last executing test programs:

4m7.718549433s ago: executing program 32 (id=307):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000600000001f400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r4, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7)
ftruncate(r5, 0x2007ffc)
sendfile(r5, r5, 0x0, 0x3fffffffc00)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
epoll_create1(0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@getchain={0x6c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0xec}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}]}, 0x6c}}, 0x804)
r9 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
fsetxattr$security_selinux(r9, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x31, 0x2e, &(0x7f0000000c40)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18)

4m0.575049214s ago: executing program 33 (id=310):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
link(0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x80000000, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
close(0x3)
unshare(0x60030c00)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0)
readv(r1, 0x0, 0x0)
listxattr(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000740)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x47, @private2, 0x21}}, 0x6, 0x5, 0x9, 0x9e, 0x0, 0x7ff, 0xe5}, &(0x7f0000000200)=0x9c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000800)={r2, 0xb6, "2045b1b5dd81d26cda3d843956b6dd29f4745cdfe5eb6269fa844ce8717ece4292c9f7708e5bb00595b6a73be871a937a3b8877d1479f840af674df8072a34f55a5f97b437de26e9068197118ad91d6eb4bedafff713a21ea62d8e2f483c59e1de9b1ecfc2eea52f25143e5007baff3f6d6c4411dde3e3c52b9c827233783fa06edd31841ee0ad7ae6b4b0db8e717fa613b68312f452f4a849a624330eec746ad0c6b5636c5b8c443bc81c97636f71d25a192e5371dc"}, &(0x7f0000000640)=0xbe)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f6272696467650058c65009f73e2b0f77d2bf24ef94f02bb765dac19cc5b2417d33cdc0ec581f53fc65259fa236843468e32b63ddae2b5d3428e705ef159969dd5cb647b5d7d8b853832527239cbca44f65156f207b0b65dc5768a6ce478e4ba6193f05ec3be80d8150138b0544df367e34260cf4abfb7b3feebe2ac411d4167cafc0f9d155423bdb98ffeeaa2ca994508b"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000f80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)

3m56.96920634s ago: executing program 34 (id=311):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
clock_settime(0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
io_getevents(0x0, 0x9, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x83, &(0x7f00000000c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00002018000000020000000400000005000000edfaa57d38f21f2e40dc8a411d7897a96b9a9c51976f80fce9e37423cd242a46af87d2660e41fe723b6b101307d6e59725074f9a3356d1d31f29234282f22e4a7f470807542807ed997a095094eb39ef2fecdc96b13d4b4604bcdd1e97fcec84ce20bf6359b3dea9b81f363078209042d890fc86a5cc22bd12be442f5715e0f600985743fe2831612b508fde1cb70d0e2f3a7816e1196738b585926d7a55d487546598d6ebd38114ed975d57f08273dd7d894c946aca522391a58d9a337b6b8c12c143e195aeb1c44d358dc7c8da75b0745485ad778c4bad5ab868805255defc204d3624f572f7d6c408cf3848ff8e6ba0d1d1a9246ff08178854b47a84b4c6b2443ef27bbce801c75e701c7124224c66276da120d030781b0b2a97758faeacb09b6b9ff28dd149c7712dc5cb42a997437b0b99d01eb8e832bd9f01671ac56503fa6ea831a10beb5b95d7b6715400c32764eae538fd062bd0cdbd6c2efc7f37356c1d6e2476c9394b7b1b1de2399e1db895eb0f27507bb5d9fedb3865b949bd873a44cc72402be976f057d3bb3c956be6ae33a91d55b8d702eac3d52c562496d549cbd3d4685a9d949c481fc27df1e6d1d16e753ba03889d31d91ba8bf67f7f7d5713022b37d45f9d0d1b04e4b68fbabed6340ce38088cfda338fe3381e29dcb95166a66e45bdcfa3fa68a3bbe1fc74b7946a988fa88d50f6dc5ff008e555467b00c29364f02671f36595fca0adc6e1fcfe87b94f9823b0507e46d7ae61870aa42f40b5717f0a1a856d56f912eaf33e4aa40865c198ac41fec79d92b29ac6f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
eventfd2(0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x111841, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x2)
syslog(0x2, 0xffffffffffffffff, 0x4b)
write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1)
r6 = msgget(0x2, 0x600)
msgrcv(r6, 0xfffffffffffffffe, 0x0, 0x0, 0x1000)
msgsnd(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000000000006b92490ceaa0bc0c58ac1d7c7b1ca020658876ea3340b9f702c5d1b7f9a6375a4a409f4f60d23dc923083b2f7f350dd5b30eb4f6e71cf75b62eee8f378553a75cc1f366eb366c8302703567de368d5124603eab78c9d5d713ee4ff1b892e8fe3c39ca4d087d49cd1d6a6480ff085a5cf6d9edb9c5a03caa965cb5ccd0b8301553940eebab5777ea73705f1214e28319cd09e6183b1d28e991326be670c1cee3cd4aa74c2ae7ffc2ffb839f2833240f6a45a4b0d78f6a595597972f6aaaaf"], 0x8, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000000)
socket$nl_generic(0x10, 0x3, 0x10)

3m43.50952988s ago: executing program 35 (id=315):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0xffffffffffffff79, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x4044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x18, 0x40810}}, {{0x0, 0xfcdf, 0x0, 0x0, 0x0, 0x0, 0x4000881}}], 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x7}, 0x400, 0xcc, 0x6, 0x4, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace220005"], 0xcfa4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x24}, 0x24}}, 0x846)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xe2182c60386845f1, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x0, 0xffffffff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x20000004)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10)
sendmsg$802154_raw(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814)
socket$nl_xfrm(0x10, 0x3, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

3m38.238170533s ago: executing program 36 (id=318):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f0000002180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x2, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008054}, 0x20040800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x200000000200}, 0x18)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=")
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x2}}}}}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r11 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r11, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000), 0x4)

1m12.332808371s ago: executing program 37 (id=353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
unshare(0x24040000)
unshare(0x2c020400)

1m6.809755477s ago: executing program 7 (id=550):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@nullb, 0x0, &(0x7f0000000400)='./file0\x00')

1m6.743305028s ago: executing program 7 (id=553):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000150a0102"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808)

1m6.62206504s ago: executing program 7 (id=564):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="c887df428b20058f"], 0x27)

1m6.509325082s ago: executing program 7 (id=567):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x83381a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)

1m6.470466052s ago: executing program 7 (id=558):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x0, 0x700001b, 0x148, 0x250, 0x148, 0x310, 0x206, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)

1m6.243979236s ago: executing program 7 (id=571):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x99, 0x0, &(0x7f0000000180)="5a187921ec58bfb322ee6b7b6138acd4f4a66cafff5fa0591209a5d79ae227c7589ee58ba1036c8f2aec0098dd081bab71f15bc16c94c9b3d2935e7b834b70205bdbb11eb541e39d8b64efe1e455972248f7846e34d98a65462516d76497589f608a8bdb895cd749d37c2c7276e154297d00e037f0b8811b22c6ea89e6239b7522982be9f1b6e2a89caaf0807373a4a7b04a35e2053839b3a1", 0x0, 0x934, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1m6.243676846s ago: executing program 38 (id=571):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x99, 0x0, &(0x7f0000000180)="5a187921ec58bfb322ee6b7b6138acd4f4a66cafff5fa0591209a5d79ae227c7589ee58ba1036c8f2aec0098dd081bab71f15bc16c94c9b3d2935e7b834b70205bdbb11eb541e39d8b64efe1e455972248f7846e34d98a65462516d76497589f608a8bdb895cd749d37c2c7276e154297d00e037f0b8811b22c6ea89e6239b7522982be9f1b6e2a89caaf0807373a4a7b04a35e2053839b3a1", 0x0, 0x934, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1m5.864159382s ago: executing program 6 (id=590):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

1m5.829048153s ago: executing program 6 (id=591):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x55a, &(0x7f0000000b80)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=")
openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x1)
fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')

1m5.728066054s ago: executing program 6 (id=594):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)

1m5.530879587s ago: executing program 6 (id=600):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x83381a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)

1m5.490702808s ago: executing program 6 (id=602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
r2 = timerfd_create(0x8, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

1m5.262212242s ago: executing program 6 (id=605):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = socket(0x10, 0x2, 0x0)
syz_clone(0x89180, &(0x7f00000001c0), 0x0, &(0x7f0000000080), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f00000000c0)='./file0/../file0\x00', r1, r2)
lchown(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0)

1m5.226245742s ago: executing program 39 (id=605):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = socket(0x10, 0x2, 0x0)
syz_clone(0x89180, &(0x7f00000001c0), 0x0, &(0x7f0000000080), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f00000000c0)='./file0/../file0\x00', r1, r2)
lchown(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0)

57.792698008s ago: executing program 0 (id=838):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000ff00000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a82", 0x2b}], 0x1)

57.534568432s ago: executing program 0 (id=843):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002801100e500080000003e12"], 0x44}}, 0x0)

57.503539602s ago: executing program 0 (id=844):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21881e, &(0x7f0000000300)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x514, &(0x7f0000000340)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140))
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

57.217575267s ago: executing program 0 (id=852):
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})
creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

56.922275251s ago: executing program 0 (id=859):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

56.468694898s ago: executing program 0 (id=876):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)

56.452511909s ago: executing program 40 (id=876):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)

39.661259711s ago: executing program 8 (id=1400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10)
socket(0x10, 0x3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

39.632442521s ago: executing program 8 (id=1403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
listen(r2, 0x0)

39.553100092s ago: executing program 8 (id=1407):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)

39.498818223s ago: executing program 8 (id=1410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x83381a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

39.469462394s ago: executing program 8 (id=1411):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = gettid()
kcmp(r2, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

39.234290448s ago: executing program 8 (id=1417):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xff, 0x5, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x2}, 0x1a, 0x7, 0x800, 0x4, 0x8, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)

39.217050088s ago: executing program 41 (id=1417):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xff, 0x5, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x2}, 0x1a, 0x7, 0x800, 0x4, 0x8, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)

38.651217206s ago: executing program 1 (id=1436):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x484b500c4823db64, 0x1, 0x0, 0x0, 0x3, 0x3, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_io_uring_setup(0x1869, &(0x7f0000000800)={0x0, 0xead4, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

38.505650299s ago: executing program 1 (id=1440):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94)
setrlimit(0x9, &(0x7f0000000000))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
io_setup(0x2004, &(0x7f0000000680))

38.394622631s ago: executing program 1 (id=1443):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
umount2(&(0x7f0000000680)='./file0\x00', 0x9)

38.394102781s ago: executing program 1 (id=1444):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x83381a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

38.362383621s ago: executing program 1 (id=1446):
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x7bd0, 0x10100, 0x7, 0x1ea}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x4, 0x1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

38.248062443s ago: executing program 1 (id=1448):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x8, 0xe, 0x35, 0x7, 0x0, 0x4, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x4, 0x3, 0x7779, 0x8, 0xb, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)

38.247617813s ago: executing program 42 (id=1448):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x8, 0xe, 0x35, 0x7, 0x0, 0x4, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x4, 0x3, 0x7779, 0x8, 0xb, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)

2.029139048s ago: executing program 3 (id=2580):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfdfd, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"})

1.820146882s ago: executing program 5 (id=2585):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = gettid()
tkill(r2, 0x16)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.763577213s ago: executing program 5 (id=2586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.697869513s ago: executing program 5 (id=2588):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.652731294s ago: executing program 5 (id=2591):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, 0x0, 0x271)

1.634708465s ago: executing program 5 (id=2593):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000280)={@multicast, @random="8a6274485194", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x3, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0)

