T19068] hsr_slave_0: entered promiscuous mode
[  398.912350][T19068] hsr_slave_1: entered promiscuous mode
[  398.914182][T19696] EXT4-fs (loop0): 2 truncates cleaned up
[  398.918516][T19068] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.931438][T19068] Cannot create hsr debugfs directory
[  398.935184][T19696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.040889][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.353817][T19866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2933'.
[  399.368156][T19866] loop4: detected capacity change from 0 to 1024
[  399.415355][T19068] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  399.424768][T19068] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  399.438026][T19883] loop0: detected capacity change from 0 to 512
[  399.446589][T19068] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  399.464807][T19883] EXT4-fs: Ignoring removed i_version option
[  399.485141][T19068] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  399.494608][T19866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.516055][T19883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  399.588356][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  399.593829][ T2997] loop3: partition table partially beyond EOD, truncated
[  399.742675][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  399.749317][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  399.785890][T19068] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.795033][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  399.829085][T19068] 8021q: adding VLAN 0 to HW filter on device team0
[  399.841712][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.849029][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.871814][T19919] xt_CT: No such helper "pptp"
[  399.894360][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  399.899732][ T2997] loop3: partition table partially beyond EOD, truncated
[  399.919942][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.927096][ T6697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.938144][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  399.944921][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  400.014137][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  400.024106][T19068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  400.081240][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  400.086625][ T2997] loop3: partition table partially beyond EOD, truncated
[  400.120206][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  400.126758][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  400.151590][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  400.170649][T19068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.181309][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.247836][T19971] loop4: detected capacity change from 0 to 128
[  400.264517][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  400.270066][ T2997] loop3: partition table partially beyond EOD, truncated
[  400.297820][T19971] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  400.305772][T19971] FAT-fs (loop4): Filesystem has been set read-only
[  400.324106][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  400.330621][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  400.358135][T19971] syz.4.2940: attempt to access beyond end of device
[  400.358135][T19971] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  400.372546][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  400.400912][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.402026][T19971] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  400.417903][T19971] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  400.455525][T19068] veth0_vlan: entered promiscuous mode
[  400.521484][T20000] bond1: entered promiscuous mode
[  400.526704][T20000] bond1: entered allmulticast mode
[  400.545148][T20000] 8021q: adding VLAN 0 to HW filter on device bond1
[  400.559522][T20045] loop1: detected capacity change from 0 to 1024
[  400.670810][T20000] bond1 (unregistering): Released all slaves
[  400.799462][T19068] veth1_vlan: entered promiscuous mode
[  400.865530][T19068] veth0_macvtap: entered promiscuous mode
[  400.890122][T19068] veth1_macvtap: entered promiscuous mode
[  400.902496][T19068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  400.969872][T19068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  400.984816][T19068] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.993772][T19068] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.002561][T19068] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.011401][T19068] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.031568][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  401.036985][ T2997] loop3: partition table partially beyond EOD, truncated
[  401.054598][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  401.061216][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  401.103980][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  401.135128][T20169] loop2: detected capacity change from 0 to 128
[  401.143069][T20169] vfat: Unknown parameter '18446744073709551615j��נ�LG4�wv/΄}]���ξ��֨ݥ�����H&ॷs��o^H��b]�Q�QS�ѩ"�[bk�I�Q-J��z#d��;�$'
[  401.190639][ T2997]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  401.195982][ T2997] loop3: partition table partially beyond EOD, truncated
[  401.214514][T20192] netlink: 'syz.2.2954': attribute type 3 has an invalid length.
