last executing test programs:

7m22.034351444s ago: executing program 32 (id=1771):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000004c0))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)

6m59.448913021s ago: executing program 33 (id=2525):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200ff03100005000500000002000020"])

6m45.915790409s ago: executing program 34 (id=3099):
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

6m9.842701804s ago: executing program 35 (id=4407):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close_range(r1, 0xffffffffffffffff, 0x0)

5m59.75706479s ago: executing program 36 (id=4685):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e23, 0xfffe, 0x0, 0x0, 0x20}, {0x10004, 0x0, 0xddcf, 0x0, 0x0, 0xa00}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x4d5}, 0x0, @in6=@empty}}, 0xe8)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

5m32.346759915s ago: executing program 37 (id=5590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5m16.877946389s ago: executing program 38 (id=6099):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
listen(r0, 0x0)
shutdown(r0, 0x0)

4m45.623274645s ago: executing program 39 (id=7112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000030428b570000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

4m30.90131015s ago: executing program 40 (id=7595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))

4m5.050057279s ago: executing program 41 (id=8473):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r1)

3m59.906330107s ago: executing program 42 (id=8611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3m49.725847153s ago: executing program 43 (id=8929):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001fc63ec78377e88851fffcffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c00028006000e0001000000050016000100000008000700ac1414bb08000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x8080)

3m9.984559669s ago: executing program 44 (id=10303):
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0)

2m50.559352913s ago: executing program 45 (id=10955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x20)

2m42.102871163s ago: executing program 46 (id=11212):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

2m30.113546565s ago: executing program 47 (id=11542):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

2m6.103878218s ago: executing program 2 (id=12104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

2m5.938435638s ago: executing program 2 (id=12109):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8)

2m5.371408196s ago: executing program 2 (id=12114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)

2m4.603768874s ago: executing program 2 (id=12128):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000300), 0x81, 0x79e, &(0x7f00000018c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2m4.465183714s ago: executing program 2 (id=12130):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0)

2m4.006392913s ago: executing program 2 (id=12137):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000580)={0x28, 0x0, 0x0, @host}, 0x10)
connect$vsock_stream(r2, &(0x7f00000004c0)={0x28, 0x0, 0x0, @local}, 0x10)

2m3.950195023s ago: executing program 48 (id=12137):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000580)={0x28, 0x0, 0x0, @host}, 0x10)
connect$vsock_stream(r2, &(0x7f00000004c0)={0x28, 0x0, 0x0, @local}, 0x10)

1m50.980296262s ago: executing program 8 (id=12423):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2c, r3, 0x1, 0xd0, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4008800)

1m50.951096072s ago: executing program 8 (id=12425):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0), 0x0)

1m50.901239932s ago: executing program 8 (id=12429):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
close_range(r2, 0xffffffffffffffff, 0x0)

1m50.793570832s ago: executing program 8 (id=12430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')

1m50.755619662s ago: executing program 8 (id=12432):
unshare(0x2c060000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0)
close(r2)

1m50.526096841s ago: executing program 8 (id=12435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69)

1m50.525664151s ago: executing program 49 (id=12435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69)

1m34.231524433s ago: executing program 7 (id=12830):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mknod$loop(0x0, 0x100000000000600d, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0)
fadvise64(r1, 0x7, 0x4, 0x4)

1m34.139121243s ago: executing program 7 (id=12822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0xa, 0x0, 0x1, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400))
tkill(0x0, 0x7)

1m34.069713493s ago: executing program 7 (id=12823):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x9}, 0x18)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m33.16046166s ago: executing program 7 (id=12833):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')

1m33.06680606s ago: executing program 7 (id=12834):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0)

1m32.790099679s ago: executing program 7 (id=12839):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x64, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x64}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc5}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1m32.779312109s ago: executing program 50 (id=12839):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x64, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x64}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc5}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

19.021376795s ago: executing program 3 (id=14993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

18.978259025s ago: executing program 3 (id=14994):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

18.955308165s ago: executing program 3 (id=14995):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

18.903598095s ago: executing program 3 (id=14997):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x271)

18.894516545s ago: executing program 3 (id=15000):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40001, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)

18.698076974s ago: executing program 3 (id=15006):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00')
readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)

18.688912284s ago: executing program 51 (id=15006):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00')
readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)

6.862276636s ago: executing program 4 (id=15342):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r1)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

6.002529104s ago: executing program 4 (id=15356):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x40}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0)

5.860714894s ago: executing program 4 (id=15357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

4.841781881s ago: executing program 4 (id=15369):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x271)

4.722633811s ago: executing program 4 (id=15364):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xeffff034}, {0x6}]}, 0x10)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x0)

4.40232887s ago: executing program 4 (id=15374):
r0 = open(&(0x7f0000000300)='.\x00', 0x400, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.40191544s ago: executing program 52 (id=15374):
r0 = open(&(0x7f0000000300)='.\x00', 0x400, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.018384095s ago: executing program 5 (id=15397):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x7e, 0x5, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)={[{@i_version}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x22}}, {@noinit_itable}, {@errors_remount}, {@auto_da_alloc}]}, 0x2, 0x500, &(0x7f0000000500)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
fgetxattr(r2, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0)

1.838064275s ago: executing program 5 (id=15398):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000000c0)={[{@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1.336609283s ago: executing program 5 (id=15403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1, 0x0, 0xb2}, 0x18)
socket$inet(0x2, 0x1, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

1.303264213s ago: executing program 6 (id=15376):
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1e, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
brk(0x20ffc004)

1.259946873s ago: executing program 9 (id=15406):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1.245978823s ago: executing program 6 (id=15407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00')

1.224968353s ago: executing program 6 (id=15409):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x400002, 0x3a6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4)
unshare(0x28000600)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.187997863s ago: executing program 1 (id=15410):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000800181100", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(r0)

1.187416463s ago: executing program 9 (id=15411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000c00)="89e7ee0000000000000004c988a8", 0xe}], 0x1)

1.112761933s ago: executing program 0 (id=15414):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair(0x1f, 0x2, 0x4f7, &(0x7f0000000040))
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00')

933.188622ms ago: executing program 1 (id=15416):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000400)={[{@oldalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")

932.995892ms ago: executing program 0 (id=15417):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x7000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

877.333742ms ago: executing program 6 (id=15419):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

876.255722ms ago: executing program 9 (id=15429):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x400002, 0x3a6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4)
unshare(0x28000600)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

752.396832ms ago: executing program 6 (id=15420):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000000c0)={[{@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

752.233192ms ago: executing program 0 (id=15421):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x1219, &(0x7f0000000480)={0x0, 0xf7ae, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

693.474092ms ago: executing program 1 (id=15422):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)

657.972182ms ago: executing program 9 (id=15423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
io_setup(0x200, &(0x7f0000000140))

550.394842ms ago: executing program 9 (id=15424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00')

544.566872ms ago: executing program 1 (id=15425):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x3, {0x2, 0x1, 0x4}, 0x2}, 0x18)
r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x1}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c800)

462.374091ms ago: executing program 0 (id=15426):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r2)

406.225181ms ago: executing program 1 (id=15427):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000c00)="89e7ee0000000000000004c988a8", 0xe}], 0x1)

405.520001ms ago: executing program 9 (id=15438):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18)

378.215111ms ago: executing program 0 (id=15428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(0x0, 0xd931d3864d39dcdb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

273.234501ms ago: executing program 0 (id=15430):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1)
readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

272.690591ms ago: executing program 5 (id=15441):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000800181100", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(r0)

269.881981ms ago: executing program 6 (id=15431):
statx(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x2000, 0x400, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x26)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

184.693501ms ago: executing program 1 (id=15432):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

122.74771ms ago: executing program 5 (id=15433):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

0s ago: executing program 5 (id=15434):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