1.634259485s ago: executing program 4 (id=2594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r0)

1.598971895s ago: executing program 9 (id=2595):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x4)
close_range(r0, r0, 0x0)

1.579634445s ago: executing program 5 (id=2596):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x9}, 0x0, 0x3c}, 0x0, @in6=@private1, 0x0, 0x2, 0x0, 0x20, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

1.579132506s ago: executing program 9 (id=2597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.551093946s ago: executing program 43 (id=2596):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x9}, 0x0, 0x3c}, 0x0, @in6=@private1, 0x0, 0x2, 0x0, 0x20, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

1.500911707s ago: executing program 4 (id=2599):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x102, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x20000000, 0x1, 0x80000001}}, 0x120)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)

1.498757457s ago: executing program 3 (id=2600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r1)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef)

1.424365578s ago: executing program 9 (id=2601):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"])

1.156030102s ago: executing program 4 (id=2602):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r3 = dup(r2)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)

1.155752472s ago: executing program 3 (id=2603):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

1.155509732s ago: executing program 4 (id=2604):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

1.135010503s ago: executing program 9 (id=2605):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, 0x0, 0x271)

1.117257193s ago: executing program 4 (id=2606):
unshare(0x42000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfd12)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

1.116875673s ago: executing program 9 (id=2607):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c)
dup3(r3, r2, 0x0)

956.949835ms ago: executing program 3 (id=2608):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

903.084716ms ago: executing program 9 (id=2610):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70, 0x1}}}}}}}, 0x0)

861.917157ms ago: executing program 44 (id=2610):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70, 0x1}}}}}}}, 0x0)

820.063507ms ago: executing program 2 (id=2612):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4000}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

413.729104ms ago: executing program 3 (id=2613):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x2000000, {0xa, 0x0, 0x1b6, 0xc8, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x44000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5})

394.898024ms ago: executing program 2 (id=2614):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa)
epoll_create(0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r3, r2, 0x0, 0x7f)

341.201775ms ago: executing program 2 (id=2615):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

337.159835ms ago: executing program 3 (id=2616):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r2 = syz_pidfd_open(r0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0xff0a)

163.865748ms ago: executing program 4 (id=2617):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)

112.722979ms ago: executing program 2 (id=2618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x7f, 0x7, 0x1, 0xd, 0x200008f})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)

91.694569ms ago: executing program 2 (id=2619):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18)
write$selinux_load(0xffffffffffffffff, 0x0, 0x2000)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0)

0s ago: executing program 2 (id=2620):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

