last executing test programs:

7m13.683834059s ago: executing program 32 (id=501):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

7m12.946024701s ago: executing program 33 (id=514):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close(r2)

6m58.060094838s ago: executing program 34 (id=995):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200070008001701"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

6m56.616016951s ago: executing program 35 (id=1045):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[])

6m55.026922087s ago: executing program 36 (id=1065):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
close(r0)
close(r1)

5m10.980424781s ago: executing program 37 (id=4323):
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
close(0x3)

4m37.999563422s ago: executing program 38 (id=5409):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0)

4m20.700480703s ago: executing program 39 (id=5966):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x1ff, 0x1000, 0x5, {0x4, 0x1, 0x9, 0x100, 0x5}, {0x6, 0x0, 0xe3, 0x4, 0x4db, 0x4}, 0xc, 0x8, 0x9}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

4m16.09899839s ago: executing program 40 (id=6076):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000002400)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}])

4m3.279997587s ago: executing program 41 (id=6550):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0)

3m33.521896401s ago: executing program 42 (id=7472):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)

2m43.43159495s ago: executing program 43 (id=9127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0)

2m18.301834576s ago: executing program 44 (id=9814):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001"], 0x44}}, 0x0)

1m9.569884957s ago: executing program 45 (id=11985):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0)
r3 = syz_io_uring_setup(0x3bbd, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x6, 0x289}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
io_uring_enter(r3, 0x567, 0x72, 0x0, 0x0, 0x0)

51.204229454s ago: executing program 46 (id=12546):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
modify_ldt$write(0x1, 0x0, 0x0)

49.740479366s ago: executing program 2 (id=12578):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108)

49.619921987s ago: executing program 2 (id=12582):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

49.561564168s ago: executing program 2 (id=12585):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

49.536590629s ago: executing program 2 (id=12586):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mkdir(&(0x7f00000000c0)='./control\x00', 0x10)

49.366724391s ago: executing program 2 (id=12590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000200000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

48.851517379s ago: executing program 2 (id=12597):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe)

48.807048079s ago: executing program 47 (id=12597):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe)

31.815940047s ago: executing program 3 (id=13154):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xd2}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

31.477454332s ago: executing program 0 (id=13172):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

31.450155482s ago: executing program 0 (id=13174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

31.422277962s ago: executing program 0 (id=13176):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108)

31.399774443s ago: executing program 0 (id=13178):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x563, &(0x7f0000001280)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

31.303831624s ago: executing program 0 (id=13179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
dup2(r3, r2)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1)

30.827758461s ago: executing program 3 (id=13191):
r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

30.799946802s ago: executing program 3 (id=13184):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

30.354353858s ago: executing program 3 (id=13192):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x563, &(0x7f0000001280)="$eJzs3c9rHFUcAPDvbJL+SrUplKIeJNCDldpNk/ijgod6FC0W9F6XZBpKNt2S3ZQmFmwP9uJFiiBiQfwDvHss/gP+FQUtFClBD15WZjPbbpPd7DbdNmv384FJ3puZzZs3M9+X9/bNsgEMrcnsRyHi1Yj4Nok41LJtNPKNkxv7rT+4NpctSdTrn/2VRJKva+6f5L/H88wrEfHb1xEnClvLra6uLZbK5XQ5z0/Vli5PVVfXTl5cKi2kC+mlmdnZ0+/Mzrz/3rtbX7x3Z3V989w/P3x656PT3xxb//6Xe4dvJXEmDubbWuvxFK63ZiZjMj8nY3Fm047TfShskCS7fQDsyEge52ORtQGHYiSPeuDF91VE1IEhlYh/GFLNfkBzbL/tOLj+4o3y7n+4MQDaWv9k472R2NcYGx1YTx4bGWVnYqIP5Wdl/Prn7VvZEv17HwKgq+s3IuLU6Ohj7d/L0dL+7dypHvbZXIb2D56fO1n/5629bfo/hYf9n2jT/xlvE7s70T3+C/f6UExHWf/vg7b934eTVhMjee6lRp9vLLlwsZxmbVvWTB6Psb1ZvsN8TvbSOL1+t96p/Nb+X7Zk5Tf7gvlx3BvdNN81X6qVnrbeTfdvRLzWpf+btLn+2fk412MZR9Pbr3fa1r3+z1b954g32l7/R2OdZPv5yanG/TDVvCu2+vvm0d87lb/b9c+u/4Ht6z+RtM7XVp+8jJ/2/Zt22jaZ5JOmT3j/70k+b6T35Ouulmq15emIPcknW9fPPHptM9/cP6v/8WPt43+7+39/RHzRY/1vHrnZcddBuP7zT3T9OyTqScdNdz/+8sdO5ffW/r3dSB3P1/TS/m1zpI8lnubcAQAAAAAAwKApRMTBSArFh+lCoVjceL7jSBwolCvV2okLlZVL89H4rOxEjBWaM93jLc9DTOfPwzbzM5vysxFxOCK+G9nfyBfnKuX53a48AAAAAAAAAAAAAAAAAAAADIjxDp//z/wxsttHBzxzvvIbhlfX+O/HNz0BA8n/fxhe4h+Gl/iH4SX+YXiJfxhe4h+Gl/iH4SX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoK/OnT2bLfX1B9fmsvz8ldWVxcqVk/NpdbG4tDJXnKssXy4uVCoL5bQ4V1nq9vfKlcrl6ZlYuTpVS5PaVHV17fxSZeVS7fzFpdJCej4dey61AgAAAAAAAAAAAAAAAAAAgP+X6uraYqlcTpclJHaUGB2Mw+g9EclAHMagJ3a7ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR/4LAAD//03tNaI=")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

30.280652499s ago: executing program 3 (id=13193):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef5, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002020, 0x0)

30.024626513s ago: executing program 3 (id=13194):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
splice(r0, 0x0, r4, 0x0, 0x1, 0x4)
write(r2, 0x0, 0x0)

30.024402943s ago: executing program 48 (id=13194):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
splice(r0, 0x0, r4, 0x0, 0x1, 0x4)
write(r2, 0x0, 0x0)

29.748108777s ago: executing program 0 (id=13210):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
shutdown(r0, 0x1)

29.687041398s ago: executing program 49 (id=13210):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
shutdown(r0, 0x1)

27.803363715s ago: executing program 4 (id=13209):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000080)="85", 0x1, 0x890, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)

27.769576506s ago: executing program 4 (id=13215):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
close(r0)

27.697585987s ago: executing program 4 (id=13219):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

27.630084538s ago: executing program 4 (id=13222):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mkdir(&(0x7f00000000c0)='./control\x00', 0x10)

27.45187861s ago: executing program 4 (id=13225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r2)

25.328708271s ago: executing program 4 (id=13305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
setrlimit(0x40000000000008, &(0x7f0000000000))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

25.305430512s ago: executing program 50 (id=13305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
setrlimit(0x40000000000008, &(0x7f0000000000))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

23.36846331s ago: executing program 6 (id=13308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xa26}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x1, {0x1, 0xf0, 0x1}, 0xfe}, 0x18)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)

23.298173871s ago: executing program 6 (id=13313):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

23.152048723s ago: executing program 6 (id=13314):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

23.026321785s ago: executing program 6 (id=13316):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mkdir(&(0x7f00000000c0)='./control\x00', 0x10)

22.782957878s ago: executing program 6 (id=13324):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x400000, 0x100000000000000)

21.357058969s ago: executing program 6 (id=13358):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
shutdown(r2, 0x0)

21.356913959s ago: executing program 51 (id=13358):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
shutdown(r2, 0x0)

1.862712513s ago: executing program 5 (id=13866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0)

1.842525203s ago: executing program 5 (id=13867):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}})

1.726155585s ago: executing program 5 (id=13880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)

1.702574025s ago: executing program 5 (id=13872):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000280)='./file1\x00', 0x210000, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="8115b31ac017b6cdeb8b0783b9ac10488a21fbb431c7c96077030ce111291daf11ef066561eb808b2d98e0187310c3a0f88c5fab75c5aa5d5b5f4871a26dcdca350457908629912d333f6235655df3b0432258471914ea09958e5cb85ae3c748b950fa9558", @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRESHEX], 0xf9, 0x11ff, &(0x7f0000000f00)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

1.243445562s ago: executing program 5 (id=13890):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000004c0)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x1, 0xff, 0x3}, 0x1, 0x1}, {0x2, 0x10000000000001, {0x0, 0xff, 0x4}, {0x2}, 0x0, 0xff}, {0x3, 0x1, {0x2, 0x0, 0x2}, {0x2, 0xf0, 0x2}, 0xff, 0x2}], 0x60)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

900.110267ms ago: executing program 1 (id=13899):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0xe5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f91", 0x45c)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10)

899.878927ms ago: executing program 8 (id=13900):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x192}, 0x18)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0)
keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0)

883.863107ms ago: executing program 8 (id=13901):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})

820.566568ms ago: executing program 1 (id=13903):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r3, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10)

820.353768ms ago: executing program 8 (id=13904):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
fremovexattr(0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000008, 0x0)

819.818908ms ago: executing program 1 (id=13906):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

807.099168ms ago: executing program 1 (id=13908):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

752.283209ms ago: executing program 1 (id=13910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

751.894119ms ago: executing program 1 (id=13912):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r1 = syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x18)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

669.934491ms ago: executing program 8 (id=13916):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

579.261492ms ago: executing program 8 (id=13919):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800))

544.651493ms ago: executing program 8 (id=13920):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

354.338695ms ago: executing program 7 (id=13924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4)
sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
recvfrom(r2, 0x0, 0x0, 0x2101, 0x0, 0x0)

292.772536ms ago: executing program 7 (id=13925):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

243.135777ms ago: executing program 7 (id=13926):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xdca)
socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2c802, 0x21)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)

156.724968ms ago: executing program 7 (id=13928):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', '', [{0x20, 'e'}, {0x20, '$\\'}, {0x20, '&%.@{$+%'}, {0x20, '\x00'}, {0x20, '([:.#@\x83:[)\\:'}, {0x20, '-{'}, {0x20, '+'}, {}, {0x20, '([/'}]}, 0x208e2a2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)