72.558676][ T5500] vlan0: entered allmulticast mode
[  472.575355][ T5500] bridge_slave_0: entered allmulticast mode
[  472.582568][ T5500] bridge_slave_0: left allmulticast mode
[  472.613429][ T5508] syz.3.14106[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  472.614655][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14106'.
[  472.639554][ T9687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  472.705738][ T5518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14110'.
[  472.940899][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  472.948497][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  472.956032][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  472.968304][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  472.975769][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  472.983351][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  472.990805][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  472.998334][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.005745][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.013210][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.020679][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.028212][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.035789][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.043286][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.050967][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.058479][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.065937][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.073632][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.081133][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.088757][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.096252][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.104152][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.111622][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.119307][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.126857][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.134308][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.141768][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.149339][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.156737][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.164200][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.171687][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.179141][T26360] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  473.191531][T26360] hid-generic 0000:0000:0000.0029: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  473.371194][ T9687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  473.701453][ T5614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.726207][ T5614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.465289][   T24] IPVS: starting estimator thread 0...
[  474.559546][ T5639] IPVS: using max 1776 ests per chain, 88800 per kthread
[  474.636687][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  474.943094][ T5672] loop5: detected capacity change from 0 to 256
[  474.990581][ T5675] netlink: 'syz.3.14179': attribute type 15 has an invalid length.
[  474.998676][ T5675] __nla_validate_parse: 3 callbacks suppressed
[  474.998690][ T5675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14179'.
[  475.169094][ T5689] sit0 speed is unknown, defaulting to 1000
[  475.247248][ T5696] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14191'.
[  475.258632][ T5689] lo speed is unknown, defaulting to 1000
[  475.450110][ T5702] loop4: detected capacity change from 0 to 8192
[  475.624347][ T5723] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.711423][ T5723] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.738310][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  475.790851][ T5723] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.846465][ T5723] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.916490][ T5723] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.977949][ T5723] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.007680][ T5723] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.019539][ T5723] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.315587][   T29] kauditd_printk_skb: 144 callbacks suppressed
[  476.315612][   T29] audit: type=1400 audit(476.358:16420): avc:  denied  { create } for  pid=5745 comm="syz.0.14213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  476.442359][ T5752] vlan2: entered allmulticast mode
[  476.447539][ T5752] bridge_slave_0: entered allmulticast mode
[  476.462243][ T5752] bridge_slave_0: left allmulticast mode
[  476.562163][ T5761] netlink: 'syz.0.14216': attribute type 16 has an invalid length.
[  476.570467][ T5761] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.14216'.
[  476.617686][   T29] audit: type=1326 audit(476.658:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.641085][   T29] audit: type=1326 audit(476.658:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.713656][   T29] audit: type=1326 audit(476.718:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.737007][   T29] audit: type=1326 audit(476.718:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.760113][   T29] audit: type=1326 audit(476.718:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.783173][   T29] audit: type=1326 audit(476.718:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.806215][   T29] audit: type=1326 audit(476.718:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.829256][   T29] audit: type=1326 audit(476.718:16428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.852260][   T29] audit: type=1326 audit(476.718:16429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.14218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ebed5d29 code=0x7ffc0000
[  476.888327][ T9687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  477.402317][ T5803] bpf_get_probe_write_proto: 11 callbacks suppressed
[  477.402357][ T5803] syz.5.14235[5803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  477.416094][ T5803] syz.5.14235[5803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  477.459416][ T5803] syz.5.14235[5803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  477.834881][ T5836] netlink: 'syz.4.14249': attribute type 3 has an invalid length.
[  477.946694][ T5848] delete_channel: no stack
[  478.013176][ T5854] loop5: detected capacity change from 0 to 512
[  478.031687][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  478.049754][ T5854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.218939][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.263931][ T5853] cgroup: fork rejected by pids controller in /syz4
[  478.276738][ T5870] bond1: entered promiscuous mode
[  478.281948][ T5870] bond1: entered allmulticast mode
[  478.287277][ T5870] 8021q: adding VLAN 0 to HW filter on device bond1
[  478.304102][ T5870] bond1 (unregistering): Released all slaves
[  478.386671][ T5906] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14263'.
[  478.399470][ T3413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  478.516159][ T5915] netlink: 'syz.9.14268': attribute type 1 has an invalid length.
[  478.524150][ T5915] netlink: 224 bytes leftover after parsing attributes in process `syz.9.14268'.
[  478.603072][ T5925] syz.9.14275[5925] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  478.603211][ T5925] syz.9.14275[5925] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  478.636373][ T5925] syz.9.14275[5925] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  478.669588][ T5925] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  478.744792][ T5935] xt_hashlimit: size too large, truncated to 1048576
[  478.991028][ T5947] bond0: (slave team0): Releasing backup interface
[  479.005398][ T5947] bridge_slave_0: left allmulticast mode
[  479.011212][ T5947] bridge_slave_0: left promiscuous mode
[  479.017092][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.027805][ T5947] bridge_slave_1: left allmulticast mode
[  479.033587][ T5947] bridge_slave_1: left promiscuous mode
[  479.039480][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.087514][ T5947] bond0: (slave bond_slave_0): Releasing backup interface
[  479.098275][ T5947] bond0: (slave bond_slave_1): Releasing backup interface
[  479.115519][ T5947] team0: Port device team_slave_0 removed
[  479.125860][ T5947] team0: Port device team_slave_1 removed
[  479.133016][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.140559][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.150397][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.157889][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.209810][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  479.287415][ T5962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14290'.
[  479.366264][ T5971] loop5: detected capacity change from 0 to 128
[  479.413077][ T5971] syz.5.14292: attempt to access beyond end of device
[  479.413077][ T5971] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128
[  479.458297][ T5971] syz.5.14292: attempt to access beyond end of device
[  479.458297][ T5971] loop5: rw=0, sector=97, nr_sectors = 32 limit=128
[  479.493945][ T5971] syz.5.14292: attempt to access beyond end of device
[  479.493945][ T5971] loop5: rw=0, sector=145, nr_sectors = 3 limit=128
[  479.621084][ T5986] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14298'.
[  479.625289][ T5992] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  479.708233][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14304'.
[  479.719069][ T6000] syz.5.14305[6000] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  479.719142][ T6000] syz.5.14305[6000] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  479.759098][ T6000] syz.5.14305[6000] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  479.839353][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14317'.
[  479.867443][ T6021] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  479.879542][ T6021] SELinux: failed to load policy
[  479.928681][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14321'.
[  480.069097][ T6054] rdma_rxe: rxe_newlink: failed to add sit0
[  480.122942][ T6067] loop9: detected capacity change from 0 to 1024
[  480.140893][ T6066] syz.3.14336[6066] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  480.160348][ T6071] sit0 speed is unknown, defaulting to 1000
[  480.203008][ T6067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.226022][ T6071] lo speed is unknown, defaulting to 1000
[  480.250359][ T6079] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in;
[  480.250359][ T6079]    program syz.0.14341 not setting count and/or reply_len properly
[  480.308394][ T3413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  480.322177][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.531891][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14354'.
[  480.564349][ T6105] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.572908][ T6105] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.581367][ T6105] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.589776][ T6105] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.626360][ T6107] loop5: detected capacity change from 0 to 512
[  480.634028][ T6107] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  480.783140][ T6107] EXT4-fs (loop5): 1 truncate cleaned up
[  480.789282][ T6107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.824720][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.918490][ T6125] netlink: 96 bytes leftover after parsing attributes in process `syz.5.14363'.
[  481.398157][ T6179] rdma_op ffff888129c5b580 conn xmit_rdma 0000000000000000
[  481.418644][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  481.507491][ T6197] xt_hashlimit: size too large, truncated to 1048576
[  481.664216][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  481.664233][   T29] audit: type=1400 audit(481.708:16521): avc:  denied  { relabelfrom } for  pid=6211 comm="syz.9.14369" name="NETLINK" dev="sockfs" ino=124420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  481.728178][   T29] audit: type=1400 audit(481.748:16522): avc:  denied  { relabelto } for  pid=6211 comm="syz.9.14369" name="NETLINK" dev="sockfs" ino=124420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  481.941092][ T6257] loop9: detected capacity change from 0 to 512
[  481.975524][ T6257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.054657][   T29] audit: type=1400 audit(482.098:16523): avc:  denied  { setattr } for  pid=6255 comm="syz.9.14371" path="/358/bus" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  482.083009][ T6257] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #18: comm syz.9.14371: corrupted inode contents
[  482.117575][ T6257] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #18: comm syz.9.14371: mark_inode_dirty error
[  482.143027][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14381'.
[  482.156853][ T6257] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #18: comm syz.9.14371: corrupted inode contents
[  482.193450][ T6257] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3006: inode #18: comm syz.9.14371: mark_inode_dirty error
[  482.227672][ T6257] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3009: inode #18: comm syz.9.14371: mark inode dirty (error -117)
[  482.274074][ T6257] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117)
[  482.337871][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.549220][ T9615] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  482.564326][   T29] audit: type=1400 audit(482.608:16524): avc:  denied  { read } for  pid=6269 comm="syz.4.14378" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  482.587586][   T29] audit: type=1400 audit(482.608:16525): avc:  denied  { open } for  pid=6269 comm="syz.4.14378" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  482.615535][ T6300] loop5: detected capacity change from 0 to 256
[  482.622651][   T29] audit: type=1400 audit(482.608:16526): avc:  denied  { read write } for  pid=2295 comm="syz-executor" name="loop5" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  482.645502][   T29] audit: type=1400 audit(482.608:16527): avc:  denied  { open } for  pid=2295 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  482.668691][   T29] audit: type=1400 audit(482.608:16528): avc:  denied  { ioctl } for  pid=2295 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=619 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  482.692801][   T29] audit: type=1400 audit(482.608:16529): avc:  denied  { open } for  pid=6291 comm="syz.0.14386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  482.711701][   T29] audit: type=1400 audit(482.608:16530): avc:  denied  { perfmon } for  pid=6291 comm="syz.0.14386" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  482.760213][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14402'.
[  482.764557][ T6300] FAT-fs (loop5): Directory bread(block 64) failed
[  482.773576][ T6305] vlan2: entered promiscuous mode
[  482.776017][ T6300] FAT-fs (loop5): Directory bread(block 65) failed
[  482.780955][ T6305] bond_slave_0: entered promiscuous mode
[  482.789052][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14391'.
[  482.793579][ T6300] FAT-fs (loop5): Directory bread(block 66) failed
[  482.802779][ T6305] bond_slave_0: left promiscuous mode