  275.308261][ T6717] bridge_slave_0: left promiscuous mode
[  275.314008][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.316394][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  275.372258][ T6726] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1017'.
[  275.394304][ T6721] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1017'.
[  275.457253][ T6732] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  275.578501][ T6746] xt_CT: You must specify a L4 protocol and not use inversions on it
[  275.669924][ T6754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1031'.
[  275.835924][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1037'.
[  276.298608][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298634][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298689][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298717][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298809][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x2
[  276.298837][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298862][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298883][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298945][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298971][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.298995][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.299028][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.299115][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400132][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400191][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400213][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400233][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400254][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400276][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400345][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400366][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400391][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400418][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400445][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400471][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400513][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400534][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400556][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400583][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400632][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400656][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400677][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400697][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400720][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400742][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400766][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.400828][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.587294][ T4566] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0
[  276.639774][ T4566] hid-generic 0000:0000:20000000.0005: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  276.671820][ T6798] serio: Serial port ptm0
[  276.709809][ T6800] loop2: detected capacity change from 0 to 512
[  276.754828][ T6800] EXT4-fs (loop2): 1 orphan inode deleted
[  276.764402][ T6800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.777485][   T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1
[  276.802844][ T6800] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.855071][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.030139][ T6832] __nla_validate_parse: 1 callbacks suppressed
[  277.030156][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'.
[  277.142525][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1072'.
[  277.229540][ T6856] dvmrp5: entered allmulticast mode
[  277.266796][ T6856] dvmrp5: left allmulticast mode
[  277.306516][ T6863] block device autoloading is deprecated and will be removed.
[  277.540066][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'.
[  277.599513][ T6873] team0: Port device team_slave_0 removed
[  278.222231][ T6937] lo: entered promiscuous mode
[  278.227194][ T6937] lo: entered allmulticast mode
[  278.258314][ T6937] tunl0: entered promiscuous mode
[  278.263407][ T6937] tunl0: entered allmulticast mode
[  278.280270][ T6937] gre0: entered promiscuous mode
[  278.285353][ T6937] gre0: entered allmulticast mode
[  278.309419][ T6937] gretap0: entered promiscuous mode
[  278.314692][ T6937] gretap0: entered allmulticast mode
[  278.353835][ T6937] erspan0: entered promiscuous mode
[  278.359254][ T6937] erspan0: entered allmulticast mode
[  278.381301][ T6937] ip_vti0: entered promiscuous mode
[  278.386645][ T6937] ip_vti0: entered allmulticast mode
[  278.413282][ T6937] ip6_vti0: entered promiscuous mode
[  278.418674][ T6937] ip6_vti0: entered allmulticast mode
[  278.442327][ T6937] sit0: entered promiscuous mode
[  278.447541][ T6937] sit0: entered allmulticast mode
[  278.481026][ T6937] ip6tnl0: entered promiscuous mode
[  278.486378][ T6937] ip6tnl0: entered allmulticast mode
[  278.503617][ T6937] ip6gre0: entered promiscuous mode
[  278.509155][ T6937] ip6gre0: entered allmulticast mode
[  278.538304][ T6937] ip6gretap0: entered promiscuous mode
[  278.543827][ T6937] ip6gretap0: entered allmulticast mode
[  278.559141][ T6937] vcan0: entered promiscuous mode
[  278.564338][ T6937] vcan0: entered allmulticast mode
[  278.573696][ T6937] bond0: entered promiscuous mode
[  278.578914][ T6937] bond_slave_0: entered promiscuous mode
[  278.584825][ T6937] bond_slave_1: entered promiscuous mode
[  278.590599][ T6937] bond0: entered allmulticast mode
[  278.595761][ T6937] bond_slave_0: entered allmulticast mode
[  278.601683][ T6937] bond_slave_1: entered allmulticast mode
[  278.649437][ T6937] team0: entered promiscuous mode
[  278.654632][ T6937] team_slave_0: entered promiscuous mode
[  278.660642][ T6937] team_slave_1: entered promiscuous mode
[  278.666647][ T6937] team0: entered allmulticast mode
[  278.667857][ T6981] loop2: detected capacity change from 0 to 7
[  278.671769][ T6937] team_slave_0: entered allmulticast mode
[  278.671790][ T6937] team_slave_1: entered allmulticast mode
[  278.691523][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.697135][ T6937] dummy0: entered promiscuous mode
[  278.700702][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  278.705865][ T6937] dummy0: entered allmulticast mode
[  278.717848][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.723922][ T6937] nlmon0: entered promiscuous mode
[  278.728110][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  278.728195][ T6981]  loop2: unable to read partition table
[  278.733284][ T6937] nlmon0: entered allmulticast mode
[  278.748792][ T6981] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  278.762513][ T6978] SELinux:  policydb version 1511829556 does not match my version range 15-34
[  278.771520][ T6937] caif0: entered promiscuous mode
[  278.776634][ T6937] caif0: entered allmulticast mode
[  278.776725][ T6978] SELinux: failed to load policy
[  278.781742][ T6937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.882699][ T6996] SELinux: syz.5.1139 (6996) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  278.952609][ T6994] loop2: detected capacity change from 0 to 8192
[  279.222190][ T7036] mmap: syz.1.1159 (7036): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  279.236387][ T7036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.254945][ T7036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.281396][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'.
[  279.332589][ T7043] loop2: detected capacity change from 0 to 512
[  279.369854][ T7043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.382561][ T7043] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.455684][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.715732][   T29] kauditd_printk_skb: 162 callbacks suppressed
[  279.715750][   T29] audit: type=1400 audit(2000000019.860:6802): avc:  denied  { compute_member } for  pid=7056 comm="syz.8.1167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  280.170884][ T7048] syz.2.1163 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  280.185329][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.2.1163 Tainted: G        W           6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  280.185362][ T7048] Tainted: [W]=WARN
[  280.185443][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  280.185456][ T7048] Call Trace:
[  280.185463][ T7048]  <TASK>
[  280.185478][ T7048]  dump_stack_lvl+0xf6/0x150
[  280.185503][ T7048]  dump_stack+0x15/0x1a
[  280.185524][ T7048]  dump_header+0x83/0x2d0
[  280.185558][ T7048]  oom_kill_process+0x341/0x4c0
[  280.185655][ T7048]  out_of_memory+0x9d1/0xc20
[  280.185701][ T7048]  mem_cgroup_out_of_memory+0x13f/0x190
[  280.185747][ T7048]  try_charge_memcg+0x59f/0x820
[  280.185782][ T7048]  obj_cgroup_charge_pages+0xc0/0x1a0
[  280.185828][ T7048]  __memcg_kmem_charge_page+0x9d/0x170
[  280.185860][ T7048]  __alloc_frozen_pages_noprof+0x1a6/0x360
[  280.185903][ T7048]  alloc_pages_mpol+0xb6/0x260
[  280.185983][ T7048]  alloc_pages_noprof+0xe8/0x130
[  280.186015][ T7048]  __vmalloc_node_range_noprof+0x6ea/0xe80
[  280.186066][ T7048]  __kvmalloc_node_noprof+0x311/0x520
[  280.186097][ T7048]  ? ip_set_alloc+0x1f/0x30
[  280.186211][ T7048]  ? ip_set_alloc+0x1f/0x30
[  280.186251][ T7048]  ip_set_alloc+0x1f/0x30
[  280.186423][ T7048]  hash_netiface_create+0x273/0x730
[  280.186467][ T7048]  ? __nla_parse+0x40/0x60
[  280.186505][ T7048]  ? __pfx_hash_netiface_create+0x10/0x10
[  280.186577][ T7048]  ip_set_create+0x3b6/0x970
[  280.186615][ T7048]  ? __nla_parse+0x40/0x60
[  280.186646][ T7048]  nfnetlink_rcv_msg+0x4ba/0x580
[  280.186775][ T7048]  netlink_rcv_skb+0x12f/0x230
[  280.186801][ T7048]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  280.186913][ T7048]  nfnetlink_rcv+0x187/0x1610
[  280.186946][ T7048]  ? __kfree_skb+0x102/0x150
[  280.187063][ T7048]  ? nlmon_xmit+0x51/0x60
[  280.187094][ T7048]  ? __kfree_skb+0x102/0x150
[  280.187143][ T7048]  ? consume_skb+0x49/0x160
[  280.187169][ T7048]  ? nlmon_xmit+0x51/0x60
[  280.187209][ T7048]  ? dev_hard_start_xmit+0x3d1/0x400
[  280.187291][ T7048]  ? __dev_queue_xmit+0xb76/0x20b0
[  280.187386][ T7048]  ? should_fail_ex+0x31/0x270
[  280.187411][ T7048]  ? ref_tracker_free+0x3b8/0x420
[  280.187450][ T7048]  ? __netlink_deliver_tap+0x4c6/0x4f0
[  280.187505][ T7048]  netlink_unicast+0x605/0x6c0
[  280.187614][ T7048]  netlink_sendmsg+0x609/0x720
[  280.187647][ T7048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.187705][ T7048]  __sock_sendmsg+0x140/0x180
[  280.187749][ T7048]  ____sys_sendmsg+0x350/0x4e0
[  280.187785][ T7048]  __sys_sendmsg+0x1a0/0x240
[  280.187832][ T7048]  __x64_sys_sendmsg+0x46/0x50
[  280.187911][ T7048]  x64_sys_call+0x26f3/0x2e10
[  280.187940][ T7048]  do_syscall_64+0xc9/0x1c0
[  280.188035][ T7048]  ? clear_bhb_loop+0x25/0x80
[  280.188063][ T7048]  ? clear_bhb_loop+0x25/0x80
[  280.188091][ T7048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.188122][ T7048] RIP: 0033:0x7f597319d169
[  280.188139][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.188228][ T7048] RSP: 002b:00007f5971807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.188247][ T7048] RAX: ffffffffffffffda RBX: 00007f59733b5fa0 RCX: 00007f597319d169
[  280.188261][ T7048] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  280.188277][ T7048] RBP: 00007f597321e2a0 R08: 0000000000000000 R09: 0000000000000000
[  280.188292][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.188307][ T7048] R13: 0000000000000000 R14: 00007f59733b5fa0 R15: 00007ffcbcfca768
[  280.188329][ T7048]  </TASK>
[  280.188337][ T7048] memory: usage 307200kB, limit 307200kB, failcnt 373
[  280.223262][ T7084] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  280.224059][ T7048] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0
[  280.224078][ T7048] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0
[  280.232572][ T7084] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  280.232803][ T7048] Memory cgroup stats for /syz2:
[  280.572996][ T7048] cache 69632
[  280.581291][ T7048] rss 0
[  280.584129][ T7048] shmem 0
[  280.587255][ T7048] mapped_file 69632
[  280.591144][ T7048] dirty 20480
[  280.594666][ T7048] writeback 0
[  280.598047][ T7048] workingset_refault_anon 80
[  280.602689][ T7048] workingset_refault_file 335
[  280.607486][ T7048] swap 286720
[  280.610808][ T7048] swapcached 0
[  280.614228][ T7048] pgpgin 66306
[  280.617718][ T7048] pgpgout 66288
[  280.621190][ T7048] pgfault 55184
[  280.624659][ T7048] pgmajfault 81
[  280.628152][ T7048] inactive_anon 0
[  280.631819][ T7048] active_anon 0
[  280.636475][ T7048] inactive_file 73728
[  280.640476][ T7048] active_file 0
[  280.644006][ T7048] unevictable 0
[  280.648036][ T7048] hierarchical_memory_limit 314572800
[  280.653467][ T7048] hierarchical_memsw_limit 9223372036854771712
[  280.659711][ T7048] total_cache 69632
[  280.663526][ T7048] total_rss 0
[  280.666833][ T7048] total_shmem 0
[  280.670382][ T7048] total_mapped_file 69632
[  280.674762][ T7048] total_dirty 20480
[  280.678580][ T7048] total_writeback 0
[  280.682397][ T7048] total_workingset_refault_anon 80
[  280.687618][ T7048] total_workingset_refault_file 335
[  280.692820][ T7048] total_swap 286720
[  280.696730][ T7048] total_swapcached 0
[  280.700632][ T7048] total_pgpgin 66306
[  280.704533][ T7048] total_pgpgout 66288
[  280.708624][ T7048] total_pgfault 55184
[  280.712708][ T7048] total_pgmajfault 81
[  280.716759][ T7048] total_inactive_anon 0
[  280.720920][ T7048] total_active_anon 0
[  280.725118][ T7048] total_inactive_file 73728
[  280.729621][ T7048] total_active_file 0
[  280.733594][ T7048] total_unevictable 0
[  280.737600][ T7048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1163,pid=7047,uid=0
[  280.752407][ T7048] Memory cgroup out of memory: Killed process 7047 (syz.2.1163) total-vm:95768kB, anon-rss:916kB, file-rss:21996kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  280.900603][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'.
[  280.965721][ T7103] netlink: 'syz.5.1188': attribute type 23 has an invalid length.
[  280.973578][ T7103] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1188'.
[  281.137932][ T7119] vhci_hcd: invalid port number 0
[  281.304641][   T29] audit: type=1400 audit(2000000021.440:6803): avc:  granted  { setsecparam } for  pid=7140 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  281.372621][   T29] audit: type=1400 audit(2000000021.510:6804): avc:  denied  { write } for  pid=7149 comm="syz.8.1212" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  281.469323][ T7161] loop2: detected capacity change from 0 to 512
[  281.490720][ T7161] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  281.499879][ T7161] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  281.531550][ T7169] netlink: 'syz.5.1220': attribute type 4 has an invalid length.
[  281.542137][ T7161] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  281.552587][ T7161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  281.562385][ T7169] netlink: 'syz.5.1220': attribute type 4 has an invalid length.
[  281.570316][ T7161] System zones: 0-2, 18-18, 34-34
[  281.578542][ T7166] SELinux: failed to load policy
[  281.583744][ T7161] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  281.604440][ T7161] EXT4-fs (loop2): 1 truncate cleaned up
[  281.610641][ T7161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.649861][ T7179] netlink: 'syz.4.1224': attribute type 12 has an invalid length.
[  281.657870][ T7179] netlink: 'syz.4.1224': attribute type 29 has an invalid length.
[  281.665758][ T7179] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1224'.
[  281.674829][ T7179] netlink: 'syz.4.1224': attribute type 2 has an invalid length.
[  281.682575][ T7179] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1224'.
[  281.693823][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.771036][ T7189] netlink: 332 bytes leftover after parsing attributes in process `syz.8.1230'.
[  281.791840][ T7191] program syz.2.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.794798][ T7189] netlink: 'syz.8.1230': attribute type 9 has an invalid length.
[  281.808929][ T7189] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1230'.
[  281.994819][ T7202] loop2: detected capacity change from 0 to 2048
[  282.051007][ T7202] Alternate GPT is invalid, using primary GPT.
[  282.057331][ T7202]  loop2: p1 p2 p3
[  282.325280][ T7216] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7216 comm=syz.2.1242
[  282.337864][ T7216] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7216 comm=syz.2.1242
[  282.456130][ T7218] loop2: detected capacity change from 0 to 4096
[  282.489299][ T7218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.538113][   T29] audit: type=1400 audit(2000000022.680:6805): avc:  denied  { rmdir } for  pid=5670 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  282.564317][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.613701][   T29] audit: type=1400 audit(2000000022.680:6806): avc:  denied  { unlink } for  pid=5670 comm="syz-executor" name=66696C6507 dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  282.687142][ T7221] xt_hashlimit: max too large, truncated to 1048576
[  282.710853][   T29] audit: type=1326 audit(2000000022.840:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b41dd169 code=0x7ffc0000
[  282.734438][   T29] audit: type=1326 audit(2000000022.840:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b41dd169 code=0x7ffc0000
[  282.757941][   T29] audit: type=1326 audit(2000000022.850:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b41dd169 code=0x7ffc0000
[  282.781354][   T29] audit: type=1326 audit(2000000022.850:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b41dd169 code=0x7ffc0000
[  282.785736][ T7221] Cannot find set identified by id 0 to match
[  282.804856][   T29] audit: type=1326 audit(2000000022.850:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b41dd169 code=0x7ffc0000
