last executing test programs:

2m48.200169157s ago: executing program 32 (id=1122):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000080)='./file1\x00')
renameat(r3, &(0x7f0000000380)='./file1\x00', r3, &(0x7f0000000140)='./file1\x00')

2m47.037689256s ago: executing program 33 (id=1157):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ab3dc9350000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x1, r2})

2m38.94854157s ago: executing program 34 (id=1339):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m1.002528388s ago: executing program 35 (id=2322):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000400000000000000"], 0x50)
r1 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m36.166468649s ago: executing program 36 (id=2999):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1m33.641554451s ago: executing program 37 (id=3048):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5fffff5, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r2, &(0x7f0000000380)="ffa48dd4ab5f234e", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c)

59.994605178s ago: executing program 38 (id=3878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000700)="c2", 0x1)
close(r2)

49.486730761s ago: executing program 39 (id=4089):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080), 0x3, 0x56d, &(0x7f0000000c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0x1}, {0xb, 0x3}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfe, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x9, 0x1, 0x9, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]})
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140))

36.617708174s ago: executing program 40 (id=4389):
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x5be, &(0x7f0000000140)={0x0, 0x4cd6, 0x400, 0x3}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)

30.922670199s ago: executing program 41 (id=4495):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[], 0x50)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x101}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x10000000, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x1, 0xb7, 0xffffffff, 0x4d, 0x10000004}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

27.159220571s ago: executing program 0 (id=4550):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x88, &(0x7f0000000080)={[{@debug}, {@errors_remount}, {@norecovery}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x1, 0x438, &(0x7f0000000d80)="$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")
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)

26.873384225s ago: executing program 0 (id=4568):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000)
close(r0)

26.810325487s ago: executing program 0 (id=4561):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
shutdown(r1, 0x0)
connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r3 = accept(r2, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000180)="ec", 0x1, 0x34000, 0x0, 0x0)

26.767931347s ago: executing program 0 (id=4563):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
io_submit(0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

26.62657993s ago: executing program 7 (id=4565):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
sync()
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8020)

26.62189201s ago: executing program 0 (id=4576):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

26.527631501s ago: executing program 0 (id=4569):
mkdir(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))

26.489434282s ago: executing program 42 (id=4569):
mkdir(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))

26.077435699s ago: executing program 7 (id=4574):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0xf1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, {0x2}})
io_uring_enter(r1, 0x47bc, 0x2, 0x0, 0x0, 0x0)

26.045207179s ago: executing program 7 (id=4575):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

25.98948825s ago: executing program 7 (id=4578):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
io_submit(0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

25.789839854s ago: executing program 7 (id=4580):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x103200, 0x1, 0x840000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x40000103})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

25.338938341s ago: executing program 7 (id=4586):
socket(0x18, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8aa, 0x4}, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]})
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

25.331866521s ago: executing program 43 (id=4586):
socket(0x18, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8aa, 0x4}, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]})
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

24.283340078s ago: executing program 9 (id=4611):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd_index=0x2, 0x8, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x1c, 0x1, {0x1}})
r1 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)

24.24044588s ago: executing program 9 (id=4604):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r1)
socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

23.920759664s ago: executing program 9 (id=4609):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
recvmsg$can_bcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000580)=""/182, 0xb6}], 0x3, &(0x7f0000000640)=""/100, 0x64}, 0x40)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x400, 0x0)

23.857399526s ago: executing program 9 (id=4619):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72f46e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7f54653b33118a4e01fcfe3a2329576bf6a45353bf9f720cea11bf481ed7ed0979416e75e6fa5f6b699749e9d4446c849ed79650b35dd0bd6e1955fe9b0c09861cf61fd57be7ba905990ed7a4c5b3793959636630d74ecc23264ea54d4d2cc4f112f49319943f00"/797], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
io_submit(0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

23.700748848s ago: executing program 9 (id=4615):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000380)='./file0\x00', 0x80)

23.210841246s ago: executing program 9 (id=4617):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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")
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)

23.209969297s ago: executing program 44 (id=4617):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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")
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)