[  482.809031][ T6300] FAT-fs (loop5): Directory bread(block 67) failed
[  482.820951][ T6300] FAT-fs (loop5): Directory bread(block 68) failed
[  482.827516][ T6300] FAT-fs (loop5): Directory bread(block 69) failed
[  482.834187][ T6300] FAT-fs (loop5): Directory bread(block 70) failed
[  482.840818][ T6300] FAT-fs (loop5): Directory bread(block 71) failed
[  482.847449][ T6300] FAT-fs (loop5): Directory bread(block 72) failed
[  482.854219][ T6300] FAT-fs (loop5): Directory bread(block 73) failed
[  482.903459][ T6300] syz.5.14389: attempt to access beyond end of device
[  482.903459][ T6300] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256
[  482.925655][ T6300] syz.5.14389: attempt to access beyond end of device
[  482.925655][ T6300] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256
[  482.939152][ T6300] buffer_io_error: 439 callbacks suppressed
[  482.939170][ T6300] Buffer I/O error on dev loop5, logical block 442, async page read
[  482.993178][ T6314] 
@ÿ: renamed from vlan0 (while UP)
[  483.025441][ T6319] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.14398'.
[  483.095372][ T6330] loop5: detected capacity change from 0 to 128
[  483.102527][ T6330] FAT-fs (loop5): bogus number of FAT sectors
[  483.108717][ T6330] FAT-fs (loop5): Can't find a valid FAT filesystem
[  483.143707][ T6334] dvmrp0: entered allmulticast mode
[  483.167982][ T6334] dvmrp0: left allmulticast mode
[  483.473457][ T6369] loop9: detected capacity change from 0 to 8192
[  483.593682][ T6377] bpf_get_probe_write_proto: 8 callbacks suppressed
[  483.593768][ T6377] syz.3.14427[6377] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.600788][ T6377] syz.3.14427[6377] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.603491][ T6379] loop5: detected capacity change from 0 to 512
[  483.621270][ T6377] syz.3.14427[6377] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.634489][ T6379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  483.659876][ T6379] EXT4-fs (loop5): orphan cleanup on readonly fs
[  483.667802][ T6379] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.14426: bg 0: block 248: padding at end of block bitmap is not set
[  483.683214][ T6379] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.14426: Failed to acquire dquot type 1
[  483.695365][ T6379] EXT4-fs (loop5): 1 truncate cleaned up
[  483.701744][ T6379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  483.718433][ T9666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  483.718846][ T6379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  483.734785][ T6379] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  483.748661][ T6379] EXT4-fs error (device loop5): __ext4_remount:6749: comm syz.5.14426: Abort forced by user
[  483.759048][ T6379] EXT4-fs (loop5): Remounting filesystem read-only
[  483.765602][ T6379] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  483.792805][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.162269][ T9666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  484.530668][ T6434] loop0: detected capacity change from 0 to 8192
[  484.698524][ T6448] sg_write: data in/out 14238/14 bytes for SCSI command 0x0-- guessing data in;
[  484.698524][ T6448]    program syz.9.14454 not setting count and/or reply_len properly
[  484.797941][ T6456] loop9: detected capacity change from 0 to 512
[  484.821500][ T6455] sit0 speed is unknown, defaulting to 1000
[  484.835734][ T6456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.849247][ T9687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  484.926034][ T6455] lo speed is unknown, defaulting to 1000
[  484.940982][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.248267][ T6483] loop5: detected capacity change from 0 to 8192
[  485.329234][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14475'.
[  485.348216][ T6501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14475'.
[  485.378265][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14476'.
[  485.402413][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14476'.
[  485.662678][ T6539] loop9: detected capacity change from 0 to 8192
[  485.677316][ T6549] SELinux: security_context_str_to_sid (J) failed with errno=-22
[  485.909697][ T6559] sit0 speed is unknown, defaulting to 1000
[  485.977264][ T6567] serio: Serial port ptm0
[  485.978545][ T9687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  486.026543][ T6559] lo speed is unknown, defaulting to 1000
[  486.043504][ T6568] loop0: detected capacity change from 0 to 8192
[  486.385998][ T6591] loop9: detected capacity change from 0 to 8192
[  486.534014][ T6597] netem: change failed
[  486.724143][   T29] kauditd_printk_skb: 282 callbacks suppressed
[  486.724232][   T29] audit: type=1400 audit(486.768:16811): avc:  denied  { tracepoint } for  pid=6594 comm="syz.4.14519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  486.765128][   T29] audit: type=1400 audit(486.808:16812): avc:  denied  { ioctl } for  pid=6611 comm="syz.3.14535" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  486.765351][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.809937][   T24] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4
[  486.817660][   T24] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2
[  486.827164][ T6617] sg_write: data in/out 14238/14 bytes for SCSI command 0x0-- guessing data in;
[  486.827164][ T6617]    program syz.5.14526 not setting count and/or reply_len properly
[  486.830888][   T24] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x3
[  486.845137][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.864829][   T24] hid-generic 0000:3000000:0000.002A: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  486.909847][ T6619] loop5: detected capacity change from 0 to 128
[  486.946118][ T6621] netlink: 92 bytes leftover after parsing attributes in process `syz.9.14527'.
[  487.043695][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14530'.
[  487.086671][ T6631] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  487.094266][   T29] audit: type=1400 audit(487.128:16813): avc:  denied  { create } for  pid=6630 comm="syz.9.14532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  487.114137][   T29] audit: type=1400 audit(487.128:16814): avc:  denied  { write } for  pid=6630 comm="syz.9.14532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  487.128457][ T9692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  487.167490][ T6633] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14534'.
[  487.208903][   T29] audit: type=1400 audit(487.258:16815): avc:  denied  { create } for  pid=6638 comm="syz.9.14538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  487.227519][ T6635] loop5: detected capacity change from 0 to 8192
[  487.235155][   T29] audit: type=1400 audit(487.278:16816): avc:  denied  { write } for  pid=6636 comm="syz.0.14537" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  487.277158][   T29] audit: type=1400 audit(487.318:16817): avc:  denied  { map } for  pid=6636 comm="syz.0.14537" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  487.373616][   T29] audit: type=1400 audit(487.418:16818): avc:  denied  { write } for  pid=6644 comm="syz.9.14551" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  487.409990][   T29] audit: type=1400 audit(487.458:16819): avc:  denied  { read } for  pid=6646 comm="syz.5.14541" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  487.433097][   T29] audit: type=1400 audit(487.458:16820): avc:  denied  { open } for  pid=6646 comm="syz.5.14541" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  487.482440][ T6652] vlan1: entered allmulticast mode
[  487.487612][ T6652] bridge_slave_0: entered allmulticast mode
[  487.495617][ T6652] bridge_slave_0: left allmulticast mode
[  487.688969][ T6664] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  488.207728][ T6680] loop9: detected capacity change from 0 to 512
[  488.216680][ T6678] loop0: detected capacity change from 0 to 2048
[  488.241189][ T6680] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  488.258920][ T9666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  488.279869][ T6678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.292712][ T6680] EXT4-fs (loop9): 1 truncate cleaned up
[  488.305844][ T6680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.358961][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.401134][ T9692] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  488.416017][ T9692] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 346 with error 28
[  488.428426][ T9692] EXT4-fs (loop0): This should not happen!! Data will be lost
[  488.428426][ T9692] 
[  488.438159][ T9692] EXT4-fs (loop0): Total free blocks count 0
[  488.444176][ T9692] EXT4-fs (loop0): Free/Dirty block details
[  488.450116][ T9692] EXT4-fs (loop0): free_blocks=2415919104
[  488.455856][ T9692] EXT4-fs (loop0): dirty_blocks=1072
[  488.461273][ T9692] EXT4-fs (loop0): Block reservation details
[  488.467279][ T9692] EXT4-fs (loop0): i_reserved_data_blocks=75
[  488.481326][ T9692] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 346 with max blocks 918 with error 28
[  488.795216][ T6707] loop9: detected capacity change from 0 to 2048
[  488.815843][ T6707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.852221][ T6717] loop0: detected capacity change from 0 to 512
[  488.872961][ T6717] EXT4-fs: Ignoring removed oldalloc option
[  488.879136][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14571'.
[  488.917669][ T6717] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.14567: iget: bad extended attribute block 1
[  488.938926][ T6717] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.14567: couldn't read orphan inode 15 (err -117)
[  488.973354][ T6717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.032633][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14571'.
[  489.071614][T18189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.099009][ T6707] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  489.113880][ T6707] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  489.114920][ T6725] loop3: detected capacity change from 0 to 512
[  489.126357][ T6707] EXT4-fs (loop9): This should not happen!! Data will be lost
[  489.126357][ T6707] 
[  489.126379][ T6707] EXT4-fs (loop9): Total free blocks count 0
[  489.126394][ T6707] EXT4-fs (loop9): Free/Dirty block details
[  489.126467][ T6707] EXT4-fs (loop9): free_blocks=2415919104
[  489.126483][ T6707] EXT4-fs (loop9): dirty_blocks=8192
[  489.126497][ T6707] EXT4-fs (loop9): Block reservation details
[  489.126508][ T6707] EXT4-fs (loop9): i_reserved_data_blocks=512
[  489.133540][T26357] usb usb2-port8: attempt power cycle
[  489.180073][ T6725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  489.200059][ T6720] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  489.222555][ T6725] EXT4-fs (loop3): 1 truncate cleaned up
[  489.228861][ T6725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.281758][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14589'.
[  489.294104][T29665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.312993][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14589'.
[  489.374816][ T9692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  489.920062][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  489.920225][ T9615] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.067076][ T6745] loop0: detected capacity change from 0 to 2048
[  490.069531][ T6743] sit0 speed is unknown, defaulting to 1000
[  490.111282][ T6745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  490.123387][ T6743] lo speed is unknown, defaulting to 1000
[  490.315039][ T6745] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  490.335229][ T6745] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1484 with error 28
[  490.347805][ T6745] EXT4-fs (loop0): This should not happen!! Data will be lost
[  490.347805][ T6745] 
[  490.357520][ T6745] EXT4-fs (loop0): Total free blocks count 0
[  490.363585][ T6745] EXT4-fs (loop0): Free/Dirty block details
[  490.369546][ T6745] EXT4-fs (loop0): free_blocks=2415919104
[  490.375342][ T6745] EXT4-fs (loop0): dirty_blocks=1488
[  490.380722][ T6745] EXT4-fs (loop0): Block reservation details
[  490.386721][ T6745] EXT4-fs (loop0): i_reserved_data_blocks=93
[  490.455789][T18189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.477433][ T6784] sit0 speed is unknown, defaulting to 1000
[  490.483522][ T9687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  490.568650][ T6784] lo speed is unknown, defaulting to 1000
[  490.611253][ T6795] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  490.746158][ T6817] loop3: detected capacity change from 0 to 512
[  490.746443][ T6818] loop9: detected capacity change from 0 to 256
[  490.772291][ T6817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.798690][ T6818] FAT-fs (loop9): Directory bread(block 64) failed
[  490.805381][ T6818] FAT-fs (loop9): Directory bread(block 65) failed
[  490.823429][ T6818] FAT-fs (loop9): Directory bread(block 66) failed
[  490.845495][ T6818] FAT-fs (loop9): Directory bread(block 67) failed
[  490.869997][ T6818] FAT-fs (loop9): Directory bread(block 68) failed
[  490.879294][ T6818] FAT-fs (loop9): Directory bread(block 69) failed
[  490.885889][ T6818] FAT-fs (loop9): Directory bread(block 70) failed
[  490.892541][ T6818] FAT-fs (loop9): Directory bread(block 71) failed
[  490.900197][ T6818] FAT-fs (loop9): Directory bread(block 72) failed
[  490.906775][ T6818] FAT-fs (loop9): Directory bread(block 73) failed
[  490.926045][T29665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.957731][ T6833] netlink: 92 bytes leftover after parsing attributes in process `syz.0.14587'.
[  491.048479][T26357] usb usb2-port8: unable to enumerate USB device
[  491.067019][ T6818] syz.9.14585: attempt to access beyond end of device
[  491.067019][ T6818] loop9: rw=0, sector=1768, nr_sectors = 4 limit=256
[  491.086269][ T6818] syz.9.14585: attempt to access beyond end of device
[  491.086269][ T6818] loop9: rw=0, sector=1768, nr_sectors = 4 limit=256
[  491.099855][ T6818] Buffer I/O error on dev loop9, logical block 442, async page read
[  491.313956][ T6906] loop3: detected capacity change from 0 to 256
[  491.334362][ T6906] FAT-fs (loop3): Directory bread(block 64) failed
[  491.344091][ T6906] FAT-fs (loop3): Directory bread(block 65) failed
[  491.351934][ T6906] FAT-fs (loop3): Directory bread(block 66) failed
[  491.361067][ T6913] loop9: detected capacity change from 0 to 128
[  491.363145][ T6906] FAT-fs (loop3): Directory bread(block 67) failed
[  491.382725][ T6906] FAT-fs (loop3): Directory bread(block 68) failed
[  491.389522][ T6906] FAT-fs (loop3): Directory bread(block 69) failed
[  491.392743][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.396144][ T6906] FAT-fs (loop3): Directory bread(block 70) failed
[  491.404769][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.424080][ T6906] FAT-fs (loop3): Directory bread(block 71) failed
[  491.434537][ T6906] FAT-fs (loop3): Directory bread(block 72) failed
[  491.448291][ T6906] FAT-fs (loop3): Directory bread(block 73) failed
[  491.489405][ T6906] syz.3.14606: attempt to access beyond end of device
[  491.489405][ T6906] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256
[  491.505364][ T6906] syz.3.14606: attempt to access beyond end of device
