last executing test programs:

7m57.497796199s ago: executing program 32 (id=428):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @empty, 0x3}, 0x1c)
listen(r0, 0x8)

7m12.808544669s ago: executing program 33 (id=1596):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20060400)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, 0x0, &(0x7f0000000000))

7m6.097197597s ago: executing program 34 (id=1733):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xf3)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x9, 0xabca, 0x85, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x84)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

7m5.984212711s ago: executing program 35 (id=1736):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
io_setup(0x2, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x3, &(0x7f00000015c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x8e0, r0, 0x0, 0x0, 0x4}, 0x0, 0x0])
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))

7m3.843138944s ago: executing program 36 (id=1767):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x2ec6dfb656da6365)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)

6m35.326202653s ago: executing program 37 (id=2350):
r0 = socket(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0xfffffff3}, &(0x7f0000000200)=0x8)

6m29.057736107s ago: executing program 38 (id=2456):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@delalloc}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x880)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_open_dev$tty1(0xc, 0x4, 0x2)
open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x8200, 0x100)

5m50.290947896s ago: executing program 39 (id=3165):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0xffffffff, 0x1}, 0x1004, 0x0, 0x10000, 0x3, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0)

5m48.889425443s ago: executing program 40 (id=3182):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd4060000400000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

5m46.268590782s ago: executing program 41 (id=3201):
unshare(0x400)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0))

5m45.843542937s ago: executing program 42 (id=3211):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r2)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)

5m25.436296361s ago: executing program 2 (id=3532):
io_submit(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioperm(0x7, 0x4, 0x7)
r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300})

5m25.295925735s ago: executing program 2 (id=3538):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c)
setresuid(0xee01, 0xee00, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x5}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

5m25.227302858s ago: executing program 2 (id=3539):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000005400e50100000000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00ae010191"], 0x38}, 0x1, 0x0, 0x0, 0x24044804}, 0x0)

5m25.176835609s ago: executing program 2 (id=3542):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0)

5m25.130281951s ago: executing program 2 (id=3544):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x100}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

5m24.888703329s ago: executing program 2 (id=3550):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00')

5m24.847128631s ago: executing program 43 (id=3550):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00')

5m7.52030705s ago: executing program 3 (id=3926):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1003c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
syz_emit_ethernet(0x38, &(0x7f0000000200)={@local, @random="af40245bac34", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x100}, {"e60f"}}}}}}, 0x0)

5m7.468159012s ago: executing program 3 (id=3928):
r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r0, 0x7000000)
preadv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203)

5m7.369547546s ago: executing program 3 (id=3936):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb8178a6bac2329b1, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

5m7.014147538s ago: executing program 3 (id=3942):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)

5m7.013893508s ago: executing program 3 (id=3943):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10)

5m6.815077014s ago: executing program 3 (id=3951):
r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x6, 0x58})
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
io_uring_enter(r0, 0x3910, 0xaa76, 0x8, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m6.776472776s ago: executing program 44 (id=3951):
r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x6, 0x58})
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
io_uring_enter(r0, 0x3910, 0xaa76, 0x8, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m56.68913603s ago: executing program 7 (id=6768):
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

2m56.610769023s ago: executing program 7 (id=6773):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$9p(r0, &(0x7f0000000100)="d5c0e9", 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

2m56.519521906s ago: executing program 7 (id=6778):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m55.726325163s ago: executing program 7 (id=6793):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0)

2m55.641705045s ago: executing program 7 (id=6796):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m55.277152798s ago: executing program 7 (id=6800):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000010401f007000000000000010100000506000640000000000a000200fffffffe08000a000500010001"], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x24004000)
close_range(r0, 0xffffffffffffffff, 0x0)

2m55.22805328s ago: executing program 45 (id=6800):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000010401f007000000000000010100000506000640000000000a000200fffffffe08000a000500010001"], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x24004000)
close_range(r0, 0xffffffffffffffff, 0x0)

2m26.1296938s ago: executing program 6 (id=7250):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5)
recvmmsg$unix(r2, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0)

2m25.902050487s ago: executing program 6 (id=7256):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, 0x0, 0x85000000)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
acct(&(0x7f0000003300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m25.759099102s ago: executing program 6 (id=7259):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x1e69, 0xc000, 0x0, 0xd1})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348)
io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0)

2m24.888319712s ago: executing program 6 (id=7276):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$eJzs3d9rFNceAPDvbDbGRL0qiNx7Hy4BH67FuvnVHxYK2sfSSoX23YZkDZKNK9mNmFRQHyqUvhQplFKh9A/oex+lf0D7VwitIEVC+9CXlNnM6prNZjdxdRf384FJzpmZ3XPOzDlnztnZYQMYWOPpn1zEfyLiqyTicMO2fGQbxzf3W398Yy5dktjY+PiPJJJsXX3/JPt/IIv8OyJ+/jziVK453crq2uJsqVRczuIT1aWrE5XVtdOXl2YXigvFK9MzM2fenJl+5+23ulbW1y789e1H998/8+WJ9W9+fHj0bhLn4mC2rbEcz+FWY2Q8xrNjMhzntuw41YXE+knS6wywJ0NZOx+OtA84HENZq0+N9jRnwIt2MyI2gAGVdNz+h/UU8EqpjwPqc/st8+BtZu6vlkfvbU6Amsuf3/xsJPbX5kZj60nDzGhzvnukC+mnafz0+7276RJtPoe4+UxsXxdSBwbZrdsRMZnPN/d/Sdb/7d1kB9ePrWl06XNYoAP30/HP6zGSRRvaf+7J+Ce2Gf90a/TRvv3nHnYpqW2l4793tx3/Pum6jgxlsUO1Md9wculyqTgZEf+KiJMxPJLGd7qfc2b9wUarbY3jv3RJ06+PBbN8PMyPPPua+dnq7POUudGj2xH/fTr+TaKp/99fG+uOjcYz5z89HhfSwC9ftE3jePHe/1pta1/+Rjd3Wbr2Nn6I+P+253/zjlYuC+1wf3KiVh8m6rWi2Z93jv/aKv3dlb/70vM/tkP50yqfNN6vrezu/dO50/f7/y622r7X+r8v+aQWrvdD12er1eWpiH3Jh83rp5++th6v75+W/+SJ7dt/vf6PbtP/pes+7fAY3Dl2p+Wu/XD+53d1/ncfePDBZ9+1Sr+z8/9GLXQyW9NJ/1cq1ivNzhnc63EDAAAAAACAfpTLnv8pZOGDkcsVCpvP8B6LsVypXKmeulReuTIftWdl63cFJ2PzWeH69yGmsu/D1uPTW+IzEXE0Ir4eGq3FC3Pl0nyPyw4AAAAAAAAAAAAAAAAAAAD94kDtmf8kt/X5/9RvQ73OHfDC5XudAaBn2rb/5/0lOKBvuf7D4NL+YXBtbf8jPcoH8FLlw/UfBlpj+x/uYT6Al8/1HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArrpw/ny6bKw/vjGXxuevra4slq+dni9WFgtLK3OFufLy1cJCubxQKhbmykvt3q9ULl+dmo6V6xPVYqU6UVldu7hUXrlSvXh5aXaheLHo50UAAAAAAAAAAAAAAAAAAACgWWV1bXG2VCouC7QMnI2+yMaeA0m7s3w2qwy7eufIAvneF7DfAoc6b1aj0Sd5bgr0uGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAb/BAAA//9okSnn")
syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x0, r0, 0xffffffffffffffff, 0x8, &(0x7f0000000080))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2m24.754204627s ago: executing program 6 (id=7280):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, [@map_fd={0x18, 0x2}, @jmp={0x5, 0x0, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffffc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @ldst={0x2, 0x3, 0x6, 0x8, 0xb, 0x4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, @map_fd={0x18, 0x7}]}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10, 0x5}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m24.514251045s ago: executing program 6 (id=7289):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff09"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}})
socket$inet_smc(0x2b, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

2m24.448153137s ago: executing program 46 (id=7289):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff09"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}})
socket$inet_smc(0x2b, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

20.432778585s ago: executing program 0 (id=9356):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r1, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0)

19.573643634s ago: executing program 0 (id=9379):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
shutdown(r1, 0x1)

18.697646844s ago: executing program 0 (id=9401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2002f00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.448084563s ago: executing program 0 (id=9404):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000500), 0xfc, 0x57c, &(0x7f0000000680)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef35bf413db93852f7bda4ae6dddfbd1ce5d29c2eeee09e70edf110f5bcb7639c2eb4b78c6df701905b9aafab4af000055a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xe, 0xfffffffffffffffd]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x8000c61)

18.182043592s ago: executing program 0 (id=9405):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
close(r0)

17.613895641s ago: executing program 0 (id=9408):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

17.611284681s ago: executing program 47 (id=9408):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

2.127509938s ago: executing program 9 (id=9622):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1)

2.104812478s ago: executing program 4 (id=9625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x80f05c34c9b32e55, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

1.948463324s ago: executing program 4 (id=9627):
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x2b)
acct(&(0x7f0000000040)='./file0\x00')

1.673699253s ago: executing program 8 (id=9629):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4000, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)

1.492208869s ago: executing program 8 (id=9630):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)

1.411679802s ago: executing program 1 (id=9631):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x2}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x408e, &(0x7f0000000240), 0x3, 0x45c, &(0x7f00000010c0)="$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")

1.410994642s ago: executing program 8 (id=9642):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2f9c, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x11}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)

1.335276895s ago: executing program 8 (id=9632):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xee\x06\x00\x00\x00d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\x9c\x00\x00\x00\x00\x00\x00\x00&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc50\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\x05\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1oO\xe4\x99\xd6\xed\x83\xb0\x18q\xb9\xda\xf1kk\xb0N\xe69D\x12\x1f\x96\x85y\xe1\xf6\x83\x81\xc1\xcb\x169\xa5A%\xcb\n\xaby\x9f\x97\xde\xcf\x14\x0f\xffl\xb0e\xa2m\xb3\x8fsI\xc8v<\x8a\\7\xbaA\xef\x92\x98K\xfd\xaa\xdb', 0x0)
ptrace(0x4207, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

986.521677ms ago: executing program 9 (id=9633):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fallocate(0xffffffffffffffff, 0x40, 0x7ff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

923.101889ms ago: executing program 8 (id=9634):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

877.23015ms ago: executing program 9 (id=9636):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030c00000027bd700000000000020009001000000001d700000000000003000600000000000200000000000000000000000000000002000100000000000000030e00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}], 0x10, 0x20000000}}], 0x1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})

782.086654ms ago: executing program 4 (id=9638):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, 0x0, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0)

737.950615ms ago: executing program 9 (id=9640):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

729.358365ms ago: executing program 4 (id=9641):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x969edffe39095fd4, 0x3800)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c})
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x80000006}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="8000102e75d72414", 0x8}], 0x1, &(0x7f000001fcc0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007'], 0x80}}], 0x1, 0x40000000)
r1 = msgget$private(0x0, 0x400)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000080)=""/94)

661.736688ms ago: executing program 4 (id=9644):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000000)=""/57, 0x120c000, 0x800, 0x0, 0x1}, 0x20)

661.239778ms ago: executing program 9 (id=9654):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x969edffe39095fd4, 0x3800)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c})
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x80000006}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="8000102e75d72414", 0x8}], 0x1, &(0x7f000001fcc0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007'], 0x80}}], 0x1, 0x40000000)
r1 = msgget$private(0x0, 0x400)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000080)=""/94)

625.118069ms ago: executing program 1 (id=9646):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={<r1=>0xffffffffffffffff}, 0x111, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r1, 0x9}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e24, 0x7f, @local, 0x3}, r1, 0x7}}, 0x48)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = dup2(r3, r2)
close_range(r4, 0xffffffffffffffff, 0x0)

612.11852ms ago: executing program 5 (id=9647):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

586.64092ms ago: executing program 1 (id=9648):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40009}, 0x40800)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x1fffffe}, 0xf)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

585.484871ms ago: executing program 4 (id=9649):
setresgid(0xee00, 0xee01, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00')
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)

578.51094ms ago: executing program 8 (id=9650):
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x2b)
acct(&(0x7f0000000040)='./file0\x00')

554.482422ms ago: executing program 1 (id=9651):
r0 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3)

524.904492ms ago: executing program 5 (id=9652):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x1201a, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x14, 0x0, 0x0)