[  401.226711][T20174] loop1: detected capacity change from 0 to 512
[  401.252515][ T2997] loop3: p1 start 408832 is beyond EOD, truncated
[  401.259194][ T2997] loop3: p2 size 8388352 extends beyond EOD, truncated
[  401.288462][T20174] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2952: bg 0: block 5: invalid block bitmap
[  401.307808][ T2997] loop3: p5 size 8388352 extends beyond EOD, truncated
[  401.317089][T20174] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  401.334073][T20174] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2952: invalid indirect mapped block 3 (level 2)
[  401.352112][T20174] EXT4-fs (loop1): 2 truncates cleaned up
[  401.391929][T20174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.473398][ T1667] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.525001][T17120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.580410][ T1667] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.602146][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  401.602394][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  401.615518][ T5586] udevd[5586]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  401.628177][ T5577] udevd[5577]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  401.634554][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  401.698448][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  401.710834][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  401.722691][ T5586] udevd[5586]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  401.735714][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  401.747036][ T5577] udevd[5577]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  401.758380][ T1667] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.837484][ T1667] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.880985][T20290] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.943010][T20290] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.987204][T20290] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.003353][ T1667] bridge_slave_1: left allmulticast mode
[  402.009136][ T1667] bridge_slave_1: left promiscuous mode
[  402.014979][ T1667] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.024175][ T1667] bridge_slave_0: left allmulticast mode
[  402.030021][ T1667] bridge_slave_0: left promiscuous mode
[  402.035745][ T1667] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.062135][T20403] loop4: detected capacity change from 0 to 1024
[  402.136937][ T1667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.146040][ T1667] bond_slave_0: left promiscuous mode
[  402.153577][ T1667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.162735][ T1667] bond_slave_1: left promiscuous mode
[  402.168968][ T1667] bond0 (unregistering): Released all slaves
[  402.178912][ T1667] bond1 (unregistering): Released all slaves
[  402.188190][ T1667] bond2 (unregistering): Released all slaves
[  402.197577][ T1667] bond3 (unregistering): Released all slaves
[  402.207348][T20203] chnl_net:caif_netlink_parms(): no params data found
[  402.248269][T20304] bond2: entered promiscuous mode
[  402.253432][T20304] bond2: entered allmulticast mode
[  402.260550][T20304] 8021q: adding VLAN 0 to HW filter on device bond2
[  402.272021][T20304] bond2 (unregistering): Released all slaves
[  402.277178][T20455] loop0: detected capacity change from 0 to 512
[  402.287308][T20290] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.304984][T20412] netlink: 'syz.2.2966': attribute type 3 has an invalid length.
[  402.317293][T20455] EXT4-fs (loop0): 1 orphan inode deleted
[  402.329594][T20455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.350427][T20455] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  402.352129][ T6697] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1
[  402.383740][T20455] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  402.392390][ T1667] hsr_slave_0: left promiscuous mode
[  402.398285][ T1667] hsr_slave_1: left promiscuous mode
[  402.404575][ T1667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.412115][ T1667] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.420686][T20455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2967'.
[  402.430436][ T1667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.437946][ T1667] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.453822][ T1667] veth1_macvtap: left promiscuous mode
[  402.468835][ T1667] veth0_macvtap: left promiscuous mode
[  402.474593][ T1667] veth1_vlan: left promiscuous mode
[  402.482688][ T1667] veth0_vlan: left promiscuous mode
[  402.490528][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.570421][ T1667] team0 (unregistering): Port device team_slave_1 removed
[  402.580592][ T1667] team0 (unregistering): Port device team_slave_0 removed
[  402.669573][T20290] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.680855][T20290] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.693591][T20290] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.705629][T20290] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.808033][T20203] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.815381][T20203] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.824565][T20611] loop1: detected capacity change from 0 to 128
[  402.824609][T20203] bridge_slave_0: entered allmulticast mode
[  402.839714][T20611] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  402.847767][T20611] FAT-fs (loop1): Filesystem has been set read-only
[  402.857353][T20611] syz.1.2974: attempt to access beyond end of device
[  402.857353][T20611] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  402.858424][T20203] bridge_slave_0: entered promiscuous mode
[  402.904743][T20203] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.911964][T20203] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.923586][T20611] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  402.931563][T20611] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  402.941746][T20203] bridge_slave_1: entered allmulticast mode
[  402.955532][T20203] bridge_slave_1: entered promiscuous mode
[  403.052735][T20203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.069753][T20203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.109464][T20203] team0: Port device team_slave_0 added
[  403.121262][T20203] team0: Port device team_slave_1 added
[  403.139198][T20713] loop0: detected capacity change from 0 to 512
[  403.164871][T20713] EXT4-fs (loop0): 1 orphan inode deleted
[  403.175215][ T1667] IPVS: stop unused estimator thread 0...