155.837488ms ago: executing program 9 (id=13930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20)

148.652588ms ago: executing program 9 (id=13931):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
write$tun(r0, &(0x7f00000007c0)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42)

120.512398ms ago: executing program 5 (id=13932):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000003"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x0, 0x2, @scatter={0x0, 0xcc, 0x0}, 0x0, 0x0, 0x800004, 0x10032, 0x0, 0x0})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"})
r1 = syz_open_pts(r0, 0x0)
read(r1, &(0x7f0000000000)=""/158, 0x9e)

28.65673ms ago: executing program 9 (id=13933):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

28.23972ms ago: executing program 7 (id=13934):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@errors_remount}, {@bsdgroups}, {@nouid32}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

27.91012ms ago: executing program 9 (id=13935):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
unshare(0x2c020400)
r2 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
msgrcv(r2, 0x0, 0x0, 0x2, 0x3000)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/194)

26.82407ms ago: executing program 9 (id=13936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r2, &(0x7f0000000340)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

23.32042ms ago: executing program 7 (id=13937):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = gettid()
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]})
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 9 (id=13938):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

kernel console output (not intermixed with test programs):

n main item tag 0x0
[  427.601345][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.609057][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.616808][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.624530][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.632236][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.640110][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.647830][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.655705][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.663411][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.671231][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.678919][   T36] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0
[  427.691049][   T36] hid-generic 0000:3000000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  427.755400][T13137] syzkaller0: entered allmulticast mode
[  427.788358][T15652] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.820156][T13137] syzkaller0: entered promiscuous mode
[  427.828074][T13137] syzkaller0 (unregistering): left promiscuous mode
[  427.834925][T13137] syzkaller0 (unregistering): left allmulticast mode
[  427.911255][T15652] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.960606][T15652] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.016033][T15652] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.112350][T15652] bridge_slave_1: left allmulticast mode
[  428.118162][T15652] bridge_slave_1: left promiscuous mode
[  428.123915][T15652] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.135442][T15652] bridge_slave_0: left allmulticast mode
[  428.141337][T15652] bridge_slave_0: left promiscuous mode
[  428.148096][T15652] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.305552][T15652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.328344][T15652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.347690][T15652] bond0 (unregistering): Released all slaves
[  428.358126][T13143] vxcan1 speed is unknown, defaulting to 1000
[  428.480640][T15652] hsr_slave_0: left promiscuous mode
[  428.486486][T15652] hsr_slave_1: left promiscuous mode
[  428.493424][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.500999][T15652] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.509065][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.516523][T15652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.540721][T15652] veth1_macvtap: left promiscuous mode
[  428.549495][T15652] veth0_macvtap: left promiscuous mode
[  428.555589][T15652] veth1_vlan: left promiscuous mode
[  428.561010][T15652] veth0_vlan: left promiscuous mode
[  428.638753][T15652] team0 (unregistering): Port device team_slave_1 removed
[  428.648535][T15652] team0 (unregistering): Port device team_slave_0 removed
[  428.686203][T13206] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  428.732942][T13222] xt_hashlimit: max too large, truncated to 1048576
[  428.755727][T13143] chnl_net:caif_netlink_parms(): no params data found
[  428.840248][T13143] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.847519][T13143] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.855938][T13143] bridge_slave_0: entered allmulticast mode
[  428.862733][T13143] bridge_slave_0: entered promiscuous mode
[  428.870045][T13143] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.877265][T13143] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.884836][T13143] bridge_slave_1: entered allmulticast mode
[  428.891454][T13143] bridge_slave_1: entered promiscuous mode
[  428.917968][T13143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.931620][T13143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.967850][T13391] __nla_validate_parse: 2 callbacks suppressed
[  428.967867][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12569'.
[  428.986036][T13359] syzkaller0: entered promiscuous mode
[  428.986575][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12569'.
[  428.991552][T13359] syzkaller0: entered allmulticast mode
[  429.082714][T13143] team0: Port device team_slave_0 added
[  429.090425][T13143] team0: Port device team_slave_1 added
[  429.136932][T13143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.143976][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.170044][T13143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.186611][T13143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.193736][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.219766][T13143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.285193][T13472] loop3: detected capacity change from 0 to 512
[  429.305005][T13143] hsr_slave_0: entered promiscuous mode
[  429.312210][T13143] hsr_slave_1: entered promiscuous mode
[  429.319285][T13143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  429.320159][T13472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.327897][T13143] Cannot create hsr debugfs directory
[  429.415789][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.465567][T13572] loop2: detected capacity change from 0 to 1024
[  429.467820][T13576] loop3: detected capacity change from 0 to 512
[  429.473299][T13572] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  429.478972][T13576] EXT4-fs (loop3): Invalid log cluster size: 4294967295
[  429.499805][T13576] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12587'.
[  429.509346][T13576] netlink: zone id is out of range
[  429.514520][T13576] netlink: zone id is out of range
[  429.520305][T13576] netlink: zone id is out of range
[  429.521566][T13572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.525412][T13576] netlink: zone id is out of range
[  429.525421][T13576] netlink: zone id is out of range
[  429.548538][T13576] netlink: zone id is out of range
[  429.553659][T13576] netlink: zone id is out of range
[  429.558893][T13576] netlink: zone id is out of range
[  429.564071][T13576] netlink: zone id is out of range
[  429.569376][T13576] netlink: zone id is out of range
[  429.602129][T13572] loop2: detected capacity change from 1024 to 64
[  429.623139][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.637043][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.651317][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.665218][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.678843][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.692805][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.707253][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.724732][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.739608][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.740739][T13143] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  429.754172][T32436] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  429.776262][T13143] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  429.785627][T13143] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  429.794923][T13143] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  429.841819][T13143] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.855071][T13143] 8021q: adding VLAN 0 to HW filter on device team0
[  429.866366][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.873545][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.902783][T13143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  429.913289][T13143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  429.931148][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.938269][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.005120][T13143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.071417][ T7047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.099948][T13583] kmmpd-loop2: attempt to access beyond end of device
[  430.099948][T13583] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  430.113712][T13583] buffer_io_error: 1752 callbacks suppressed
[  430.113727][T13583] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  430.128089][T13627] netlink: 'syz.7.12595': attribute type 4 has an invalid length.
[  430.275479][T13143] veth0_vlan: entered promiscuous mode
[  430.283968][T13143] veth1_vlan: entered promiscuous mode
[  430.298983][T13143] veth0_macvtap: entered promiscuous mode
[  430.309007][T13143] veth1_macvtap: entered promiscuous mode
[  430.321957][T13143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.332021][T13143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.344235][T13143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.353084][T13143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.361936][T13143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.370792][T13143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.403780][T13648] vxcan1 speed is unknown, defaulting to 1000
[  430.481138][T13673] vxcan1 speed is unknown, defaulting to 1000
[  430.567197][T13648] chnl_net:caif_netlink_parms(): no params data found
[  430.608586][T13802] loop5: detected capacity change from 0 to 1024
[  430.651464][T13802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.705061][T13648] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.712280][T13648] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.720389][T13648] bridge_slave_0: entered allmulticast mode
[  430.720447][T13802] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28
[  430.727096][T13648] bridge_slave_0: entered promiscuous mode
[  430.738643][T13802] EXT4-fs (loop5): This should not happen!! Data will be lost
[  430.738643][T13802] 
[  430.738663][T13802] EXT4-fs (loop5): Total free blocks count 0
[  430.760196][T13802] EXT4-fs (loop5): Free/Dirty block details
[  430.766233][T13802] EXT4-fs (loop5): free_blocks=0
[  430.771231][T13802] EXT4-fs (loop5): dirty_blocks=0
[  430.776313][T13802] EXT4-fs (loop5): Block reservation details
[  430.782310][T13802] EXT4-fs (loop5): i_reserved_data_blocks=0
[  430.794155][T13648] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.801275][T13648] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.811211][T13648] bridge_slave_1: entered allmulticast mode
[  430.817857][T13648] bridge_slave_1: entered promiscuous mode
[  430.827248][T13143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.877149][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.899973][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.977593][T13648] team0: Port device team_slave_0 added
[  430.989146][T13648] team0: Port device team_slave_1 added
[  431.026215][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12619'.
[  431.104780][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12623'.
[  431.109869][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.120902][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.146875][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.189306][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.196395][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.222469][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.283111][T13648] hsr_slave_0: entered promiscuous mode
[  431.290404][T13648] hsr_slave_1: entered promiscuous mode
[  431.296514][T13648] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  431.305526][T13648] Cannot create hsr debugfs directory
[  431.459429][T14090] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12635'.
[  431.501082][T14099] loop5: detected capacity change from 0 to 512
[  431.507830][T14099] EXT4-fs: Ignoring removed nobh option
[  431.515026][T14099] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  431.528548][T14099] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 2683928664 (level 1)
[  431.542579][T14099] EXT4-fs (loop5): 1 truncate cleaned up
[  431.552038][T14099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.568928][T14099] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  431.575778][T14111] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  431.605412][T13143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.644217][T14122] tmpfs: Bad value for 'mpol'
[  431.660051][T13648] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  431.669570][   T29] kauditd_printk_skb: 66 callbacks suppressed
[  431.669586][   T29] audit: type=1326 audit(1983.244:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.7.12639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  431.700615][T13648] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  431.710414][T13648] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  431.719434][T13648] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  431.776927][T13648] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.791384][T13648] 8021q: adding VLAN 0 to HW filter on device team0
[  431.802285][T14800] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.809432][T14800] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.820786][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.827985][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.854814][   T29] audit: type=1400 audit(1983.433:14620): avc:  denied  { connect } for  pid=14143 comm="syz.5.12648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  431.902457][T14150] loop5: detected capacity change from 0 to 128