520.081053ms ago: executing program 1 (id=9653):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

496.315073ms ago: executing program 9 (id=9655):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

450.075335ms ago: executing program 5 (id=9656):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fallocate(0xffffffffffffffff, 0x40, 0x7ff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

430.686226ms ago: executing program 5 (id=9657):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_clone3(&(0x7f0000000900)={0x103840000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

273.947741ms ago: executing program 5 (id=9658):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x2}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x408e, &(0x7f0000000240), 0x3, 0x45c, &(0x7f00000010c0)="$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")

269.62µs ago: executing program 5 (id=9659):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={<r1=>0xffffffffffffffff}, 0x111, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r1, 0x9}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e24, 0x7f, @local, 0x3}, r1, 0x7}}, 0x48)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = dup2(r3, r2)
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=9660):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

etected capacity change from 0 to 512
[  402.502940][T25454] EXT4-fs: Ignoring removed nomblk_io_submit option
[  402.535415][T25454] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.7574: corrupted inode contents
[  402.562987][T25454] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  402.563210][T25454] EXT4-fs (loop4): Remounting filesystem read-only
[  402.572401][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  402.572425][    C0] EXT4-fs (loop4): initial error at time 2000000023: ext4_do_update_inode:5602: inode 15
[  402.572455][    C0] EXT4-fs (loop4): last error at time 2000000023: ext4_do_update_inode:5602: inode 15
[  402.605938][T25454] EXT4-fs (loop4): 1 orphan inode deleted
[  402.612539][T25454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.629995][T25459] netlink: 1315 bytes leftover after parsing attributes in process `syz.9.7575'.
[  402.904185][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.959434][T25464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7577'.
[  403.136979][T25478] netlink: 'syz.5.7582': attribute type 4 has an invalid length.
[  403.157073][T25478] netlink: 'syz.5.7582': attribute type 4 has an invalid length.
[  403.634144][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  403.634161][   T28] audit: type=1326 audit(2000000024.141:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25504 comm="syz.5.7588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x0
[  403.801750][T25469] syz.0.7580 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[  403.816533][T25469] CPU: 1 UID: 0 PID: 25469 Comm: syz.0.7580 Not tainted syzkaller #0 PREEMPT(full) 
[  403.816573][T25469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  403.816590][T25469] Call Trace:
[  403.816598][T25469]  <TASK>
[  403.816607][T25469]  __dump_stack+0x1d/0x30
[  403.816661][T25469]  dump_stack_lvl+0x95/0xd0
[  403.816760][T25469]  dump_stack+0x15/0x1b
[  403.816810][T25469]  dump_header+0x80/0x240
[  403.816901][T25469]  oom_kill_process+0x295/0x350
[  403.816932][T25469]  out_of_memory+0x97d/0xb80
[  403.816965][T25469]  try_charge_memcg+0x62e/0xa10
[  403.817235][T25469]  obj_cgroup_charge_pages+0x23/0xc0
[  403.817275][T25469]  __memcg_kmem_charge_page+0x9e/0x170
[  403.817311][T25469]  __alloc_frozen_pages_noprof+0x18a/0x360
[  403.817399][T25469]  alloc_pages_mpol+0xb3/0x260
[  403.817439][T25469]  alloc_pages_noprof+0x8f/0x130
[  403.817502][T25469]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  403.817552][T25469]  __kvmalloc_node_noprof+0x3d4/0x650
[  403.817611][T25469]  ? futex_hash_allocate+0x190/0x9d0
[  403.817650][T25469]  ? futex_hash_allocate+0x190/0x9d0
[  403.817689][T25469]  futex_hash_allocate+0x190/0x9d0
[  403.817750][T25469]  ? cap_task_prctl+0x13f/0x6e0
[  403.817788][T25469]  futex_hash_prctl+0xd8/0xf0
[  403.817836][T25469]  __se_sys_prctl+0xa3d/0x13f0
[  403.817952][T25469]  __x64_sys_prctl+0x67/0x80
[  403.817986][T25469]  x64_sys_call+0x2533/0x3020
[  403.818068][T25469]  do_syscall_64+0x12c/0x370
[  403.818103][T25469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.818132][T25469] RIP: 0033:0x7f9584a1c819
[  403.818151][T25469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.818175][T25469] RSP: 002b:00007f9583477028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  403.818241][T25469] RAX: ffffffffffffffda RBX: 00007f9584c95fa0 RCX: 00007f9584a1c819
[  403.818260][T25469] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  403.818276][T25469] RBP: 00007f9584ab2c91 R08: 0000000000000000 R09: 0000000000000000
[  403.818320][T25469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.818335][T25469] R13: 00007f9584c96038 R14: 00007f9584c95fa0 R15: 00007ffeb994aad8
[  403.818368][T25469]  </TASK>
[  403.818413][T25469] memory: usage 307200kB, limit 307200kB, failcnt 2443
[  404.048807][T25469] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0
[  404.057026][   T70] bridge_slave_1: left allmulticast mode
[  404.058789][T25469] kmem: usage 230056kB, limit 9007199254740988kB, failcnt 0
[  404.065141][   T70] bridge_slave_1: left promiscuous mode
[  404.070805][T25469] Memory cgroup stats for /syz0:
[  404.076049][T25469] cache 78458880
[  404.084931][T25469] rss 524288
[  404.092041][   T70] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.104907][T25469] shmem 69443584
[  404.108529][T25469] mapped_file 102400
[  404.114028][T25469] dirty 57344
[  404.133768][T25469] writeback 0
[  404.137105][T25469] workingset_refault_anon 452
[  404.152127][T25469] workingset_refault_file 2176
[  404.158272][T25469] swap 331776
[  404.166267][T25469] swapcached 40308736
[  404.176034][T25469] pgpgin 423408
[  404.183109][T25469] pgpgout 404125
[  404.191372][T25469] pgfault 330738
[  404.200727][T25469] pgmajfault 116
[  404.210076][T25469] inactive_anon 192512
[  404.221128][T25469] active_anon 69775360
[  404.231152][T25469] inactive_file 0
[  404.240625][T25469] active_file 9015296
[  404.252349][T25469] unevictable 0
[  404.256796][T25507] loop4: detected capacity change from 0 to 2048
[  404.258898][T25469] hierarchical_memory_limit 314572800
[  404.275259][T25469] hierarchical_memsw_limit 9223372036854771712
[  404.281574][T25469] total_cache 78458880
[  404.285818][T25469] total_rss 524288
[  404.289847][T25469] total_shmem 69443584
[  404.294177][T25469] total_mapped_file 102400
[  404.294331][   T70] bridge_slave_0: left allmulticast mode
[  404.305468][   T70] bridge_slave_0: left promiscuous mode
[  404.311177][   T70] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.319611][T25469] total_dirty 57344
[  404.324591][T25469] total_writeback 0
[  404.328416][T25469] total_workingset_refault_anon 452
[  404.334523][T25469] total_workingset_refault_file 2176
[  404.339836][T25469] total_swap 331776
[  404.343964][T25469] total_swapcached 40308736
[  404.348576][T25469] total_pgpgin 423408
[  404.352696][T25469] total_pgpgout 404125
[  404.356809][T25469] total_pgfault 330738
[  404.362265][T25469] total_pgmajfault 116
[  404.366376][T25469] total_inactive_anon 192512
[  404.381225][T25469] total_active_anon 69775360
[  404.385967][T25469] total_inactive_file 0
[  404.390143][T25469] total_active_file 9015296
[  404.395227][T25469] total_unevictable 0
[  404.399224][T25469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7580,pid=25468,uid=0
[  404.422263][T25469] Memory cgroup out of memory: Killed process 25469 (syz.0.7580) total-vm:96080kB, anon-rss:1400kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[  404.684786][T23201] Alternate GPT is invalid, using primary GPT.
[  404.691256][T23201]  loop4: p2 p3 p7
[  404.841344][T25507] Alternate GPT is invalid, using primary GPT.
[  404.855311][T25507]  loop4: p2 p3 p7
[  405.054800][   T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.065091][   T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.075795][   T70] bond0 (unregistering): Released all slaves
[  405.117672][   T70] hsr_slave_0: left promiscuous mode
[  405.123579][   T70] hsr_slave_1: left promiscuous mode
[  405.129334][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.137493][   T70] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.145435][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.153248][   T70] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.681600][   T70] veth1_macvtap: left promiscuous mode
[  405.687671][   T70] veth0_macvtap: left promiscuous mode
[  405.693683][   T70] veth1_vlan: left promiscuous mode
[  405.699083][   T70] veth0_vlan: left promiscuous mode
[  406.375233][T25561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7611'.
[  407.097706][   T70] team0 (unregistering): Port device team_slave_1 removed
[  407.115603][   T70] team0 (unregistering): Port device team_slave_0 removed
[  407.220460][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7614'.
[  407.318754][T25588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25588 comm=syz.5.7622
[  407.347813][T25588] netlink: 'syz.5.7622': attribute type 1 has an invalid length.
[  407.366647][T25592] xt_hashlimit: size too large, truncated to 1048576
[  407.389236][T25588] bond4: (slave bridge2): making interface the new active one
[  407.409062][T25588] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  407.500294][T25600] gre1: entered promiscuous mode
[  407.618801][T25612] loop4: detected capacity change from 0 to 512
[  407.634969][T25612] journal_path: Non-blockdev passed as './file2'
[  407.652011][T25612] EXT4-fs: error: could not find journal device path
[  407.916233][T25651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7649'.
[  408.533756][T25692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7665'.
[  408.582604][T25696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7667'.
[  408.660164][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7674'.
[  408.674521][T25708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7674'.
[  408.741280][T25713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7676'.
[  408.794239][T25715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7677'.
[  408.887350][T25718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7688'.
[  408.939153][T25725] netlink: 'syz.0.7681': attribute type 1 has an invalid length.
[  408.961679][T25725] bond0: entered allmulticast mode
[  408.973821][T25725] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.003210][T25725] 8021q: adding VLAN 0 to HW filter on device batadv1
[  409.012527][T25725] bond0: (slave batadv1): making interface the new active one
[  409.020163][T25725] batadv1: entered allmulticast mode
[  409.037902][T25725] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  409.062364][T25731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7681'.
[  409.109855][T25731] bond0 (unregistering): (slave batadv1): Releasing active interface
[  409.121526][T25731] batadv1: left allmulticast mode
[  409.131116][T25731] bond0 (unregistering): Released all slaves
[  409.276655][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7687'.
[  409.459929][T25755] xt_hashlimit: size too large, truncated to 1048576
[  409.567950][T25764] netlink: 'syz.4.7698': attribute type 1 has an invalid length.
[  409.591683][T25764] bond2: entered allmulticast mode
[  409.600014][T25764] 8021q: adding VLAN 0 to HW filter on device bond2
[  409.626375][T25764] 8021q: adding VLAN 0 to HW filter on device batadv1
[  409.639975][T25764] bond2: (slave batadv1): making interface the new active one
[  409.650890][T25764] batadv1: entered allmulticast mode
[  409.661405][T25764] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  409.685837][T25767] bond2 (unregistering): (slave batadv1): Releasing active interface
[  409.708338][T25767] batadv1: left allmulticast mode
[  409.719785][T25767] bond2 (unregistering): Released all slaves
[  410.011647][T25780] sch_fq: defrate 7 ignored.
[  411.019676][T25815] syzkaller0: entered allmulticast mode
[  411.031570][T25815] syzkaller0: entered promiscuous mode
[  411.040509][T25815] syzkaller0 (unregistering): left allmulticast mode
[  411.048013][T25815] syzkaller0 (unregistering): left promiscuous mode
[  411.104267][T25819] sch_fq: defrate 7 ignored.
[  411.308278][T25838] netlink: 'syz.5.7729': attribute type 1 has an invalid length.
[  411.343066][T25838] bond5: entered allmulticast mode
[  411.366366][T25838] 8021q: adding VLAN 0 to HW filter on device bond5
[  411.395402][T25841] 8021q: adding VLAN 0 to HW filter on device batadv1
[  411.433807][T25841] bond5: (slave batadv1): making interface the new active one
[  411.453139][T25841] batadv1: entered allmulticast mode
[  411.459811][T25841] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  411.498469][T25838] bond5 (unregistering): (slave batadv1): Releasing active interface
[  411.514512][T25838] batadv1: left allmulticast mode
[  411.533304][T25838] bond5 (unregistering): Released all slaves
[  411.750091][T25868] syzkaller0: entered allmulticast mode
[  411.756991][T25868] syzkaller0: entered promiscuous mode
[  411.773411][T25868] syzkaller0 (unregistering): left allmulticast mode
[  411.792295][T25868] syzkaller0 (unregistering): left promiscuous mode
[  411.942989][T25884] netlink: 'syz.1.7748': attribute type 1 has an invalid length.
[  411.970021][T25884] bond11: entered allmulticast mode
[  411.978439][T25884] 8021q: adding VLAN 0 to HW filter on device bond11
[  412.006811][T25884] 8021q: adding VLAN 0 to HW filter on device batadv1
[  412.047929][T25884] bond11: (slave batadv1): making interface the new active one
[  412.090806][T25884] batadv1: entered allmulticast mode
[  412.116156][T25884] bond11: (slave batadv1): Enslaving as an active interface with an up link
[  412.151932][T25889] bond11 (unregistering): (slave batadv1): Releasing active interface
[  412.160401][T25889] batadv1: left allmulticast mode
[  412.166534][T25889] bond11 (unregistering): Released all slaves
[  412.659954][   T28] audit: type=1400 audit(2000000033.161:4283): avc:  denied  { read write } for  pid=25899 comm="syz.4.7753" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  412.684692][   T28] audit: type=1400 audit(2000000033.161:4284): avc:  denied  { open } for  pid=25899 comm="syz.4.7753" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  412.797055][T25914] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  412.858806][T25919] bond0 (unregistering): Released all slaves
[  412.884802][T25916] syzkaller0: entered allmulticast mode
[  412.891840][T25916] syzkaller0: entered promiscuous mode
[  412.913404][T25916] syzkaller0 (unregistering): left allmulticast mode