[  403.188607][T20713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.201641][   T51] __quota_error: 177 callbacks suppressed
[  403.201656][   T51] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  403.217287][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  403.228867][   T29] audit: type=1326 audit(1750092305.857:15950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.235883][T20744] loop2: detected capacity change from 0 to 512
[  403.252586][   T29] audit: type=1326 audit(1750092305.857:15951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.263110][T20713] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  403.282597][   T29] audit: type=1326 audit(1750092305.857:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.316980][   T29] audit: type=1326 audit(1750092305.857:15953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.324426][T20203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.340864][   T29] audit: type=1326 audit(1750092305.857:15954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.347591][T20203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.347691][T20203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.352873][T20203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.371343][   T29] audit: type=1326 audit(1750092305.857:15955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.371378][   T29] audit: type=1326 audit(1750092305.857:15956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.397304][T20203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.407899][   T29] audit: type=1326 audit(1750092305.857:15957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.414883][T20203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.438403][   T29] audit: type=1326 audit(1750092305.857:15958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz.2.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae64d9e929 code=0x7ffc0000
[  403.465879][T20752] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2977'.
[  403.493518][T20744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2979: bg 0: block 5: invalid block bitmap
[  403.544134][T20713] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  403.547490][T20744] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  403.585172][T20744] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2979: invalid indirect mapped block 3 (level 2)
[  403.600808][T20744] EXT4-fs (loop2): 2 truncates cleaned up
[  403.612122][T20744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.614103][T20203] hsr_slave_0: entered promiscuous mode
[  403.644959][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.648499][T20203] hsr_slave_1: entered promiscuous mode
[  403.660494][T20203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.668208][T20203] Cannot create hsr debugfs directory
[  403.679519][T19068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.784127][T20857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.843948][T20857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.888702][T20857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.955064][T20857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.025848][T20857] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.037498][T20857] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.049410][T20857] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.061548][T20857] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.147705][T20938] loop4: detected capacity change from 0 to 512
[  404.165685][T20938] EXT4-fs: Ignoring removed i_version option
[  404.207939][T20938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  404.238230][T20203] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  404.257140][T20203] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  404.268383][T20203] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  404.281962][T20203] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  404.342504][T20968] loop0: detected capacity change from 0 to 128
[  404.358990][T20203] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.373837][T20968] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  404.381858][T20968] FAT-fs (loop0): Filesystem has been set read-only
[  404.389415][T20968] syz.0.2986: attempt to access beyond end of device
[  404.389415][T20968] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  404.407238][T20968] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  404.415184][T20968] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  404.425076][T20203] 8021q: adding VLAN 0 to HW filter on device team0
[  404.434984][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.442122][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.558009][T20203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  404.568505][T20203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  404.616486][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.623642][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.704034][T21004] loop0: detected capacity change from 0 to 1024
[  404.716752][T21004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.785280][T21016] loop2: detected capacity change from 0 to 512
[  404.836723][T20203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.845773][T21025] loop1: detected capacity change from 0 to 512
[  404.856359][T21016] EXT4-fs (loop2): 1 orphan inode deleted
[  404.866997][   T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[  404.877120][T21025] EXT4-fs: dax option not supported
[  404.889233][T21016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.927025][T21016] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.967255][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.046442][T21049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2990'.
[  405.063430][T21016] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  405.098566][T21060] loop1: detected capacity change from 0 to 512
[  405.117019][T19068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.156770][T21060] EXT4-fs (loop1): 1 orphan inode deleted
[  405.170752][T21060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.182311][T20203] veth0_vlan: entered promiscuous mode
[  405.192673][ T3441] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[  405.195415][T20203] veth1_vlan: entered promiscuous mode
[  405.214987][T21060] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.224819][T20203] veth0_macvtap: entered promiscuous mode
[  405.233870][T20203] veth1_macvtap: entered promiscuous mode
[  405.254289][T20203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.272699][T21060] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  405.273887][T20203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.290888][T20203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.299690][T20203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.308567][T20203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.317457][T20203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.369666][T21060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2995'.