[  282.983205][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.007417][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.094229][ T7237] serio: Serial port ptm0
[  283.396519][ T7250] loop2: detected capacity change from 0 to 512
[  283.403491][ T7250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  283.425436][ T7250] EXT4-fs (loop2): 1 truncate cleaned up
[  283.431588][ T7250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.462485][ T7257] netlink: 'syz.1.1260': attribute type 27 has an invalid length.
[  283.475836][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.502425][ T7261] loop2: detected capacity change from 0 to 512
[  283.520271][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.527606][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.548985][ T7257] 0�X���: left allmulticast mode
[  283.558786][ T7261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.571885][ T7261] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.618449][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.629077][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.660320][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.677381][ T7277] loop2: detected capacity change from 0 to 512
[  283.695400][ T7280] __nla_validate_parse: 1 callbacks suppressed
[  283.695420][ T7280] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1269'.
[  283.708989][ T7277] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  283.726320][ T7277] EXT4-fs (loop2): mount failed
[  283.744898][ T7257] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.753927][ T7257] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.763002][ T7257] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.772084][ T7257] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.809897][ T7287] SELinux: failed to load policy
[  283.840109][ T7290] netlink: 24 bytes leftover after parsing attributes in process `wg1'.
[  284.266454][ T7333] SELinux: syz.5.1292 (7333) set checkreqprot to 1. This is no longer supported.
[  284.312622][ T7338] smc: net device bond0 erased user defined pnetid SYZ0
[  284.360186][ T7342] netlink: 'syz.5.1298': attribute type 10 has an invalid length.
[  284.371120][ T7342] team0: Device hsr_slave_0 failed to register rx_handler
[  284.565182][ T7355] loop2: detected capacity change from 0 to 8192
[  284.728568][   T29] kauditd_printk_skb: 37 callbacks suppressed
[  284.728585][   T29] audit: type=1400 audit(2000000024.870:6848): avc:  denied  { prog_run } for  pid=7365 comm="syz.8.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  284.795014][   T29] audit: type=1400 audit(2000000024.910:6849): avc:  denied  { allowed } for  pid=7365 comm="syz.8.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  284.814411][   T29] audit: type=1400 audit(2000000024.910:6850): avc:  denied  { create } for  pid=7365 comm="syz.8.1307" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  284.835826][   T29] audit: type=1400 audit(2000000024.910:6851): avc:  denied  { map } for  pid=7365 comm="syz.8.1307" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  284.860118][   T29] audit: type=1400 audit(2000000024.910:6852): avc:  denied  { read write } for  pid=7365 comm="syz.8.1307" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  284.885020][   T29] audit: type=1326 audit(2000000024.910:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5556fd169 code=0x7fc00000
[  284.921988][   T29] audit: type=1400 audit(2000000025.050:6854): avc:  denied  { create } for  pid=7367 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  284.941789][   T29] audit: type=1400 audit(2000000025.050:6855): avc:  denied  { setopt } for  pid=7367 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  284.961645][   T29] audit: type=1400 audit(2000000025.060:6856): avc:  denied  { ioctl } for  pid=7367 comm="syz.1.1308" path="socket:[19149]" dev="sockfs" ino=19149 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  285.012584][   T29] audit: type=1400 audit(2000000025.150:6857): avc:  denied  { map_create } for  pid=7369 comm="syz.8.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  285.165701][ T7373] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  285.173328][ T7375] netlink: 'syz.4.1311': attribute type 27 has an invalid length.
[  285.174098][ T7373] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  285.288847][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.296137][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.366698][ T7375] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.388107][ T7375] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.457097][ T7375] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.466254][ T7375] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.475263][ T7375] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.484151][ T7375] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.584613][ T7378] syzkaller0: entered promiscuous mode
[  285.590167][ T7378] syzkaller0: entered allmulticast mode
[  285.693408][ T7389] block device autoloading is deprecated and will be removed.
[  285.711845][ T7389] syz.4.1317: attempt to access beyond end of device
[  285.711845][ T7389] md28: rw=2048, sector=0, nr_sectors = 8 limit=0
[  286.057886][ T7419] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1330'.
[  286.067174][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'.
[  286.097007][ T7421] usb usb1: usbfs: process 7421 (syz.8.1329) did not claim interface 63 before use
[  286.126710][ T7423] program syz.5.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  286.230962][ T7435] xt_CT: No such helper "snmp_trap"
[  286.235161][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.243790][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.251242][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.262883][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.270408][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.278012][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.285456][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.292859][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.300341][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.307808][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.315379][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.322766][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.330216][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.337649][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.345554][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.353010][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.353220][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.360493][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.367630][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.374855][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.388143][ T7446] bridge0: entered allmulticast mode
[  286.389236][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.400439][ T7448] bridge_slave_1: left allmulticast mode
[  286.402602][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.407580][ T7448] bridge_slave_1: left promiscuous mode
[  286.407790][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.415078][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.435277][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.442743][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.450181][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.457588][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.465039][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.472454][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.479895][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  286.488500][ T7448] bridge_slave_0: left allmulticast mode
[  286.488528][ T3381] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  286.494195][ T7448] bridge_slave_0: left promiscuous mode
[  286.509602][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.576065][ T7442] syzkaller0: entered promiscuous mode
[  286.581664][ T7442] syzkaller0: entered allmulticast mode
[  286.770800][ T7476] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1353'.
[  286.828979][ T7486] loop2: detected capacity change from 0 to 1024
[  286.846739][ T7486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.871609][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.890292][ T7492] Cannot find set identified by id 0 to match
[  286.916965][ T7494] siw: device registration error -23
[  287.098367][ T7498] loop2: detected capacity change from 0 to 2048
[  287.105099][ T7498] EXT4-fs: Ignoring removed mblk_io_submit option
[  287.116640][ T7498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.224386][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.604891][ T3381] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  287.613609][ T3381] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  287.721355][ T7550] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1384'.
[  287.749555][ T7552] loop2: detected capacity change from 0 to 512
[  287.765382][ T7552] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  287.774471][ T7552] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  287.793576][ T7552] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  287.808063][ T7552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  287.827709][ T7552] System zones: 0-2, 18-18, 34-34
[  287.834917][ T7552] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  287.853831][ T7552] EXT4-fs (loop2): 1 truncate cleaned up
[  287.860980][ T7558] syzkaller0: entered promiscuous mode
[  287.866568][ T7558] syzkaller0: entered allmulticast mode
[  287.867038][ T7552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.906940][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.967403][ T7560] loop2: detected capacity change from 0 to 8192
[  287.997288][ T7560]  loop2: p2 p3 p4
[  288.001562][ T7560] loop2: p2 start 452985600 is beyond EOD, truncated
[  288.008330][ T7560] loop2: p3 size 33554432 extends beyond EOD, truncated
[  288.019134][ T7560] loop2: p4 start 8388607 is beyond EOD, truncated
[  288.033936][ T7566] syzkaller0: entered promiscuous mode
[  288.039513][ T7566] syzkaller0: entered allmulticast mode
[  288.050250][ T7568] bridge0: entered allmulticast mode
[  288.057026][ T7568] bridge_slave_1: left allmulticast mode
[  288.062709][ T7568] bridge_slave_1: left promiscuous mode
[  288.068538][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.079943][ T7568] bridge_slave_0: left allmulticast mode
[  288.085762][ T7568] bridge_slave_0: left promiscuous mode
[  288.091556][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.373682][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'.
[  288.426641][ T7605] bridge0: entered allmulticast mode
[  288.444951][ T7605] bridge_slave_1: left allmulticast mode
[  288.450693][ T7605] bridge_slave_1: left promiscuous mode
[  288.456434][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.470998][ T7605] bridge_slave_0: left allmulticast mode
[  288.476865][ T7605] bridge_slave_0: left promiscuous mode
[  288.482523][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.545713][ T7609] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  288.904490][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1427'.
[  288.921233][ T7621] chnl_net:caif_netlink_parms(): no params data found
[  289.018639][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.026030][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.037253][ T7621] bridge_slave_0: entered allmulticast mode
[  289.044113][ T7621] bridge_slave_0: entered promiscuous mode
[  289.054276][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.061488][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.068872][ T7621] bridge_slave_1: entered allmulticast mode
[  289.075514][ T7621] bridge_slave_1: entered promiscuous mode
[  289.101274][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.112807][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.147021][ T7751] loop2: detected capacity change from 0 to 2048
[  289.157266][ T7621] team0: Port device team_slave_0 added
[  289.164644][ T7621] team0: Port device team_slave_1 added
[  289.179924][ T7751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.193178][ T7751] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.205391][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.212439][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.238424][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.255278][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.262283][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.288368][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.302076][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.352788][ T7621] hsr_slave_0: entered promiscuous mode
[  289.359213][ T7621] hsr_slave_1: entered promiscuous mode
[  289.361033][ T7841] loop2: detected capacity change from 0 to 128
[  289.365473][ T7621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.378922][ T7621] Cannot create hsr debugfs directory
[  289.412451][ T7855] sg_write: data in/out 93/14 bytes for SCSI command 0x0-- guessing data in;
[  289.412451][ T7855]    program syz.2.1439 not setting count and/or reply_len properly
[  289.465318][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.481174][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.761342][ T7621] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  289.775163][ T7621] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  289.788278][ T7621] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  289.802047][ T7621] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  289.951843][ T7949] chnl_net:caif_netlink_parms(): no params data found
[  290.080309][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.087472][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.095716][ T7949] bridge_slave_0: entered allmulticast mode
[  290.102614][ T7949] bridge_slave_0: entered promiscuous mode
[  290.112695][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.122801][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.129961][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.137888][ T7949] bridge_slave_1: entered allmulticast mode
[  290.144505][ T7949] bridge_slave_1: entered promiscuous mode
[  290.170578][ T7621] 8021q: adding VLAN 0 to HW filter on device team0
[  290.199868][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.207027][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.220344][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.237879][ T1785] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.245165][ T1785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.267312][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.289823][ T7621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  290.300298][ T7621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.346223][ T7949] team0: Port device team_slave_0 added
[  290.354315][ T7949] team0: Port device team_slave_1 added
[  290.420298][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.427465][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.453707][ T7949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.477248][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.484232][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.510989][ T7949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.563610][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.592387][ T7949] hsr_slave_0: entered promiscuous mode
[  290.600113][ T7949] hsr_slave_1: entered promiscuous mode
[  290.611019][ T7949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  290.630245][ T7949] Cannot create hsr debugfs directory
[  290.676893][   T29] kauditd_printk_skb: 155 callbacks suppressed
[  290.676964][   T29] audit: type=1400 audit(2000000030.820:7013): avc:  denied  { mount } for  pid=8270 comm="syz.4.1463" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  290.744079][   T29] audit: type=1400 audit(2000000030.880:7014): avc:  denied  { unmount } for  pid=6381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  290.779896][   T29] audit: type=1400 audit(2000000030.920:7015): avc:  denied  { write } for  pid=8306 comm="syz.4.1464" name="rt_acct" dev="proc" ino=4026535925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  290.803072][   T29] audit: type=1400 audit(2000000030.920:7016): avc:  denied  { create } for  pid=8306 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  290.822718][   T29] audit: type=1400 audit(2000000030.920:7017): avc:  denied  { connect } for  pid=8306 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  290.842510][   T29] audit: type=1400 audit(2000000030.920:7018): avc:  denied  { write } for  pid=8306 comm="syz.4.1464" path="socket:[21130]" dev="sockfs" ino=21130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  290.904418][ T7949] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.922546][ T7621] veth0_vlan: entered promiscuous mode
[  290.932190][ T7621] veth1_vlan: entered promiscuous mode
[  290.966451][ T7949] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.002033][ T8337] vhci_hcd: default hub control req: 800c v0000 i0000 l0
[  291.005536][ T7621] veth0_macvtap: entered promiscuous mode
[  291.029425][ T8339] netlink: 'syz.2.1471': attribute type 3 has an invalid length.
[  291.051870][ T7949] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.090446][   T29] audit: type=1400 audit(2000000031.230:7019): avc:  denied  { read } for  pid=8344 comm="syz.5.1474" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  291.113228][   T29] audit: type=1400 audit(2000000031.230:7020): avc:  denied  { open } for  pid=8344 comm="syz.5.1474" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  291.136849][   T29] audit: type=1400 audit(2000000031.230:7021): avc:  denied  { ioctl } for  pid=8344 comm="syz.5.1474" path="socket:[21194]" dev="sockfs" ino=21194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  291.162805][ T7621] veth1_macvtap: entered promiscuous mode