[  412.922343][T25916] syzkaller0 (unregistering): left promiscuous mode
[  414.365812][T25959] syzkaller0: entered allmulticast mode
[  414.371662][T25959] syzkaller0: entered promiscuous mode
[  414.401103][T25959] syzkaller0 (unregistering): left allmulticast mode
[  414.412291][T25959] syzkaller0 (unregistering): left promiscuous mode
[  414.762987][T25965] netlink: 'syz.5.7781': attribute type 1 has an invalid length.
[  414.797534][T25965] bond5: entered allmulticast mode
[  414.820579][T25965] 8021q: adding VLAN 0 to HW filter on device bond5
[  414.849454][T25969] 8021q: adding VLAN 0 to HW filter on device batadv2
[  414.878753][T25965] __nla_validate_parse: 6 callbacks suppressed
[  414.878843][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7781'.
[  414.896860][T25969] bond5: (slave batadv2): making interface the new active one
[  414.923044][T25969] batadv2: entered allmulticast mode
[  414.933628][T25969] bond5: (slave batadv2): Enslaving as an active interface with an up link
[  414.956907][T25965] bond5 (unregistering): (slave batadv2): Releasing active interface
[  414.972286][T25965] batadv2: left allmulticast mode
[  414.978602][T25965] bond5 (unregistering): Released all slaves
[  415.061236][T25967] loop4: detected capacity change from 0 to 32768
[  415.103225][T25967]  loop4: p1 p3 < >
[  415.210238][T23194] udevd[23194]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  415.210643][T23201] udevd[23201]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  415.362814][T25977] syzkaller0: entered allmulticast mode
[  415.369494][T25977] syzkaller0: entered promiscuous mode
[  415.379805][T25977] syzkaller0 (unregistering): left allmulticast mode
[  415.392024][T25977] syzkaller0 (unregistering): left promiscuous mode
[  415.701977][T26000] loop4: detected capacity change from 0 to 128
[  415.726238][T26000] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  415.826347][T20649] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  415.861541][T26007] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  415.911643][T26008] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7797'.
[  415.944253][T26008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.980527][T26008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.010911][T26008] bond0 (unregistering): Released all slaves
[  416.066842][T26007] loop4: detected capacity change from 0 to 8192
[  416.386795][T26023] syzkaller0: entered allmulticast mode
[  416.409958][T26023] syzkaller0: entered promiscuous mode
[  416.417317][T26023] syzkaller0 (unregistering): left allmulticast mode
[  416.424235][T26023] syzkaller0 (unregistering): left promiscuous mode
[  417.977460][T26064] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  418.026593][T26064] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7823'.
[  418.052552][T26064] bond0 (unregistering): (slave macvlan4): Releasing backup interface
[  418.082907][T26064] bond0 (unregistering): Released all slaves
[  419.003291][T26104] loop4: detected capacity change from 0 to 1024
[  419.014344][T26104] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  419.014344][T26104] 
[  419.127539][T26113] syzkaller0: entered allmulticast mode
[  419.142662][T26113] syzkaller0: entered promiscuous mode
[  419.206259][T26113] syzkaller0 (unregistering): left allmulticast mode
[  419.228954][T26113] syzkaller0 (unregistering): left promiscuous mode
[  419.499773][T26133] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7852'.
[  419.525950][T26133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7852'.
[  419.544609][T26133] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7852'.
[  419.567392][T26133] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7852'.
[  419.587725][T26133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7852'.
[  420.083307][T26148] gre4: entered promiscuous mode
[  420.464400][T26169] netlink: 172 bytes leftover after parsing attributes in process `syz.5.7869'.
[  420.488389][T26169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7869'.
[  420.507135][T26169] netlink: 172 bytes leftover after parsing attributes in process `syz.5.7869'.
[  420.536623][T26169] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7869'.
[  420.572334][T26169] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7869'.
[  421.208254][   T28] audit: type=1326 audit(2000000005.670:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  421.237647][   T28] audit: type=1326 audit(2000000005.670:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  421.263980][   T28] audit: type=1326 audit(2000000005.670:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  421.288056][   T28] audit: type=1326 audit(2000000005.670:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  421.312968][   T28] audit: type=1326 audit(2000000005.670:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  421.341179][   T28] audit: type=1326 audit(2000000005.730:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  421.367670][   T28] audit: type=1326 audit(2000000005.730:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9584a1c582 code=0x7ffc0000
[  421.431556][   T28] audit: type=1326 audit(2000000005.730:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9584a1c617 code=0x7ffc0000
[  421.456468][   T28] audit: type=1326 audit(2000000005.730:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f95849d9511 code=0x7ffc0000
[  421.481015][T26207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7881'.
[  421.510091][   T28] audit: type=1326 audit(2000000005.730:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26196 comm="syz.0.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9584a1d609 code=0x7ffc0000
[  421.567563][T26214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7884'.
[  421.655073][T26221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26221 comm=syz.0.7885
[  423.016706][T26255] dvmrp0: entered allmulticast mode
[  423.035327][T26255] dvmrp0: left allmulticast mode
[  423.110870][T26263] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7906'.
[  423.326452][T26283] xt_hashlimit: size too large, truncated to 1048576
[  423.662503][T26296] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7918'.
[  423.682359][T26296] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  424.049521][T26322] all: renamed from veth0_to_hsr (while UP)
[  424.107327][T26328] loop4: detected capacity change from 0 to 512
[  424.114106][T26328] EXT4-fs: Ignoring removed nobh option
[  424.120464][T26328] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  424.138778][T26328] EXT4-fs (loop4): 1 truncate cleaned up
[  424.147351][T26328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.301264][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.336611][T26347] loop4: detected capacity change from 0 to 512
[  424.356575][T26347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.437254][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.385512][T26445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7976'.
[  425.527496][T26463] loop4: detected capacity change from 0 to 256
[  425.536952][T26463] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  426.213203][T26514] batman_adv: batadv0: Adding interface: dummy0
[  426.256320][T26514] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.348949][T26514] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  426.500754][T26522] __nla_validate_parse: 2 callbacks suppressed
[  426.500770][T26522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8009'.
[  427.224848][T26555] loop4: detected capacity change from 0 to 512
[  427.250140][T26555] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  427.272788][T26555] EXT4-fs (loop4): 1 truncate cleaned up
[  427.280073][T26555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.439185][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.540087][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8030'.
[  427.573236][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8030'.
[  428.020413][T26573] dvmrp0: entered allmulticast mode
[  428.034286][T26573] dvmrp0: left allmulticast mode
[  428.211089][T26596] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  428.267802][T26605] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8039'.
[  428.367448][T26613] netlink: 'syz.1.8045': attribute type 83 has an invalid length.
[  428.385847][T26605] bond0 (unregistering): Released all slaves
[  428.497720][T26621] netlink: 'syz.1.8058': attribute type 1 has an invalid length.
[  428.565724][T26621] bond0: entered promiscuous mode
[  428.622402][T26621] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.669556][T26624] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.762855][T26624] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  428.852391][T26624] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  428.906503][T26624] bond0: (slave ip6gre2): making interface the new active one
[  428.948849][T26624] ip6gre2: entered promiscuous mode
[  428.992349][T26624] bond0: (slave ip6gre2): Enslaving as an active interface with an up link
[  430.488582][T26649] sctp: [Deprecated]: syz.0.8060 (pid 26649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.488582][T26649] Use struct sctp_sack_info instead
[  431.782910][T26667] geneve2: entered promiscuous mode
[  431.788223][T26667] geneve2: entered allmulticast mode
[  431.796246][T11909] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  431.805535][T11909] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  431.840413][T11909] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  431.875395][T11909] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  432.164462][T26706] loop4: detected capacity change from 0 to 1024
[  432.176654][T26706] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  432.203851][T26706] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  432.223166][T26706] EXT4-fs (loop4): orphan cleanup on readonly fs
[  432.233181][T26706] __quota_error: 463 callbacks suppressed
[  432.233198][T26706] Quota error (device loop4): v2_read_file_info: Can't read info structure
[  432.247893][T26706] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  432.262629][T26706] EXT4-fs (loop4): Cannot turn on quotas: error -5
[  432.272967][T26706] EXT4-fs (loop4): 1 truncate cleaned up
[  432.279228][T26706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  432.372466][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.407986][T26714] loop4: detected capacity change from 0 to 128
[  432.512998][T26716] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8087'.
[  432.522144][T26716] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8087'.
[  432.696130][T26682] syz.1.8073 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  432.711510][T26682] CPU: 0 UID: 0 PID: 26682 Comm: syz.1.8073 Not tainted syzkaller #0 PREEMPT(full) 
[  432.711553][T26682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  432.711647][T26682] Call Trace:
[  432.711656][T26682]  <TASK>
[  432.711667][T26682]  __dump_stack+0x1d/0x30
[  432.711739][T26682]  dump_stack_lvl+0x95/0xd0
[  432.711841][T26682]  dump_stack+0x15/0x1b
[  432.711872][T26682]  dump_header+0x80/0x240
[  432.711904][T26682]  oom_kill_process+0x295/0x350
[  432.711986][T26682]  out_of_memory+0x97d/0xb80
[  432.712018][T26682]  try_charge_memcg+0x62e/0xa10
[  432.712065][T26682]  obj_cgroup_charge_pages+0x23/0xc0
[  432.712094][T26682]  __memcg_kmem_charge_page+0x9e/0x170
[  432.712177][T26682]  __alloc_frozen_pages_noprof+0x18a/0x360
[  432.712231][T26682]  alloc_pages_bulk_noprof+0x4aa/0x530
[  432.712268][T26682]  ? policy_nodemask+0x417/0x5e0
[  432.712367][T26682]  ? __alloc_frozen_pages_noprof+0x2a4/0x360
[  432.712407][T26682]  alloc_pages_bulk_mempolicy_noprof+0x352/0xea0
[  432.712450][T26682]  ? alloc_pages_mpol+0x217/0x260
[  432.712549][T26682]  __vmalloc_node_range_noprof+0x87c/0x12b0
[  432.712632][T26682]  __kvmalloc_node_noprof+0x3d4/0x650
[  432.712694][T26682]  ? futex_hash_allocate+0x190/0x9d0
[  432.712733][T26682]  ? futex_hash_allocate+0x190/0x9d0
[  432.712776][T26682]  futex_hash_allocate+0x190/0x9d0
[  432.712871][T26682]  ? cap_task_prctl+0x13f/0x6e0
[  432.712910][T26682]  futex_hash_prctl+0xd8/0xf0
[  432.712988][T26682]  __se_sys_prctl+0xa3d/0x13f0
[  432.713026][T26682]  __x64_sys_prctl+0x67/0x80
[  432.713095][T26682]  x64_sys_call+0x2533/0x3020
[  432.713127][T26682]  do_syscall_64+0x12c/0x370
[  432.713218][T26682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.713249][T26682] RIP: 0033:0x7f4a870ac819
[  432.713271][T26682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.713291][T26682] RSP: 002b:00007f4a85aff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  432.713379][T26682] RAX: ffffffffffffffda RBX: 00007f4a87325fa0 RCX: 00007f4a870ac819
[  432.713399][T26682] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  432.713417][T26682] RBP: 00007f4a87142c91 R08: 0000000000000000 R09: 0000000000000000
[  432.713435][T26682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.713482][T26682] R13: 00007f4a87326038 R14: 00007f4a87325fa0 R15: 00007ffd2b604ce8
[  432.713505][T26682]  </TASK>
[  433.018561][T26682] memory: usage 307200kB, limit 307200kB, failcnt 55
[  433.053305][T26682] memory+swap: usage 313340kB, limit 9007199254740988kB, failcnt 0
[  433.061439][T26682] kmem: usage 300732kB, limit 9007199254740988kB, failcnt 0
[  433.070565][T26682] Memory cgroup stats for /syz1:
[  433.070997][T26682] cache 114688
[  433.082146][T26728] netlink: 'syz.9.8091': attribute type 1 has an invalid length.
[  433.090416][T26682] rss 6483968
[  433.094562][T26682] shmem 49152
[  433.097920][T26682] mapped_file 65536
[  433.101905][T26682] dirty 65536
[  433.105337][T26682] writeback 0
[  433.108695][T26682] workingset_refault_anon 1560
[  433.113774][T26682] workingset_refault_file 0
[  433.118390][T26682] swap 6287360
[  433.122247][T26682] swapcached 24928256
[  433.126444][T26682] pgpgin 484804
[  433.130013][T26682] pgpgout 483193
[  433.134333][T26682] pgfault 361445
[  433.138040][T26682] pgmajfault 120
[  433.141649][T26682] inactive_anon 6524928
[  433.145884][T26682] active_anon 8192
[  433.149700][T26682] inactive_file 0
[  433.153463][T26682] active_file 65536
[  433.157326][T26682] unevictable 0
[  433.160923][T26682] hierarchical_memory_limit 314572800
[  433.167036][T26682] hierarchical_memsw_limit 9223372036854771712
[  433.173902][T26682] total_cache 114688
[  433.177871][T26682] total_rss 6483968
[  433.181812][T26682] total_shmem 49152
[  433.187842][T26682] total_mapped_file 65536
[  433.192913][T26682] total_dirty 65536
[  433.196749][T26682] total_writeback 0
[  433.200681][T26682] total_workingset_refault_anon 1560
[  433.206029][T26682] total_workingset_refault_file 0
[  433.211211][T26682] total_swap 6287360