[  431.937584][T13648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.017606][T14171] loop5: detected capacity change from 0 to 512
[  432.025139][T14171] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  432.036652][   T29] audit: type=1400 audit(1983.632:14621): avc:  denied  { bind } for  pid=14160 comm="syz.3.12653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  432.053761][T13648] veth0_vlan: entered promiscuous mode
[  432.064888][T14172] IPVS: Error connecting to the multicast addr
[  432.071983][T13648] veth1_vlan: entered promiscuous mode
[  432.079610][T14171] EXT4-fs (loop5): 1 truncate cleaned up
[  432.085780][T14171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.110516][T13648] veth0_macvtap: entered promiscuous mode
[  432.117912][T13648] veth1_macvtap: entered promiscuous mode
[  432.129761][T13648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.139253][T13648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.152338][T13648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.161183][T13648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.170714][T13648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.179551][T13648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.191338][T13143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.208813][   T29] audit: type=1326 audit(1983.801:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.8.12658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  432.232943][   T29] audit: type=1326 audit(1983.801:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.8.12658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  432.256488][   T29] audit: type=1326 audit(1983.801:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.8.12658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  432.280246][   T29] audit: type=1326 audit(1983.801:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.8.12658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  432.303657][   T29] audit: type=1326 audit(1983.801:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.8.12658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14964a1225 code=0x7ffc0000
[  432.327426][   T29] audit: type=1326 audit(1983.801:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.8.12658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  432.352122][   T29] audit: type=1326 audit(1983.801:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.8.12658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  432.545507][T14221] block device autoloading is deprecated and will be removed.
[  432.558611][T14223] loop0: detected capacity change from 0 to 512
[  432.631301][T14223] EXT4-fs: Ignoring removed nomblk_io_submit option
[  432.642491][T14223] EXT4-fs (loop0): filesystem is read-only
[  432.649504][T14223] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  432.669286][T14223] EXT4-fs (loop0): filesystem is read-only
[  432.675160][T14223] EXT4-fs (loop0): orphan cleanup on readonly fs
[  432.685289][T14223] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12671: bg 0: block 64: padding at end of block bitmap is not set
[  432.700654][T14223] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  432.703432][T14239] netlink: 'syz.8.12676': attribute type 1 has an invalid length.
[  432.717555][T14239] netlink: 224 bytes leftover after parsing attributes in process `syz.8.12676'.
[  432.728575][T14223] EXT4-fs (loop0): 1 orphan inode deleted
[  432.813560][T14253] tipc: Started in network mode
[  432.818693][T14253] tipc: Node identity ac1414aa, cluster identity 4711
[  432.825833][T14253] tipc: Enabled bearer <udp:syz2>, priority 10
[  432.833834][T14253] tipc: Disabling bearer <udp:syz2>
[  432.861459][T14260] loop3: detected capacity change from 0 to 128
[  432.868523][T14260] EXT4-fs: Ignoring removed nobh option
[  432.891990][T14264] SELinux: syz.8.12687 (14264) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  432.988886][T14277] loop3: detected capacity change from 0 to 1024
[  433.274245][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12707'.
[  433.287226][T14327] vxcan1 speed is unknown, defaulting to 1000
[  433.359757][T14352] netlink: 'syz.7.12710': attribute type 1 has an invalid length.
[  433.367819][T14352] netlink: 'syz.7.12710': attribute type 4 has an invalid length.
[  433.375755][T14352] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12710'.
[  433.394128][T14352] netlink: 'syz.7.12710': attribute type 1 has an invalid length.
[  433.402042][T14352] netlink: 'syz.7.12710': attribute type 4 has an invalid length.
[  433.409870][T14352] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12710'.
[  433.649223][T14380] tipc: Started in network mode
[  433.654153][T14380] tipc: Node identity ac14140f, cluster identity 4711
[  433.670870][T14380] tipc: New replicast peer: 255.255.255.255
[  433.677028][T14380] tipc: Enabled bearer <udp:syz2>, priority 10
[  433.817207][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12723'.
[  433.826272][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12723'.
[  433.899087][T14409] tipc: Started in network mode
[  433.903999][T14409] tipc: Node identity 4, cluster identity 4711
[  433.910322][T14409] tipc: Node number set to 4
[  434.354876][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12758'.
[  434.364830][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12758'.
[  434.477875][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12767'.
[  434.527506][T14527] netlink: 'syz.0.12771': attribute type 4 has an invalid length.
[  434.565221][T14531] smc: net device bond0 applied user defined pnetid SYZ2
[  434.574081][T14531] smc: net device bond0 erased user defined pnetid SYZ2
[  434.743535][   T36] tipc: Node number set to 2886997007
[  435.234931][T14587] vxcan1 speed is unknown, defaulting to 1000
[  435.333565][T14615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14615 comm=syz.8.12799
[  435.347056][T14615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14615 comm=syz.8.12799
[  435.521469][T14626] loop3: detected capacity change from 0 to 512
[  435.678958][T14648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12811'.
[  436.033604][T14675] SELinux: ebitmap: truncated map
[  436.039237][T14675] SELinux: failed to load policy
[  436.045582][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12823'.
[  436.268417][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12831'.
[  436.462899][   T29] kauditd_printk_skb: 431 callbacks suppressed
[  436.462916][   T29] audit: type=1400 audit(2501.272:15060): avc:  denied  { setopt } for  pid=14736 comm="syz.3.12843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  436.502583][   T29] audit: type=1400 audit(2501.314:15061): avc:  denied  { nlmsg_read } for  pid=14736 comm="syz.3.12843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  436.574760][T14758] rdma_op ffff88810d3c8980 conn xmit_rdma 0000000000000000
[  436.585162][   T29] audit: type=1400 audit(2501.409:15062): avc:  denied  { unmount } for  pid=3672 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  436.624727][   T29] audit: type=1400 audit(2501.430:15063): avc:  denied  { setopt } for  pid=14760 comm="syz.3.12849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  436.759981][   T29] audit: type=1326 audit(2501.587:15064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14837 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302006e969 code=0x7ffc0000
[  436.784005][   T29] audit: type=1326 audit(2501.587:15065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14837 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302006e969 code=0x7ffc0000
[  436.915878][   T29] audit: type=1326 audit(2501.587:15066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.7.12857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  436.939917][   T29] audit: type=1326 audit(2501.587:15067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.7.12857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  436.964114][   T29] audit: type=1326 audit(2501.587:15068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.7.12857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  436.987465][   T29] audit: type=1326 audit(2501.587:15069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.7.12857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  437.030529][T14858] ip6gre1: entered allmulticast mode
[  437.047565][T14862] ip6gre1: entered allmulticast mode
[  437.070763][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12861'.
[  437.300372][T14882] syzkaller0: entered promiscuous mode
[  437.306042][T14882] syzkaller0: entered allmulticast mode
[  437.368871][T14892] pim6reg1: entered promiscuous mode
[  437.374357][T14892] pim6reg1: entered allmulticast mode
[  437.575654][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.586059][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.646734][T14919] SELinux: ebitmap: truncated map
[  437.652828][T14919] SELinux: failed to load policy
[  437.769866][T14935] netlink: 'syz.8.12888': attribute type 13 has an invalid length.
[  437.942640][ T3389] page_pool_release_retry() stalled pool shutdown: id 235, 1 inflight 60 sec
[  438.332441][T14974] binfmt_misc: register: failed to install interpreter file ./file2
[  438.415938][T14980] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12910'.
[  438.442985][T14980] batadv0: entered promiscuous mode
[  438.448338][T14980] batadv0: entered allmulticast mode
[  438.511616][T14997] program syz.0.12915 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  438.647363][T15017] netlink: 'syz.0.12925': attribute type 10 has an invalid length.
[  438.655469][T15015] netlink: 'syz.3.12923': attribute type 10 has an invalid length.
[  438.659805][T15017] 8021q: adding VLAN 0 to HW filter on device team0
[  438.683032][T15017] bond0: (slave team0): Enslaving as an active interface with an up link
[  438.701638][T15015] netlink: 'syz.3.12923': attribute type 10 has an invalid length.
[  438.710416][T15015] __nla_validate_parse: 1 callbacks suppressed
[  438.710434][T15015] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12923'.
[  438.814683][T15034] ref_ctr_offset mismatch. inode: 0x16a1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  439.041598][T15068] netlink: 'syz.0.12940': attribute type 10 has an invalid length.
[  439.052798][T15068] bond0: (slave team0): Releasing backup interface
[  439.061183][T15068] batman_adv: batadv0: Adding interface: team0
[  439.064803][T15070] RDS: rds_bind could not find a transport for ::ffff:172.20.20.36, load rds_tcp or rds_rdma?
[  439.067652][T15068] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.103903][T15068] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  439.129984][T15068] netlink: 'syz.0.12940': attribute type 10 has an invalid length.
[  439.138140][T15068] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12940'.
[  439.147580][T15068] team0: entered promiscuous mode
[  439.152804][T15068] team_slave_0: entered promiscuous mode
[  439.158616][T15068] team_slave_1: entered promiscuous mode
[  439.165498][T15068] 8021q: adding VLAN 0 to HW filter on device team0
[  439.172642][T15068] batman_adv: batadv0: Interface activated: team0
[  439.179158][T15068] batman_adv: batadv0: Interface deactivated: team0
[  439.185829][T15068] batman_adv: batadv0: Removing interface: team0
[  439.192868][T15068] bridge0: port 3(team0) entered blocking state
[  439.199195][T15068] bridge0: port 3(team0) entered disabled state
[  439.206680][T15068] team0: entered allmulticast mode
[  439.212013][T15068] team_slave_0: entered allmulticast mode
[  439.217779][T15068] team_slave_1: entered allmulticast mode
[  439.224882][T15068] bridge0: port 3(team0) entered blocking state
[  439.231255][T15068] bridge0: port 3(team0) entered forwarding state
[  439.428986][T15096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.441880][T15096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.833649][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12963'.
[  439.904832][T15123] netlink: 'syz.5.12956': attribute type 10 has an invalid length.
[  439.917063][T15123] batman_adv: batadv0: Adding interface: team0
[  439.923373][T15123] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.948774][T15123] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  439.962571][T15124] netlink: 'syz.5.12956': attribute type 10 has an invalid length.
[  439.970604][T15124] netlink: 2 bytes leftover after parsing attributes in process `syz.5.12956'.
[  440.002651][T15124] team0: entered promiscuous mode
[  440.007776][T15124] team_slave_0: entered promiscuous mode
[  440.013602][T15124] team_slave_1: entered promiscuous mode
[  440.025184][T15124] 8021q: adding VLAN 0 to HW filter on device team0
[  440.032636][T15124] batman_adv: batadv0: Interface activated: team0
[  440.039409][T15124] batman_adv: batadv0: Interface deactivated: team0
[  440.046186][T15124] batman_adv: batadv0: Removing interface: team0
[  440.054178][T15124] bridge0: port 3(team0) entered blocking state
[  440.060529][T15124] bridge0: port 3(team0) entered disabled state
[  440.067206][T15124] team0: entered allmulticast mode
[  440.072807][T15124] team_slave_0: entered allmulticast mode
[  440.078598][T15124] team_slave_1: entered allmulticast mode
[  440.086276][T15124] bridge0: port 3(team0) entered blocking state
[  440.092608][T15124] bridge0: port 3(team0) entered forwarding state
[  440.187863][T15138] loop5: detected capacity change from 0 to 512
[  440.206848][T15138] EXT4-fs: Ignoring removed nobh option
[  440.216458][T15138] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.12962: invalid indirect mapped block 256 (level 2)
[  440.221077][ T3389] IPVS: starting estimator thread 0...
[  440.238478][T15138] EXT4-fs (loop5): 2 truncates cleaned up
[  440.244799][T15138] EXT4-fs mount: 8 callbacks suppressed
[  440.244811][T15138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.264768][T15148] binfmt_misc: register: failed to install interpreter file ./file2
[  440.284618][T15138] net_ratelimit: 86 callbacks suppressed
[  440.284632][T15138] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 47
[  440.342486][T15150] IPVS: using max 1872 ests per chain, 93600 per kthread
[  440.354915][T13143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.395544][T15162] xt_CT: No such helper "pptp"
[  440.486980][ T3450] IPVS: starting estimator thread 0...