[  291.173538][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.184081][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.193995][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.204603][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.214470][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.224938][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.234786][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.245278][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.255132][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.265570][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.275397][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.285901][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.295901][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.306375][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.316251][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.326770][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.336613][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.347153][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.361909][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.376629][ T7949] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.400579][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.411180][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.421384][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.431899][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.441824][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.452292][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.462228][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.472704][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.482639][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.493122][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.503014][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.513497][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.523756][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.534307][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.544156][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.554634][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.564505][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.575003][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.598067][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.614283][ T7621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.623122][ T7621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.631972][ T7621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.640776][ T7621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.693093][   T29] audit: type=1400 audit(2000000031.830:7022): avc:  denied  { read write } for  pid=8371 comm="syz.2.1482" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  291.728519][ T7949] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  291.741357][ T8374] serio: Serial port ptm0
[  291.753389][ T7949] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  291.763310][ T7949] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  291.783310][ T7949] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  291.838893][ T8387] Invalid ELF header magic: != ELF
[  291.879746][ T8395] ������: renamed from vlan0 (while UP)
[  291.891241][ T8397] ������: renamed from vlan0 (while UP)
[  291.898380][ T8394] loop2: detected capacity change from 0 to 1024
[  291.918695][ T8394] EXT4-fs: test_dummy_encryption option not supported
[  291.934344][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.965807][ T7949] 8021q: adding VLAN 0 to HW filter on device team0
[  291.982183][ T1785] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.989308][ T1785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.017493][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.024602][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.222779][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.317227][ T8451] loop2: detected capacity change from 0 to 1024
[  292.337052][ T8451] EXT4-fs: Ignoring removed nomblk_io_submit option
[  292.368877][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.468528][ T7949] veth0_vlan: entered promiscuous mode
[  292.478335][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.497291][ T7949] veth1_vlan: entered promiscuous mode
[  292.559572][ T7949] veth0_macvtap: entered promiscuous mode
[  292.573371][ T7949] veth1_macvtap: entered promiscuous mode
[  292.592126][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.602719][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.612654][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.623138][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.633102][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.643662][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.653707][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.664275][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.674325][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.684829][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.694673][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.705233][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.715088][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.725589][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.735509][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.745982][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.755846][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.766354][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.771037][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'.
[  292.776201][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.776223][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.778022][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.825451][ T8486] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  292.869353][ T8488] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  292.874918][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.887861][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.897749][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.908217][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.918153][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.928685][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.938534][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.949041][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.959125][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.969663][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.979570][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.990026][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.999898][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.010364][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.020235][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.030716][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.041014][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.051496][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.061488][ T7949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.071955][ T7949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.090461][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.110923][ T7949] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.119865][ T7949] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.128653][ T7949] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.137470][ T7949] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.211942][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'.
[  293.231041][ T8503] bridge_slave_1: left allmulticast mode
[  293.236875][ T8503] bridge_slave_1: left promiscuous mode
[  293.242586][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.255493][ T8503] bridge_slave_0: left allmulticast mode
[  293.261231][ T8503] bridge_slave_0: left promiscuous mode
[  293.267206][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.448327][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.457353][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.654896][ T8562] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  294.041905][ T8584] loop2: detected capacity change from 0 to 512
[  294.057276][ T8584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.070184][ T8584] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  294.115185][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.203413][ T8595] capability: warning: `syz.2.1544' uses 32-bit capabilities (legacy support in use)
[  294.234585][ T8607] loop2: detected capacity change from 0 to 512
[  294.250691][ T8607] EXT4-fs (loop2): 1 orphan inode deleted
[  294.260488][ T8607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.273308][ T1725] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1
[  294.290833][ T8607] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.319502][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.338257][ T8620] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  294.769625][ T8664] loop3: detected capacity change from 0 to 1024
[  294.778870][ T8664] EXT4-fs: Ignoring removed nomblk_io_submit option
[  294.809025][ T8664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.859723][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.913414][ T8681] loop3: detected capacity change from 0 to 512
[  294.943045][ T8681] EXT4-fs (loop3): 1 orphan inode deleted
[  294.949785][ T8681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.963306][   T86] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1
[  294.981506][ T8681] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.014200][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.104497][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'.
[  295.149451][ T8716] loop3: detected capacity change from 0 to 512
[  295.159053][ T8716] EXT4-fs: Ignoring removed oldalloc option
[  295.170407][ T8720] loop2: detected capacity change from 0 to 1024
[  295.190407][ T8716] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1580: Parent and EA inode have the same ino 15
[  295.190963][ T8720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.210054][ T8716] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1580: Parent and EA inode have the same ino 15
[  295.231427][ T8716] EXT4-fs (loop3): 1 orphan inode deleted
[  295.237687][ T8716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.269770][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.307372][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.407252][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'.
[  295.429418][ T8751] hsr_slave_1 (unregistering): left promiscuous mode
[  295.485341][ T8771] loop2: detected capacity change from 0 to 128
[  295.492321][ T8771] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  295.505671][ T8771] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  295.619656][ T8781] loop2: detected capacity change from 0 to 128
[  295.626868][ T8781] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  295.639790][ T8781] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  295.655275][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1591'.
[  295.694462][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  295.694479][   T29] audit: type=1400 audit(2000000035.830:7061): avc:  denied  { read } for  pid=8729 comm="syz.3.1584" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  295.733736][   T29] audit: type=1400 audit(2000000035.860:7062): avc:  denied  { map_create } for  pid=8790 comm="syz.5.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  295.753139][   T29] audit: type=1400 audit(2000000035.860:7063): avc:  denied  { map_read map_write } for  pid=8790 comm="syz.5.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  295.773084][   T29] audit: type=1400 audit(2000000035.860:7064): avc:  denied  { prog_load } for  pid=8790 comm="syz.5.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  295.792232][   T29] audit: type=1400 audit(2000000035.860:7065): avc:  denied  { bpf } for  pid=8790 comm="syz.5.1593" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  295.812803][   T29] audit: type=1400 audit(2000000035.860:7066): avc:  denied  { perfmon } for  pid=8790 comm="syz.5.1593" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  295.833705][   T29] audit: type=1400 audit(2000000035.860:7067): avc:  denied  { prog_run } for  pid=8790 comm="syz.5.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  295.852848][   T29] audit: type=1400 audit(2000000035.870:7068): avc:  denied  { read write } for  pid=5670 comm="syz-executor" name="loop2" dev="devtmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  295.877104][   T29] audit: type=1400 audit(2000000035.870:7069): avc:  denied  { open } for  pid=5670 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  295.901191][   T29] audit: type=1400 audit(2000000035.870:7070): avc:  denied  { ioctl } for  pid=5670 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=586 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  295.952020][ T8796] Falling back ldisc for ptm0.
[  296.060907][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'.
[  296.113934][ T8836] SELinux: syz.9.1608 (8836) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  296.304424][ T8858] loop3: detected capacity change from 0 to 2048
[  296.326934][ T8864] Falling back ldisc for ptm0.
[  296.340066][ T8858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.441666][ T8884] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1625'.
[  296.450972][ T8884] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1625'.
[  296.800298][ T8858] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  296.817530][ T8858] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  296.830235][ T8858] EXT4-fs (loop3): This should not happen!! Data will be lost
[  296.830235][ T8858] 
[  296.839944][ T8858] EXT4-fs (loop3): Total free blocks count 0
[  296.845984][ T8858] EXT4-fs (loop3): Free/Dirty block details
[  296.851954][ T8858] EXT4-fs (loop3): free_blocks=2415919104
[  296.857722][ T8858] EXT4-fs (loop3): dirty_blocks=8208
[  296.863164][ T8858] EXT4-fs (loop3): Block reservation details
[  296.869220][ T8858] EXT4-fs (loop3): i_reserved_data_blocks=513
[  296.949858][ T1725] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  297.778121][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.786068][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.794046][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.802398][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.810268][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.818144][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.826127][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.833932][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.841767][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.849800][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.857884][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.865689][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.873533][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.881390][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.891038][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.898843][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.906644][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.914430][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.922647][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.930859][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.938663][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.946630][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.954467][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.962275][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.970072][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.977966][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.985934][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  297.993711][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  298.001650][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  298.009509][ T4705] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0
[  298.030447][ T9019] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  298.053532][ T4705] hid-generic 0000:0000:20000000.0008: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  298.064954][ T9011] Falling back ldisc for ttyS3.
[  298.213331][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'.
[  298.266222][ T9081] netlink: 'syz.9.1679': attribute type 30 has an invalid length.
[  298.297209][ T9083] loop3: detected capacity change from 0 to 512
[  298.308462][ T9083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  298.330007][ T9083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.348140][ T9083] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.366617][ T9083] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  298.376994][ T9083] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  298.414195][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.489594][ T9121] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  298.536180][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'.
[  298.686418][ T9172] Falling back ldisc for ptm0.
[  298.771356][ T9190] 9pnet: p9_errstr2errno: server reported unknown error 
[  298.875190][ T9203] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1711'.
[  298.884423][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'.
[  298.923722][ T9208] Falling back ldisc for ptm0.
[  299.090212][ T9250] Falling back ldisc for ptm1.
[  299.802656][ T9280] loop2: detected capacity change from 0 to 512
[  299.818096][ T9280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.831169][ T9280] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.890964][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.899900][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.940046][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.011762][ T9302] Falling back ldisc for ptm0.
[  300.040535][ T9312] loop2: detected capacity change from 0 to 512
[  300.069709][ T9312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.085482][ T9312] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.109497][ T9312] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  300.145560][ T9312] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  300.158014][ T9312] EXT4-fs (loop2): This should not happen!! Data will be lost