[  433.215193][T26682] total_swapcached 24928256
[  433.219763][T26682] total_pgpgin 484804
[  433.226473][T26682] total_pgpgout 483193
[  433.230678][T26682] total_pgfault 361445
[  433.234838][T26682] total_pgmajfault 120
[  433.239093][T26682] total_inactive_anon 6524928
[  433.244347][T26682] total_active_anon 8192
[  433.248665][T26682] total_inactive_file 0
[  433.253660][T26682] total_active_file 65536
[  433.258135][T26682] total_unevictable 0
[  433.262358][T26682] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3521,pid=14045,uid=0
[  433.277339][T26682] Memory cgroup out of memory: Killed process 14045 (syz.1.3521) total-vm:96080kB, anon-rss:1400kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[  433.640090][T26741] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  434.148207][T26765] netlink: 'syz.0.8108': attribute type 13 has an invalid length.
[  434.158872][T26765] netlink: 'syz.0.8108': attribute type 17 has an invalid length.
[  434.214815][T26765] syz_tun: left promiscuous mode
[  434.237014][T26765] 8021q: adding VLAN 0 to HW filter on device team0
[  434.254843][T26765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  434.380217][T26781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.392376][T26781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.470558][T26788] rdma_op ffff8881705a0180 conn xmit_rdma 0000000000000000
[  434.742640][T26800] vcan0: tx drop: invalid da for name 0x0000000000000003
[  434.992636][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881ac89ba00: rx timeout, send abort
[  435.386799][T26830] netlink: 'syz.5.8134': attribute type 13 has an invalid length.
[  435.394858][T26830] netlink: 'syz.5.8134': attribute type 17 has an invalid length.
[  435.413728][T26830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  435.492434][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811eb9b800: rx timeout, send abort
[  435.501772][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881ac89ba00: abort rx timeout. Force session deactivation
[  435.718495][   T28] audit: type=1326 audit(2000000026.178:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  435.770582][   T28] audit: type=1326 audit(2000000026.208:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  435.813831][   T28] audit: type=1326 audit(2000000026.218:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  435.856391][T26859] netlink: 'syz.4.8147': attribute type 13 has an invalid length.
[  435.864399][T26859] netlink: 'syz.4.8147': attribute type 17 has an invalid length.
[  435.869424][   T28] audit: type=1326 audit(2000000026.218:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  435.926466][   T28] audit: type=1326 audit(2000000026.218:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  435.958749][   T28] audit: type=1326 audit(2000000026.218:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  435.987796][   T28] audit: type=1326 audit(2000000026.218:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  436.001474][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811eb9b800: abort rx timeout. Force session deactivation
[  436.013012][   T28] audit: type=1326 audit(2000000026.218:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  436.053128][T26859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  436.062040][   T28] audit: type=1326 audit(2000000026.218:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.0.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  436.082876][T26864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8158'.
[  436.304615][T26883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.323386][T26883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.473352][T26893] netlink: 'syz.1.8161': attribute type 13 has an invalid length.
[  436.481666][T26893] netlink: 'syz.1.8161': attribute type 17 has an invalid length.
[  436.586200][T26893] 8021q: adding VLAN 0 to HW filter on device team0
[  436.598834][T26893] batman_adv: batadv0: Interface activated: dummy0
[  436.607324][T26893] batadv0: mtu less than device minimum
[  436.613659][T26893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  436.624718][T26893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  436.635624][T26893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  436.646580][T26893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  436.657565][T26893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  436.668504][T26893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  436.754111][T26904] xt_hashlimit: size too large, truncated to 1048576
[  436.869125][T26908] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8165'.
[  436.880709][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8165'.
[  436.890443][T26908] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8165'.
[  436.899833][T26908] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8165'.
[  436.909311][T26908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8165'.
[  438.004365][T26944] netlink: 'syz.9.8179': attribute type 13 has an invalid length.
[  438.012742][T26944] netlink: 'syz.9.8179': attribute type 17 has an invalid length.
[  438.158386][T26944] 8021q: adding VLAN 0 to HW filter on device team0
[  438.190887][T26944] batman_adv: batadv0: Interface activated: dummy0
[  438.341298][T26954] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8183'.
[  438.356622][T26954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8183'.
[  438.366375][T26954] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8183'.
[  438.375708][T26954] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8183'.
[  438.384951][T26954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8183'.
[  438.923602][ T3626] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  438.944134][ T3626] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  439.001837][T26992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26992 comm=syz.5.8198
[  439.242118][T27006] netlink: 'syz.4.8207': attribute type 13 has an invalid length.
[  439.251469][T27008] netlink: 'syz.0.8202': attribute type 1 has an invalid length.
[  439.251906][T27006] netlink: 'syz.4.8207': attribute type 17 has an invalid length.
[  439.299102][T27006] net_ratelimit: 36 callbacks suppressed
[  439.299115][T27006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.355865][T27008] gretap2: entered allmulticast mode
[  439.373448][T27008] bond0: (slave gretap2): making interface the new active one
[  439.391893][T27008] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  439.472487][T27020] netlink: 'syz.0.8212': attribute type 4 has an invalid length.
[  439.523075][T27020] netlink: 'syz.0.8212': attribute type 4 has an invalid length.
[  439.664028][T27024] loop4: detected capacity change from 0 to 256
[  439.992371][T27040] netlink: 'syz.4.8218': attribute type 10 has an invalid length.
[  440.053149][T27040] team0: Device vxcan1 is of different type
[  440.725505][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  440.725589][   T28] audit: type=1400 audit(2000000031.189:4792): avc:  denied  { write } for  pid=27074 comm="syz.0.8233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  440.725798][T27075] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  440.957283][T27089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8239'.
[  440.973666][T27091] cgroup: none used incorrectly
[  440.978926][T27089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8239'.
[  441.334684][T27112] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8251'.
[  442.286975][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8269'.
[  442.353406][T27172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  442.477924][T27184] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  442.501572][T27184] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8277'.
[  442.645782][T27192] netlink: 'syz.1.8283': attribute type 10 has an invalid length.
[  442.687064][T27192] team0: Port device vxcan1 added
[  442.897210][   T28] audit: type=1401 audit(2000000033.199:4793): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A6877646174615F743A733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073656375726974792E73656C696E7578000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
[  443.677576][T27210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  445.449040][T27263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8309'.
[  446.233218][T27282] batman_adv: batadv0: Adding interface: dummy0
[  446.244571][T27282] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.298517][T27282] batman_adv: batadv0: Interface activated: dummy0
[  446.316672][T27286] batadv0: mtu less than device minimum
[  446.335862][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.347132][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.358085][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.368938][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.379843][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.390781][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.401744][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.412720][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  446.423709][T27286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  448.085371][T27348] xt_hashlimit: size too large, truncated to 1048576
[  448.674137][T27365] netlink: 'syz.9.8346': attribute type 10 has an invalid length.
[  448.714323][T27365] batman_adv: batadv0: Interface deactivated: dummy0
[  448.751814][T27368] netlink: 'syz.9.8346': attribute type 10 has an invalid length.
[  448.770946][T27365] batman_adv: batadv0: Removing interface: dummy0
[  448.812582][T27365] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  448.821508][T27365] team0: Failed to send options change via netlink (err -105)
[  448.829821][T27365] team0: Port device dummy0 added
[  448.845421][T27368] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  448.885261][T27374] loop4: detected capacity change from 0 to 512
[  448.892309][T27374] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent
[  448.923824][T27368] team0: Failed to send options change via netlink (err -105)
[  448.931401][T27368] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  448.968970][   T28] audit: type=1400 audit(2000000039.419:4794): avc:  denied  { map } for  pid=27373 comm="syz.4.8351" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  448.996212][   T28] audit: type=1326 audit(2000000039.459:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27366 comm="syz.5.8347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8064abc819 code=0x0
[  449.020855][T27368] team0: Port device dummy0 removed
[  449.100701][T27386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8355'.
[  449.117544][T27386] netlink: 'syz.0.8355': attribute type 7 has an invalid length.
[  449.132479][T27386] netlink: 'syz.0.8355': attribute type 8 has an invalid length.
[  449.146459][T27386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8355'.
[  449.318608][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8360'.
[  450.998289][T27439] xt_hashlimit: size too large, truncated to 1048576
[  451.238735][   T28] audit: type=1326 audit(2000000041.699:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  451.274322][   T28] audit: type=1326 audit(2000000041.699:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  451.308118][   T28] audit: type=1326 audit(2000000041.699:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  451.342327][   T28] audit: type=1326 audit(2000000041.699:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  451.380454][   T28] audit: type=1326 audit(2000000041.699:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  451.433180][   T28] audit: type=1326 audit(2000000041.759:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  451.467843][   T28] audit: type=1326 audit(2000000041.759:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9584a1c582 code=0x7ffc0000
[  451.501822][   T28] audit: type=1326 audit(2000000041.759:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.0.8379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9584a1c617 code=0x7ffc0000
[  451.721984][T27474] 9p: Bad value for 'rfdno'
[  451.859666][T27487] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8393'.
[  452.333714][T27512] netlink: 'syz.4.8403': attribute type 10 has an invalid length.
[  452.375675][T27512] team0: Failed to send options change via netlink (err -105)
[  452.384569][T27518] netlink: 'syz.4.8403': attribute type 10 has an invalid length.
[  452.392369][T27512] team0: Port device dummy0 added
[  452.421248][T27518] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  452.453619][T27518] team0: Failed to send options change via netlink (err -105)
[  452.462597][T27518] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  452.471968][T27518] team0: Port device dummy0 removed
[  452.501119][T27521] sock: sock_timestamping_bind_phc: sock not bind to device
[  452.800999][T27541] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.8413'.
[  452.882446][T27537] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.8413'.
[  453.947100][T27593] xt_hashlimit: size too large, truncated to 1048576
[  454.382274][T27605] netlink: 'syz.5.8438': attribute type 1 has an invalid length.
[  454.513647][T27605] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.096322][T27625] loop2: detected capacity change from 0 to 7
[  455.109694][   T28] kauditd_printk_skb: 89 callbacks suppressed
[  455.109712][   T28] audit: type=1326 audit(2000000045.569:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.149450][T27625]  loop2:
[  455.182607][   T28] audit: type=1326 audit(2000000045.599:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.253230][   T28] audit: type=1326 audit(2000000045.599:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.278520][   T28] audit: type=1326 audit(2000000045.599:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.302445][   T28] audit: type=1326 audit(2000000045.609:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.327421][T27635] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8448'.
[  455.336514][   T28] audit: type=1326 audit(2000000045.619:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.361624][T27635] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.368758][T27635] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.380997][T27635] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8448'.
[  455.398633][   T28] audit: type=1326 audit(2000000045.619:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.462290][   T28] audit: type=1326 audit(2000000045.619:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.502235][   T28] audit: type=1326 audit(2000000045.619:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.554143][   T28] audit: type=1326 audit(2000000045.619:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27628 comm="syz.5.8445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064abc819 code=0x7ffc0000