[  491.505364][ T6906] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256
[  491.518899][ T6906] Buffer I/O error on dev loop3, logical block 442, async page read
[  491.698125][ T9634] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  491.987663][ T6994] xt_hashlimit: size too large, truncated to 1048576
[  492.087417][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  492.087431][   T29] audit: type=1400 audit(492.128:16843): avc:  denied  { read } for  pid=7021 comm="syz.0.14611" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  492.171249][   T29] audit: type=1400 audit(492.158:16844): avc:  denied  { open } for  pid=7021 comm="syz.0.14611" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  492.280601][ T7031] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  492.396396][   T29] audit: type=1400 audit(492.438:16845): avc:  denied  { create } for  pid=7033 comm="syz.4.14618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  492.405427][ T7035] sit0 speed is unknown, defaulting to 1000
[  492.432189][   T29] audit: type=1400 audit(492.478:16846): avc:  denied  { watch } for  pid=7037 comm="syz.9.14619" path="/407/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  492.516999][   T29] audit: type=1400 audit(492.558:16847): avc:  denied  { unmount } for  pid=1097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  492.523993][ T7035] lo speed is unknown, defaulting to 1000
[  492.567167][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.590176][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.771064][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14610'.
[  492.771209][ T7048] sit0 speed is unknown, defaulting to 1000
[  492.831959][ T7048] lo speed is unknown, defaulting to 1000
[  492.838482][ T9664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  492.985626][   T29] audit: type=1400 audit(493.028:16848): avc:  denied  { bind } for  pid=7062 comm="syz.4.14620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  493.027243][   T29] audit: type=1400 audit(493.058:16849): avc:  denied  { write } for  pid=7062 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  493.089865][ T7077] xt_hashlimit: size too large, truncated to 1048576
[  493.094543][ T7078] loop3: detected capacity change from 0 to 128
[  493.135770][ T7078] EXT4-fs: Ignoring removed nobh option
[  493.195291][ T7078] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  493.297125][   T29] audit: type=1400 audit(493.328:16850): avc:  denied  { remove_name } for  pid=7076 comm="syz.3.14625" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  493.340575][   T29] audit: type=1400 audit(493.328:16851): avc:  denied  { rename } for  pid=7076 comm="syz.3.14625" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  493.406333][T29665] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  493.418875][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14629'.
[  493.490654][ T7092] sit0 speed is unknown, defaulting to 1000
[  493.505965][ T7093] vhci_hcd: default hub control req: 4017 v0220 i0001 l0
[  493.577189][   T29] audit: type=1400 audit(493.618:16852): avc:  denied  { connect } for  pid=7099 comm="syz.4.14637" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  493.591382][ T7092] lo speed is unknown, defaulting to 1000
[  493.853948][ T7117] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  493.948178][ T3413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  493.970303][ T7128] vhci_hcd: default hub control req: 4017 v0220 i0001 l0
[  493.995275][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14648'.
[  494.101351][ T7133] uprobe: syz.3.14662:7133 failed to unregister, leaking uprobe
[  494.122728][ T7139] sit0 speed is unknown, defaulting to 1000
[  494.168401][ T7139] lo speed is unknown, defaulting to 1000
[  494.245663][ T7150] loop3: detected capacity change from 0 to 1024
[  494.265092][ T7155] loop5: detected capacity change from 0 to 128
[  494.271701][ T7155] EXT4-fs: Ignoring removed nobh option
[  494.284729][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.303090][ T7155] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  494.358199][ T7159] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  494.371648][T29665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.416182][ T2295] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  494.523968][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14667'.
[  494.587484][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14673'.
[  494.613123][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14672'.
[  494.642295][ T7182] uprobe: syz.5.14671:7182 failed to unregister, leaking uprobe
[  494.686318][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14689'.
[  494.712952][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14690'.
[  494.741501][ T7203] loop0: detected capacity change from 0 to 1024
[  494.777106][ T7203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.849455][T18189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.892391][ T7216] loop0: detected capacity change from 0 to 128
[  494.902434][ T7216] EXT4-fs: Ignoring removed nobh option
[  494.909750][ T7213] uprobe: syz.4.14694:7213 failed to unregister, leaking uprobe
[  494.941193][ T7216] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  494.984635][ T7224] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  494.992657][T18189] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  495.044942][ T7230] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  495.059337][ T9634] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  495.219732][ T7240] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  495.233242][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14695'.
[  495.293435][ T7249] bond1: entered promiscuous mode
[  495.298584][ T7249] bond1: entered allmulticast mode
[  495.304262][ T7249] 8021q: adding VLAN 0 to HW filter on device bond1
[  495.316468][ T7248] loop5: detected capacity change from 0 to 1024
[  495.335546][ T7249] bond1 (unregistering): Released all slaves
[  495.347427][ T7248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.409264][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.489268][ T7262] rdma_rxe: rxe_newlink: failed to add sit0
[  495.505868][ T7266] loop0: detected capacity change from 0 to 512
[  495.518487][ T7266] EXT4-fs: Ignoring removed i_version option
[  495.564553][ T7273] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  495.573524][ T7273] SELinux: failed to load policy
[  495.619908][ T7271] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  495.643713][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  495.689136][  T124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  495.811559][T18189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  495.832085][ T7279] SELinux: security_context_str_to_sid (@) failed with errno=-22
[  495.951581][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14713'.
[  496.179089][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  496.529167][ T7310] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  496.537896][ T7310] SELinux: failed to load policy
[  496.593296][ T7312] loop9: detected capacity change from 0 to 512
[  496.609252][ T7312] EXT4-fs: Ignoring removed i_version option
[  496.638632][ T7317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  496.666557][ T7312] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  496.701855][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  496.769796][ T7331] syz.3.14736[7331] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  496.770013][ T7331] syz.3.14736[7331] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  496.783150][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.791040][ T7331] syz.3.14736[7331] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  496.794807][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.821587][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.830425][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.837914][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.845383][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.852890][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.860369][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.868179][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.875810][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.883297][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.890841][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.898281][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.905812][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.913260][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.920876][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.928352][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.935775][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.943523][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.950975][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.958458][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.966055][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.973526][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.981098][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.988670][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  496.996136][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  497.003830][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  497.011285][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  497.018825][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  497.026301][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  497.033784][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  497.041255][    T9] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  497.080523][ T7352] netlink: 'syz.0.14744': attribute type 4 has an invalid length.
[  497.088597][    T9] hid-generic 0000:0000:0000.002B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  497.135605][ T7352] netlink: 'syz.0.14744': attribute type 4 has an invalid length.
[  497.214262][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  497.214278][   T29] audit: type=1400 audit(497.258:16970): avc:  denied  { create } for  pid=7370 comm="syz.3.14752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  497.308684][ T9659] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  497.360480][ T7384] veth0_vlan: entered allmulticast mode
[  497.421111][ T7380] loop3: detected capacity change from 0 to 8192
[  497.476141][ T7386] ÿÿÿÿÿÿ: renamed from vlan1
[  497.508572][ T7380]  loop3: p1 p2 p3 p4
[  497.512631][ T7380] loop3: p1 start 51379968 is beyond EOD, truncated
[  497.528209][ T7380] loop3: p3 size 100663552 extends beyond EOD, truncated
[  497.535862][ T7380] loop3: p4 size 81920 extends beyond EOD, truncated
[  497.617501][   T29] audit: type=1400 audit(497.658:16971): avc:  denied  { create } for  pid=7393 comm="syz.3.14774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  497.636793][   T29] audit: type=1400 audit(497.658:16972): avc:  denied  { connect } for  pid=7393 comm="syz.3.14774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  497.666000][   T29] audit: type=1400 audit(497.708:16973): avc:  denied  { setopt } for  pid=7393 comm="syz.3.14774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  497.693193][   T29] audit: type=1400 audit(497.738:16974): avc:  denied  { create } for  pid=7399 comm="syz.4.14762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  497.716413][   T29] audit: type=1400 audit(497.738:16975): avc:  denied  { bind } for  pid=7399 comm="syz.4.14762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  497.735538][   T29] audit: type=1400 audit(497.758:16976): avc:  denied  { listen } for  pid=7399 comm="syz.4.14762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  497.762359][   T29] audit: type=1400 audit(497.758:16977): avc:  denied  { create } for  pid=7404 comm="syz.0.14763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  497.786771][ T7407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7407 comm=syz.0.14764
[  497.799450][ T7407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7407 comm=syz.0.14764
[  497.832207][ T7413] sd 0:0:1:0: device reset
[  497.872795][   T29] audit: type=1326 audit(497.908:16978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2565d29 code=0x7ffc0000
[  497.896320][   T29] audit: type=1326 audit(497.908:16979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2565d29 code=0x7ffc0000
[  497.929301][ T7423] __nla_validate_parse: 12 callbacks suppressed
[  497.929324][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14773'.
[  497.944980][ T7423] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  497.989994][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  497.997447][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.004955][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.018131][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.025569][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.033162][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.040615][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.048045][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.055531][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.063030][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.070543][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.078081][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.085560][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.093033][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.101151][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.108617][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.116114][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.123586][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.131038][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.138478][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.145955][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.153540][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.161016][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.168535][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.175954][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.183390][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.190937][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.198406][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.205949][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.213432][    T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  498.230993][    T9] hid-generic 0000:0000:0000.002C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  498.390488][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.397997][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.405469][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.420435][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.427932][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.435585][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.443040][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.450487][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.457925][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.465424][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.472887][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.480462][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.487875][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.495322][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.502768][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.510412][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.517892][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.525586][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.533181][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.542568][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  498.554018][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.561542][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.569017][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.576457][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.584046][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.591499][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.598951][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.606546][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.614153][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.621591][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.629087][    T9] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  498.641083][    T9] hid-generic 0000:0000:0000.002D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  498.662320][ T7444] loop9: detected capacity change from 0 to 8192