[  300.158014][ T9312] 
[  300.167714][ T9312] EXT4-fs (loop2): Total free blocks count 0
[  300.173756][ T9312] EXT4-fs (loop2): Free/Dirty block details
[  300.179700][ T9312] EXT4-fs (loop2): free_blocks=65280
[  300.185074][ T9312] EXT4-fs (loop2): dirty_blocks=1
[  300.190563][ T9312] EXT4-fs (loop2): Block reservation details
[  300.196703][ T9312] EXT4-fs (loop2): i_reserved_data_blocks=1
[  300.217525][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.283596][ T9327] SELinux: failed to load policy
[  300.315776][ T9333] loop2: detected capacity change from 0 to 512
[  300.322941][ T9333] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  300.332477][ T9333] EXT4-fs (loop2): invalid journal inode
[  300.338978][ T9333] EXT4-fs (loop2): can't get journal size
[  300.345280][ T9333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  300.353366][ T9333] System zones: 1-12, 13-13
[  300.358696][ T9333] EXT4-fs (loop2): 1 truncate cleaned up
[  300.364984][ T9333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.391676][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.488245][ T9356] loop2: detected capacity change from 0 to 512
[  300.497433][ T9356] EXT4-fs: Ignoring removed oldalloc option
[  300.507836][ T9356] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1759: Parent and EA inode have the same ino 15
[  300.521763][ T9356] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1759: Parent and EA inode have the same ino 15
[  300.539178][ T9356] EXT4-fs (loop2): 1 orphan inode deleted
[  300.545827][ T9356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.577427][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.660555][ T9392] loop2: detected capacity change from 0 to 2048
[  300.686954][ T9392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.893955][ T9392] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  300.908858][ T9392] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  300.921374][ T9392] EXT4-fs (loop2): This should not happen!! Data will be lost
[  300.921374][ T9392] 
[  300.931098][ T9392] EXT4-fs (loop2): Total free blocks count 0
[  300.937133][ T9392] EXT4-fs (loop2): Free/Dirty block details
[  300.943139][ T9392] EXT4-fs (loop2): free_blocks=2415919104
[  300.948910][ T9392] EXT4-fs (loop2): dirty_blocks=8208
[  300.954282][ T9392] EXT4-fs (loop2): Block reservation details
[  300.960323][ T9392] EXT4-fs (loop2): i_reserved_data_blocks=513
[  301.017838][   T86] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  301.234821][   T29] kauditd_printk_skb: 257 callbacks suppressed
[  301.234840][   T29] audit: type=1400 audit(2000000041.380:7328): avc:  denied  { create } for  pid=9403 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  301.261329][   T29] audit: type=1400 audit(2000000041.380:7329): avc:  denied  { bind } for  pid=9403 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  301.280790][   T29] audit: type=1400 audit(2000000041.380:7330): avc:  denied  { name_bind } for  pid=9403 comm="syz.5.1770" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  301.301674][   T29] audit: type=1400 audit(2000000041.380:7331): avc:  denied  { node_bind } for  pid=9403 comm="syz.5.1770" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  301.322955][   T29] audit: type=1400 audit(2000000041.410:7332): avc:  denied  { listen } for  pid=9403 comm="syz.5.1770" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  301.343739][   T29] audit: type=1400 audit(2000000041.410:7333): avc:  denied  { connect } for  pid=9403 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  301.363366][   T29] audit: type=1400 audit(2000000041.410:7334): avc:  denied  { name_connect } for  pid=9403 comm="syz.5.1770" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  301.509270][   T29] audit: type=1400 audit(2000000041.650:7335): avc:  denied  { ioctl } for  pid=9405 comm="syz.3.1771" path="socket:[24272]" dev="sockfs" ino=24272 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  301.534965][   T29] audit: type=1400 audit(2000000041.650:7336): avc:  denied  { write } for  pid=9405 comm="syz.3.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  301.962667][ T9408] GUP no longer grows the stack in syz.2.1772 (9408): 200000004000-20000000a000 (200000002000)
[  301.973205][ T9408] CPU: 1 UID: 0 PID: 9408 Comm: syz.2.1772 Tainted: G        W           6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  301.973234][ T9408] Tainted: [W]=WARN
[  301.973240][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  301.973251][ T9408] Call Trace:
[  301.973257][ T9408]  <TASK>
[  301.973284][ T9408]  dump_stack_lvl+0xf6/0x150
[  301.973308][ T9408]  dump_stack+0x15/0x1a
[  301.973355][ T9408]  __get_user_pages+0x1dc1/0x2340
[  301.973386][ T9408]  get_user_pages_remote+0x1f4/0x800
[  301.973415][ T9408]  __access_remote_vm+0x160/0x590
[  301.973460][ T9408]  access_remote_vm+0x34/0x50
[  301.973477][ T9408]  proc_pid_cmdline_read+0x3fd/0x720
[  301.973510][ T9408]  vfs_readv+0x3e5/0x660
[  301.973573][ T9408]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  301.973610][ T9408]  __x64_sys_preadv+0xf9/0x1c0
[  301.973652][ T9408]  x64_sys_call+0x1410/0x2e10
[  301.973687][ T9408]  do_syscall_64+0xc9/0x1c0
[  301.973712][ T9408]  ? clear_bhb_loop+0x25/0x80
[  301.973753][ T9408]  ? clear_bhb_loop+0x25/0x80
[  301.973773][ T9408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.973792][ T9408] RIP: 0033:0x7f597319d169
[  301.973805][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.973821][ T9408] RSP: 002b:00007f5971807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  301.973908][ T9408] RAX: ffffffffffffffda RBX: 00007f59733b5fa0 RCX: 00007f597319d169
[  301.973919][ T9408] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005
[  301.973950][ T9408] RBP: 00007f597321e2a0 R08: 00000000fffffff9 R09: 0000000000000000
[  301.973960][ T9408] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000
[  301.973971][ T9408] R13: 0000000000000000 R14: 00007f59733b5fa0 R15: 00007ffcbcfca768
[  301.974038][ T9408]  </TASK>
[  302.215720][   T29] audit: type=1400 audit(2000000042.350:7337): avc:  denied  { write } for  pid=9413 comm="syz.2.1775" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  302.307573][ T9428] syzkaller0: entered allmulticast mode
[  302.497134][ T9464] __nla_validate_parse: 2 callbacks suppressed
[  302.497154][ T9464] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1792'.
[  302.497274][ T9464] unsupported nlmsg_type 40
[  302.525335][ T9468] can0: slcan on ttyS3.
[  302.564954][ T9468] can0 (unregistered): slcan off ttyS3.
[  302.572073][ T9468] Falling back ldisc for ttyS3.
[  302.931418][ T9516] loop3: detected capacity change from 0 to 8192
[  302.946555][ T9528] veth1_to_bond: entered allmulticast mode
[  302.950288][ T9516] syz.3.1807: attempt to access beyond end of device
[  302.950288][ T9516] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  302.966803][ T9528] lo: entered promiscuous mode
[  302.972130][ T9527] lo: left promiscuous mode
[  302.977066][ T9527] veth1_to_bond: left allmulticast mode
[  302.978465][ T9516] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  302.990523][ T9516] FAT-fs (loop3): Filesystem has been set read-only
[  303.003016][ T9516] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  303.011357][ T9516] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  303.027944][ T9532] xt_connbytes: Forcing CT accounting to be enabled
[  303.054060][ T9532] Cannot find set identified by id 0 to match
[  303.190105][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1828'.
[  303.597016][ T9617] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  303.606805][ T9617] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  303.639763][ T9621] loop2: detected capacity change from 0 to 512
[  303.658895][ T9621] EXT4-fs (loop2): 1 orphan inode deleted
[  303.665583][ T9619] can0: slcan on ttyS3.
[  303.672121][ T9621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.675925][ T3426] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1
[  303.698747][ T9621] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.731812][ T5670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.744999][ T9619] can0 (unregistered): slcan off ttyS3.
[  303.750688][ T9619] Falling back ldisc for ttyS3.
[  303.794220][ T9638] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  303.945298][ T9652] usb usb8: usbfs: process 9652 (syz.9.1857) did not claim interface 0 before use
[  304.015722][ T9661] can0: slcan on ttyS3.
[  304.116838][ T9661] can0 (unregistered): slcan off ttyS3.
[  304.125905][ T9661] Falling back ldisc for ttyS3.
[  304.167655][ T9707] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  304.179478][ T9707] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  304.963780][ T9739] sg_write: data in/out 987/14 bytes for SCSI command 0x6-- guessing data in;
[  304.963780][ T9739]    program syz.2.1882 not setting count and/or reply_len properly
[  305.034513][ T9749] 9pnet_fd: Insufficient options for proto=fd
[  305.085406][ T9755] xt_connbytes: Forcing CT accounting to be enabled
[  305.094373][ T9755] Cannot find set identified by id 0 to match
[  305.115068][ T9757] loop3: detected capacity change from 0 to 512
[  305.124532][ T9757] EXT4-fs (loop3): orphan cleanup on readonly fs
[  305.148776][ T9757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1890: bg 0: block 248: padding at end of block bitmap is not set
[  305.166969][ T9757] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1890: Failed to acquire dquot type 1
[  305.180116][ T9757] EXT4-fs (loop3): 1 truncate cleaned up
[  305.197430][ T9757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  305.228670][ T9757] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  305.272169][ T9757] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  305.303563][ T9783] netlink: 'syz.2.1899': attribute type 13 has an invalid length.
[  305.323584][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.360611][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1902'.
[  305.404031][ T9790] hub 9-0:1.0: USB hub found
[  305.435222][ T9790] hub 9-0:1.0: 8 ports detected
[  305.752396][ T9819] SELinux: ebitmap: truncated map
[  305.794657][ T9819] SELinux: failed to load policy
[  306.286323][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.330300][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.477544][ T9783] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.486745][ T9783] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.495725][ T9783] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.504675][ T9783] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.557292][ T9823] can0: slcan on ttyS3.
[  306.593674][ T9851] netlink: 'syz.3.1916': attribute type 3 has an invalid length.
[  306.605696][ T9824] can0 (unregistered): slcan off ttyS3.
[  306.611339][ T9824] Falling back ldisc for ttyS3.
[  306.616286][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  306.616312][   T29] audit: type=1400 audit(2000000046.750:7542): avc:  denied  { create } for  pid=9845 comm="syz.2.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  306.722534][   T29] audit: type=1400 audit(2000000046.860:7543): avc:  denied  { create } for  pid=9863 comm="syz.3.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  306.795487][   T29] audit: type=1400 audit(2000000046.910:7544): avc:  denied  { write } for  pid=9863 comm="syz.3.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  306.802939][ T9868] ip6gre1: entered allmulticast mode
[  306.830480][   T29] audit: type=1400 audit(2000000046.960:7545): avc:  denied  { shutdown } for  pid=9861 comm="syz.4.1919" lport=42499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  306.868494][   T29] audit: type=1400 audit(2000000047.010:7546): avc:  denied  { associate } for  pid=9891 comm="syz.4.1924" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  306.925684][   T29] audit: type=1400 audit(2000000047.060:7547): avc:  denied  { setopt } for  pid=9895 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  306.945846][   T29] audit: type=1400 audit(2000000047.060:7548): avc:  denied  { read } for  pid=9895 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  306.988341][   T29] audit: type=1400 audit(2000000047.080:7549): avc:  denied  { name_connect } for  pid=9897 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  307.008903][   T29] audit: type=1400 audit(2000000047.090:7550): avc:  denied  { listen } for  pid=9897 comm="syz.2.1926" lport=43557 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  307.032096][   T29] audit: type=1400 audit(2000000047.090:7551): avc:  denied  { accept } for  pid=9897 comm="syz.2.1926" lport=43557 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  307.436294][ T9947] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  307.466908][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1942'.
[  307.478289][ T9949] IPVS: Error joining to the multicast group
[  307.715631][ T9969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7846 sclass=netlink_route_socket pid=9969 comm=syz.3.1949
[  307.736993][ T9969] netlink: 'syz.3.1949': attribute type 5 has an invalid length.
[  307.822052][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'.
[  307.846623][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.875916][ T9978] bridge_slave_1 (unregistering): left allmulticast mode
[  307.883012][ T9978] bridge_slave_1 (unregistering): left promiscuous mode
[  307.890197][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.204379][T10015] tipc: Started in network mode
[  308.209444][T10015] tipc: Node identity ac14140f, cluster identity 4711
[  308.244928][T10015] tipc: New replicast peer: 10.1.1.2
[  308.250358][T10015] tipc: Enabled bearer <udp:syz0>, priority 10
[  308.333798][T10023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10023 comm=syz.3.1968
[  308.346538][T10023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10023 comm=syz.3.1968
[  308.451579][T10026] vlan0: entered allmulticast mode
[  308.866653][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'.
[  309.244850][ T9835] tipc: Node number set to 2886997007
[  309.381181][T10121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7846 sclass=netlink_route_socket pid=10121 comm=syz.5.1993
[  309.426226][T10121] netlink: 'syz.5.1993': attribute type 5 has an invalid length.
[  309.556959][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.584942][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.617262][T10142] vlan2: entered allmulticast mode
[  309.697879][T10162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7846 sclass=netlink_route_socket pid=10162 comm=syz.4.2008
[  309.712073][T10161] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2007'.
[  309.733680][T10162] netlink: 'syz.4.2008': attribute type 5 has an invalid length.
[  310.480600][T10238] IPv4: Oversized IP packet from 127.202.26.0
[  310.514071][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2037'.
[  310.649354][T10249] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2041'.
[  310.830249][T10242] Set syz1 is full, maxelem 65536 reached
[  310.953010][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2048'.
[  311.053668][T10276] syzkaller0: entered promiscuous mode
[  311.059267][T10276] syzkaller0: entered allmulticast mode
[  311.272939][T10302] loop3: detected capacity change from 0 to 512
[  311.280876][T10302] EXT4-fs (loop3): orphan cleanup on readonly fs
[  311.287966][T10302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2059: bg 0: block 248: padding at end of block bitmap is not set
[  311.303077][T10302] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2059: Failed to acquire dquot type 1
[  311.316283][T10302] EXT4-fs (loop3): 1 truncate cleaned up
[  311.333448][T10302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  311.367111][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.426651][T10321] hub 9-0:1.0: USB hub found
[  311.431369][T10321] hub 9-0:1.0: 8 ports detected
[  311.465773][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2066'.
[  311.479215][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2066'.
[  311.521012][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2069'.
[  311.595584][T10345] loop3: detected capacity change from 0 to 1024
[  311.602501][T10345] EXT4-fs: Ignoring removed nobh option
[  311.608266][T10345] EXT4-fs: Ignoring removed bh option
[  311.757238][T10345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.806023][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  311.806039][   T29] audit: type=1326 audit(2000000051.950:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  311.836071][   T29] audit: type=1326 audit(2000000051.950:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  311.925563][   T29] audit: type=1326 audit(2000000052.010:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  311.949042][   T29] audit: type=1326 audit(2000000052.010:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  311.972574][   T29] audit: type=1326 audit(2000000052.010:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  311.996446][   T29] audit: type=1326 audit(2000000052.020:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  312.020368][   T29] audit: type=1326 audit(2000000052.020:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  312.044287][   T29] audit: type=1326 audit(2000000052.020:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  312.067910][   T29] audit: type=1326 audit(2000000052.020:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  312.091557][   T29] audit: type=1326 audit(2000000052.020:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f93ad169 code=0x7ffc0000
[  312.229669][T10366] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  312.425774][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.620326][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2093'.
[  312.750101][T10405] loop3: detected capacity change from 0 to 1024
[  312.765345][T10405] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  312.797260][T10405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.853258][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.888674][T10429] loop3: detected capacity change from 0 to 512