[  455.819663][T27669] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8463'.
[  455.870078][T27669] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8463'.
[  456.149926][T27687] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.203638][T27687] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  456.300526][T27687] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.352284][T27687] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  456.444720][T27687] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.497238][T27687] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  456.585935][T27687] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.643890][T27687] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  456.742462][T27705] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8479'.
[  456.769815][T27705] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8479'.
[  456.820030][T27708] netlink: 'syz.4.8481': attribute type 6 has an invalid length.
[  456.828594][   T70] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  456.837097][   T70] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  456.892793][   T70] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  456.901153][   T70] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  456.971797][T20649] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  456.981960][T20649] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  457.053884][T20649] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.062332][T20649] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  457.148371][T27724] SELinux: security_context_str_to_sid (¬) failed with errno=-22
[  457.891047][T27759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8503'.
[  457.991313][T27759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8503'.
[  458.348223][T27771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8509'.
[  458.357835][T27769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8508'.
[  458.366906][T27769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8508'.
[  458.406644][T27769] vlan2: entered promiscuous mode
[  458.421860][T27769] erspan0: entered promiscuous mode
[  458.427939][T27769] vlan2: entered allmulticast mode
[  458.441108][T27769] erspan0: entered allmulticast mode
[  458.555074][T27781] block device autoloading is deprecated and will be removed.
[  458.809564][T27802] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.8521'.
[  459.324263][T27828] netlink: 'syz.5.8532': attribute type 10 has an invalid length.
[  459.365914][T27830] netlink: 'syz.5.8534': attribute type 10 has an invalid length.
[  459.503564][T27838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8538'.
[  459.547846][T27838] team0: entered promiscuous mode
[  459.573928][T27839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8538'.
[  459.582368][T27838] team0: entered allmulticast mode
[  459.607563][T27838] 8021q: adding VLAN 0 to HW filter on device team0
[  459.645385][T27839] team1: entered promiscuous mode
[  459.656203][T27839] team1: entered allmulticast mode
[  459.667196][T27839] 8021q: adding VLAN 0 to HW filter on device team1
[  459.878255][T27849] gretap0: entered promiscuous mode
[  459.888079][T27849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8543'.
[  459.904411][T27849] gretap0: left promiscuous mode
[  460.932894][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  460.932911][   T28] audit: type=1326 audit(2000000051.399:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.012268][   T28] audit: type=1326 audit(2000000051.399:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.046265][   T28] audit: type=1326 audit(2000000051.399:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.094403][   T28] audit: type=1326 audit(2000000051.399:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.134847][   T28] audit: type=1326 audit(2000000051.429:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.166851][   T28] audit: type=1326 audit(2000000051.429:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.192588][   T28] audit: type=1326 audit(2000000051.429:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.266002][   T28] audit: type=1326 audit(2000000051.429:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.313431][   T28] audit: type=1326 audit(2000000051.429:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.337468][   T28] audit: type=1326 audit(2000000051.429:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.0.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  461.400914][T27911] loop0: detected capacity change from 0 to 1024
[  461.491743][T27911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.532403][T27911] ext4 filesystem being mounted at /1052/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.560679][T27911] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm syz.0.8570: lblock 0 mapped to illegal pblock 0 (length 1)
[  461.574843][T27911] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  461.588085][T27911] EXT4-fs (loop0): This should not happen!! Data will be lost
[  461.588085][T27911] 
[  461.611660][  T822] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1)
[  461.662520][  T822] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  461.699556][  T822] EXT4-fs (loop0): This should not happen!! Data will be lost
[  461.699556][  T822] 
[  461.732960][T20649] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:24: bg 0: block 112: padding at end of block bitmap is not set
[  461.750870][T20649] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  461.778810][T20649] EXT4-fs (loop0): This should not happen!! Data will be lost
[  461.778810][T20649] 
[  461.791100][T20649] EXT4-fs (loop0): Total free blocks count 0
[  461.801313][T20649] EXT4-fs (loop0): Free/Dirty block details
[  461.810413][T20649] EXT4-fs (loop0): free_blocks=0
[  461.821683][T12628] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  461.944887][T27942] loop0: detected capacity change from 0 to 512
[  462.244973][T27965] cgroup: noprefix used incorrectly
[  462.290550][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8592'.
[  462.995837][T27998] batman_adv: batadv0: Adding interface: ip6gretap2
[  463.013321][T28005] __nla_validate_parse: 1 callbacks suppressed
[  463.013380][T28005] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8608'.
[  463.032372][T27998] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.062069][T27998] batman_adv: batadv0: Interface activated: ip6gretap2
[  463.069344][T27998] net_ratelimit: 10 callbacks suppressed
[  463.069357][T27998] batadv0: mtu less than device minimum
[  463.081505][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.092368][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.103482][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.114604][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.125449][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.136345][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.147394][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.158182][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.169131][T27998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  463.345963][T28022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8614'.
[  463.417144][T28032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8619'.
[  463.571571][T28038] netlink: 'syz.9.8621': attribute type 10 has an invalid length.
[  463.624095][T28038] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  463.689639][T28038] team0: Failed to send options change via netlink (err -105)
[  463.747845][T28038] team0: Port device netdevsim1 added
[  464.583606][T28072] SELinux: failed to load policy
[  464.706093][T20649] bridge_slave_1: left allmulticast mode
[  464.711822][T20649] bridge_slave_1: left promiscuous mode
[  464.734967][T20649] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.941077][T20649] bridge_slave_0: left allmulticast mode
[  464.957102][T20649] bridge_slave_0: left promiscuous mode
[  464.973836][T20649] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.315900][T20649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.335940][T20649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.359000][T20649] bond0 (unregistering): (slave team0): Releasing backup interface
[  465.374564][T20649] bond0 (unregistering): Released all slaves
[  465.509215][T20649] hsr_slave_0: left promiscuous mode
[  465.525587][T20649] hsr_slave_1: left promiscuous mode
[  465.539701][T20649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  465.581697][T20649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.668621][T20649] team0 (unregistering): Port device team_slave_1 removed
[  465.699559][T20649] team0 (unregistering): Port device team_slave_0 removed
[  466.104023][T20649] IPVS: stop unused estimator thread 0...
[  467.678816][T28191] netlink: 52 bytes leftover after parsing attributes in process `syz.9.8657'.
[  467.705405][T28191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28191 comm=syz.9.8657
[  467.720435][T28193] loop0: detected capacity change from 0 to 256
[  467.728243][T28193] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  467.759027][T28191] netlink: 52 bytes leftover after parsing attributes in process `syz.9.8657'.
[  468.624090][T28245] atomic_op ffff888157de6d28 conn xmit_atomic 0000000000000000
[  469.026442][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8689'.
[  469.083893][T28273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8689'.
[  469.310569][ T1035] kernel read not supported for file [fscontext] (pid: 1035 comm: kworker/0:2)
[  469.475430][T28319] netlink: 'syz.1.8698': attribute type 1 has an invalid length.
[  469.593089][T28319] 8021q: adding VLAN 0 to HW filter on device bond11
[  469.689993][T28327] bond11: (slave gretap3): making interface the new active one
[  469.841102][T28327] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  470.048078][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  470.048097][   T28] audit: type=1326 audit(2000000000.640:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  470.082018][T28370] loop0: detected capacity change from 0 to 512
[  470.090000][T28370] EXT4-fs: Ignoring removed mblk_io_submit option
[  470.100946][   T28] audit: type=1326 audit(2000000000.640:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  470.128437][   T28] audit: type=1326 audit(2000000000.640:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  470.153393][   T28] audit: type=1326 audit(2000000000.640:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  470.177197][   T28] audit: type=1326 audit(2000000000.670:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9584a1c819 code=0x7ffc0000
[  470.202092][   T28] audit: type=1326 audit(2000000000.670:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9584a1c582 code=0x7ffc0000
[  470.226280][T28370] EXT4-fs (loop0): 1 truncate cleaned up
[  470.232419][T28370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.245992][   T28] audit: type=1326 audit(2000000000.670:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f95849dd04e code=0x7ffc0000
[  470.270293][   T28] audit: type=1326 audit(2000000000.670:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9584a1c647 code=0x7ffc0000
[  470.294686][   T28] audit: type=1326 audit(2000000000.670:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95849dd04e code=0x7ffc0000
[  470.318450][   T28] audit: type=1326 audit(2000000000.670:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28369 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9584a1c4ab code=0x7ffc0000
[  470.513033][T28395] netlink: 'syz.5.8712': attribute type 1 has an invalid length.
[  470.530779][T12628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.541160][T28395] netlink: 'syz.5.8712': attribute type 4 has an invalid length.
[  470.570152][T28395] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8712'.
[  471.116845][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8720'.
[  471.142656][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8720'.
[  471.622323][T28445] loop0: detected capacity change from 0 to 512
[  471.659421][T28445] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.8732: corrupted inode contents
[  471.690622][T28445] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  471.690795][T28445] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  471.700104][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  471.700123][    C1] EXT4-fs (loop0): initial error at time 2000000002: ext4_do_update_inode:5602: inode 15
[  471.700147][    C1] EXT4-fs (loop0): last error at time 2000000002: ext4_do_update_inode:5602: inode 15
[  471.831516][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8736'.
[  471.862417][T28445] loop0: lost filesystem error report for type 5 error -117
[  471.863356][T28445] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.8732: corrupted inode contents
[  471.922236][T28445] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  471.923064][T28445] EXT4-fs error (device loop0): ext4_evict_inode:313: inode #15: comm syz.0.8732: mark_inode_dirty error
[  471.982235][T28445] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  471.984211][T28445] EXT4-fs (loop0): 1 orphan inode deleted
[  472.034834][T28445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.107544][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8739'.
[  472.187936][T12628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.880234][T28477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8747'.
[  472.883935][T28476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.908763][T28477] geneve3: entered promiscuous mode
[  472.933247][T28476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.197655][T28495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8754'.
[  473.404108][T28502] netlink: 'syz.4.8757': attribute type 3 has an invalid length.
[  473.411963][T28502] netlink: 'syz.4.8757': attribute type 1 has an invalid length.
[  473.442410][T28502] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.8757'.
[  473.831463][T28534] all: renamed from bridge_slave_1 (while UP)
[  473.936699][T28543] 8021q: VLANs not supported on team0
[  473.964768][T28545] blktrace: Concurrent blktraces are not allowed on loop8
[  474.106462][T28541] team0: Port device netdevsim1 removed
[  474.194003][T28557] netlink: 'syz.1.8780': attribute type 3 has an invalid length.
[  474.332031][T28569] netlink: 'syz.4.8786': attribute type 8 has an invalid length.
[  475.264805][T28611] bridge4: entered promiscuous mode
[  475.319688][T28611] bridge4: entered allmulticast mode
[  475.484490][T28623] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8806'.