[  405.421029][T21085] xt_CT: No such helper "pptp"
[  405.449811][T17120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.518376][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.587625][T21104] loop0: detected capacity change from 0 to 512
[  405.611258][T21104] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2999: bg 0: block 5: invalid block bitmap
[  405.613933][T21110] loop1: detected capacity change from 0 to 512
[  405.631921][T21110] EXT4-fs: dax option not supported
[  405.655636][T21104] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  405.666716][T21104] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2999: invalid indirect mapped block 3 (level 2)
[  405.699321][T21104] EXT4-fs (loop0): 2 truncates cleaned up
[  405.778459][T21104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.823130][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.851537][T21127] loop0: detected capacity change from 0 to 512
[  405.881913][T21127] EXT4-fs: dax option not supported
[  405.888892][T21130] netlink: 'syz.4.3003': attribute type 3 has an invalid length.
[  405.910823][T21127] loop0: detected capacity change from 0 to 512
[  405.939442][T21127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  405.974981][T21141] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.992976][T21127] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  406.003552][T21141] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.021236][T21127] System zones: 0-2, 18-18, 34-34
[  406.028406][T21127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.041711][T21127] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  406.053889][T21141] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.079963][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.144953][T21141] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.204167][T21171] loop4: detected capacity change from 0 to 512
[  406.233076][T21171] EXT4-fs (loop4): 1 orphan inode deleted
[  406.251309][ T6697] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1
[  406.272395][T21171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.286064][T21171] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  406.295469][T21177] xt_CT: No such helper "pptp"
[  406.303294][T21171] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  406.317616][T21171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3008'.
[  406.336518][T21183] loop2: detected capacity change from 0 to 128
[  406.357812][T21183] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  406.365783][T21183] FAT-fs (loop2): Filesystem has been set read-only
[  406.419170][T21186] loop0: detected capacity change from 0 to 512
[  406.425898][T21186] EXT4-fs: Ignoring removed mblk_io_submit option
[  406.432405][T21186] EXT4-fs: Ignoring removed bh option
[  406.449999][T21186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  406.506093][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.517512][T21186] EXT4-fs (loop0): 1 truncate cleaned up
[  406.523655][T21186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.557465][T21183] syz.2.3010: attempt to access beyond end of device
[  406.557465][T21183] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  406.596039][T21183] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  406.604027][T21183] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  406.730775][T21141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.736768][T21225] loop4: detected capacity change from 0 to 512
[  406.742629][T21141] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.756600][T21141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.768520][T21141] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.809352][T21225] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3012: bg 0: block 5: invalid block bitmap
[  406.822065][T21225] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  406.832541][T21225] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3012: invalid indirect mapped block 3 (level 2)
[  406.847557][T21249] netlink: 'syz.1.3016': attribute type 3 has an invalid length.
[  406.868689][T21225] EXT4-fs (loop4): 2 truncates cleaned up
[  406.879263][T21225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.950530][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.967192][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.000410][T21262] loop4: detected capacity change from 0 to 512
[  407.018618][T21262] EXT4-fs: dax option not supported
[  407.052358][T21262] loop4: detected capacity change from 0 to 512
[  407.085685][T21262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  407.106745][T21278] bond0: entered promiscuous mode
[  407.111867][T21278] bond0: entered allmulticast mode
[  407.122224][T21278] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.126317][T21288] xt_CT: No such helper "pptp"
[  407.133504][T21262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  407.142265][T21262] System zones: 0-2, 18-18, 34-34
[  407.143219][T21278] bond0 (unregistering): Released all slaves
[  407.149642][T21262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.174517][T21325] loop0: detected capacity change from 0 to 1024
[  407.211528][T21262] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.232726][T21365] loop1: detected capacity change from 0 to 512
[  407.251218][T21365] EXT4-fs (loop1): 1 orphan inode deleted
[  407.257326][   T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[  407.269637][T21365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.282931][T21365] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.283172][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.306379][T21365] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  407.326057][T21365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3023'.
[  407.362058][T17120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.401185][T21389] loop0: detected capacity change from 0 to 512
[  407.410284][T21390] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.426240][T21389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3028: bg 0: block 5: invalid block bitmap
[  407.439725][T21389] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  407.459313][T21389] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3028: invalid indirect mapped block 3 (level 2)
[  407.478163][T21389] EXT4-fs (loop0): 2 truncates cleaned up
[  407.489274][T21390] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.507053][T21400] netlink: 'syz.4.3029': attribute type 3 has an invalid length.