[  498.688668][ T7444]  loop9: p1 p2 p3 p4
[  498.692794][ T7444] loop9: p1 start 51379968 is beyond EOD, truncated
[  498.702799][ T7444] loop9: p3 size 100663552 extends beyond EOD, truncated
[  498.711916][ T7444] loop9: p4 size 81920 extends beyond EOD, truncated
[  498.796132][ T7460] loop9: detected capacity change from 0 to 2048
[  498.868808][ T7460]  loop9: p1 < > p4
[  498.873167][ T7460] loop9: p4 size 8388608 extends beyond EOD, truncated
[  498.923933][ T7473] syz.0.14807[7473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.924010][ T7473] syz.0.14807[7473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.946546][ T7473] syz.0.14807[7473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.965453][ T7478] loop9: detected capacity change from 0 to 512
[  499.035005][ T7478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.035278][ T7487] syz.0.14800[7487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.047838][ T7487] syz.0.14800[7487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.059977][ T7487] syz.0.14800[7487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.098439][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.180704][ T7507] loop9: detected capacity change from 0 to 512
[  499.187402][ T7507] EXT4-fs: Ignoring removed oldalloc option
[  499.201581][ T7507] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.14801: Parent and EA inode have the same ino 15
[  499.216680][ T7507] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.14801: Parent and EA inode have the same ino 15
[  499.229745][ T7507] EXT4-fs (loop9): 1 orphan inode deleted
[  499.236196][ T7507] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.256856][ T7512] loop3: detected capacity change from 0 to 2048
[  499.293531][ T7512]  loop3: p1 < > p4
[  499.298834][ T7512] loop3: p4 size 8388608 extends beyond EOD, truncated
[  499.307859][ T7520] loop5: detected capacity change from 0 to 512
[  499.367936][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.410039][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.451963][ T7534] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14819'.
[  499.493800][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.592933][ T7546] netlink: 96 bytes leftover after parsing attributes in process `syz.5.14827'.
[  499.634965][ T7552] loop0: detected capacity change from 0 to 512
[  499.641957][ T7552] EXT4-fs: Ignoring removed oldalloc option
[  499.661128][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.14831: Parent and EA inode have the same ino 15
[  499.673782][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.14831: Parent and EA inode have the same ino 15
[  499.688265][ T3413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  499.694248][ T7559] syz.4.14832[7559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.697358][ T7552] EXT4-fs (loop0): 1 orphan inode deleted
[  499.715220][ T7552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.746277][T18189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.407103][ T7571] loop3: detected capacity change from 0 to 512
[  500.424004][ T7574] Unknown options in mask 5
[  500.438259][ T7574] loop5: detected capacity change from 0 to 128
[  500.457094][ T7571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.468583][ T7572] netlink: 48 bytes leftover after parsing attributes in process `syz.9.14837'.
[  500.549027][T29665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.591610][ T7594] loop3: detected capacity change from 0 to 512
[  500.600876][ T7594] EXT4-fs: Ignoring removed oldalloc option
[  500.658498][ T7594] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.14846: Parent and EA inode have the same ino 15
[  500.692990][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14849'.
[  500.703937][ T7594] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.14846: Parent and EA inode have the same ino 15
[  500.731032][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14853'.
[  500.755048][ T7594] EXT4-fs (loop3): 1 orphan inode deleted
[  500.767946][ T7594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.781396][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14855'.
[  500.813968][ T3413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  500.818797][ T9634] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  500.863094][T29665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.884637][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14862'.
[  500.924608][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14862'.
[  500.941037][ T7637] loop5: detected capacity change from 0 to 512
[  500.991390][ T7637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.995622][ T7641] loop0: detected capacity change from 0 to 512
[  501.018177][ T7637] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  501.026276][ T7641] /dev/loop0: Can't open blockdev
[  501.039643][    C1] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0
[  501.055259][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.263602][ T7662] sit0 speed is unknown, defaulting to 1000
[  501.306342][ T7662] lo speed is unknown, defaulting to 1000
[  501.384052][ T7690] loop5: detected capacity change from 0 to 2048
[  501.399514][ T7692] loop0: detected capacity change from 0 to 1156
[  501.414726][ T7690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.460554][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.855146][ T7744] bpf_get_probe_write_proto: 2 callbacks suppressed
[  501.855213][ T7744] syz.9.14918[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  501.862457][ T7744] syz.9.14918[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  501.874360][ T7744] syz.9.14918[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  501.922203][ T7753] loop5: detected capacity change from 0 to 1024
[  501.948432][ T7753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.968074][  T124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  501.976790][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14913'.
[  502.034578][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.160136][ T7779] loop0: detected capacity change from 0 to 512
[  502.196570][ T7779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  502.224001][ T7791] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  502.228196][   T29] kauditd_printk_skb: 233 callbacks suppressed
[  502.228215][   T29] audit: type=1400 audit(502.268:17213): avc:  denied  { ioctl } for  pid=7787 comm="syz.5.14930" path="socket:[128515]" dev="sockfs" ino=128515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  502.252484][ T7779] EXT4-fs (loop0): 1 truncate cleaned up
[  502.275449][ T7779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.275889][   T29] audit: type=1400 audit(502.318:17214): avc:  denied  { mount } for  pid=7792 comm="syz.9.14931" name="/" dev="ramfs" ino=129750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  502.293628][ T7779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.352664][ T7799] loop3: detected capacity change from 0 to 256
[  502.360758][   T29] audit: type=1400 audit(502.398:17215): avc:  denied  { unmount } for  pid=1097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  502.380303][   T29] audit: type=1400 audit(502.408:17216): avc:  denied  { unmount } for  pid=18189 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  502.405739][   T29] audit: type=1400 audit(502.448:17217): avc:  denied  { mount } for  pid=7798 comm="syz.3.14933" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  502.421583][ T7803] loop9: detected capacity change from 0 to 512
[  502.434513][ T7803] EXT4-fs: Ignoring removed oldalloc option
[  502.440987][ T7805] syz.5.14937[7805] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.441065][ T7805] syz.5.14937[7805] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.442544][ T7803] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  502.453781][ T7805] syz.5.14937[7805] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.479323][ T7803] EXT4-fs (loop9): 1 truncate cleaned up
[  502.503264][   T29] audit: type=1400 audit(502.548:17218): avc:  denied  { write } for  pid=7800 comm="syz.5.14937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  502.524964][ T7803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.578504][   T29] audit: type=1400 audit(502.628:17219): avc:  denied  { name_bind } for  pid=7801 comm="syz.9.14935" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  502.601381][   T29] audit: type=1400 audit(502.628:17220): avc:  denied  { node_bind } for  pid=7801 comm="syz.9.14935" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  502.636400][ T7814] sit0 speed is unknown, defaulting to 1000
[  502.646997][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.675974][ T7814] lo speed is unknown, defaulting to 1000
[  502.739175][   T29] audit: type=1400 audit(502.768:17221): avc:  denied  { unmount } for  pid=29665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  502.808571][   T29] audit: type=1400 audit(502.848:17222): avc:  denied  { create } for  pid=7825 comm="syz.4.14946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  502.890453][ T7833] syz.0.14951[7833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.890527][ T7833] syz.0.14951[7833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.916608][ T7833] syz.0.14951[7833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.081021][ T7856] syzkaller1: entered promiscuous mode
[  503.098147][ T7856] syzkaller1: entered allmulticast mode
[  503.108273][ T3413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  503.138396][ T7858] IPVS: stopping master sync thread 7863 ...
[  503.138694][ T7863] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0
[  503.168116][ T7865] loop5: detected capacity change from 0 to 2048
[  503.204862][ T7873] netlink: 296 bytes leftover after parsing attributes in process `syz.9.14966'.
[  503.214499][ T7865] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.14964: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  503.493601][ T7905] loop5: detected capacity change from 0 to 128
[  503.509516][ T7905] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  503.524367][ T7907] syz.0.14981[7907] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.528432][ T7905] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  503.548141][ T7905] FAT-fs (loop5): Filesystem has been set read-only
[  503.574814][ T7905] syz.5.14980: attempt to access beyond end of device
[  503.574814][ T7905] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  503.612634][ T7905] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  503.620563][ T7905] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  503.660513][ T7905] syz.5.14980: attempt to access beyond end of device
[  503.660513][ T7905] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  503.695971][ T7905] syz.5.14980: attempt to access beyond end of device
[  503.695971][ T7905] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  503.710469][ T7917] loop3: detected capacity change from 0 to 128
[  503.746874][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.757831][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.130607][ T7952] loop0: detected capacity change from 0 to 1024
[  504.137832][ T7952] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  504.149044][ T7952] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  504.159758][ T7952] JBD2: no valid journal superblock found
[  504.165551][ T7952] EXT4-fs (loop0): Could not load journal inode
[  504.230100][ T9664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  504.473583][ T7970] sit0 speed is unknown, defaulting to 1000
[  504.508493][ T7970] lo speed is unknown, defaulting to 1000
[  504.617013][ T7970] chnl_net:caif_netlink_parms(): no params data found
[  504.689740][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.696970][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.704457][ T7970] bridge_slave_0: entered allmulticast mode
[  504.711301][ T7970] bridge_slave_0: entered promiscuous mode
[  504.718536][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.725691][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.733071][ T7970] bridge_slave_1: entered allmulticast mode
[  504.739903][ T7970] bridge_slave_1: entered promiscuous mode
[  504.760025][ T7970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.771097][ T7970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.792845][ T7970] team0: Port device team_slave_0 added
[  504.800055][ T7970] team0: Port device team_slave_1 added
[  504.817978][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.825168][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.851977][ T7970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.863529][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.870518][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.896713][ T7970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.928909][ T7970] hsr_slave_0: entered promiscuous mode
[  504.936082][ T7970] hsr_slave_1: entered promiscuous mode
[  504.942331][ T7970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  504.957964][ T7970] Cannot create hsr debugfs directory
[  505.013853][ T8003] loop4: detected capacity change from 0 to 512
[  505.022300][ T8003] EXT4-fs: Ignoring removed orlov option
[  505.029092][ T8003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  505.048392][ T8003] EXT4-fs (loop4): orphan cleanup on readonly fs
[  505.055269][ T8003] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.15017: bg 0: block 248: padding at end of block bitmap is not set
[  505.074316][ T8003] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.15017: Failed to acquire dquot type 1
[  505.087060][ T8003] EXT4-fs (loop4): 1 truncate cleaned up
[  505.087349][ T7970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.145223][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15020'.
[  505.171114][ T8011] vlan0: entered promiscuous mode
[  505.176245][ T8011] bond_slave_0: entered promiscuous mode