[  475.963112][   T28] kauditd_printk_skb: 87 callbacks suppressed
[  475.963130][   T28] audit: type=1326 audit(2000000006.560:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.9.8805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x0
[  476.790470][T28674] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8827'.
[  477.199612][T28680] Process accounting resumed
[  477.253023][T28692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8834'.
[  477.307354][T28692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8834'.
[  477.766458][T28702] bridge3: entered promiscuous mode
[  477.797053][T28702] bridge3: entered allmulticast mode
[  478.203425][T28749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  478.210713][T28749] IPv6: NLM_F_CREATE should be set when creating new route
[  478.291440][T28745] loop0: detected capacity change from 0 to 128
[  479.035520][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.035520][T11919] loop0: rw=1, sector=145, nr_sectors = 8 limit=128
[  479.056128][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.056128][T11919] loop0: rw=1, sector=161, nr_sectors = 8 limit=128
[  479.090188][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.090188][T11919] loop0: rw=1, sector=177, nr_sectors = 8 limit=128
[  479.117454][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.117454][T11919] loop0: rw=1, sector=193, nr_sectors = 8 limit=128
[  479.131595][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.131595][T11919] loop0: rw=1, sector=209, nr_sectors = 8 limit=128
[  479.156413][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.156413][T11919] loop0: rw=1, sector=225, nr_sectors = 8 limit=128
[  479.182232][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.182232][T11919] loop0: rw=1, sector=241, nr_sectors = 8 limit=128
[  479.212626][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.212626][T11919] loop0: rw=1, sector=257, nr_sectors = 8 limit=128
[  479.239684][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.239684][T11919] loop0: rw=1, sector=273, nr_sectors = 8 limit=128
[  479.268834][T11919] kworker/u8:18: attempt to access beyond end of device
[  479.268834][T11919] loop0: rw=1, sector=289, nr_sectors = 8 limit=128
[  479.473392][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8856'.
[  479.733515][T28811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8865'.
[  480.179844][T28846] net_ratelimit: 10 callbacks suppressed
[  480.179855][T28846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  480.417890][T28861] bridge2: entered promiscuous mode
[  480.429027][T28861] bridge2: entered allmulticast mode
[  481.421682][   T28] audit: type=1326 audit(2000000012.010:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28962 comm="syz.4.8894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915e0cc819 code=0x0
[  481.512663][   T28] audit: type=1326 audit(2000000012.110:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.557217][   T28] audit: type=1326 audit(2000000012.130:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.599723][   T28] audit: type=1326 audit(2000000012.140:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.624972][   T28] audit: type=1326 audit(2000000012.140:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.649803][   T28] audit: type=1326 audit(2000000012.140:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.675391][   T28] audit: type=1326 audit(2000000012.140:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.699706][   T28] audit: type=1326 audit(2000000012.140:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.739495][   T28] audit: type=1326 audit(2000000012.140:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.775073][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  481.817703][   T28] audit: type=1326 audit(2000000012.140:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28973 comm="syz.9.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  481.822447][T28984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8900'.
[  481.897408][   T10] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  482.977389][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8917'.
[  483.043797][T29028] loop0: detected capacity change from 0 to 256
[  483.687196][T29061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8932'.
[  483.891936][T29065] ªªªªª6: renamed from wg2 (while UP)
[  484.801757][T29106] netlink: 'syz.9.8950': attribute type 8 has an invalid length.
[  485.317766][T29115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8954'.
[  485.377343][T29120] netlink: 'syz.1.8955': attribute type 1 has an invalid length.
[  485.454813][T29120] bond12: entered promiscuous mode
[  485.536764][T29120] 8021q: adding VLAN 0 to HW filter on device bond12
[  485.633701][T29125] bond12: (slave bridge4): making interface the new active one
[  485.657439][T29125] bridge4: entered promiscuous mode
[  485.681735][T29125] bridge4: left promiscuous mode
[  486.364520][T29157] netlink: 'syz.1.8969': attribute type 8 has an invalid length.
[  486.569622][T29167] io-wq is not configured for unbound workers
[  486.656084][   T28] kauditd_printk_skb: 255 callbacks suppressed
[  486.656103][   T28] audit: type=1400 audit(2000000017.250:5327): avc:  denied  { accept } for  pid=29175 comm="syz.0.8977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  487.114638][T29191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8981'.
[  488.113482][T29209] netlink: 'syz.0.8987': attribute type 1 has an invalid length.
[  488.135360][T29209] 8021q: adding VLAN 0 to HW filter on device bond7
[  488.180727][T29209] bond7: (slave veth5): Enslaving as an active interface with a down link
[  488.257574][T29209] 8021q: adding VLAN 0 to HW filter on device batadv2
[  488.283088][T29209] bond7: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  488.296397][T29216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8989'.
[  488.395101][T29215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8989'.
[  488.427981][T29215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8989'.
[  488.895139][T29238] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.8998'.
[  488.896398][T29237] xt_hashlimit: size too large, truncated to 1048576
[  488.914525][T29238] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8998'.
[  489.783531][T29259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9006'.
[  489.970239][T29261] bridge5: entered promiscuous mode
[  489.992453][T29261] bridge5: entered allmulticast mode
[  490.670816][T29286] netlink: 'syz.4.9019': attribute type 5 has an invalid length.
[  490.682611][T29287] netlink: 'syz.1.9020': attribute type 12 has an invalid length.
[  490.684784][T29286] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.9019'.
[  490.710754][T29286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9019'.
[  491.441191][T29301] bridge4: entered promiscuous mode
[  491.470234][T29301] bridge4: entered allmulticast mode
[  491.497748][T29309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9028'.
[  491.534942][T29311] netlink: 'syz.5.9029': attribute type 1 has an invalid length.
[  491.709895][T29311] 8021q: adding VLAN 0 to HW filter on device bond5
[  491.764571][T29325] bond5: (slave batadv3): Opening slave failed
[  492.226396][T29356] loop0: detected capacity change from 0 to 512
[  492.254841][T29356] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  492.297483][T29356] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  492.322902][T29356] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.9045: Corrupt directory, running e2fsck is recommended
[  492.347364][T29356] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  492.372430][T29356] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.9045: corrupted in-inode xattr: invalid ea_ino
[  492.402498][T29356] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  492.402734][T29356] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.9045: couldn't read orphan inode 15 (err -117)
[  492.423951][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  492.423976][    C0] EXT4-fs (loop0): initial error at time 2000000023: ext4_iget_extra_inode:5040: inode 15
[  492.424009][    C0] EXT4-fs (loop0): last error at time 2000000023: ext4_iget_extra_inode:5040: inode 15
[  492.472266][T29356] loop0: lost filesystem error report for type 5 error -117
[  492.473106][T29356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.545568][T12628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.558390][T29366] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9049'.
[  492.567842][T29364] netlink: 'syz.5.9046': attribute type 4 has an invalid length.
[  492.610775][T29364] netlink: 'syz.5.9046': attribute type 4 has an invalid length.
[  493.203945][T29373] batman_adv: batadv0: Interface deactivated: dummy0
[  493.331114][   T70] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  493.342803][   T70] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  493.367264][   T70] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  493.383115][   T70] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  493.394293][   T70] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  493.407219][   T70] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  493.419342][   T70] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  493.434679][   T70] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  493.910163][T29424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9067'.
[  494.754943][   T28] audit: type=1400 audit(2000000025.350:5328): avc:  denied  { watch watch_reads } for  pid=29461 comm="syz.9.9083" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  494.817746][T29464] netlink: 'syz.0.9084': attribute type 10 has an invalid length.
[  495.016513][T29482] netlink: 'syz.4.9093': attribute type 10 has an invalid length.
[  495.034569][T29482] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9093'.
[  495.056204][T29482] hsr0: entered promiscuous mode
[  495.069651][T29482] bridge0: port 3(hsr0) entered blocking state
[  495.084092][T29482] bridge0: port 3(hsr0) entered disabled state
[  495.105171][T29482] hsr0: entered allmulticast mode
[  495.121732][T29482] hsr_slave_0: entered allmulticast mode
[  495.140201][T29482] hsr_slave_1: entered allmulticast mode
[  495.237826][T29493] tc_dump_action: action bad kind
[  495.714451][T29522] bond2: left promiscuous mode
[  495.724641][T29522] bridge1: left promiscuous mode
[  495.732155][T29522] bond4: left promiscuous mode
[  495.745118][T29522] bridge2: left promiscuous mode
[  495.773765][T29522] macvlan4: left promiscuous mode
[  495.784119][T29522] gretap1: left promiscuous mode
[  495.789410][T29522] bond6: left promiscuous mode
[  495.796630][T29522] vcan1: left promiscuous mode
[  495.805860][T29522] gre4: left promiscuous mode
[  495.840415][T29522] bridge5: left promiscuous mode
[  495.980918][T29526] netlink: 'syz.5.9110': attribute type 12 has an invalid length.
[  496.050725][T29530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9113'.
[  496.549738][T29562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9122'.
[  496.565594][T29562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9122'.
[  496.607058][T29562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9122'.
[  496.721058][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9123'.
[  496.746765][T29578] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3748805263/3748805265
[  496.781951][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9123'.
[  497.933705][T29684] netlink: 'syz.4.9142': attribute type 8 has an invalid length.
[  497.944214][T29684] netlink: 'syz.4.9142': attribute type 7 has an invalid length.
[  497.954742][T29684] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.9142'.
[  497.971376][T29686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9143'.
[  498.101875][   T28] audit: type=1400 audit(2000000028.690:5329): avc:  denied  { append } for  pid=29689 comm="syz.1.9145" name="rt_cache" dev="proc" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  498.626439][T29701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9151'.
[  498.768770][T29709] netlink: 'syz.5.9153': attribute type 10 has an invalid length.
[  498.828581][T29709] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9153'.
[  498.875284][T29709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  498.902476][T29709] hsr0: entered promiscuous mode
[  498.914889][T29709] bridge0: port 1(hsr0) entered blocking state
[  498.921737][T29709] bridge0: port 1(hsr0) entered disabled state
[  498.944325][T29709] hsr0: entered allmulticast mode
[  498.949768][T29709] hsr_slave_0: entered allmulticast mode
[  499.090519][T29733] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9165'.
[  499.115084][   T28] audit: type=1400 audit(2000000029.710:5330): avc:  denied  { name_bind } for  pid=29734 comm="syz.4.9166" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  499.219501][   T28] audit: type=1400 audit(2000000029.810:5331): avc:  denied  { watch } for  pid=29737 comm="syz.5.9167" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  499.699420][T29776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9182'.
[  499.928138][T29789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9188'.
[  500.412273][   T28] audit: type=1400 audit(2000000031.000:5332): avc:  denied  { watch_reads } for  pid=29805 comm="syz.4.9193" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  502.487125][T30021] netlink: 'syz.9.9215': attribute type 3 has an invalid length.
[  502.543480][T30021] netlink: 'syz.9.9215': attribute type 7 has an invalid length.
[  502.577850][T30021] netlink: 198340 bytes leftover after parsing attributes in process `syz.9.9215'.
[  502.826454][   T28] audit: type=1400 audit(2000000033.420:5333): avc:  denied  { accept } for  pid=30046 comm="syz.9.9224" path="socket:[94407]" dev="sockfs" ino=94407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  502.968681][   T28] audit: type=1326 audit(2000000033.560:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.005127][   T28] audit: type=1326 audit(2000000033.560:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.035737][   T28] audit: type=1326 audit(2000000033.560:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.069620][   T28] audit: type=1326 audit(2000000033.560:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.127340][   T28] audit: type=1326 audit(2000000033.560:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.182419][   T28] audit: type=1326 audit(2000000033.560:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.212345][   T28] audit: type=1326 audit(2000000033.560:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.247712][   T28] audit: type=1326 audit(2000000033.560:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  503.345547][T30062] netlink: 'syz.1.9229': attribute type 21 has an invalid length.