19.033258786s ago: executing program 6 (id=4657):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x87c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1ff, 0x6, 0x6, 0x1de, 0x8, 0xb, 0x3, 0xa0, 0xee9, 0x9, 0x7, 0x400, 0x8001, 0x2, 0x0, 0x3, 0x8, 0xfffffffa, 0xc9, 0x4, 0x5, 0x8001, 0x0, 0x6, 0x8, 0x2, 0x611e, 0x441, 0x5, 0x8, 0x8, 0x1, 0x9, 0x6, 0x4, 0x5, 0x5, 0x9, 0x2, 0xf95, 0x5, 0x7f, 0xfff00000, 0x7, 0x5, 0x8, 0x2c, 0x6, 0x8, 0x3, 0x9, 0xc, 0x40, 0x8, 0x2, 0x6, 0x4, 0x10001, 0x8c1, 0xb, 0x3ff, 0x6, 0x7, 0x7, 0x0, 0x1, 0x4, 0x7, 0x8, 0x1, 0x2, 0x0, 0x4, 0x2, 0x43, 0x5, 0x75b, 0x1, 0x6f, 0x1, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1, 0xb1, 0x6, 0x4, 0x1, 0x3, 0xcf6e, 0x4, 0x3, 0x2, 0x4, 0xd9c, 0x1, 0x4, 0x4, 0x4, 0xff, 0x1, 0x5, 0x1, 0x7, 0x33db, 0x95, 0x0, 0x5, 0x5, 0x1, 0x1, 0x10001, 0x401, 0xd5, 0x0, 0x7, 0xc51, 0x4b, 0x3, 0x8, 0x101, 0x4, 0x1, 0xac, 0xbaf, 0x6, 0x4, 0xce65, 0xffffffff, 0x81, 0x4bfe, 0x89da, 0x4, 0x4, 0x0, 0xd, 0x8, 0x374, 0x5, 0x1, 0x2, 0x7, 0x5, 0x3f, 0x8, 0x5, 0xfff, 0x7ff, 0x3, 0xfffffff8, 0x3, 0x5, 0x800, 0x5, 0x4, 0x7, 0x3, 0x8, 0x3, 0x100, 0xd2, 0x2, 0x7, 0x81, 0x7f, 0x6, 0x6, 0xf77, 0x3, 0x8, 0x9, 0x52ea000, 0x1, 0x0, 0x80000000, 0xee4, 0x400, 0x6, 0x8000, 0xd, 0x8, 0x9, 0x9, 0x80000000, 0xbea, 0x43e0, 0xffffffff, 0x2, 0x2, 0x9, 0x5d, 0x1ff, 0x0, 0x3, 0xffff, 0xfffffc01, 0x800, 0x7, 0xb, 0xf, 0x101, 0x52, 0x1, 0x8001, 0x7, 0x7, 0x0, 0x9, 0x3277, 0xffffffff, 0x4, 0x3, 0x3, 0xa64, 0x9, 0x4, 0x7, 0x711c, 0x3, 0x8001, 0x7, 0xf, 0x5, 0x8, 0x7, 0xa, 0x4, 0x8, 0xfffffff8, 0x8, 0x1, 0xd, 0x0, 0x9, 0x6, 0x5, 0x800, 0x7ff, 0x1ae3, 0x9, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x8, 0x9, 0x59a7, 0xb78, 0x2, 0x7f, 0x800, 0x6155]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x237b, 0x20000000, 0x6, 0x9, 0xffffff00, {0x5, 0x2, 0x100, 0x6781, 0x3, 0xc}, {0x4, 0x0, 0x7, 0x7, 0x8, 0xfffffffb}, 0x7f, 0x0, 0xca19}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc2e, 0x8001, 0xfffffffd, 0x3, 0x9, 0x8000, 0x6, 0x0, 0x6, 0x40, 0x1, 0x101, 0x7f, 0xaab, 0x3, 0xffffeb5b, 0x1000, 0x0, 0xfffffffe, 0x3c8a5119, 0x3, 0x3, 0x2, 0x9, 0x9, 0x8001, 0x5, 0x6, 0xd02, 0x3, 0x5, 0x1, 0x9, 0xe6, 0x401, 0xa, 0xf1d7, 0xff, 0x8, 0x378, 0xe8, 0x7, 0x3510, 0x3e81e08a, 0x8, 0x7ff, 0x3, 0xa, 0xffffffff, 0x3, 0x5, 0xe7, 0x5, 0x2, 0x7, 0x0, 0x7, 0x1, 0x7fffffff, 0x1, 0x0, 0x7, 0x5, 0x1, 0x0, 0x7, 0xfffffff9, 0x3928, 0x4, 0x21, 0x6, 0x71d, 0x9, 0x5, 0x3, 0x3, 0x0, 0x5, 0x4, 0xe, 0x2, 0xb, 0x6, 0x8, 0x9, 0x0, 0x4, 0x40, 0xfff, 0x100, 0x40800, 0x3, 0x2, 0x1, 0xffffbf31, 0x3, 0x97d6361, 0xc40, 0xffffffff, 0x3, 0x7fffffff, 0x0, 0xbe, 0x6, 0xfffffffb, 0x1, 0x4, 0x0, 0xfffffff7, 0x1, 0x6, 0xfffffff8, 0x9, 0x5, 0x6, 0x8, 0xea8, 0xf7800000, 0x2cf, 0x3, 0xced7, 0x3800000, 0xe, 0x3, 0x9, 0x6, 0x2, 0x5, 0xe, 0x0, 0xfffffffc, 0x9, 0x9, 0x0, 0x7, 0x6, 0xd, 0x4a1, 0x8, 0x0, 0x1, 0x4, 0x9, 0xf2, 0xfffffff1, 0x40, 0x1000, 0x7, 0x7, 0x2, 0xfffffffb, 0x7, 0x200, 0x7f, 0x5, 0x9, 0x0, 0x10001, 0x5, 0x8000, 0x3, 0x1a, 0x4, 0xffff0000, 0x9, 0x6, 0xffffffff, 0x5, 0xd, 0x2, 0x62e, 0x8, 0xfffffffc, 0x7f, 0xb939, 0x9, 0x5, 0x1c000000, 0x25c3, 0xd, 0x4, 0x5, 0x4, 0xddc3, 0x3ff, 0x25c1, 0x1, 0xf80000, 0x4, 0x2, 0x20000, 0x80000001, 0x0, 0x0, 0x600000, 0x5, 0xfffffffd, 0xffffff64, 0x8, 0x2, 0x9, 0x3, 0x6, 0x555, 0x10000, 0x4, 0x0, 0xe, 0x4, 0x7, 0x1, 0xfffff801, 0xe054, 0x39, 0x2, 0x8, 0x101, 0x4, 0x8001, 0xf, 0x6, 0x5, 0x1, 0x0, 0x9, 0x0, 0x2, 0x4, 0x3, 0x0, 0x7, 0x4, 0x3, 0xcf, 0x7, 0x1, 0x140000, 0x5, 0x1, 0x6, 0x9, 0x8, 0x0, 0x2, 0x5, 0x0, 0x4, 0x8, 0xc, 0xfffffffc, 0xdd99, 0x3, 0x6, 0xa, 0x9, 0x4]}]}]}}]}, 0x87c}}, 0x400c084)