[  312.907473][T10429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  312.937285][T10429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ce018, mo2=0002]
[  312.945522][T10429] System zones: 1-12
[  312.952227][T10429] EXT4-fs (loop3): 1 truncate cleaned up
[  312.958504][T10429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.025405][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.270265][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'.
[  313.302392][T10475] IPVS: Error joining to the multicast group
[  313.522100][T10512] loop3: detected capacity change from 0 to 1024
[  313.538439][T10512] EXT4-fs: Ignoring removed orlov option
[  313.546704][T10512] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  313.596814][T10512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.620361][T10512] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2135: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  313.644044][T10512] EXT4-fs (loop3): Remounting filesystem read-only
[  313.703736][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.741289][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'.
[  313.750363][T10525] loop3: detected capacity change from 0 to 2048
[  313.750564][T10528] IPVS: Error joining to the multicast group
[  313.767008][T10525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.779276][T10525] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.959040][T10538] SELinux: failed to load policy
[  314.099579][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2146'.
[  314.121118][T10544] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  314.154464][T10535] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2139: bg 0: block 345: padding at end of block bitmap is not set
[  314.175891][T10535] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[  314.188428][T10535] EXT4-fs (loop3): This should not happen!! Data will be lost
[  314.188428][T10535] 
[  314.244455][ T1785] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117
[  314.257227][ T1785] EXT4-fs (loop3): This should not happen!! Data will be lost
[  314.257227][ T1785] 
[  314.287949][ T1785] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28
[  314.300854][ T1785] EXT4-fs (loop3): This should not happen!! Data will be lost
[  314.300854][ T1785] 
[  314.310664][ T1785] EXT4-fs (loop3): Total free blocks count 0
[  314.316709][ T1785] EXT4-fs (loop3): Free/Dirty block details
[  314.322623][ T1785] EXT4-fs (loop3): free_blocks=0
[  314.441862][T10570] program syz.3.2150 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  314.476801][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'.
[  314.530970][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'.
[  314.543256][T10575] IPVS: Error joining to the multicast group
[  314.611853][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2160'.
[  314.641357][T10581] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  314.795174][T10590] Falling back ldisc for ttyS3.
[  314.855051][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'.
[  314.864169][T10619] IPVS: Error joining to the multicast group
[  314.893753][T10623] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  314.975945][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'.
[  315.009988][T10631] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  315.121104][T10650] loop3: detected capacity change from 0 to 512
[  315.146010][T10650] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  315.207342][T10650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  315.238031][T10650] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.341541][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  315.413646][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'.
[  315.664078][T10698] loop3: detected capacity change from 0 to 8192
[  315.903670][T10714] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2205'.
[  316.472087][T10786] loop3: detected capacity change from 0 to 512
[  316.532772][T10786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.550085][T10786] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.576172][T10788] Falling back ldisc for ttyS3.
[  316.615669][T10803] hub 4-0:1.0: USB hub found
[  316.620410][T10803] hub 4-0:1.0: 8 ports detected
[  316.645268][ T7621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.708384][T10820] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  316.838839][   T29] kauditd_printk_skb: 391 callbacks suppressed
[  316.838855][   T29] audit: type=1400 audit(2000000056.980:8009): avc:  denied  { name_bind } for  pid=10839 comm="syz.9.2252" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  316.868833][   T29] audit: type=1400 audit(2000000056.980:8010): avc:  denied  { accept } for  pid=10839 comm="syz.9.2252" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  316.891833][   T29] audit: type=1400 audit(2000000057.030:8011): avc:  denied  { create } for  pid=10837 comm="syz.4.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  316.935205][   T29] audit: type=1400 audit(2000000057.030:8012): avc:  denied  { write } for  pid=10837 comm="syz.4.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  316.966670][   T29] audit: type=1400 audit(2000000057.110:8013): avc:  denied  { connect } for  pid=10845 comm="syz.5.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  316.996884][T10844] smc: net device bond0 applied user defined pnetid SYZ0
[  317.004845][T10844] smc: net device bond0 erased user defined pnetid SYZ0
[  317.091839][   T29] audit: type=1400 audit(2000000057.230:8014): avc:  denied  { create } for  pid=10856 comm="syz.9.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  317.116520][   T29] audit: type=1400 audit(2000000057.250:8015): avc:  denied  { read write } for  pid=10856 comm="syz.9.2259" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  317.141573][   T29] audit: type=1400 audit(2000000057.250:8016): avc:  denied  { open } for  pid=10856 comm="syz.9.2259" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  317.166573][   T29] audit: type=1400 audit(2000000057.250:8017): avc:  denied  { ioctl } for  pid=10856 comm="syz.9.2259" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  317.202874][   T29] audit: type=1400 audit(2000000057.310:8018): avc:  denied  { create } for  pid=10863 comm="syz.4.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  317.497286][T10905] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  317.668262][T10924] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  317.672897][T10926] netlink: 'syz.5.2279': attribute type 12 has an invalid length.
[  317.821485][T10936] hub 4-0:1.0: USB hub found
[  317.826630][T10936] hub 4-0:1.0: 8 ports detected
[  317.993049][T10965] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  318.099471][T10974] netlink: 'syz.3.2298': attribute type 10 has an invalid length.
[  318.111215][T10974] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.124607][T10974] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.131774][T10974] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.147861][T10974] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  318.232974][T11009] netlink: 'syz.3.2302': attribute type 12 has an invalid length.
[  318.242178][T11006] netlink: 'syz.5.2301': attribute type 15 has an invalid length.
[  318.389917][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'.
[  318.450910][T11029] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  318.477496][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2311'.
[  318.731984][T11080] netlink: 'syz.5.2327': attribute type 27 has an invalid length.
[  318.764071][T11080] lo: left promiscuous mode
[  318.769698][T11080] lo: left allmulticast mode
[  318.786879][T11080] tunl0: left promiscuous mode
[  318.791901][T11080] tunl0: left allmulticast mode
[  318.803406][T11080] gre0: left promiscuous mode
[  318.819596][T11080] gre0: left allmulticast mode
[  318.848700][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.857668][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.867218][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.901997][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.911027][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.921808][T11080] gretap0: left promiscuous mode
[  318.924519][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.929731][T11080] gretap0: left allmulticast mode
[  318.963383][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.972377][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'.
[  318.981523][T11080] erspan0: left promiscuous mode
[  318.988320][T11080] erspan0: left allmulticast mode
[  319.012913][T11080] ip_vti0: left promiscuous mode
[  319.019103][T11080] ip_vti0: left allmulticast mode
[  319.057617][T11080] ip6_vti0: left promiscuous mode
[  319.063043][T11080] ip6_vti0: left allmulticast mode
[  319.078481][T11080] sit0: left promiscuous mode
[  319.083587][T11080] sit0: left allmulticast mode
[  319.102162][T11080] ip6tnl0: left promiscuous mode
[  319.109449][T11080] ip6tnl0: left allmulticast mode
[  319.121466][T11080] ip6gre0: left promiscuous mode
[  319.127300][T11080] ip6gre0: left allmulticast mode
[  319.159897][T11080] ip6gretap0: left promiscuous mode
[  319.165812][T11080] ip6gretap0: left allmulticast mode
[  319.179846][T11080] vcan0: left promiscuous mode
[  319.185756][T11080] vcan0: left allmulticast mode
[  319.198642][T11080] bond0: left promiscuous mode
[  319.204170][T11080] bond_slave_0: left promiscuous mode
[  319.210700][T11080] bond_slave_1: left promiscuous mode
[  319.217831][T11080] bond0: left allmulticast mode
[  319.223043][T11080] bond_slave_0: left allmulticast mode
[  319.228900][T11080] bond_slave_1: left allmulticast mode
[  319.243145][T11080] team0: left promiscuous mode
[  319.248476][T11080] team_slave_0: left promiscuous mode
[  319.254144][T11080] team_slave_1: left promiscuous mode
[  319.260474][T11080] team0: left allmulticast mode
[  319.265926][T11080] team_slave_0: left allmulticast mode
[  319.271837][T11080] team_slave_1: left allmulticast mode
[  319.284339][T11080] dummy0: left promiscuous mode
[  319.289560][T11080] dummy0: left allmulticast mode
[  319.303868][T11080] nlmon0: left promiscuous mode
[  319.309080][T11080] nlmon0: left allmulticast mode
[  319.323486][T11080] caif0: left promiscuous mode
[  319.328615][T11080] caif0: left allmulticast mode
[  319.500910][T11080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.523004][T11080] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.598708][T11080] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.607853][T11080] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.616891][T11080] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.625813][T11080] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.638976][T11080] hsr1: left allmulticast mode
[  319.643787][T11080] syz_tun: left allmulticast mode
[  319.648931][T11080] batadv_slave_0: left allmulticast mode
[  319.701808][T11107] smc: net device bond0 applied user defined pnetid SYZ0
[  319.711518][T11109] smc: net device bond0 erased user defined pnetid SYZ0
[  319.752385][T11120] SELinux: failed to load policy
[  320.179141][T11187] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[  320.179141][T11187]    program syz.2.2353 not setting count and/or reply_len properly
[  320.288677][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118572600: rx timeout, send abort
[  320.796931][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118572600: abort rx timeout. Force session deactivation
[  321.205267][T11379] netlink: 'syz.2.2385': attribute type 27 has an invalid length.
[  321.476918][T11425] bond0: (slave bond_slave_0): Releasing backup interface
[  321.502121][T11425] bond0: (slave bond_slave_1): Releasing backup interface
[  321.530998][T11425] team0: Port device team_slave_1 removed
[  321.538409][T11425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.555027][T11425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.747890][T11478] program syz.9.2408 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  321.768053][T11478] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  321.868427][   T29] kauditd_printk_skb: 152 callbacks suppressed
[  321.868444][   T29] audit: type=1400 audit(2000000062.010:8171): avc:  denied  { bind } for  pid=11490 comm="syz.9.2415" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  321.905756][T11493] random: crng reseeded on system resumption
[  321.990327][   T29] audit: type=1400 audit(2000000062.010:8172): avc:  denied  { node_bind } for  pid=11490 comm="syz.9.2415" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  322.012263][   T29] audit: type=1400 audit(2000000062.010:8173): avc:  denied  { write } for  pid=11490 comm="syz.9.2415" path="socket:[28913]" dev="sockfs" ino=28913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  322.035895][   T29] audit: type=1400 audit(2000000062.050:8174): avc:  denied  { write } for  pid=11491 comm="syz.5.2416" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  322.059069][   T29] audit: type=1400 audit(2000000062.050:8175): avc:  denied  { open } for  pid=11491 comm="syz.5.2416" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  322.082861][   T29] audit: type=1400 audit(2000000062.070:8176): avc:  denied  { block_suspend } for  pid=11494 comm="syz.9.2417" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  322.104441][   T29] audit: type=1400 audit(2000000062.080:8177): avc:  denied  { read } for  pid=11496 comm="syz.2.2418" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  322.128131][   T29] audit: type=1400 audit(2000000062.080:8178): avc:  denied  { open } for  pid=11496 comm="syz.2.2418" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  322.179322][T11504] sd 0:0:1:0: device reset
[  322.183870][   T29] audit: type=1400 audit(2000000062.130:8179): avc:  denied  { append } for  pid=11496 comm="syz.2.2418" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  322.207064][   T29] audit: type=1400 audit(2000000062.300:8180): avc:  denied  { read } for  pid=11505 comm="syz.4.2421" dev="nsfs" ino=4026535452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  322.387855][T11539] bridge_slave_0: left promiscuous mode
[  322.393618][T11539] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.403820][T11539] bridge_slave_1: left allmulticast mode
[  322.409579][T11539] bridge_slave_1: left promiscuous mode
[  322.415448][T11539] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.426885][T11539] bond0: (slave bond_slave_0): Releasing backup interface
[  322.441925][T11539] bond0: (slave bond_slave_1): Releasing backup interface
[  322.459678][T11539] team0: Port device team_slave_0 removed
[  322.473760][T11539] team0: Port device team_slave_1 removed
[  322.479159][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.487220][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.490868][T11539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.494608][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.502124][T11539] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.511171][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.524236][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.531673][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.539183][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.546670][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.554079][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.561671][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.569192][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.576646][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.584063][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.593916][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.594603][T11539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.601374][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.608906][T11539] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.616163][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.616192][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.638210][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.645704][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.653120][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.660567][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.668031][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.675513][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.682981][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.690489][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.697942][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.705380][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.712783][ T9833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  322.724892][ T9833] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  323.022072][T11647] pim6reg1: entered promiscuous mode
[  323.027599][T11647] pim6reg1: entered allmulticast mode
[  323.210116][T11687] tracefs: Invalid uid '0x00000000ffffffff'
[  323.419050][T11717] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  323.541304][T11739] netlink: 'syz.5.2471': attribute type 10 has an invalid length.
[  323.550031][T11739] 8021q: adding VLAN 0 to HW filter on device team0
[  323.558199][T11739] bond0: (slave team0): Enslaving as an active interface with an up link
[  324.016350][T11788] random: crng reseeded on system resumption
[  324.286881][T11823] netlink: 'syz.5.2503': attribute type 30 has an invalid length.
[  324.296850][T11822] ALSA: seq fatal error: cannot create timer (-22)
[  324.498681][T11861] Cannot find set identified by id 0 to match
[  324.517671][T11865] ALSA: seq fatal error: cannot create timer (-22)
[  324.532324][T11865] ALSA: seq fatal error: cannot create timer (-22)
[  324.759318][T11897] __nla_validate_parse: 1 callbacks suppressed
[  324.759334][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2532'.
[  324.785757][T11897] vlan2: entered promiscuous mode
[  324.790974][T11897] gretap0: entered promiscuous mode
[  324.850110][T11916] serio: Serial port ptm0