[  503.525019][T30070] netlink: 'syz.1.9234': attribute type 4 has an invalid length.
[  503.555192][T30070] netlink: 'syz.1.9234': attribute type 4 has an invalid length.
[  503.692991][T30070] batman_adv: batadv0: Interface deactivated: dummy0
[  503.766571][T30070] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  504.065911][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9240'.
[  504.175660][T30097] syz.9.9242: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  504.242228][T30097] CPU: 1 UID: 0 PID: 30097 Comm: syz.9.9242 Not tainted syzkaller #0 PREEMPT(full) 
[  504.242268][T30097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  504.242364][T30097] Call Trace:
[  504.242374][T30097]  <TASK>
[  504.242383][T30097]  __dump_stack+0x1d/0x30
[  504.242413][T30097]  dump_stack_lvl+0x95/0xd0
[  504.242438][T30097]  dump_stack+0x15/0x1b
[  504.242541][T30097]  warn_alloc+0x145/0x1c0
[  504.242569][T30097]  ? __schedule+0x93c/0xd40
[  504.242644][T30097]  ? __rcu_read_unlock+0x4e/0x70
[  504.242677][T30097]  __vmalloc_node_range_noprof+0xa0/0x12b0
[  504.242710][T30097]  ? __futex_wait+0x1fd/0x260
[  504.242740][T30097]  ? __pfx_futex_wake_mark+0x10/0x10
[  504.242765][T30097]  ? __rcu_read_unlock+0x4e/0x70
[  504.242853][T30097]  ? avc_has_perm_noaudit+0xab/0x130
[  504.242888][T30097]  ? should_fail_ex+0x30/0x280
[  504.243005][T30097]  ? xskq_create+0x36/0xe0
[  504.243043][T30097]  vmalloc_user_noprof+0x7d/0xb0
[  504.243142][T30097]  ? xskq_create+0x80/0xe0
[  504.243169][T30097]  xskq_create+0x80/0xe0
[  504.243197][T30097]  xsk_init_queue+0x70/0xb0
[  504.243315][T30097]  xsk_setsockopt+0x3f5/0x640
[  504.243348][T30097]  ? __pfx_xsk_setsockopt+0x10/0x10
[  504.243382][T30097]  __sys_setsockopt+0x184/0x200
[  504.243533][T30097]  __x64_sys_setsockopt+0x64/0x80
[  504.243576][T30097]  x64_sys_call+0x2327/0x3020
[  504.243614][T30097]  do_syscall_64+0x12c/0x370
[  504.243651][T30097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.243695][T30097] RIP: 0033:0x7effad31c819
[  504.243711][T30097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.243737][T30097] RSP: 002b:00007effabd56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  504.243764][T30097] RAX: ffffffffffffffda RBX: 00007effad596090 RCX: 00007effad31c819
[  504.243782][T30097] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  504.243888][T30097] RBP: 00007effad3b2c91 R08: 0000000000000004 R09: 0000000000000000
[  504.243911][T30097] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  504.243928][T30097] R13: 00007effad596128 R14: 00007effad596090 R15: 00007ffd858cff58
[  504.243956][T30097]  </TASK>
[  504.244128][T30097] Mem-Info:
[  504.654704][T30097] active_anon:42517 inactive_anon:1574 isolated_anon:0
[  504.654704][T30097]  active_file:13239 inactive_file:16163 isolated_file:0
[  504.654704][T30097]  unevictable:0 dirty:249 writeback:0
[  504.654704][T30097]  slab_reclaimable:4441 slab_unreclaimable:126795
[  504.654704][T30097]  mapped:29315 shmem:33874 pagetables:6474
[  504.654704][T30097]  sec_pagetables:0 bounce:0
[  504.654704][T30097]  kernel_misc_reclaimable:0
[  504.654704][T30097]  free:1605414 free_pcp:14540 free_cma:0
[  504.782565][T30097] Node 0 active_anon:176680kB inactive_anon:6296kB active_file:52956kB inactive_file:64652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117260kB dirty:996kB writeback:0kB shmem:138280kB kernel_stack:5696kB pagetables:26012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  504.889370][T30097] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.921702][T30097] lowmem_reserve[]: 0 2879 7857 7857
[  504.927260][T30097] Node 0 DMA32 free:2944516kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948144kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB
[  505.063015][T30097] lowmem_reserve[]: 0 0 4978 4978
[  505.092233][T30097] Node 0 Normal free:3461360kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176564kB inactive_anon:6296kB active_file:52956kB inactive_file:64652kB unevictable:0kB writepending:996kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:48156kB local_pcp:30660kB free_cma:0kB
[  505.197810][T30097] lowmem_reserve[]: 0 0 0 0
[  505.204926][T30097] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  505.219644][T30097] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944516kB
[  505.236165][T30097] Node 0 Normal: 2474*4kB (UME) 2755*8kB (UME) 1361*16kB (UME) 811*32kB (UME) 1213*64kB (UME) 843*128kB (UME) 561*256kB (UME) 366*512kB (UME) 250*1024kB (UME) 150*2048kB (UME) 562*4096kB (UM) = 3461360kB
[  505.317266][T30097] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  505.398894][T30097] 63447 total pagecache pages
[  505.406795][T30097] 65 pages in swap cache
[  505.411234][T30097] Free swap  = 117456kB
[  505.416056][T30097] Total swap = 124996kB
[  505.420262][T30097] 2097051 pages RAM
[  505.429366][T30155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9264'.
[  505.439857][T30097] 0 pages HighMem/MovableOnly
[  505.452649][T30097] 81615 pages reserved
[  505.627554][T30168] loop0: detected capacity change from 0 to 512
[  505.645704][T30168] EXT4-fs: Ignoring removed nobh option
[  505.683661][T30168] ------------[ cut here ]------------
[  505.689226][T30168] EA inode 11 i_nlink=1026
[  505.689256][T30168] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.9269/30168
[  505.704601][T30168] Modules linked in:
[  505.708531][T30168] CPU: 1 UID: 0 PID: 30168 Comm: syz.0.9269 Not tainted syzkaller #0 PREEMPT(full) 
[  505.717977][T30168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  505.728151][T30168] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  505.734909][T30168] Code: 84 3a 99 ff 4c 8d 2d 6d a5 5d 05 49 8d 7e 40 e8 04 d2 b5 ff 49 8b 6e 40 4c 89 e7 e8 38 cd b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 0f b9 dd 03 66 66 66 66 66 66 2e
[  505.754599][T30168] RSP: 0000:ffffc9000344b5a8 EFLAGS: 00010246
[  505.760743][T30168] RAX: ffff8881050f1b88 RBX: ffff88811313fa88 RCX: ffffffff81c02688
[  505.768798][T30168] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcbe0
[  505.776847][T30168] RBP: 000000000000000b R08: 000188811313fa3b R09: 0000000000000000
[  505.784929][T30168] R10: ffffc9000344b4d8 R11: 0001c9000344b4d8 R12: ffff88811313fa38
[  505.792966][T30168] R13: ffffffff871dcbe0 R14: ffff88811313f9f0 R15: 0000000000000001
[  505.800998][T30168] FS:  00007f95834776c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000
[  505.810008][T30168] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  505.816710][T30168] CR2: 00007f368e632e9c CR3: 000000010b5e0000 CR4: 00000000003506f0
[  505.824797][T30168] DR0: 0000200000000440 DR1: 0000000000000000 DR2: 0000000000000000
[  505.832863][T30168] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  505.840877][T30168] Call Trace:
[  505.844201][T30168]  <TASK>
[  505.847159][T30168]  ext4_xattr_set_entry+0x77c/0x1010
[  505.852516][T30168]  ext4_xattr_ibody_set+0x184/0x3c0
[  505.857754][T30168]  ext4_expand_extra_isize_ea+0xd7b/0x11a0
[  505.863720][T30168]  __ext4_expand_extra_isize+0x246/0x280
[  505.869555][T30168]  __ext4_mark_inode_dirty+0x29b/0x400
[  505.875123][T30168]  ext4_evict_inode+0x865/0xe40
[  505.880073][T30168]  ? __pfx_ext4_evict_inode+0x10/0x10
[  505.885538][T30168]  evict+0x2af/0x510
[  505.889511][T30168]  ? __dquot_initialize+0x146/0x7c0
[  505.894786][T30168]  iput+0x41a/0x580
[  505.898637][T30168]  ext4_process_orphan+0x1a9/0x1c0
[  505.903821][T30168]  ext4_orphan_cleanup+0x6a8/0xa00
[  505.908989][T30168]  ext4_fill_super+0x3414/0x37c0
[  505.914090][T30168]  ? set_blocksize+0x14c/0x270
[  505.918906][T30168]  ? setup_bdev_super+0x30e/0x370
[  505.924081][T30168]  ? __pfx_ext4_fill_super+0x10/0x10
[  505.929405][T30168]  get_tree_bdev_flags+0x291/0x300
[  505.934622][T30168]  ? __pfx_ext4_fill_super+0x10/0x10
[  505.939953][T30168]  get_tree_bdev+0x1f/0x30
[  505.944434][T30168]  ext4_get_tree+0x1c/0x30
[  505.949100][T30168]  vfs_get_tree+0x57/0x1d0
[  505.953598][T30168]  do_new_mount+0x288/0x8d0
[  505.958140][T30168]  path_mount+0x4d0/0xbc0
[  505.962538][T30168]  __se_sys_mount+0x28c/0x2e0
[  505.967286][T30168]  __x64_sys_mount+0x67/0x80
[  505.971987][T30168]  x64_sys_call+0x2d61/0x3020
[  505.976878][T30168]  do_syscall_64+0x12c/0x370
[  505.981527][T30168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.987506][T30168] RIP: 0033:0x7f9584a1da8a
[  505.991949][T30168] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.011682][T30168] RSP: 002b:00007f9583476e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  506.020146][T30168] RAX: ffffffffffffffda RBX: 00007f9583476ee0 RCX: 00007f9584a1da8a
[  506.028195][T30168] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f9583476ea0
[  506.036228][T30168] RBP: 0000200000000180 R08: 00007f9583476ee0 R09: 0000000000800718
[  506.044281][T30168] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
[  506.052309][T30168] R13: 00007f9583476ea0 R14: 00000000000004a3 R15: 00002000000003c0
[  506.060316][T30168]  </TASK>
[  506.063395][T30168] ---[ end trace 0000000000000000 ]---
[  506.115173][T30168] EXT4-fs (loop0): 1 orphan inode deleted
[  506.121615][T30168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.195764][T12628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.962625][T30274] wireguard0: entered promiscuous mode
[  506.968267][T30274] wireguard0: entered allmulticast mode
[  507.204095][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  507.204144][   T28] audit: type=1400 audit(2000000037.800:5373): avc:  denied  { mounton } for  pid=30287 comm="syz.1.9293" path="/1264/file0" dev="tmpfs" ino=6533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  508.452711][T30356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9318'.
[  508.504752][T30356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9318'.
[  508.611780][T30362] netlink: 188 bytes leftover after parsing attributes in process `syz.9.9320'.
[  508.701778][T30367] netlink: 188 bytes leftover after parsing attributes in process `syz.9.9320'.
[  509.021503][T30382] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  509.790075][T30397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9334'.
[  510.066451][   T28] audit: type=1326 audit(2000000296.659:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  510.129788][   T28] audit: type=1326 audit(2000000296.659:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  510.180253][   T28] audit: type=1326 audit(2000000296.659:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  510.215882][   T28] audit: type=1326 audit(2000000296.659:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  510.254749][   T28] audit: type=1326 audit(2000000296.659:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  510.286071][   T28] audit: type=1326 audit(2000000296.659:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a870ac819 code=0x7ffc0000
[  510.311880][   T28] audit: type=1326 audit(2000000296.659:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a870ac582 code=0x7ffc0000
[  510.338925][   T28] audit: type=1326 audit(2000000296.659:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a8706d04e code=0x7ffc0000
[  510.364349][   T28] audit: type=1326 audit(2000000296.659:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.1.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4a870ac647 code=0x7ffc0000
[  510.643079][T30444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9352'.
[  510.709834][T30447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9355'.
[  510.849315][T30457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9359'.
[  511.215578][T30493] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  511.226785][T30493] batman_adv: batadv0: Adding interface: ip6gretap3
[  511.234460][T30493] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.261585][T30493] batman_adv: batadv0: Interface activated: ip6gretap3
[  512.377756][T30549] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9399'.
[  512.411305][T30549] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.483183][T30553] bond0: (slave veth7): Enslaving as an active interface with an up link
[  512.769578][T30562] loop0: detected capacity change from 0 to 1024
[  512.812361][T30562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  512.892693][T30562] loop0: detected capacity change from 1024 to 64
[  512.903623][T30562] EXT4-fs error (device loop0): ext4_update_inline_data:362: inode #15: comm syz.0.9404: missing inline data xattr
[  512.949156][T12628] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /1214/bus: bad entry in directory: directory entry overrun - offset=0, inode=46, rec_len=131072, size=1024 fake=0
[  513.361610][T16249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.382244][T30563] bio_check_eod: 11 callbacks suppressed
[  513.382259][T30563] kmmpd-loop0: attempt to access beyond end of device
[  513.382259][T30563] loop0: rw=8402945, sector=128, nr_sectors = 2 limit=64
[  513.422017][T30563] buffer_io_error: 2 callbacks suppressed
[  513.422033][T30563] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  513.816697][T30573] chnl_net:caif_netlink_parms(): no params data found
[  513.903414][T30594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9414'.
[  513.923772][T30573] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.930903][T30573] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.938582][T30573] bridge_slave_0: entered allmulticast mode
[  513.946501][T30573] bridge_slave_0: entered promiscuous mode
[  513.959444][T30573] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.971941][T30573] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.998933][T30573] bridge_slave_1: entered allmulticast mode
[  514.013381][T30573] bridge_slave_1: entered promiscuous mode
[  514.021121][   T28] kauditd_printk_skb: 41 callbacks suppressed
[  514.021138][   T28] audit: type=1400 audit(2000000300.609:5424): avc:  denied  { accept } for  pid=30600 comm="syz.4.9415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  514.061311][T30573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.073364][T30573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.095355][T30573] team0: Port device team_slave_0 added
[  514.101970][T30573] team0: Port device team_slave_1 added
[  514.120717][T30573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.127945][T30573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.155328][T30573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.166733][T30573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.174004][T30573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.202671][T30573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.250222][T30573] hsr_slave_0: entered promiscuous mode
[  514.256578][T30573] hsr_slave_1: entered promiscuous mode