[  440.516984][T15186] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12983'.
[  440.547001][T15189] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 47
[  440.558644][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12986'.
[  440.567697][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12986'.
[  440.577027][T15182] IPVS: using max 2256 ests per chain, 112800 per kthread
[  440.830628][T15232] block device autoloading is deprecated and will be removed.
[  440.895939][T15240] ref_ctr_offset mismatch. inode: 0x1e6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  441.071749][T15258] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13012'.
[  441.162937][T15264] netlink: 'syz.7.13026': attribute type 10 has an invalid length.
[  441.183077][T15266] loop3: detected capacity change from 0 to 512
[  441.191302][T15266] EXT4-fs: Ignoring removed nobh option
[  441.200699][T15266] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.13015: invalid indirect mapped block 256 (level 2)
[  441.214596][T15264] netlink: 'syz.7.13026': attribute type 10 has an invalid length.
[  441.222612][T15264] netlink: 2 bytes leftover after parsing attributes in process `syz.7.13026'.
[  441.232100][T15266] EXT4-fs (loop3): 2 truncates cleaned up
[  441.238408][T15266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.318398][T15279] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  441.379167][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.471342][   T29] kauditd_printk_skb: 1020 callbacks suppressed
[  441.471411][   T29] audit: type=1326 audit(2506.534:16090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15294 comm="syz.7.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  441.501038][   T29] audit: type=1326 audit(2506.534:16091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15294 comm="syz.7.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  441.531847][   T29] audit: type=1326 audit(2506.545:16092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15294 comm="syz.7.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  441.555041][T15297] loop5: detected capacity change from 0 to 128
[  441.562059][   T29] audit: type=1326 audit(2506.545:16093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15294 comm="syz.7.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  441.567267][T15297] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  441.586242][   T29] audit: type=1326 audit(2506.545:16094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15294 comm="syz.7.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  441.621188][   T29] audit: type=1326 audit(2506.545:16095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15294 comm="syz.7.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  441.622847][T15303] program syz.8.13028 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  441.644368][   T29] audit: type=1326 audit(2506.597:16096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.3.13024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f804fe969 code=0x7ffc0000
[  441.644407][   T29] audit: type=1326 audit(2506.597:16097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.3.13024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f804fe969 code=0x7ffc0000
[  441.644492][   T29] audit: type=1326 audit(2506.597:16098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.3.13024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f804fe969 code=0x7ffc0000
[  441.644525][   T29] audit: type=1326 audit(2506.597:16099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.3.13024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f804fe969 code=0x7ffc0000
[  441.793159][T13143] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  441.858678][T15321] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  441.947428][T15324] xt_CT: No such helper "pptp"
[  441.954515][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13037'.
[  442.370581][   T10] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0
[  442.378050][   T10] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0
[  442.385517][   T10] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0
[  442.394652][   T10] hid-generic 0000:0004:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  443.177024][ T3389] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0
[  443.184657][ T3389] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0
[  443.192187][ T3389] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0
[  443.246308][ T3389] hid-generic 0000:0004:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  443.367368][T15512] syzkaller0: entered promiscuous mode
[  443.373628][T15512] syzkaller0: entered allmulticast mode
[  443.395377][T15520] xt_hashlimit: max too large, truncated to 1048576
[  443.425954][T15522] ALSA: seq fatal error: cannot create timer (-19)
[  443.500554][T15532] syzkaller0: entered allmulticast mode
[  443.508762][T15532] syzkaller0: entered promiscuous mode
[  443.523520][T15532] syzkaller0 (unregistering): left promiscuous mode
[  443.530169][T15532] syzkaller0 (unregistering): left allmulticast mode
[  443.692179][T15565] loop0: detected capacity change from 0 to 512
[  443.702318][T15565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.748193][T15572] loop5: detected capacity change from 0 to 1024
[  443.784910][T13648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.796943][ T3389] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0
[  443.804498][ T3389] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0
[  443.811941][ T3389] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0
[  443.820895][ T3389] hid-generic 0000:0004:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  443.832552][T15572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.861923][T15592] loop0: detected capacity change from 0 to 1024
[  443.871391][T15572] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks
[  443.872621][T15592] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  443.878769][T15572] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  443.929868][T13143] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  443.943980][T15592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.957413][T13143] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  443.979426][T15592] loop0: detected capacity change from 1024 to 64
[  443.999509][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.013112][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.028933][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.043707][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.058138][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.071835][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.085437][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.098993][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.113316][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.126866][T13648] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  444.143322][T13143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.156039][ T1383] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.201869][ T1383] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.258279][ T1383] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.305670][ T1383] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.317923][T13648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.327705][T15604] kmmpd-loop0: attempt to access beyond end of device
[  444.327705][T15604] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64
[  444.341307][T15604] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  444.367223][ T1383] team0: left allmulticast mode
[  444.372457][ T1383] team_slave_0: left allmulticast mode
[  444.377947][ T1383] team_slave_1: left allmulticast mode
[  444.383673][ T1383] bridge0: port 3(team0) entered disabled state
[  444.390882][ T1383] bridge_slave_1: left allmulticast mode
[  444.396793][ T1383] bridge_slave_1: left promiscuous mode
[  444.402507][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.411309][ T1383] bridge_slave_0: left allmulticast mode
[  444.417031][ T1383] bridge_slave_0: left promiscuous mode
[  444.422791][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.580393][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.592076][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.603461][ T1383] bond0 (unregistering): Released all slaves
[  444.652392][T15645] syzkaller0: entered promiscuous mode
[  444.658343][T15645] syzkaller0: entered allmulticast mode
[  444.680545][ T1383] tipc: Left network mode
[  444.732193][ T1383] hsr_slave_0: left promiscuous mode
[  444.738075][ T1383] hsr_slave_1: left promiscuous mode
[  444.744075][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  444.751667][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.759496][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.767125][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.780891][ T1383] veth1_vlan: left promiscuous mode
[  444.786224][ T1383] veth0_vlan: left promiscuous mode
[  444.843044][ T1383] team_slave_1 (unregistering): left promiscuous mode
[  444.851250][ T1383] team0 (unregistering): Port device team_slave_1 removed
[  444.861555][ T1383] team_slave_0 (unregistering): left promiscuous mode
[  444.869215][ T1383] team0 (unregistering): Port device team_slave_0 removed
[  444.914562][T15636] vxcan1 speed is unknown, defaulting to 1000
[  444.950082][T15638] vxcan1 speed is unknown, defaulting to 1000
[  445.025316][T15636] chnl_net:caif_netlink_parms(): no params data found
[  445.081067][T15636] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.088995][T15636] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.096523][T15636] bridge_slave_0: entered allmulticast mode
[  445.103046][T15636] bridge_slave_0: entered promiscuous mode
[  445.116834][T15636] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.124021][T15636] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.131238][T15636] bridge_slave_1: entered allmulticast mode
[  445.137852][T15636] bridge_slave_1: entered promiscuous mode
[  445.171407][T15636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.184201][T15636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.194583][ T1383] IPVS: stop unused estimator thread 0...
[  445.196676][T15638] chnl_net:caif_netlink_parms(): no params data found
[  445.225641][T15636] team0: Port device team_slave_0 added
[  445.232745][T15636] team0: Port device team_slave_1 added
[  445.260073][T15636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.267096][T15636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.293759][T15636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.307050][T15636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.314068][T15636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.341227][T15636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.394768][T15638] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.402737][T15638] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.410189][T15638] bridge_slave_0: entered allmulticast mode
[  445.416722][T15638] bridge_slave_0: entered promiscuous mode
[  445.423747][T15638] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.430829][T15638] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.438146][T15638] bridge_slave_1: entered allmulticast mode
[  445.444617][T15638] bridge_slave_1: entered promiscuous mode
[  445.454150][T15636] hsr_slave_0: entered promiscuous mode
[  445.460422][T15636] hsr_slave_1: entered promiscuous mode
[  445.466281][T15636] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  445.473828][T15636] Cannot create hsr debugfs directory
[  445.492650][ T1383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.505318][T15638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.521189][T15638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.547000][ T1383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.570470][T15638] team0: Port device team_slave_0 added
[  445.579617][T15638] team0: Port device team_slave_1 added
[  445.587912][ T1383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.613884][T15638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.620892][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.647534][T15638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.660951][T15638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.668045][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.694116][T15638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.710735][ T1383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.753635][T15638] hsr_slave_0: entered promiscuous mode
[  445.760223][T15638] hsr_slave_1: entered promiscuous mode
[  445.766399][T15638] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  445.774235][T15638] Cannot create hsr debugfs directory
[  445.812569][ T1383] team0: left allmulticast mode
[  445.817707][ T1383] team_slave_0: left allmulticast mode
[  445.823197][ T1383] team_slave_1: left allmulticast mode
[  445.828922][ T1383] bridge0: port 3(team0) entered disabled state
[  445.836026][ T1383] bridge_slave_1: left allmulticast mode
[  445.841681][ T1383] bridge_slave_1: left promiscuous mode
[  445.847430][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.855421][ T1383] bridge_slave_0: left allmulticast mode
[  445.861092][ T1383] bridge_slave_0: left promiscuous mode
[  445.866773][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.933891][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.944844][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.954571][ T1383] bond0 (unregistering): Released all slaves
[  445.999022][ T1383] tipc: Disabling bearer <udp:syz2>
[  446.004428][ T1383] tipc: Left network mode
[  446.027473][ T1383] hsr_slave_0: left promiscuous mode
[  446.033071][ T1383] hsr_slave_1: left promiscuous mode
[  446.038750][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.046187][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.053795][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.061343][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.072287][ T1383] veth1_macvtap: left promiscuous mode
[  446.078641][ T1383] veth0_macvtap: left promiscuous mode
[  446.084282][ T1383] veth1_vlan: left promiscuous mode
[  446.089543][ T1383] veth0_vlan: left promiscuous mode
[  446.151032][ T1383] team_slave_1 (unregistering): left promiscuous mode
[  446.158274][ T1383] team0 (unregistering): Port device team_slave_1 removed
[  446.168031][ T1383] team_slave_0 (unregistering): left promiscuous mode
[  446.176882][ T1383] team0 (unregistering): Port device team_slave_0 removed