[  505.206252][ T8011] bond_slave_0: left promiscuous mode
[  505.236522][ T7970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.311506][ T7970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.366612][ T7970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.377820][ T9664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  505.447496][ T7970] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  505.465529][ T8035] program syz.4.15033 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  505.465689][ T7970] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  505.489530][ T7970] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  505.499181][ T7970] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  505.544378][ T7970] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.559323][ T7970] 8021q: adding VLAN 0 to HW filter on device team0
[  505.569400][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.576554][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.588520][  T124] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.595586][  T124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.664896][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.737299][ T7970] veth0_vlan: entered promiscuous mode
[  505.745782][ T7970] veth1_vlan: entered promiscuous mode
[  505.762877][ T7970] veth0_macvtap: entered promiscuous mode
[  505.771359][ T7970] veth1_macvtap: entered promiscuous mode
[  505.782843][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.793335][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.803212][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.813749][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.823587][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.834021][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.844018][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.854452][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.864415][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.874903][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.886066][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.898264][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.908894][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.918987][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.929574][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.939667][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.950177][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.960047][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.970680][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.980696][ T7970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.991726][ T7970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.002673][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.014679][ T7970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.023469][ T7970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.032258][ T7970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.041109][ T7970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.098929][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15044'.
[  506.156225][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15036'.
[  506.170843][ T8061] vlan1: entered promiscuous mode
[  506.175993][ T8061] bond_slave_0: entered promiscuous mode
[  506.183149][ T8061] bond_slave_0: left promiscuous mode
[  506.250636][ T8065] loop4: detected capacity change from 0 to 8192
[  506.264167][ T8065] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  506.298469][ T8068] Falling back ldisc for ttyS3.
[  506.436276][ T8084] futex_wake_op: syz.9.15049 tries to shift op by -1; fix this program
[  506.465347][ T8086] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.15050'.
[  506.498277][ T9664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  506.512222][ T8088] loop5: detected capacity change from 0 to 512
[  506.526244][ T8088] EXT4-fs (loop5): orphan cleanup on readonly fs
[  506.559769][ T9664] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  506.587848][ T8088] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  506.614271][ T8088] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  506.628474][ T8088] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.15051: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  506.673117][ T8088] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.15051: couldn't read orphan inode 13 (err -117)
[  506.702314][ T8088] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  506.713437][ T8088] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2
[  507.046678][ T8099] IPv6: Can't replace route, no match found
[  507.062876][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15055'.
[  507.095866][ T8105] vlan2: entered promiscuous mode
[  507.101045][ T8105] bond_slave_0: entered promiscuous mode
[  507.126328][ T8105] bond_slave_0: left promiscuous mode
[  507.137610][ T8115] bpf_get_probe_write_proto: 11 callbacks suppressed
[  507.137672][ T8115] syz.4.15062[8115] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  507.160381][ T8115] syz.4.15062[8115] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  507.179104][ T8115] syz.4.15062[8115] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  507.179464][ T8121] loop0: detected capacity change from 0 to 164
[  507.210575][ T8121] Unable to read rock-ridge attributes
[  507.271835][   T29] kauditd_printk_skb: 110 callbacks suppressed
[  507.271853][   T29] audit: type=1400 audit(507.318:17331): avc:  denied  { unlink } for  pid=2295 comm="syz-executor" name="file0" dev="tmpfs" ino=2362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  507.376290][   T29] audit: type=1326 audit(507.418:17332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.416550][   T29] audit: type=1400 audit(507.438:17333): avc:  denied  { write } for  pid=8138 comm="syz.0.15075" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  507.439930][   T29] audit: type=1326 audit(507.438:17334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.463121][   T29] audit: type=1326 audit(507.438:17335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.486224][   T29] audit: type=1326 audit(507.438:17336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.509301][   T29] audit: type=1326 audit(507.438:17337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.562678][   T29] audit: type=1326 audit(507.578:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.585802][   T29] audit: type=1326 audit(507.578:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.609049][   T29] audit: type=1326 audit(507.578:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.15076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e4cf5d29 code=0x7ffc0000
[  507.632652][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15079'.
[  507.648091][ T9664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.665049][ T8148] vlan1: entered promiscuous mode
[  507.670255][ T8148] bond_slave_0: entered promiscuous mode
[  507.677248][ T8148] bond_slave_0: left promiscuous mode
[  507.693645][ T8154] netem: change failed
[  507.862866][ T8183] loop5: detected capacity change from 0 to 1024
[  507.874219][ T8183] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  507.985748][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15102'.
[  507.998608][ T8199] vlan0: entered promiscuous mode
[  508.003702][ T8199] bond_slave_0: entered promiscuous mode
[  508.010666][ T8199] bond_slave_0: left promiscuous mode
[  508.160713][ T8206] bond_slave_1: entered promiscuous mode
[  508.169245][ T8206] bond_slave_1: left promiscuous mode
[  508.400408][ T8220] hub 9-0:1.0: USB hub found
[  508.405193][ T8220] hub 9-0:1.0: 8 ports detected
[  508.726236][ T2295] EXT4-fs unmount: 9 callbacks suppressed
[  508.726254][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.758518][ T9634] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  508.775454][ T8248] serio: Serial port ptm0
[  508.812684][ T8256] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  509.193383][ T8278] bond0: entered promiscuous mode
[  509.208113][ T8278] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  509.216430][ T8278] bond0: left promiscuous mode
[  509.335960][ T8284] syz.5.15140[8284] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  509.336033][ T8284] syz.5.15140[8284] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  509.336097][ T8284] syz.5.15140[8284] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  509.373700][ T8284] loop5: detected capacity change from 0 to 1024
[  509.414323][ T8284] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.15140: Failed to acquire dquot type 0
[  509.452342][ T8284] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  509.452647][ T8284] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.15140: corrupted inode contents
[  509.452832][ T8284] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #13: comm syz.5.15140: mark_inode_dirty error
[  509.508978][ T8284] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.15140: corrupted inode contents
[  509.521819][ T8284] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.15140: mark_inode_dirty error
[  509.522023][ T8284] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.15140: corrupted inode contents
[  509.522172][ T8284] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  509.522289][ T8284] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.15140: corrupted inode contents
[  509.522484][ T8284] EXT4-fs error (device loop5): ext4_truncate:4240: inode #13: comm syz.5.15140: mark_inode_dirty error
[  509.522606][ T8284] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  509.522992][ T8284] EXT4-fs (loop5): 1 truncate cleaned up
[  509.593160][ T8284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.708526][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.750127][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x1
[  509.757648][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.765189][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.772643][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.780134][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.787606][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.795225][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x4
[  509.802700][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.810116][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x2
[  509.817530][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.824018][ T8307] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  509.824945][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.839855][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.842777][ T8307] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  509.847259][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.861745][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x4
[  509.869026][ T9659] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  509.869189][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.884545][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.891989][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x2
[  509.899523][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.906952][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.914419][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.922142][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.929593][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.937116][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.944546][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.951978][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.959564][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.967042][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.974467][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.981941][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.989473][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  509.996900][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  510.004579][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  510.012068][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  510.019561][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  510.026974][   T24] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  510.057067][ T8312] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  510.088235][   T24] hid-generic 0000:0000:0000.002E: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  510.162533][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15155'.
[  510.192511][ T8324] vlan0: entered promiscuous mode
[  510.197612][ T8324] bond_slave_0: entered promiscuous mode
[  510.224339][ T8324] bond_slave_0: left promiscuous mode
[  510.456425][ T8353] pim6reg1: entered promiscuous mode
[  510.461883][ T8353] pim6reg1: entered allmulticast mode
[  510.601193][ T8363] netlink: 'syz.4.15169': attribute type 13 has an invalid length.
[  510.609273][ T8363] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15169'.
[  510.628927][ T8363] syz_tun: refused to change device tx_queue_len
[  510.635327][ T8363] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  510.732696][ T8371] batadv_slave_1: entered promiscuous mode
[  510.743473][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15170'.
[  510.813608][ T8371] batadv_slave_1 (unregistering): left promiscuous mode
[  510.988102][ T9659] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  511.067119][ T8402] syz.5.15178[8402] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  511.067194][ T8402] syz.5.15178[8402] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  511.119603][ T8402] syz.5.15178[8402] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  511.152354][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.351424][ T8404] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  511.395264][ T8404] bond0: (slave sit0): Error -95 calling set_mac_address
[  511.690894][ T8507] syz.4.15191[8507] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  511.723242][ T8508] ref_ctr_offset mismatch. inode: 0xa72 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  511.791745][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15197'.
[  511.873000][ T8520] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.881975][ T8520] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.891015][ T8520] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.900088][ T8520] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.967670][ T8533] netlink: 'syz.5.15200': attribute type 4 has an invalid length.
[  512.028418][ T8542] netlink: 'syz.5.15200': attribute type 4 has an invalid length.
[  512.158605][ T9665] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  512.224819][ T8558] xt_HMARK: spi-set and port-set can't be combined
[  512.258224][ T8563] loop1: detected capacity change from 0 to 512
[  512.273141][ T8563] EXT4-fs: Ignoring removed i_version option
[  512.323354][ T9623] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  512.363799][ T8563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  512.416391][   T29] kauditd_printk_skb: 454 callbacks suppressed
[  512.416404][   T29] audit: type=1326 audit(512.458:17793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57472f5d29 code=0x7ffc0000
[  512.445739][   T29] audit: type=1326 audit(512.458:17794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57472f5d29 code=0x7ffc0000