[  514.262619][T30573] debugfs: 'hsr0' already exists in 'hsr'
[  514.268398][T30573] Cannot create hsr debugfs directory
[  514.606977][T30573] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  514.616368][T30573] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  514.630192][T30573] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  514.644809][T30573] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  514.728032][T30573] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.747907][T30573] 8021q: adding VLAN 0 to HW filter on device team0
[  514.766858][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.774160][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.785750][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.792985][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.830784][T30573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  514.926055][T30573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.150995][T30573] veth0_vlan: entered promiscuous mode
[  515.165181][T30573] veth1_vlan: entered promiscuous mode
[  515.214607][T30573] veth0_macvtap: entered promiscuous mode
[  515.231116][T30573] veth1_macvtap: entered promiscuous mode
[  515.260554][T30573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.284940][T30573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.298559][  T822] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.314995][  T822] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.339196][  T822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.352586][  T822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.897528][T30788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9439'.
[  515.935015][T30788] 8021q: adding VLAN 0 to HW filter on device bond13
[  515.980629][T30788] bond13: (slave veth9): Enslaving as an active interface with an up link
[  516.023073][   T28] audit: type=1400 audit(2000000302.619:5425): avc:  denied  { create } for  pid=30744 comm="syz.5.9434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  516.162668][   T28] audit: type=1400 audit(2000000302.759:5426): avc:  denied  { watch watch_reads } for  pid=30817 comm="syz.9.9446" path="/" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  516.391336][T30855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9456'.
[  516.924383][   T28] audit: type=1326 audit(2000000303.519:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.9.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  516.967827][   T28] audit: type=1326 audit(2000000303.539:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.9.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  517.011800][   T28] audit: type=1326 audit(2000000303.549:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.9.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  517.056354][   T28] audit: type=1326 audit(2000000303.549:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.9.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  517.100823][   T28] audit: type=1326 audit(2000000303.549:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.9.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  517.137592][   T28] audit: type=1326 audit(2000000303.549:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.9.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  517.172727][   T28] audit: type=1326 audit(2000000303.549:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30885 comm="syz.9.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  517.230186][T30911] netlink: 'syz.1.9468': attribute type 1 has an invalid length.
[  517.337437][T30911] bond14: entered promiscuous mode
[  517.380201][T30911] 8021q: adding VLAN 0 to HW filter on device bond14
[  518.959626][T30980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9485'.
[  518.969205][T30980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9485'.
[  519.099549][T30987] netlink: 'syz.4.9489': attribute type 11 has an invalid length.
[  520.796149][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9499'.
[  520.810912][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9499'.
[  520.956734][T31057] netlink: 212916 bytes leftover after parsing attributes in process `syz.9.9502'.
[  521.419011][T31110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9510'.
[  521.443206][T31110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9510'.
[  521.543792][T31116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9512'.
[  521.552915][T31116] ip_vti0: entered promiscuous mode
[  521.558421][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9512'.
[  522.015351][T31136] netlink: 'syz.4.9520': attribute type 4 has an invalid length.
[  522.037542][T31136] netlink: 'syz.4.9520': attribute type 4 has an invalid length.
[  522.226466][T31136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.250709][T31136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.384188][  T220] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.408383][  T220] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  522.431441][  T220] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.451103][  T220] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  522.465713][  T220] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.482898][  T220] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  522.500067][  T220] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.516577][  T220] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  524.021035][T31264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9541'.
[  524.241833][T31281] netlink: 'syz.8.9549': attribute type 4 has an invalid length.
[  524.270589][T31281] netlink: 'syz.8.9549': attribute type 4 has an invalid length.
[  524.292404][T31285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9550'.
[  524.391981][T31281] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.399463][T31281] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.548823][T31281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.566331][T31281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.621270][T11919] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.632305][T11919] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.671379][T11919] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.689964][T11919] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.759750][T31308] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9558'.
[  524.775374][T31308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9558'.
[  524.886393][T31315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9562'.
[  524.997892][T31333] sctp: [Deprecated]: syz.4.9566 (pid 31333) Use of struct sctp_assoc_value in delayed_ack socket option.
[  524.997892][T31333] Use struct sctp_sack_info instead
[  525.574348][T31385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  526.254642][T31450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  526.341856][T31457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9589'.
[  526.597925][T31390] loop8: detected capacity change from 0 to 2048
[  526.720664][T31390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.768967][T31390] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  527.020201][  T822] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  527.042039][  T822] EXT4-fs (loop8): Remounting filesystem read-only
[  527.050917][T31473] xt_hashlimit: size too large, truncated to 1048576
[  527.062117][T30573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.173979][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  527.174012][   T28] audit: type=1326 audit(2000000313.769:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.234563][   T28] audit: type=1326 audit(2000000313.769:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.268898][   T28] audit: type=1326 audit(2000000313.809:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.329007][   T28] audit: type=1326 audit(2000000313.809:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.372875][   T28] audit: type=1326 audit(2000000313.809:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.433746][   T28] audit: type=1326 audit(2000000313.809:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.461715][   T28] audit: type=1326 audit(2000000313.809:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.503563][   T28] audit: type=1326 audit(2000000313.809:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.542339][   T28] audit: type=1326 audit(2000000313.809:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.572243][   T28] audit: type=1326 audit(2000000313.809:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31476 comm="syz.9.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7effad31c819 code=0x7ffc0000
[  527.663868][T31488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  528.701743][T31514] loop8: detected capacity change from 0 to 512
[  528.738468][T31514] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  528.801601][T31514] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.9610: invalid indirect mapped block 1023410176 (level 0)
[  528.823426][T31514] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  528.824552][T31514] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, 
[  528.833742][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  528.833763][    C1] EXT4-fs (loop8): initial error at time 2000000315: ext4_free_branches:1023: inode 11
[  528.833790][    C1] EXT4-fs (loop8): last error at time 2000000315: ext4_free_branches:1023: inode 11
[  528.867060][T31514] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt.
[  528.905996][T31514] EXT4-fs (loop8): 1 truncate cleaned up
[  528.916539][T31514] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  528.985606][T31530] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9612'.
[  528.998529][T30573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.038649][T31537] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9619'.
[  529.103895][T31544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9625'.
[  529.169166][T31548] loop8: detected capacity change from 0 to 128
[  529.271376][T31553] syz.8.9626: attempt to access beyond end of device
[  529.271376][T31553] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128
[  529.292836][T31553] syz.8.9626: attempt to access beyond end of device
[  529.292836][T31553] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128
[  529.310783][T31553] syz.8.9626: attempt to access beyond end of device
[  529.310783][T31553] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128
[  529.350063][T31553] syz.8.9626: attempt to access beyond end of device
[  529.350063][T31553] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128
[  529.369595][T31553] syz.8.9626: attempt to access beyond end of device
[  529.369595][T31553] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128
[  529.388817][T31553] syz.8.9626: attempt to access beyond end of device
[  529.388817][T31553] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128
[  529.406841][T31553] syz.8.9626: attempt to access beyond end of device
[  529.406841][T31553] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128
[  529.431649][T31553] syz.8.9626: attempt to access beyond end of device
[  529.431649][T31553] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128
[  529.548445][T11911] kworker/u8:14: attempt to access beyond end of device
[  529.548445][T11911] loop8: rw=8388609, sector=174, nr_sectors = 1 limit=128
[  529.564948][T11911] Buffer I/O error on dev loop8, logical block 174, lost async page write
[  529.889499][T31568] xt_hashlimit: size too large, truncated to 1048576
[  530.266296][T31575] loop8: detected capacity change from 0 to 512
[  530.280884][T31575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.617519][T30573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.207002][T31618] ==================================================================
[  531.215167][T31618] BUG: KCSAN: data-race in fifo_open / wait_for_partner
[  531.222154][T31618] 
[  531.224503][T31618] read-write to 0xffff88813c0badec of 4 bytes by task 31608 on cpu 1:
[  531.232695][T31618]  fifo_open+0x86/0x5d0
[  531.236884][T31618]  do_dentry_open+0x4ca/0xa90
[  531.241602][T31618]  vfs_open+0x37/0x1e0
[  531.245713][T31618]  path_openat+0x1b70/0x2050
[  531.250358][T31618]  do_file_open+0x16c/0x290
[  531.254919][T31618]  do_sys_openat2+0x94/0x130
[  531.259552][T31618]  __x64_sys_creat+0x65/0x90
[  531.264179][T31618]  x64_sys_call+0x2ea0/0x3020
[  531.268903][T31618]  do_syscall_64+0x12c/0x370
[  531.273539][T31618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.279470][T31618] 
[  531.281821][T31618] read to 0xffff88813c0badec of 4 bytes by task 31618 on cpu 0:
[  531.289476][T31618]  wait_for_partner+0x117/0x1e0
[  531.294363][T31618]  fifo_open+0x4b1/0x5d0
[  531.298645][T31618]  do_dentry_open+0x4ca/0xa90
[  531.303368][T31618]  vfs_open+0x37/0x1e0
[  531.307484][T31618]  path_openat+0x1b70/0x2050
[  531.312130][T31618]  do_file_open+0x16c/0x290
[  531.316716][T31618]  file_open_name+0xfa/0x120
[  531.321350][T31618]  __se_sys_acct+0x8c/0x500
[  531.325924][T31618]  __x64_sys_acct+0x1f/0x30
[  531.330484][T31618]  x64_sys_call+0x2e7f/0x3020
[  531.335212][T31618]  do_syscall_64+0x12c/0x370
[  531.339843][T31618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.345775][T31618] 
[  531.348112][T31618] value changed: 0x00000001 -> 0x00000002
[  531.353852][T31618] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  531.356194][T31618] Reported by Kernel Concurrency Sanitizer on:
[  531.362370][T31618] CPU: 0 UID: 0 PID: 31618 Comm: syz.8.9650 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  531.373363][T31618] Tainted: [W]=WARN
[  531.377199][T31618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  531.387292][T31618] ==================================================================
[  536.925071][  T822] bridge_slave_1: left allmulticast mode
[  536.930776][  T822] bridge_slave_1: left promiscuous mode
[  536.936713][  T822] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.946119][  T822] bridge_slave_0: left allmulticast mode
[  536.951804][  T822] bridge_slave_0: left promiscuous mode
[  536.957603][  T822] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.036981][  T822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.046781][  T822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.056004][  T822] bond0 (unregistering): Released all slaves
[  537.099191][  T822] hsr_slave_0: left promiscuous mode
[  537.105053][  T822] hsr_slave_1: left promiscuous mode
[  537.112760][  T822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.120452][  T822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.167461][  T822] team0 (unregistering): Port device team_slave_1 removed
[  537.177732][  T822] team0 (unregistering): Port device team_slave_0 removed