[  407.538985][T21390] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.573259][T21390] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.645017][T21429] loop4: detected capacity change from 0 to 512
[  407.653080][T21429] EXT4-fs: dax option not supported
[  407.669267][T21429] loop4: detected capacity change from 0 to 512
[  407.681008][T21429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  407.712737][T21429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  407.723806][T21429] System zones: 0-2, 18-18, 34-34
[  407.734853][T21429] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.739801][T21440] xt_CT: No such helper "pptp"
[  407.866621][T21455] loop0: detected capacity change from 0 to 1024
[  407.879223][T21456] loop3: detected capacity change from 0 to 512
[  407.886017][T21456] EXT4-fs: Ignoring removed mblk_io_submit option
[  407.892519][T21456] EXT4-fs: Ignoring removed bh option
[  407.899093][T21456] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  408.103161][   T29] kauditd_printk_skb: 387 callbacks suppressed
[  408.103176][   T29] audit: type=1326 audit(1750092310.613:16342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21428 comm="syz.4.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f45d9cce929 code=0x7ffc0000
[  408.131377][T21447] bond0: entered promiscuous mode
[  408.132916][   T29] audit: type=1326 audit(1750092310.655:16343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.137971][T21447] bond0: entered allmulticast mode
[  408.161650][   T29] audit: type=1326 audit(1750092310.655:16344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.167355][T21447] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.190241][   T29] audit: type=1326 audit(1750092310.655:16345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.220562][   T29] audit: type=1326 audit(1750092310.655:16346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.244374][   T29] audit: type=1326 audit(1750092310.655:16347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.268071][   T29] audit: type=1326 audit(1750092310.655:16348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.277960][T21456] EXT4-fs (loop3): 1 truncate cleaned up
[  408.291684][   T29] audit: type=1326 audit(1750092310.655:16349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.291713][   T29] audit: type=1326 audit(1750092310.665:16350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.291739][   T29] audit: type=1326 audit(1750092310.665:16351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21446 comm="syz.0.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6eb39e929 code=0x7ffc0000
[  408.373266][T21447] bond0 (unregistering): Released all slaves
[  408.406227][T21511] loop4: detected capacity change from 0 to 512
[  408.451447][T21511] EXT4-fs (loop4): 1 orphan inode deleted
[  408.459610][T21511] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.470646][   T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[  408.483650][T21511] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  408.492865][T21511] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3037'.
[  408.578892][T21581] loop3: detected capacity change from 0 to 1024
[  408.701832][T21592] netlink: 'syz.0.3044': attribute type 3 has an invalid length.
[  408.770583][T21595] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  409.034797][T21606] xt_CT: No such helper "pptp"
[  409.136208][T21589] ==================================================================
[  409.144432][T21589] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  409.152296][T21589] 
[  409.154646][T21589] write to 0xffffea000470f358 of 8 bytes by task 21581 on cpu 0:
[  409.162398][T21589]  __filemap_remove_folio+0x1a5/0x2a0
[  409.167828][T21589]  folio_unmap_invalidate+0x1dd/0x360
[  409.173243][T21589]  invalidate_inode_pages2_range+0x27c/0x3d0
[  409.179265][T21589]  filemap_invalidate_pages+0x16d/0x1a0
[  409.184867][T21589]  kiocb_invalidate_pages+0x6e/0x80
[  409.190122][T21589]  __iomap_dio_rw+0x5d4/0x1250
[  409.194920][T21589]  iomap_dio_rw+0x40/0x90
[  409.199281][T21589]  ext4_file_write_iter+0xad9/0xf00
[  409.204501][T21589]  iter_file_splice_write+0x5ef/0x970
[  409.209900][T21589]  direct_splice_actor+0x153/0x2a0
[  409.215037][T21589]  splice_direct_to_actor+0x30f/0x680
[  409.220438][T21589]  do_splice_direct+0xda/0x150
[  409.225231][T21589]  do_sendfile+0x380/0x650
[  409.229667][T21589]  __x64_sys_sendfile64+0x105/0x150
[  409.234892][T21589]  x64_sys_call+0xb39/0x2fb0
[  409.239500][T21589]  do_syscall_64+0xd2/0x200
[  409.244022][T21589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.249933][T21589] 
[  409.252269][T21589] read to 0xffffea000470f358 of 8 bytes by task 21589 on cpu 1:
[  409.259917][T21589]  folio_mapping+0xa1/0x120
[  409.264445][T21589]  folio_wait_writeback+0x43/0x140
[  409.269581][T21589]  file_write_and_wait_range+0x20b/0x2c0
[  409.275246][T21589]  generic_buffers_fsync_noflush+0x45/0x120
[  409.281172][T21589]  ext4_sync_file+0x1ab/0x690