[  512.472956][   T29] audit: type=1326 audit(512.508:17795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f898c4c4690 code=0x7ffc0000
[  512.496059][   T29] audit: type=1326 audit(512.508:17796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f898c4c4a77 code=0x7ffc0000
[  512.519029][   T29] audit: type=1326 audit(512.508:17797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f898c4c4690 code=0x7ffc0000
[  512.542163][   T29] audit: type=1326 audit(512.508:17798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c4c5d29 code=0x7ffc0000
[  512.565546][   T29] audit: type=1326 audit(512.508:17799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f898c4c5d29 code=0x7ffc0000
[  512.588807][   T29] audit: type=1326 audit(512.508:17800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c4c5d29 code=0x7ffc0000
[  512.611848][   T29] audit: type=1326 audit(512.508:17801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c4c5d29 code=0x7ffc0000
[  512.634882][   T29] audit: type=1326 audit(512.508:17802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.1.15203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f898c4c5d29 code=0x7ffc0000
[  512.661589][ T7970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  512.740487][ T8582] netlink: 'syz.4.15213': attribute type 39 has an invalid length.
[  512.756121][ T8582] veth1_macvtap: left promiscuous mode
[  512.785699][ T8588] loop9: detected capacity change from 0 to 2048
[  512.840020][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15220'.
[  512.847410][ T8588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.013475][ T8588] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[  513.025923][ T8588] EXT4-fs (loop9): This should not happen!! Data will be lost
[  513.025923][ T8588] 
[  513.035725][ T8588] EXT4-fs (loop9): Total free blocks count 0
[  513.041887][ T8588] EXT4-fs (loop9): Free/Dirty block details
[  513.047830][ T8588] EXT4-fs (loop9): free_blocks=0
[  513.052825][ T8588] EXT4-fs (loop9): dirty_blocks=0
[  513.057904][ T8588] EXT4-fs (loop9): Block reservation details
[  513.063921][ T8588] EXT4-fs (loop9): i_reserved_data_blocks=0
[  513.126319][ T8600] loop5: detected capacity change from 0 to 2048
[  513.141669][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.163476][ T8600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.217863][ T8599] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  513.261877][ T8608] loop9: detected capacity change from 0 to 2048
[  513.319730][ T9692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  513.327932][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.386916][ T8608] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.533560][ T8633] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  513.573398][ T8637] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.15237'.
[  513.630063][ T8641] loop1: detected capacity change from 0 to 512
[  513.636994][ T8641] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  513.662634][ T8641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102]
[  513.670844][ T8641] EXT4-fs (loop1): orphan cleanup on readonly fs
[  513.677619][ T8641] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33619980: comm syz.1.15239: invalid block
[  513.694443][ T8641] EXT4-fs (loop1): Remounting filesystem read-only
[  513.701611][ T8641] EXT4-fs (loop1): 1 truncate cleaned up
[  513.707709][ T8641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  513.720673][ T8641] SELinux: (dev loop1, type ext4) getxattr errno 5
[  513.727703][ T8641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  513.762734][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.811839][ T8653] netlink: 3 bytes leftover after parsing attributes in process `syz.0.15255'.
[  513.862927][ T8661] loop1: detected capacity change from 0 to 512
[  513.890264][ T8661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.915050][ T8661] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  513.956099][ T8671] loop9: detected capacity change from 0 to 128
[  513.963145][ T8671] FAT-fs (loop9): bogus number of FAT sectors
[  513.969392][ T8671] FAT-fs (loop9): Can't find a valid FAT filesystem
[  513.979511][ T7970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.990326][ T8673] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15253'.
[  514.057102][ T8685] sit0 speed is unknown, defaulting to 1000
[  514.100412][ T8685] lo speed is unknown, defaulting to 1000
[  514.113091][ T8693] bpf_get_probe_write_proto: 2 callbacks suppressed
[  514.113111][ T8693] syz.5.15261[8693] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  514.121582][ T8693] syz.5.15261[8693] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  514.136302][ T8693] syz.5.15261[8693] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  514.155504][ T8693] rdma_op ffff888118760580 conn xmit_rdma 0000000000000000
[  514.429051][ T9710] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  514.570650][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15277'.
[  514.716108][ T8734] loop5: detected capacity change from 0 to 1024
[  514.750737][ T8738] wireguard0: entered promiscuous mode
[  514.756300][ T8738] wireguard0: entered allmulticast mode
[  514.758239][ T8734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.803720][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.895169][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.902675][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.910168][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.923913][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.931583][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.939073][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.946580][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.954060][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.961571][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.969112][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.976518][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.984034][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.991803][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  514.999318][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.013684][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.021186][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.028632][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.036047][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.043527][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.050978][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.058438][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.065909][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.073346][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.080793][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.088282][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.095706][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.103123][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.110562][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.117956][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.125412][ T2964] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  515.133490][ T2964] hid-generic 0000:0000:0000.002F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  515.317162][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15301'.
[  515.345671][ T8785] syz.0.15302[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.345756][ T8785] syz.0.15302[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.363465][ T8785] syz.0.15302[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.458642][ T8799] syz.0.15306[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.470715][ T8799] syz.0.15306[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.487299][ T8799] syz.0.15306[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.507308][ T8803] syz.5.15309[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.548572][ T9623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  515.607937][ T8814] dvmrp0: entered allmulticast mode
[  515.617968][ T8816] Unknown options in mask 5
[  515.618465][ T8814] dvmrp0: left allmulticast mode
[  515.627638][ T8816] loop9: detected capacity change from 0 to 128
[  515.738823][ T8826] loop9: detected capacity change from 0 to 512
[  515.745652][ T8826] /dev/loop9: Can't open blockdev
[  515.752202][    C0] operation not supported error, dev loop9, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0
[  515.805724][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15325'.
[  515.837621][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15337'.
[  515.921210][ T8852] loop5: detected capacity change from 0 to 512
[  515.938099][ T8852] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  515.963108][ T8852] EXT4-fs (loop5): 1 truncate cleaned up
[  515.970360][ T8852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.073490][ T8865] loop9: detected capacity change from 0 to 1024
[  516.089516][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.131519][ T8865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  516.171200][ T8881] loop5: detected capacity change from 0 to 512
[  516.190420][ T8881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  516.220230][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.236272][ T8881] EXT4-fs (loop5): 1 truncate cleaned up
[  516.262781][ T8881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.292677][ T8881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.522290][ T8907] vlan1: entered allmulticast mode
[  516.527479][ T8907] bridge_slave_0: entered allmulticast mode
[  516.543519][ T8907] bridge_slave_0: left allmulticast mode
[  516.649131][ T8911] netlink: 'syz.9.15354': attribute type 16 has an invalid length.
[  516.657084][ T8911] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.15354'.
[  516.678315][ T9710] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  517.140070][ T8922] loop5: detected capacity change from 0 to 512
[  517.159739][ T8922] EXT4-fs: Ignoring removed oldalloc option
[  517.166067][ T8922] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  517.203272][ T8922] EXT4-fs (loop5): 1 truncate cleaned up
[  517.220468][ T8922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.275629][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.788676][ T9623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  518.082569][ T9665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  518.152717][ T8927] loop1: detected capacity change from 0 to 1024
[  518.164924][   T29] kauditd_printk_skb: 213 callbacks suppressed
[  518.164942][   T29] audit: type=1400 audit(518.208:18016): avc:  denied  { read } for  pid=8925 comm="syz.5.15361" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  518.207790][   T29] audit: type=1400 audit(518.248:18017): avc:  denied  { open } for  pid=8925 comm="syz.5.15361" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  518.231445][   T29] audit: type=1400 audit(518.248:18018): avc:  denied  { ioctl } for  pid=8925 comm="syz.5.15361" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  518.263085][   T29] audit: type=1400 audit(518.278:18019): avc:  denied  { unmount } for  pid=31134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  518.285998][ T8927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.384990][ T7970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.474828][ T8956] loop1: detected capacity change from 0 to 2048
[  518.475755][ T8954] sit0 speed is unknown, defaulting to 1000
[  518.513407][ T8956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.514946][ T8954] lo speed is unknown, defaulting to 1000
[  518.539026][ T8956] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.15373: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  518.591424][   T29] audit: type=1400 audit(518.638:18020): avc:  denied  { execmem } for  pid=8962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  518.642853][ T7970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.720653][   T29] audit: type=1400 audit(518.758:18021): avc:  denied  { read } for  pid=8966 comm="syz.1.15377" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  518.744531][   T29] audit: type=1400 audit(518.768:18022): avc:  denied  { open } for  pid=8966 comm="syz.1.15377" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  518.803193][   T29] audit: type=1400 audit(518.768:18023): avc:  denied  { ioctl } for  pid=8966 comm="syz.1.15377" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  518.829030][   T29] audit: type=1400 audit(518.818:18024): avc:  denied  { mounton } for  pid=8968 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  518.915446][ T9710] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  518.943495][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15380'.
[  518.952806][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15380'.
[  518.982326][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15380'.
[  518.994194][ T8968] sit0 speed is unknown, defaulting to 1000
[  519.017757][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15380'.
[  519.027040][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15380'.
[  519.038729][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15380'.
[  519.076588][ T8968] lo speed is unknown, defaulting to 1000
[  519.173673][   T29] audit: type=1400 audit(519.218:18025): avc:  denied  { create } for  pid=8989 comm="syz.0.15381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  519.319993][ T8968] chnl_net:caif_netlink_parms(): no params data found
[  519.485847][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.493023][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.500391][ T8968] bridge_slave_0: entered allmulticast mode
[  519.507088][ T8968] bridge_slave_0: entered promiscuous mode
[  519.514135][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.521525][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.528712][ T9010] ref_ctr_offset mismatch. inode: 0xa97 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  519.528811][ T8968] bridge_slave_1: entered allmulticast mode
[  519.546413][ T8968] bridge_slave_1: entered promiscuous mode
[  519.571256][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.584334][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.616541][ T8968] team0: Port device team_slave_0 added
[  519.624787][ T8968] team0: Port device team_slave_1 added
[  519.645406][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.652444][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.680074][ T8968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.723427][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.730477][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.756590][ T8968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.766988][ T9013] loop5: detected capacity change from 0 to 8192
[  519.843351][ T8968] hsr_slave_0: entered promiscuous mode
[  519.852764][ T8968] hsr_slave_1: entered promiscuous mode
[  519.859077][ T8968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.866698][ T8968] Cannot create hsr debugfs directory