[  324.891019][ T9830] IPVS: starting estimator thread 0...
[  324.945754][T11935] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  324.952005][T11934] IPVS: stopping master sync thread 11935 ...
[  324.996231][T11925] IPVS: using max 2352 ests per chain, 117600 per kthread
[  325.368623][T11990] ALSA: seq fatal error: cannot create timer (-22)
[  325.559718][T12003] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2570'.
[  325.570693][T11999] pim6reg1: entered promiscuous mode
[  325.576134][T11999] pim6reg1: entered allmulticast mode
[  325.802971][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2579'.
[  325.814074][T12024] bond0: (slave team0): Releasing backup interface
[  325.826910][T12024] team0 (unregistering): Port device team_slave_0 removed
[  325.835129][T12024] team0 (unregistering): Port device team_slave_1 removed
[  326.006066][T12062] set match dimension is over the limit!
[  326.024113][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2582'.
[  326.185322][T12080] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  326.193150][T12080] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  326.277791][ T4730] syz_tun (unregistering): left promiscuous mode
[  326.425147][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.433017][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.438720][T12114] syzkaller0: entered promiscuous mode
[  326.440807][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.446237][T12114] syzkaller0: entered allmulticast mode
[  326.466507][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.474458][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.482322][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.490327][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.498381][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.506177][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.513948][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.521715][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.529568][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.537464][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.545349][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.553312][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.561144][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.569008][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.576821][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.584580][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.592366][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.600130][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.607947][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.615802][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.623564][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.631327][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.639266][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.647156][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.654934][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.662669][ T4705] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0
[  326.671228][ T4705] hid-generic 0000:0000:20000000.000A: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  326.820677][T12110] chnl_net:caif_netlink_parms(): no params data found
[  326.896530][T12110] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.903691][T12110] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.921318][T12110] bridge_slave_0: entered allmulticast mode
[  326.935540][T12110] bridge_slave_0: entered promiscuous mode
[  326.942681][T12333] netlink: 'syz.3.2608': attribute type 10 has an invalid length.
[  326.952876][T12110] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.960087][T12110] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.982787][   T29] kauditd_printk_skb: 237 callbacks suppressed
[  326.982871][   T29] audit: type=1326 audit(2000000067.120:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  326.985017][T12110] bridge_slave_1: entered allmulticast mode
[  327.018696][T12336] netlink: 'syz.3.2608': attribute type 10 has an invalid length.
[  327.026648][T12336] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2608'.
[  327.054763][   T29] audit: type=1326 audit(2000000067.140:8419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.078479][   T29] audit: type=1326 audit(2000000067.140:8420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.102098][   T29] audit: type=1326 audit(2000000067.140:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.125731][   T29] audit: type=1326 audit(2000000067.140:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.149277][   T29] audit: type=1326 audit(2000000067.140:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.169856][T12110] bridge_slave_1: entered promiscuous mode
[  327.172831][   T29] audit: type=1326 audit(2000000067.140:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.202229][   T29] audit: type=1326 audit(2000000067.180:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.225780][   T29] audit: type=1326 audit(2000000067.180:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.249239][   T29] audit: type=1326 audit(2000000067.180:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597319d169 code=0x7ffc0000
[  327.275800][T12333] batman_adv: batadv0: Adding interface: team0
[  327.282015][T12333] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.307328][T12333] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  327.326861][T12336] team0: entered promiscuous mode
[  327.331936][T12336] team_slave_0: entered promiscuous mode
[  327.337958][T12336] team_slave_1: entered promiscuous mode
[  327.351288][T12336] 8021q: adding VLAN 0 to HW filter on device team0
[  327.362273][T12336] batman_adv: batadv0: Interface activated: team0
[  327.369055][T12336] batman_adv: batadv0: Interface deactivated: team0
[  327.375811][T12336] batman_adv: batadv0: Removing interface: team0
[  327.382990][T12336] bridge0: port 2(team0) entered blocking state
[  327.389346][T12336] bridge0: port 2(team0) entered disabled state
[  327.395931][T12336] team0: entered allmulticast mode
[  327.401067][T12336] team_slave_0: entered allmulticast mode
[  327.406850][T12336] team_slave_1: entered allmulticast mode
[  327.413904][T12336] bridge0: port 2(team0) entered blocking state
[  327.420294][T12336] bridge0: port 2(team0) entered forwarding state
[  327.465927][T12110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.508137][T12110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.625679][T12110] team0: Port device team_slave_0 added
[  327.642925][T12110] team0: Port device team_slave_1 added
[  327.701546][T12110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.708628][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.734700][T12110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.751143][T12110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.758281][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.784312][T12110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.860678][T12110] hsr_slave_0: entered promiscuous mode
[  327.867277][T12110] hsr_slave_1: entered promiscuous mode
[  327.873283][T12110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.880989][T12110] Cannot create hsr debugfs directory
[  327.889315][T12341] chnl_net:caif_netlink_parms(): no params data found
[  327.923304][T12604] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  327.978168][T12341] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.985328][T12341] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.992504][T12341] bridge_slave_0: entered allmulticast mode
[  327.999832][T12341] bridge_slave_0: entered promiscuous mode
[  328.012742][T12341] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.019952][T12341] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.027268][T12341] bridge_slave_1: entered allmulticast mode
[  328.033756][T12341] bridge_slave_1: entered promiscuous mode
[  328.052691][ T4650] ==================================================================
[  328.060808][ T4650] BUG: KCSAN: data-race in copy_process / free_pid
[  328.067338][ T4650] 
[  328.069676][ T4650] read-write to 0xffffffff86861058 of 4 bytes by task 12695 on cpu 0:
[  328.077849][ T4650]  free_pid+0x7e/0x180
[  328.081935][ T4650]  free_pids+0x7a/0xb0
[  328.086011][ T4650]  release_task+0xa32/0xba0
[  328.090528][ T4650]  do_exit+0xef8/0x17e0
[  328.094707][ T4650]  call_usermodehelper_exec_async+0x24c/0x250
[  328.100782][ T4650]  ret_from_fork+0x4b/0x60
[  328.105214][ T4650]  ret_from_fork_asm+0x1a/0x30
[  328.109985][ T4650] 
[  328.112310][ T4650] read to 0xffffffff86861058 of 4 bytes by task 4650 on cpu 1:
[  328.119852][ T4650]  copy_process+0x1754/0x1f60
[  328.124540][ T4650]  kernel_clone+0x168/0x5d0
[  328.129061][ T4650]  user_mode_thread+0x7f/0xb0
[  328.133756][ T4650]  call_usermodehelper_exec_work+0x41/0x150
[  328.139657][ T4650]  process_scheduled_works+0x4de/0xa20
[  328.145135][ T4650]  worker_thread+0x52c/0x710
[  328.149733][ T4650]  kthread+0x4b7/0x540
[  328.153811][ T4650]  ret_from_fork+0x4b/0x60
[  328.158233][ T4650]  ret_from_fork_asm+0x1a/0x30
[  328.163007][ T4650] 
[  328.165329][ T4650] value changed: 0x80000100 -> 0x800000ff
[  328.171065][ T4650] 
[  328.173385][ T4650] Reported by Kernel Concurrency Sanitizer on:
[  328.179540][ T4650] CPU: 1 UID: 0 PID: 4650 Comm: kworker/u8:14 Tainted: G        W           6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(voluntary) 
[  328.193446][ T4650] Tainted: [W]=WARN
[  328.197249][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  328.207313][ T4650] Workqueue: events_unbound call_usermodehelper_exec_work
[  328.214437][ T4650] ==================================================================
[  328.243286][T12341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.254914][T12110] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.267735][T12341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.289846][T12341] team0: Port device team_slave_0 added
[  328.296902][T12341] team0: Port device team_slave_1 added
[  328.312155][T12110] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.335488][T12341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.342484][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.368516][T12341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.381434][T12110] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.393007][T12341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.400064][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.426031][T12341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.450922][T12110] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.470466][T12341] hsr_slave_0: entered promiscuous mode
[  328.477060][T12341] hsr_slave_1: entered promiscuous mode
[  328.483081][T12341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  328.490787][T12341] Cannot create hsr debugfs directory
[  328.533071][T12110] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  328.551711][T12110] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  328.563309][T12110] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  328.578592][T12110] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  328.603177][T12341] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.640925][T12110] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.653696][T12110] 8021q: adding VLAN 0 to HW filter on device team0
[  328.663993][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.671117][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.683645][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.690825][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.713365][T12341] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.767006][T12110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.776774][T12341] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.817944][T12341] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.881919][T12110] veth0_vlan: entered promiscuous mode
[  328.890538][T12110] veth1_vlan: entered promiscuous mode
[  328.916350][T12341] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  328.926096][T12341] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  328.935474][T12341] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  328.947533][T12341] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  328.957290][T12110] veth0_macvtap: entered promiscuous mode
[  328.966200][T12110] veth1_macvtap: entered promiscuous mode
[  328.983556][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.994144][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.004006][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.014903][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.024814][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.035372][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.045214][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.055677][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.065589][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.076063][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.085898][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.096413][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.106273][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.116755][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.126675][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.137132][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.148347][T12110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.157851][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.168361][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.178266][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.188767][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.198689][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.209194][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.219023][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.229515][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.239342][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.249772][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.259616][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.270134][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.280000][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.290450][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.300294][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.310727][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.321324][T12110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.335729][T12110] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.344458][T12110] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.353216][T12110] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.362011][T12110] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.417782][T12341] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.434563][T12341] 8021q: adding VLAN 0 to HW filter on device team0
[  329.446404][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.453540][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.465876][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.473146][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.535053][T12341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.628825][T12341] veth0_vlan: entered promiscuous mode
[  329.637027][T12341] veth1_vlan: entered promiscuous mode
[  329.652742][T12341] veth0_macvtap: entered promiscuous mode
[  329.660662][T12341] veth1_macvtap: entered promiscuous mode
[  329.671207][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.681701][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.691543][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.702017][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.711894][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.722395][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.732315][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.742750][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.752591][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.763079][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.772948][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.783385][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.793224][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.803730][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.813555][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.824047][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.833899][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.844403][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.855099][T12341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.869714][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.880302][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.890337][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.900832][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.910687][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.921206][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.931027][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.941446][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.951293][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.961727][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.971534][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.981958][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.991787][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.002399][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.012343][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.022775][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.032789][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.043203][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.054430][T12341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.064090][T12341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.072939][T12341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.081689][T12341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.090387][T12341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0