[  446.413069][T15636] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  446.421576][T15636] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  446.430467][T15636] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  446.439413][T15636] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  446.472012][T15636] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.484108][T15636] 8021q: adding VLAN 0 to HW filter on device team0
[  446.493581][T15652] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.500659][T15652] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.511322][T15652] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.518430][T15652] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.574301][ T1383] IPVS: stop unused estimator thread 0...
[  446.589262][T15636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.637333][T15638] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  446.647167][T15638] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  446.656043][T15638] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  446.665004][T15638] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  446.707338][T15638] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.720024][T15638] 8021q: adding VLAN 0 to HW filter on device team0
[  446.729835][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.737060][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.748427][T15652] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.755639][T15652] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.794105][T15636] veth0_vlan: entered promiscuous mode
[  446.803506][T15636] veth1_vlan: entered promiscuous mode
[  446.822316][T15636] veth0_macvtap: entered promiscuous mode
[  446.830735][T15636] veth1_macvtap: entered promiscuous mode
[  446.844772][T15636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.857735][T15638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.866417][T15636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.878044][T15636] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.886869][T15636] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.895678][T15636] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.904446][T15636] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.017442][T15638] veth0_vlan: entered promiscuous mode
[  447.032399][T15638] veth1_vlan: entered promiscuous mode
[  447.050381][T15638] veth0_macvtap: entered promiscuous mode
[  447.058626][T15638] veth1_macvtap: entered promiscuous mode
[  447.068782][T15638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.078702][T15638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.103508][T15638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.112309][T15638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.121185][T15638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.130010][T15638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.228495][T16404] netlink: 'syz.0.13155': attribute type 4 has an invalid length.
[  447.316354][T16415] __nla_validate_parse: 5 callbacks suppressed
[  447.316374][T16415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13163'.
[  447.337169][T16415] syz_tun: entered promiscuous mode
[  447.343666][T16415] syz_tun: left promiscuous mode
[  447.448783][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13168'.
[  447.458685][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13168'.
[  447.484459][T16436] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  447.600443][T16453] loop0: detected capacity change from 0 to 1024
[  447.638280][T16453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.657207][T16453] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks
[  447.664614][T16453] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  447.689653][T15638] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  447.707954][T15638] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  448.179573][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13182'.
[  448.191800][T16467] loop5: detected capacity change from 0 to 1024
[  448.198775][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13182'.
[  448.208229][T16467] ext4: Unknown parameter 'noacl'
[  448.370692][   T29] kauditd_printk_skb: 78 callbacks suppressed
[  448.370709][   T29] audit: type=1326 audit(2513.781:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.410234][   T29] audit: type=1326 audit(2513.781:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.8.13189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f149646e969 code=0x0
[  448.433726][   T29] audit: type=1326 audit(2513.813:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.457726][   T29] audit: type=1326 audit(2513.813:16181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.480918][   T29] audit: type=1326 audit(2513.813:16182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.504662][   T29] audit: type=1326 audit(2513.813:16183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.527833][   T29] audit: type=1326 audit(2513.813:16184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.551737][   T29] audit: type=1326 audit(2513.813:16185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.574914][   T29] audit: type=1326 audit(2513.813:16186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.598747][   T29] audit: type=1326 audit(2513.813:16187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.13190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2033e969 code=0x7ffc0000
[  448.645043][T16495] loop3: detected capacity change from 0 to 1024
[  448.664994][T16495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.680398][T16495] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks
[  448.688408][T16495] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  448.712132][ T3672] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  448.724024][ T3672] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  448.904475][ T9575] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.039808][T16501] vxcan1 speed is unknown, defaulting to 1000
[  449.189318][T15638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.189415][T14800] bond0 (unregistering): Released all slaves
[  449.208388][T16542] loop5: detected capacity change from 0 to 512
[  449.215846][T16542] EXT4-fs: Ignoring removed nomblk_io_submit option
[  449.223455][T16542] EXT4-fs (loop5): filesystem is read-only
[  449.230644][T16542] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  449.256205][T16542] EXT4-fs (loop5): filesystem is read-only
[  449.262083][T16542] EXT4-fs (loop5): orphan cleanup on readonly fs
[  449.269304][T14800] tipc: Left network mode
[  449.281659][T16542] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13208: bg 0: block 64: padding at end of block bitmap is not set
[  449.302250][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13198'.
[  449.304712][T16542] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  449.330275][T16542] EXT4-fs (loop5): 1 orphan inode deleted
[  449.349809][T16542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  449.382742][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13198'.
[  449.386610][T16542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.486993][T16501] chnl_net:caif_netlink_parms(): no params data found
[  449.542748][T16501] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.549975][T16501] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.557571][T16501] bridge_slave_0: entered allmulticast mode
[  449.564193][T16501] bridge_slave_0: entered promiscuous mode
[  449.571388][T16501] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.578491][T16501] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.585699][T16501] bridge_slave_1: entered allmulticast mode
[  449.592213][T16501] bridge_slave_1: entered promiscuous mode
[  449.614610][T16501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.627938][T16501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.642850][T16633] vxcan1 speed is unknown, defaulting to 1000
[  449.655909][T16501] team0: Port device team_slave_0 added
[  449.662792][T16501] team0: Port device team_slave_1 added
[  449.691687][T16501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.698797][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.724831][T16501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.738302][T16501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.746058][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.772816][T16501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.820258][T16501] hsr_slave_0: entered promiscuous mode
[  449.826697][T16501] hsr_slave_1: entered promiscuous mode
[  449.832606][T16501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  449.840287][T16501] Cannot create hsr debugfs directory
[  449.909276][T16633] chnl_net:caif_netlink_parms(): no params data found
[  449.944609][T14800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.984004][T16633] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.991142][T16633] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.998412][T16633] bridge_slave_0: entered allmulticast mode
[  450.004895][T16633] bridge_slave_0: entered promiscuous mode
[  450.011972][T16633] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.019222][T16633] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.027023][T16633] bridge_slave_1: entered allmulticast mode
[  450.033546][T16633] bridge_slave_1: entered promiscuous mode
[  450.054982][T16633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.065581][T16633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.086149][T16633] team0: Port device team_slave_0 added
[  450.095341][T16633] team0: Port device team_slave_1 added
[  450.112941][T16633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.119925][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.145944][T16633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.157543][T16633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.164666][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.190722][T16633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.226689][T16633] hsr_slave_0: entered promiscuous mode
[  450.232740][T16633] hsr_slave_1: entered promiscuous mode
[  450.238880][T16633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  450.246472][T16633] Cannot create hsr debugfs directory
[  450.314066][T16501] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  450.324833][T16501] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  450.335981][T16501] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  450.345364][T16501] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  450.381971][T16501] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.395492][T16501] 8021q: adding VLAN 0 to HW filter on device team0
[  450.405871][T14781] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.412968][T14781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.427017][T14781] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.434167][T14781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.500470][T16501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.607167][T16501] veth0_vlan: entered promiscuous mode
[  450.615321][T16501] veth1_vlan: entered promiscuous mode
[  450.642273][T16501] veth0_macvtap: entered promiscuous mode
[  450.649005][T16633] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  450.658664][T16633] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  450.667719][T16501] veth1_macvtap: entered promiscuous mode
[  450.676246][T16633] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  450.686143][T16633] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  450.700735][T16501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.716262][T16501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.727907][T16501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.736756][T16501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.745502][T16501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.754449][T16501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.773708][T14800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.816853][T16633] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.839300][T14800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.844650][T17239] loop4: detected capacity change from 0 to 512
[  450.876031][T17239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.891105][T16633] 8021q: adding VLAN 0 to HW filter on device team0
[  450.908040][T14781] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.915394][T14781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.927173][T14781] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.934374][T14781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.935783][T16501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.960296][T14800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.994564][T17245] IPVS: Error connecting to the multicast addr
[  451.008256][T16633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  451.018686][T16633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.053155][T14800] bridge_slave_1: left allmulticast mode
[  451.058927][T14800] bridge_slave_1: left promiscuous mode
[  451.064816][T14800] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.076199][T14800] bridge_slave_0: left allmulticast mode
[  451.081906][T14800] bridge_slave_0: left promiscuous mode
[  451.087690][T14800] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.159289][T17277] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13223'.
[  451.209797][T14800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  451.220408][T14800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  451.230779][T14800] bond0 (unregistering): Released all slaves
[  451.343788][T16633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.381192][T17315] loop4: detected capacity change from 0 to 1024
[  451.394795][T17315] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  451.409682][T14800] hsr_slave_0: left promiscuous mode
[  451.416475][T14800] hsr_slave_1: left promiscuous mode
[  451.422329][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.429986][T14800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.433051][T17315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.450730][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.458257][T14800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.470922][T14800] veth1_macvtap: left promiscuous mode
[  451.476488][T14800] veth0_macvtap: left promiscuous mode
[  451.482218][T14800] veth1_vlan: left promiscuous mode