[  409.285873][T21589]  vfs_fsync_range+0x10a/0x130
[  409.290651][T21589]  ext4_buffered_write_iter+0x34f/0x3c0
[  409.296231][T21589]  ext4_file_write_iter+0xdbf/0xf00
[  409.301541][T21589]  iter_file_splice_write+0x5ef/0x970
[  409.306951][T21589]  direct_splice_actor+0x153/0x2a0
[  409.312113][T21589]  splice_direct_to_actor+0x30f/0x680
[  409.317516][T21589]  do_splice_direct+0xda/0x150
[  409.322307][T21589]  do_sendfile+0x380/0x650
[  409.326745][T21589]  __x64_sys_sendfile64+0x105/0x150
[  409.331965][T21589]  x64_sys_call+0xb39/0x2fb0
[  409.336576][T21589]  do_syscall_64+0xd2/0x200
[  409.341095][T21589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.347009][T21589] 
[  409.349339][T21589] value changed: 0xffff888106b46998 -> 0x0000000000000000
[  409.356456][T21589] 
[  409.358786][T21589] Reported by Kernel Concurrency Sanitizer on:
[  409.364950][T21589] CPU: 1 UID: 0 PID: 21589 Comm: syz.3.3042 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  409.375736][T21589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  409.385808][T21589] ==================================================================
[  409.700932][ T3839] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.773515][ T3839] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.821424][ T3839] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.859602][ T3839] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.945788][ T3839] bridge_slave_1: left allmulticast mode
[  409.951519][ T3839] bridge_slave_1: left promiscuous mode
[  409.957371][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.965101][ T3839] bridge_slave_0: left allmulticast mode
[  409.970803][ T3839] bridge_slave_0: left promiscuous mode
[  409.976559][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.060005][ T3839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.070164][ T3839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.081101][ T3839] bond0 (unregistering): Released all slaves
[  410.120610][ T3839] hsr_slave_0: left promiscuous mode
[  410.126529][ T3839] hsr_slave_1: left promiscuous mode
[  410.132145][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.139650][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.147694][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.155250][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.166199][ T3839] veth1_macvtap: left promiscuous mode
[  410.171920][ T3839] veth0_macvtap: left promiscuous mode
[  410.177748][ T3839] veth1_vlan: left promiscuous mode
[  410.183140][ T3839] veth0_vlan: left promiscuous mode
[  410.251949][ T3839] team0 (unregistering): Port device team_slave_1 removed
[  410.262068][ T3839] team0 (unregistering): Port device team_slave_0 removed
[  410.533535][ T3839] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.584352][ T3839] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.612422][ T3839] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.640631][ T3839] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.723609][ T3839] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.764662][ T3839] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.802452][ T3839] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.859473][ T3839] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.932947][ T3839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.949409][T21390] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.961029][T21390] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.972529][T21390] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.984309][T21390] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.029883][ T3839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.080121][ T3839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.147426][ T3839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.225413][ T3839] bridge_slave_1: left allmulticast mode
[  411.231193][ T3839] bridge_slave_1: left promiscuous mode
[  411.236880][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.244969][ T3839] bridge_slave_0: left allmulticast mode
[  411.250968][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.260008][ T3839] bridge_slave_1: left allmulticast mode
[  411.265664][ T3839] bridge_slave_1: left promiscuous mode
[  411.271379][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.279173][ T3839] bridge_slave_0: left allmulticast mode
[  411.284815][ T3839] bridge_slave_0: left promiscuous mode
[  411.290510][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.299068][ T3839] bridge_slave_1: left allmulticast mode
[  411.304719][ T3839] bridge_slave_1: left promiscuous mode
[  411.310405][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.318224][ T3839] bridge_slave_0: left allmulticast mode
[  411.323982][ T3839] bridge_slave_0: left promiscuous mode
[  411.329735][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.527019][ T3839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.535895][ T3839] bond_slave_0: left promiscuous mode