[  520.058119][ T9607] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  520.189144][ T8968] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  520.198316][ T8968] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  520.214271][ T8968] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  520.230831][ T8968] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  520.268435][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.275630][ T8968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.283009][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.290093][ T8968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.387953][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.400831][ T8968] 8021q: adding VLAN 0 to HW filter on device team0
[  520.414255][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.422765][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.453496][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.460614][ T9665] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.489168][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.496320][ T9665] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.596252][ T9029] 
@ÿ: renamed from vlan0
[  520.632592][ T9033] netlink: 'syz.1.15389': attribute type 16 has an invalid length.
[  520.641704][ T9033] __nla_validate_parse: 3 callbacks suppressed
[  520.641720][ T9033] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.15389'.
[  520.660403][ T9031] loop0: detected capacity change from 0 to 512
[  520.696504][ T9031] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  520.799761][ T9031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102]
[  520.807855][ T9031] EXT4-fs (loop0): orphan cleanup on readonly fs
[  520.814813][ T9031] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33619980: comm syz.0.15394: invalid block
[  520.829228][ T9031] EXT4-fs (loop0): Remounting filesystem read-only
[  520.833660][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.856829][ T9031] EXT4-fs (loop0): 1 truncate cleaned up
[  520.867053][ T9031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  520.884976][ T9031] SELinux: (dev loop0, type ext4) getxattr errno 5
[  520.892147][ T9031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  520.970846][ T9051] loop9: detected capacity change from 0 to 512
[  520.977457][ T9051] EXT4-fs: Ignoring removed oldalloc option
[  520.996976][ T9053] loop5: detected capacity change from 0 to 512
[  521.012910][ T9053] EXT4-fs: Ignoring removed i_version option
[  521.030909][ T9051] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.15408: Parent and EA inode have the same ino 15
[  521.060759][ T9051] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.15408: Parent and EA inode have the same ino 15
[  521.072878][ T9053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  521.074719][ T9051] EXT4-fs (loop9): 1 orphan inode deleted
[  521.092133][ T9051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.144816][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  521.159552][ T1097] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.179345][ T9623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  521.201925][ T8968] veth0_vlan: entered promiscuous mode
[  521.204075][ T9066] loop5: detected capacity change from 0 to 2048
[  521.211059][ T8968] veth1_vlan: entered promiscuous mode
[  521.230515][ T9066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.231243][ T8968] veth0_macvtap: entered promiscuous mode
[  521.257040][ T8968] veth1_macvtap: entered promiscuous mode
[  521.268736][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.279386][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.289401][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.300282][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.310122][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.320626][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.330460][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.341038][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.350986][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.361547][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.371463][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.381971][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.393666][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  521.402423][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.413004][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.422911][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.433364][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.443380][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.453941][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.463824][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.474281][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.484222][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.494745][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.504672][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.515179][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.529441][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  521.544023][ T9075] vlan0: entered allmulticast mode
[  521.549219][ T9075] bridge_slave_0: entered allmulticast mode
[  521.556833][ T9075] bridge_slave_0: left allmulticast mode
[  521.581513][ T8968] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.590317][ T8968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.599095][ T8968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.607873][ T8968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.643432][ T2295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.873705][ T9102] syzkaller0: entered promiscuous mode
[  521.879253][ T9102] syzkaller0: entered allmulticast mode
[  522.059110][ T9110] loop1: detected capacity change from 0 to 512
[  522.067358][ T9110] EXT4-fs: Ignoring removed oldalloc option
[  522.112493][ T9110] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.15416: iget: bad extended attribute block 1
[  522.132370][ T9116] vlan2: entered allmulticast mode
[  522.155611][ T9110] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.15416: couldn't read orphan inode 15 (err -117)
[  522.184194][ T9110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.285699][ T7970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.296735][ T9607] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  522.350347][ T9122] loop6: detected capacity change from 0 to 2048
[  522.353196][ T9126] loop1: detected capacity change from 0 to 128
[  522.399382][ T9122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.637682][ T9141] .: (slave team0): Releasing backup interface
[  522.679608][ T9141] team0: Port device hsr_slave_0 removed
[  522.714729][ T8968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.763420][ T9145] syzkaller0: entered promiscuous mode
[  522.769086][ T9145] syzkaller0: entered allmulticast mode
[  522.823862][ T9149] loop6: detected capacity change from 0 to 8192
[  522.878279][ T9156] vlan1: entered allmulticast mode
[  522.883473][ T9156] bridge_slave_0: entered allmulticast mode
[  522.892987][ T9156] bridge_slave_0: left allmulticast mode
[  522.995976][ T9149] ==================================================================
[  523.004185][ T9149] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  523.011424][ T9149] 
[  523.013773][ T9149] write to 0xffff8881067b2f14 of 4 bytes by task 9157 on cpu 1:
[  523.021427][ T9149]  __xa_set_mark+0x182/0x1b0
[  523.026051][ T9149]  __folio_mark_dirty+0x3b5/0x4e0
[  523.031112][ T9149]  mark_buffer_dirty+0x134/0x230
[  523.036083][ T9149]  block_write_end+0x123/0x210
[  523.040981][ T9149]  generic_write_end+0x5c/0x160
[  523.045886][ T9149]  fat_write_end+0x4e/0x160
[  523.050423][ T9149]  generic_perform_write+0x33c/0x4a0
[  523.055749][ T9149]  __generic_file_write_iter+0xa1/0x120
[  523.061333][ T9149]  generic_file_write_iter+0x77/0x1c0
[  523.066732][ T9149]  iter_file_splice_write+0x5f1/0x980
[  523.072143][ T9149]  direct_splice_actor+0x160/0x2c0
[  523.077384][ T9149]  splice_direct_to_actor+0x302/0x670
[  523.082794][ T9149]  do_splice_direct+0xd7/0x150
[  523.087583][ T9149]  do_sendfile+0x398/0x660
[  523.092011][ T9149]  __x64_sys_sendfile64+0x110/0x150
[  523.097214][ T9149]  x64_sys_call+0xfbd/0x2dc0
[  523.101812][ T9149]  do_syscall_64+0xc9/0x1c0
[  523.106326][ T9149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.112272][ T9149] 
[  523.114601][ T9149] read to 0xffff8881067b2f14 of 4 bytes by task 9149 on cpu 0:
[  523.122155][ T9149]  xas_find_marked+0x60a/0x660
[  523.126927][ T9149]  find_get_entry+0x54/0x390
[  523.131528][ T9149]  filemap_get_folios_tag+0x9e/0x210
[  523.137005][ T9149]  file_write_and_wait_range+0x204/0x2f0
[  523.142683][ T9149]  __generic_file_fsync+0x46/0x140
[  523.147826][ T9149]  fat_file_fsync+0x46/0x100
[  523.152445][ T9149]  vfs_fsync_range+0x116/0x130
[  523.157239][ T9149]  generic_file_write_iter+0x185/0x1c0
[  523.162717][ T9149]  iter_file_splice_write+0x5f1/0x980
[  523.168194][ T9149]  direct_splice_actor+0x160/0x2c0
[  523.173323][ T9149]  splice_direct_to_actor+0x302/0x670
[  523.178709][ T9149]  do_splice_direct+0xd7/0x150
[  523.183488][ T9149]  do_sendfile+0x398/0x660
[  523.187916][ T9149]  __x64_sys_sendfile64+0x110/0x150
[  523.193122][ T9149]  x64_sys_call+0xfbd/0x2dc0
[  523.197722][ T9149]  do_syscall_64+0xc9/0x1c0
[  523.202234][ T9149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.208268][ T9149] 
[  523.210593][ T9149] value changed: 0x04000021 -> 0x0e000021
[  523.216310][ T9149] 
[  523.218635][ T9149] Reported by Kernel Concurrency Sanitizer on:
[  523.224785][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.6.15431 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  523.235553][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  523.245614][ T9149] ==================================================================
[  523.254324][   T29] kauditd_printk_skb: 206 callbacks suppressed
[  523.254338][   T29] audit: type=1326 audit(523.298:18232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cc9b9cce7 code=0x7ffc0000
[  523.258300][ T9692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  523.260565][   T29] audit: type=1326 audit(523.298:18233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cc9b41f29 code=0x7ffc0000
[  523.317149][   T29] audit: type=1326 audit(523.298:18234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc9ba5d29 code=0x7ffc0000
[  523.348065][   T29] audit: type=1326 audit(523.388:18235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cc9b9cce7 code=0x7ffc0000
[  523.371179][   T29] audit: type=1326 audit(523.388:18236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cc9b41f29 code=0x7ffc0000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  523.394097][   T29] audit: type=1326 audit(523.388:18237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc9ba5d29 code=0x7ffc0000
[  523.417231][   T29] audit: type=1400 audit(523.388:18238): avc:  denied  { write } for  pid=3289 comm="syz-executor" path="pipe:[1562]" dev="pipefs" ino=1562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  523.479583][   T29] audit: type=1326 audit(523.488:18239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cc9b9cce7 code=0x7ffc0000
[  523.502661][   T29] audit: type=1326 audit(523.488:18240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cc9b41f29 code=0x7ffc0000
[  523.525725][   T29] audit: type=1326 audit(523.488:18241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.9.15438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc9ba5d29 code=0x7ffc0000
[  523.659921][ T9692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  524.758939][ T9692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  524.801940][ T9692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.861352][ T9692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.922106][ T9692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.970886][ T9692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.032162][ T9692] bridge_slave_1: left allmulticast mode
[  525.037820][ T9692] bridge_slave_1: left promiscuous mode
[  525.043563][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.051550][ T9692] bridge_slave_0: left allmulticast mode
[  525.057204][ T9692] bridge_slave_0: left promiscuous mode
[  525.062968][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.141723][ T9692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  525.152362][ T9692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.162404][ T9692] bond0 (unregistering): Released all slaves
[  525.260526][ T9692] hsr_slave_0: left promiscuous mode
[  525.266327][ T9692] hsr_slave_1: left promiscuous mode
[  525.272333][ T9692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  525.279852][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  525.287646][ T9692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  525.295149][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  525.306292][ T9692] veth1_macvtap: left promiscuous mode
[  525.311827][ T9692] veth0_macvtap: left promiscuous mode
[  525.317325][ T9692] veth1_vlan: left promiscuous mode
[  525.322883][ T9692] veth0_vlan: left promiscuous mode
[  525.393456][ T9692] team0 (unregistering): Port device team_slave_1 removed
[  525.403459][ T9692] team0 (unregistering): Port device team_slave_0 removed
[  525.701281][ T9692] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.741134][ T9692] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.781209][ T9692] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.850609][ T9692] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.861800][ T9665] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  525.902701][ T9692] bridge_slave_1: left allmulticast mode
[  525.908457][ T9692] bridge_slave_1: left promiscuous mode
[  525.914169][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.922323][ T9692] bridge_slave_0: left allmulticast mode
[  525.928053][ T9692] bridge_slave_0: left promiscuous mode
[  525.933791][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.010289][ T9692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.020848][ T9692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.030935][ T9692] bond0 (unregistering): Released all slaves
[  526.120705][ T9692] hsr_slave_0: left promiscuous mode
[  526.126424][ T9692] hsr_slave_1: left promiscuous mode
[  526.132265][ T9692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.139790][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.147538][ T9692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.155291][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.166955][ T9692] veth1_macvtap: left promiscuous mode
[  526.172499][ T9692] veth0_macvtap: left promiscuous mode
[  526.178082][ T9692] veth1_vlan: left promiscuous mode
[  526.183329][ T9692] veth0_vlan: left promiscuous mode
[  526.254792][ T9692] team0 (unregistering): Port device team_slave_1 removed
[  526.264971][ T9692] team0 (unregistering): Port device team_slave_0 removed
[  526.978432][ T9692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  528.088413][ T9665] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  528.959121][ T9692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  529.188135][ T9692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  530.298393][ T9607] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  531.408165][ T9607] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  532.508335][ T9623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!