[  451.487449][T14800] veth0_vlan: left promiscuous mode
[  451.510678][T17315] loop4: detected capacity change from 1024 to 64
[  451.536353][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.550469][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.580025][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.593608][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.607717][T14800] team0 (unregistering): Port device team_slave_1 removed
[  451.608858][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.628504][T14800] team0 (unregistering): Port device team_slave_0 removed
[  451.630757][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.651435][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.667702][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.693414][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.708667][T16501] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  451.734614][T16633] veth0_vlan: entered promiscuous mode
[  451.744477][T16633] veth1_vlan: entered promiscuous mode
[  451.761595][T16633] veth0_macvtap: entered promiscuous mode
[  451.769575][T16633] veth1_macvtap: entered promiscuous mode
[  451.785368][T16633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.796118][T16633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.806261][T16633] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.815100][T16633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.823929][T16633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.832703][T16633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.905946][T17344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13229'.
[  451.924749][T17348] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13230'.
[  451.974192][T17360] SELinux: syz.1.13234 (17360) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  452.073297][T17374] vxcan1 speed is unknown, defaulting to 1000
[  452.151837][T17388] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  452.213421][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13244'.
[  452.344926][T17418] tmpfs: Bad value for 'mpol'
[  452.551665][T17439] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  452.660029][T17451] tmpfs: Bad value for 'mpol'
[  452.769488][T17472] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  452.769563][T17465] IPVS: stopping master sync thread 17472 ...
[  453.238395][T17511] loop5: detected capacity change from 0 to 1024
[  453.249181][T17511] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  453.260210][T17511] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  453.275569][T17511] JBD2: no valid journal superblock found
[  453.281582][T17511] EXT4-fs (loop5): Could not load journal inode
[  453.295291][T17511] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  453.392401][T17530] loop5: detected capacity change from 0 to 1024
[  453.415692][T17530] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  453.445885][T17530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.500078][T17530] loop5: detected capacity change from 1024 to 64
[  453.535216][T16501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.535627][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.562820][T17320] kmmpd-loop4: attempt to access beyond end of device
[  453.562820][T17320] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  453.576546][T17320] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  453.597150][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.624707][T14800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.643447][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.683028][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.729273][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.757655][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.775280][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.827579][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.867727][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.903950][   T29] kauditd_printk_skb: 63 callbacks suppressed
[  453.903969][   T29] audit: type=1326 audit(2519.590:16251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.7.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  453.927678][T17558] vxcan1 speed is unknown, defaulting to 1000
[  453.933484][   T29] audit: type=1326 audit(2519.590:16252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.7.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  453.933521][   T29] audit: type=1326 audit(2519.590:16253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.7.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  453.933565][   T29] audit: type=1326 audit(2519.590:16254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.7.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  453.933599][   T29] audit: type=1326 audit(2519.590:16255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.7.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  453.933659][   T29] audit: type=1326 audit(2519.590:16256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.7.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x7ffc0000
[  453.933993][T15636] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  454.151278][T17558] chnl_net:caif_netlink_parms(): no params data found
[  454.192128][T17558] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.199263][T17558] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.206472][T17558] bridge_slave_0: entered allmulticast mode
[  454.212988][T17558] bridge_slave_0: entered promiscuous mode
[  454.220124][T17558] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.227237][T17558] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.234639][T17558] bridge_slave_1: entered allmulticast mode
[  454.241035][T17558] bridge_slave_1: entered promiscuous mode
[  454.260374][T17558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.270901][T15636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.271185][T17558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.289432][T17534] kmmpd-loop5: attempt to access beyond end of device
[  454.289432][T17534] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  454.303630][T17534] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  454.320705][T17558] team0: Port device team_slave_0 added
[  454.327559][T17558] team0: Port device team_slave_1 added
[  454.350139][T17558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.357149][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.383235][T17558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.394551][T17558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.401720][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.428321][T17558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.456607][T17558] hsr_slave_0: entered promiscuous mode
[  454.462811][T17558] hsr_slave_1: entered promiscuous mode
[  454.468565][T17558] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  454.476272][T17558] Cannot create hsr debugfs directory
[  454.811854][T17558] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  454.820477][T17558] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  454.829093][T17558] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  454.837703][T17558] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  454.851528][T17558] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.858683][T17558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.865965][T17558] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.873027][T17558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.893378][T14800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.915287][T17558] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.925694][T14790] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.933697][T14790] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.949533][T14800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.961881][T17558] 8021q: adding VLAN 0 to HW filter on device team0
[  454.972514][T14757] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.979592][T14757] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.989912][T14790] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.997010][T14790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.007972][T14800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.085511][T17558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.102550][T14800] bridge_slave_1: left allmulticast mode
[  455.108258][T14800] bridge_slave_1: left promiscuous mode
[  455.114069][T14800] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.122030][T14800] bridge_slave_0: left allmulticast mode
[  455.127681][T14800] bridge_slave_0: left promiscuous mode
[  455.133574][T14800] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.217332][T14800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  455.227381][T14800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.237291][T14800] bond0 (unregistering): Released all slaves
[  455.303889][T14800] hsr_slave_0: left promiscuous mode
[  455.310513][T14800] hsr_slave_1: left promiscuous mode
[  455.316146][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.323608][T14800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.331362][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.338853][T14800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.349989][T14800] veth1_macvtap: left promiscuous mode
[  455.355612][T14800] veth0_macvtap: left promiscuous mode
[  455.361155][T14800] veth1_vlan: left promiscuous mode
[  455.366424][T14800] veth0_vlan: left promiscuous mode
[  455.430379][T14800] team0 (unregistering): Port device team_slave_1 removed
[  455.440569][T14800] team0 (unregistering): Port device team_slave_0 removed
[  455.497288][T17558] veth0_vlan: entered promiscuous mode
[  455.505162][T17558] veth1_vlan: entered promiscuous mode
[  455.520733][T17558] veth0_macvtap: entered promiscuous mode
[  455.527760][T17558] veth1_macvtap: entered promiscuous mode
[  455.538609][T17558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.551063][T17558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  455.560489][T17558] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.569793][T17558] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.578530][T17558] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.587267][T17558] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.629060][   T29] audit: type=1326 audit(2521.407:16257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.1.13322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e03fce969 code=0x0
[  455.789555][T14800] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.807278][T17940] vxcan1 speed is unknown, defaulting to 1000
[  455.844177][T14800] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.874408][T17961] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  455.887982][T17961] tipc: Disabling bearer <udp:syz2>
[  455.902946][T14800] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.980340][T17940] chnl_net:caif_netlink_parms(): no params data found
[  456.007207][T18068] loop6: detected capacity change from 0 to 1024
[  456.018709][T14800] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.037962][T18068] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  456.075005][T18068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.092078][T18099] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13320'.
[  456.130994][T17940] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.138184][T17940] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.145450][T17940] bridge_slave_0: entered allmulticast mode
[  456.152823][T17940] bridge_slave_0: entered promiscuous mode
[  456.159595][T18068] loop6: detected capacity change from 1024 to 64
[  456.171816][T17940] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.179226][T17940] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.187737][T17940] bridge_slave_1: entered allmulticast mode
[  456.194345][T17940] bridge_slave_1: entered promiscuous mode
[  456.217717][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.238456][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.252766][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.267730][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.272885][T17940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.292143][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.306771][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.324500][T17940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.333861][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.334504][T14800] bridge_slave_1: left allmulticast mode
[  456.349905][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.353562][T14800] bridge_slave_1: left promiscuous mode
[  456.368603][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.372638][T14800] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.388011][T17558] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  456.407962][T14800] bridge_slave_0: left allmulticast mode
[  456.413661][T14800] bridge_slave_0: left promiscuous mode
[  456.419462][T14800] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.605830][T14800] $Hÿ (unregistering): Released all slaves
[  456.615558][T14800] bond0 (unregistering): Released all slaves
[  456.625149][T14800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.635118][T14800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.645499][T14800] bond0 (unregistering): Released all slaves
[  456.654273][T18189] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  456.679422][T18190] tipc: Disabling bearer <udp:syz2>
[  456.687050][T17940] team0: Port device team_slave_0 added
[  456.713765][T17940] team0: Port device team_slave_1 added
[  456.721992][T14800] tipc: Disabling bearer <udp:syz0>
[  456.727302][T14800] tipc: Left network mode
[  456.788070][T17940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.795146][T17940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.821140][T17940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.842239][T17940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.849263][T17940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.876004][T17940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.908529][T14800] hsr_slave_0: left promiscuous mode
[  456.919951][T14800] hsr_slave_1: left promiscuous mode
[  456.925629][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.933817][T14800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.942747][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.950251][T14800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.969272][T14800] veth1_macvtap: left promiscuous mode