[  411.542231][ T3839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.551179][ T3839] bond_slave_1: left promiscuous mode
[  411.557350][ T3839] bond0 (unregistering): Released all slaves
[  411.566090][ T3839] bond1 (unregistering): Released all slaves
[  411.622549][ T3839] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.631316][ T3839] bond_slave_0: left promiscuous mode
[  411.637699][ T3839] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.646801][ T3839] bond_slave_1: left promiscuous mode
[  411.652882][ T3839] $H� (unregistering): Released all slaves
[  411.661175][ T3839] bond1 (unregistering): Released all slaves
[  411.669790][ T3839] bond2 (unregistering): Released all slaves
[  411.737530][ T3839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.747257][ T3839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.756863][ T3839] bond0 (unregistering): Released all slaves
[  411.808742][ T3839] hsr_slave_0: left promiscuous mode
[  411.815603][ T3839] hsr_slave_1: left promiscuous mode
[  411.822001][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.829498][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.838487][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.846339][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.856976][ T3839] hsr_slave_0: left promiscuous mode
[  411.862809][ T3839] hsr_slave_1: left promiscuous mode
[  411.869604][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.877046][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.885124][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.892636][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.902186][ T3839] hsr_slave_0: left promiscuous mode
[  411.907978][ T3839] hsr_slave_1: left promiscuous mode
[  411.913792][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.921372][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.929919][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.937402][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.952043][ T3839] veth1_macvtap: left promiscuous mode
[  411.957611][ T3839] veth0_macvtap: left promiscuous mode
[  411.963257][ T3839] veth1_vlan: left promiscuous mode
[  411.968651][ T3839] veth0_vlan: left promiscuous mode
[  411.974345][ T3839] veth1_macvtap: left promiscuous mode
[  411.979912][ T3839] veth0_macvtap: left promiscuous mode
[  411.986258][ T3839] veth1_vlan: left promiscuous mode
[  411.992506][ T3839] veth0_vlan: left promiscuous mode
[  411.998402][ T3839] veth1_macvtap: left promiscuous mode
[  412.003979][ T3839] veth0_macvtap: left promiscuous mode
[  412.009481][ T3839] veth1_vlan: left promiscuous mode
[  412.014766][ T3839] veth0_vlan: left promiscuous mode
[  412.137717][ T3839] team0 (unregistering): Port device team_slave_1 removed
[  412.148137][ T3839] team0 (unregistering): Port device team_slave_0 removed
[  412.201924][ T3839] team0 (unregistering): Port device team_slave_1 removed
[  412.211573][ T3839] team0 (unregistering): Port device team_slave_0 removed
[  412.263985][ T3839] team0 (unregistering): Port device team_slave_1 removed
[  412.273876][ T3839] team0 (unregistering): Port device team_slave_0 removed
[  412.894156][ T3839] IPVS: stop unused estimator thread 0...
[  412.901297][ T3839] IPVS: stop unused estimator thread 0...
[  414.680511][ T6697] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.736234][ T6697] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.783633][ T6697] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.822080][ T6697] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.890812][ T6697] bridge_slave_1: left allmulticast mode
[  414.896630][ T6697] bridge_slave_1: left promiscuous mode
[  414.902261][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.910222][ T6697] bridge_slave_0: left allmulticast mode
[  414.915971][ T6697] bridge_slave_0: left promiscuous mode
[  414.921732][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.003298][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.012093][ T6697] bond_slave_0: left promiscuous mode
[  415.018684][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.027667][ T6697] bond_slave_1: left promiscuous mode
[  415.033949][ T6697] bond0 (unregistering): Released all slaves
[  415.080963][ T6697] hsr_slave_0: left promiscuous mode
[  415.086928][ T6697] hsr_slave_1: left promiscuous mode
[  415.093148][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.100638][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.108424][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.115886][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.126868][ T6697] veth1_macvtap: left promiscuous mode
[  415.132448][ T6697] veth0_macvtap: left promiscuous mode
[  415.138301][ T6697] veth1_vlan: left promiscuous mode
[  415.143672][ T6697] veth0_vlan: left promiscuous mode
[  415.211351][ T6697] team0 (unregistering): Port device team_slave_1 removed
[  415.221565][ T6697] team0 (unregistering): Port device team_slave_0 removed