[  456.986276][T14800] veth0_macvtap: left promiscuous mode
[  456.991900][T14800] veth1_vlan: left promiscuous mode
[  457.004145][T14800] veth0_vlan: left promiscuous mode
[  457.184560][T14800] team0 (unregistering): Port device team_slave_1 removed
[  457.201562][T14800] team0 (unregistering): Port device team_slave_0 removed
[  457.259589][T17940] hsr_slave_0: entered promiscuous mode
[  457.266175][T17940] hsr_slave_1: entered promiscuous mode
[  457.272798][T17940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  457.281070][T17940] Cannot create hsr debugfs directory
[  457.307200][T18326] tipc: Started in network mode
[  457.312224][T18326] tipc: Node identity ac1414aa, cluster identity 4711
[  457.321220][T18326] tipc: Enabled bearer <udp:syz2>, priority 10
[  457.338068][T18326] tipc: Disabling bearer <udp:syz2>
[  457.433180][   T29] audit: type=1400 audit(2523.308:16258): avc:  denied  { mounton } for  pid=18395 comm="syz.8.13353" path="/proc/5372/task" dev="proc" ino=119665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  457.459766][T18396] vxcan1 speed is unknown, defaulting to 1000
[  457.538750][T17558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.549974][T18092] kmmpd-loop6: attempt to access beyond end of device
[  457.549974][T18092] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[  457.563646][T18092] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  457.624066][T17940] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  457.634669][T17940] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  457.643845][T17940] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  457.657317][T17940] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  457.720683][T18466] vxcan1 speed is unknown, defaulting to 1000
[  457.734987][T17940] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.790990][T17940] 8021q: adding VLAN 0 to HW filter on device team0
[  457.811454][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.818640][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.850226][T15652] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.857335][T15652] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.893768][T17940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  457.908175][T18461] vxcan1 speed is unknown, defaulting to 1000
[  457.919717][T14800] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.034480][T17940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.044547][T18461] chnl_net:caif_netlink_parms(): no params data found
[  458.152339][T18461] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.159533][T18461] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.194637][T18461] bridge_slave_0: entered allmulticast mode
[  458.203789][T18461] bridge_slave_0: entered promiscuous mode
[  458.215000][T18461] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.222157][T18461] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.270254][T18461] bridge_slave_1: entered allmulticast mode
[  458.289375][T18461] bridge_slave_1: entered promiscuous mode
[  458.306468][T18677] netlink: 'syz.8.13366': attribute type 1 has an invalid length.
[  458.314444][T18677] netlink: 'syz.8.13366': attribute type 4 has an invalid length.
[  458.322386][T18677] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.13366'.
[  458.347270][T18677] netlink: 'syz.8.13366': attribute type 1 has an invalid length.
[  458.354372][T18461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.355174][T18677] netlink: 'syz.8.13366': attribute type 4 has an invalid length.
[  458.365008][T17940] veth0_vlan: entered promiscuous mode
[  458.373256][T18677] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.13366'.
[  458.380858][T18461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.428622][T17940] veth1_vlan: entered promiscuous mode
[  458.443427][T18461] team0: Port device team_slave_0 added
[  458.453999][T18461] team0: Port device team_slave_1 added
[  458.503458][T17940] veth0_macvtap: entered promiscuous mode
[  458.519773][T18461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.526754][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.552872][T18461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.619699][T18461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.626814][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.653539][T18461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.679199][T17940] veth1_macvtap: entered promiscuous mode
[  458.732442][T18461] hsr_slave_0: entered promiscuous mode
[  458.739571][T18461] hsr_slave_1: entered promiscuous mode
[  458.745485][T18461] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  458.753097][T18461] Cannot create hsr debugfs directory
[  458.761874][T17940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.781435][T17940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.811657][T17940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.820528][T17940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.829432][T17940] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.838285][T17940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.850060][   T29] audit: type=1326 audit(2524.757:16259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  458.873259][   T29] audit: type=1326 audit(2524.757:16260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  458.896473][   T29] audit: type=1326 audit(2524.768:16261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  458.919657][   T29] audit: type=1326 audit(2524.768:16262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  458.942860][   T29] audit: type=1326 audit(2524.768:16263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  458.966406][   T29] audit: type=1326 audit(2524.768:16264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  458.989574][   T29] audit: type=1326 audit(2524.768:16265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  459.012822][   T29] audit: type=1326 audit(2524.768:16266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  459.036067][   T29] audit: type=1326 audit(2524.768:16267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  459.059225][   T29] audit: type=1326 audit(2524.778:16268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18812 comm="syz.8.13376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  459.125131][T18855] ip6gre1: entered allmulticast mode
[  459.408581][T18461] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  459.430465][T18461] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  459.439984][T18461] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  459.449367][T18461] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  459.489777][T18461] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.501706][T18461] 8021q: adding VLAN 0 to HW filter on device team0
[  459.513877][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.520991][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.532493][T15652] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.539726][T15652] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.570128][T18921] netlink: 'syz.1.13388': attribute type 1 has an invalid length.
[  459.578030][T18921] netlink: 'syz.1.13388': attribute type 4 has an invalid length.
[  459.585912][T18921] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13388'.
[  459.587739][T18461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  459.605688][T18461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  459.615772][T18921] netlink: 'syz.1.13388': attribute type 1 has an invalid length.
[  459.624839][T18921] netlink: 'syz.1.13388': attribute type 4 has an invalid length.
[  459.632753][T18921] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13388'.
[  459.673502][T14800] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.695145][T18461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.732938][T14800] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.787499][T14800] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.866078][T18962] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.896128][T14800] bridge_slave_1: left allmulticast mode
[  459.901964][T14800] bridge_slave_1: left promiscuous mode
[  459.907773][T14800] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.916544][T14800] bridge_slave_0: left allmulticast mode
[  459.922291][T14800] bridge_slave_0: left promiscuous mode
[  459.928031][T14800] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.043836][T14800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.054517][T14800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.063909][T14800] bond0 (unregistering): Released all slaves
[  460.074546][T18461] veth0_vlan: entered promiscuous mode
[  460.081840][T18962] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.099338][T18461] veth1_vlan: entered promiscuous mode
[  460.114748][T18461] veth0_macvtap: entered promiscuous mode
[  460.124075][T18461] veth1_macvtap: entered promiscuous mode
[  460.135635][T18461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.145334][T18461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.158525][T18461] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.167330][T18461] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.176063][T18461] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.184896][T18461] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.204997][T18962] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.231188][T14800] hsr_slave_0: left promiscuous mode
[  460.237788][T14800] hsr_slave_1: left promiscuous mode
[  460.238403][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13415'.
[  460.252144][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.253082][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13415'.
[  460.259743][T14800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.276987][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.284524][T14800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.295554][T14800] veth1_macvtap: left promiscuous mode
[  460.301145][T14800] veth0_macvtap: left promiscuous mode
[  460.306764][T14800] veth1_vlan: left promiscuous mode
[  460.312183][T14800] veth0_vlan: left promiscuous mode
[  460.378022][T14800] team0 (unregistering): Port device team_slave_1 removed
[  460.388330][T14800] team0 (unregistering): Port device team_slave_0 removed
[  460.421999][T18962] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.481504][T19011] loop9: detected capacity change from 0 to 512
[  460.492141][T18962] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.500297][T19011] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  460.514813][T18962] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.524923][T19011] EXT4-fs (loop9): 1 truncate cleaned up
[  460.529258][T18962] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.537507][T19011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.558129][T18962] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.673671][T18461] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.785928][T19054] smc: net device bond0 applied user defined pnetid SYZ2
[  460.794552][T19054] smc: net device bond0 erased user defined pnetid SYZ2
[  460.897262][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13423'.
[  461.119750][T19088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13434'.
[  461.129009][T19088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13434'.
[  461.229301][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13437'.
[  462.995509][T19248] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.043760][T19248] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.092419][T19248] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.138548][T19248] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.192293][T19248] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.210733][T19248] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.231828][T19248] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.245325][T19248] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.271421][T19274] ip6gre2: entered allmulticast mode
[  463.434724][T19292] ip6gre1: entered allmulticast mode
[  463.608480][T19312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.619623][   T29] kauditd_printk_skb: 761 callbacks suppressed
[  463.619637][   T29] audit: type=1326 audit(2529.798:17030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1496465927 code=0x7ffc0000
[  463.649114][   T29] audit: type=1326 audit(2529.798:17031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f149640ab39 code=0x7ffc0000
[  463.672986][   T29] audit: type=1326 audit(2529.798:17032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  463.697868][   T29] audit: type=1326 audit(2529.861:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1496465927 code=0x7ffc0000
[  463.721066][   T29] audit: type=1326 audit(2529.861:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f149640ab39 code=0x7ffc0000
[  463.744914][   T29] audit: type=1326 audit(2529.861:17035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  463.768098][   T29] audit: type=1326 audit(2529.861:17036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1496465927 code=0x7ffc0000
[  463.791968][   T29] audit: type=1326 audit(2529.861:17037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f149640ab39 code=0x7ffc0000
[  463.815762][   T29] audit: type=1326 audit(2529.861:17038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f149646e969 code=0x7ffc0000
[  463.839079][   T29] audit: type=1326 audit(2529.861:17039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.8.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1496465927 code=0x7ffc0000
[  463.870771][T19312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.940361][T19312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.020895][T19332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  464.029739][T19332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  464.044249][T19312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.079427][T19341] ref_ctr_offset mismatch. inode: 0x32ed offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  464.123507][T19312] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.148112][T19312] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.197552][T19312] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.223216][T19312] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.256688][T19362] __nla_validate_parse: 4 callbacks suppressed
[  464.256707][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13518'.
[  464.599441][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13534'.
[  464.797517][T19427] netlink: 'syz.5.13542': attribute type 5 has an invalid length.
[  464.849540][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13544'.
[  464.937005][T19439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13546'.
[  465.196268][T19455] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  465.218438][T19455] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  465.272177][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13556'.
[  465.303875][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13556'.
[  465.485774][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13567'.
[  465.631192][T19512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  465.649131][T19512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  465.808772][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13582'.
[  466.045300][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13590'.
[  466.090548][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13590'.
[  466.130255][T19574] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.194621][T19574] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.251871][T19574] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.328657][T19574] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.382009][T19574] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.397828][T19574] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.412903][T19574] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.425268][T19574] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.913899][T19648] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -28928, delta: 1
[  466.922677][T19648] ref_ctr increment failed for inode: 0x21c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005e880
[  466.977446][T19651] hub 9-0:1.0: USB hub found
[  466.982613][T19651] hub 9-0:1.0: 8 ports detected
[  467.207294][T19679] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -28928, delta: 1
[  467.216064][T19679] ref_ctr increment failed for inode: 0x1a24 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104400b00
[  467.257692][T19683] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22
[  468.381648][   T29] kauditd_printk_skb: 1392 callbacks suppressed
[  468.381662][   T29] audit: type=1326 audit(2534.808:18432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e03fc5927 code=0x7ffc0000
[  468.422373][   T29] audit: type=1326 audit(2534.808:18433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e03f6ab39 code=0x7ffc0000
[  468.445520][   T29] audit: type=1326 audit(2534.808:18434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7e03fce969 code=0x7ffc0000
[  468.468749][   T29] audit: type=1326 audit(2534.840:18435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e03fc5927 code=0x7ffc0000
[  468.492227][   T29] audit: type=1326 audit(2534.840:18436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e03f6ab39 code=0x7ffc0000
[  468.515668][   T29] audit: type=1326 audit(2534.840:18437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7e03fce969 code=0x7ffc0000
[  468.538825][   T29] audit: type=1326 audit(2534.840:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e03fc5927 code=0x7ffc0000
[  468.561954][   T29] audit: type=1326 audit(2534.840:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e03f6ab39 code=0x7ffc0000
[  468.585134][   T29] audit: type=1326 audit(2534.840:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7e03fce969 code=0x7ffc0000
[  468.614601][   T29] audit: type=1326 audit(2534.850:18441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19721 comm="syz.1.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e03fc5927 code=0x7ffc0000
[  469.140603][T19790] __nla_validate_parse: 10 callbacks suppressed
[  469.140619][T19790] netlink: 52 bytes leftover after parsing attributes in process `syz.9.13679'.
[  469.156615][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13680'.
[  469.208949][T19798] netlink: 64 bytes leftover after parsing attributes in process `syz.9.13683'.
[  469.484669][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13694'.
[  469.574142][T19844] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13699'.
[  469.649368][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13710'.
[  469.665520][T19861] hsr_slave_0: left promiscuous mode
[  469.678245][T19861] hsr_slave_1: left promiscuous mode
[  469.682132][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13713'.
[  469.777661][T19884] netlink: 52 bytes leftover after parsing attributes in process `syz.5.13715'.
[  469.856192][T19898] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13720'.
[  469.921949][T19906] sit0: entered allmulticast mode
[  469.939757][T19906] sit0: entered promiscuous mode
[  470.111250][T19941] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.192246][T19941] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.249434][T19941] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.283805][   T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  470.292617][   T10] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  470.306417][T19941] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.540291][T19941] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.552128][T19941] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.563432][T19941] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.575785][T19941] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.680441][T19995] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  470.896287][T20014] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.944964][T20014] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.991866][T20014] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.039133][T20014] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.094875][T20014] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.108451][T20014] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.121785][T20014] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.137624][T20014] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.156647][T20037] sit0: entered allmulticast mode
[  471.164819][T20037] sit0: entered promiscuous mode
[  471.200911][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.234221][T20048] openvswitch: netlink: Message has 6 unknown bytes.
[  471.447293][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.731906][T20074] sit0: entered allmulticast mode
[  471.751143][T20074] sit0: entered promiscuous mode
[  471.888544][T20094] openvswitch: netlink: Message has 6 unknown bytes.
[  471.916800][T20098] netlink: 'syz.9.13784': attribute type 39 has an invalid length.
[  471.938407][T20103] binfmt_misc: register: failed to install interpreter file ./file2
[  471.967179][    T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  471.994706][    T9] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  472.028515][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.085328][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.503147][T20126] sit0: entered allmulticast mode
[  472.508659][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.512284][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13804'.
[  472.523943][T20126] sit0: entered promiscuous mode
[  472.597414][T20131] random: crng reseeded on system resumption
[  472.652144][T20136] openvswitch: netlink: Message has 6 unknown bytes.
[  472.737942][T20143] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  472.797886][T20147] syzkaller1: entered promiscuous mode
[  472.804113][T20147] syzkaller1: entered allmulticast mode
[  472.990265][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.654651][T20179] sit0: entered allmulticast mode
[  474.670317][T20179] sit0: entered promiscuous mode
[  474.753170][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13826'.
[  474.792819][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13811'.
[  474.794688][   T29] kauditd_printk_skb: 750 callbacks suppressed
[  474.794706][   T29] audit: type=1400 audit(2541.530:19192): avc:  denied  { mounton } for  pid=20192 comm="syz.5.13814" path="/file0" dev="ramfs" ino=124626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  474.831516][T20187] hsr_slave_0: left promiscuous mode
[  474.840630][T20187] hsr_slave_1: left promiscuous mode
[  474.892740][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13817'.
[  474.933613][T20214] pim6reg1: entered promiscuous mode
[  474.939033][T20214] pim6reg1: entered allmulticast mode
[  474.947247][T20218] sit0: left promiscuous mode
[  474.955055][T20218] sit0: entered promiscuous mode
[  474.989310][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.146106][   T29] audit: type=1326 audit(2542.959:19193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20238 comm="syz.7.13836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efed257e969 code=0x0
[  476.182328][   T29] audit: type=1400 audit(2542.959:19194): avc:  denied  { relabelfrom } for  pid=20239 comm="syz.1.13846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  476.202876][   T29] audit: type=1400 audit(2542.959:19195): avc:  denied  { relabelto } for  pid=20239 comm="syz.1.13846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  476.235608][   T29] audit: type=1326 audit(2543.043:19196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20240 comm="syz.8.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7fc00000
[  476.259578][   T29] audit: type=1326 audit(2543.043:19197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20240 comm="syz.8.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f149646e969 code=0x7fc00000
[  476.282792][   T29] audit: type=1326 audit(2543.043:19198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20240 comm="syz.8.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7fc00000
[  476.306663][   T29] audit: type=1326 audit(2543.043:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20240 comm="syz.8.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7fc00000
[  476.329816][   T29] audit: type=1326 audit(2543.043:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20240 comm="syz.8.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7fc00000
[  476.353695][   T29] audit: type=1326 audit(2543.043:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20240 comm="syz.8.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149646e969 code=0x7fc00000
[  476.402500][T20261] sit0: left promiscuous mode
[  476.449204][T20261] sit0: entered promiscuous mode
[  476.490139][T20263] syzkaller1: entered promiscuous mode
[  476.496290][T20263] syzkaller1: entered allmulticast mode
[  476.590996][T20287] vxcan1 speed is unknown, defaulting to 1000
[  476.603830][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13845'.
[  476.633488][T20293] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.13847'.
[  476.775279][T20323] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.13850'.
[  476.784567][T20323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13850'.
[  476.831700][T20339] random: crng reseeded on system resumption
[  477.052234][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13862'.
[  477.062550][T20361] hsr_slave_0: left promiscuous mode
[  477.070631][T20361] hsr_slave_1: left promiscuous mode
[  477.088507][T20368] IPVS: Error connecting to the multicast addr
[  477.274499][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13871'.
[  477.752411][T20410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13890'.
[  478.333940][T20508] bond6 (unregistering): Released all slaves
[  478.561529][T20590] ref_ctr_offset mismatch. inode: 0x1b95 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  478.573640][T20590] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  478.582154][T20590] ref_ctr decrement failed for inode: 0x1b95 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888100059600
[  478.594446][T20590] uprobe: syz.7.13923:20590 failed to unregister, leaking uprobe
[  478.801710][T20605] netlink: 'syz.9.13929': attribute type 6 has an invalid length.
[  479.044958][    C0] ==================================================================
[  479.053105][    C0] BUG: KCSAN: data-race in do_select / pollwake
[  479.059356][    C0] 
[  479.061672][    C0] read to 0xffffc90001b57a00 of 4 bytes by task 20584 on cpu 1:
[  479.069292][    C0]  do_select+0xe41/0xf40
[  479.073532][    C0]  core_sys_select+0x3b2/0x600
[  479.078293][    C0]  __se_sys_pselect6+0x216/0x280
[  479.083231][    C0]  __x64_sys_pselect6+0x78/0x90
[  479.088081][    C0]  x64_sys_call+0x1caa/0x2fb0
[  479.092753][    C0]  do_syscall_64+0xd0/0x1a0
[  479.097258][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.103145][    C0] 
[  479.105463][    C0] write to 0xffffc90001b57a00 of 4 bytes by interrupt on cpu 0:
[  479.113100][    C0]  pollwake+0xb6/0x100
[  479.117170][    C0]  __wake_up+0x66/0xb0
[  479.121234][    C0]  bpf_ringbuf_notify+0x22/0x30
[  479.126089][    C0]  irq_work_run+0xe2/0x2d0
[  479.130508][    C0]  __sysvec_irq_work+0x22/0x170
[  479.135393][    C0]  sysvec_irq_work+0x66/0x80
[  479.139985][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  479.144918][    C0]  native_apic_msr_write+0x3d/0x60
[  479.150060][    C0]  x2apic_send_IPI_self+0x10/0x20
[  479.155093][    C0]  arch_irq_work_raise+0x46/0x50
[  479.160034][    C0]  __irq_work_queue_local+0x80/0x1b0
[  479.165321][    C0]  irq_work_queue+0x70/0x100
[  479.169914][    C0]  bpf_ringbuf_discard+0xd3/0xf0
[  479.174854][    C0]  bpf_prog_fe0ed97373b08409+0x4b/0x4f
[  479.180314][    C0]  bpf_trace_run3+0x10c/0x1d0
[  479.185001][    C0]  kmem_cache_free+0x246/0x2f0
[  479.189758][    C0]  io_req_caches_free+0x79/0x170
[  479.194730][    C0]  io_ring_exit_work+0x26d/0x560
[  479.199682][    C0]  process_scheduled_works+0x4cb/0x9d0
[  479.205147][    C0]  worker_thread+0x582/0x770
[  479.209742][    C0]  kthread+0x486/0x510
[  479.213805][    C0]  ret_from_fork+0x4b/0x60
[  479.218213][    C0]  ret_from_fork_asm+0x1a/0x30
[  479.222980][    C0] 
[  479.225311][    C0] value changed: 0x00000001 -> 0x00000000
[  479.231018][    C0] 
[  479.233330][    C0] Reported by Kernel Concurrency Sanitizer on:
[  479.239485][    C0] CPU: 0 UID: 0 PID: 14757 Comm: kworker/u8:12 Tainted: G        W           6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(voluntary) 
[  479.253825][    C0] Tainted: [W]=WARN
[  479.257616][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  479.267686][    C0] Workqueue: iou_exit io_ring_exit_work
[  479.273242][    C0] ==================================================================