18.930307537s ago: executing program 6 (id=4660):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x7}}}]}}]}]}]}}]}, 0x70}}, 0x20040054)

18.844959729s ago: executing program 6 (id=4664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

18.821421829s ago: executing program 6 (id=4665):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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")
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
io_setup(0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000500)=""/173, 0xad)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

18.553807973s ago: executing program 6 (id=4669):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1})
io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0)

18.354927087s ago: executing program 6 (id=4670):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x281440c, &(0x7f0000000000)=ANY=[], 0xfe, 0x2a1, &(0x7f0000000f40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprtrdma_mrs_zap\x00', r0, 0x0, 0x40000000006b}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0)

18.354407027s ago: executing program 45 (id=4670):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x281440c, &(0x7f0000000000)=ANY=[], 0xfe, 0x2a1, &(0x7f0000000f40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprtrdma_mrs_zap\x00', r0, 0x0, 0x40000000006b}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0)

14.202991466s ago: executing program 3 (id=4740):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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")
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
write$9p(r2, &(0x7f0000001400)="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", 0x200)
sendfile(r2, r3, 0x0, 0xe065)

14.007482489s ago: executing program 3 (id=4744):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

13.88656431s ago: executing program 3 (id=4748):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

13.719283093s ago: executing program 3 (id=4760):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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")
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
io_setup(0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000500)=""/173, 0xad)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

13.230249822s ago: executing program 3 (id=4762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18)
memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;\"\xb5\xe1jS\xd6\x91%|\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xc8\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00N\x84\x03vT\x14\a\xce O=\x82\x8b:\xa0\r\t\xdc\xd3\xd9\xb0I\x9e\x8cD\xe1\xc6Z\xedg\x16\x8c\x88$\xb8|B\xf8\x7f\xdaS\xae\xe9\x18i(\xed\xf8\x8bW\xe9\xe2\xbf\x11R\xb0#m\xf40\xc2@\x14\xbc\x80\x90\x0f.\xbb\x93\x80\xf2\x12\x14F\xf5\vD\x9e\f\xca\f\x02R\xc0F<\xfb\xba\x9f\x8d><k\xdf\xd4\xd7\xa5\xfeH\xce\xe9\x1f\xe7\xe5P\xe2\rL8\xbb\xb4\x12e\x179j\x8c5\xf7\xd4\f<:\x04\xe2Gqu\x97o\x15\x1d;\x04}\'\xa1\xe0M\b\x87\xe4\xda\x10\xc7\v\x83\x849\xf7\xc5\x87\xf0\xca`n\x8fs\xe4[\xfc\x1et\x92\xfa}\xf1\x9d\xb8\r{}\x8f\xa1O[&\x9f\x82A\xcb\xdeJ`\xb6\xf7\xde)I\x01\x11\x12\xf7\xa5\xbd\xdf=\xdbl\xf7\xd4\xe9\xd0c<\x93\x88\r', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0)

13.074882904s ago: executing program 3 (id=4765):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
lsm_get_self_attr(0x66, 0x0, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500))

13.030717314s ago: executing program 46 (id=4765):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
lsm_get_self_attr(0x66, 0x0, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500))

2.490245739s ago: executing program 8 (id=5024):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

2.399380411s ago: executing program 8 (id=5018):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)

1.80740897s ago: executing program 8 (id=5036):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

1.651108683s ago: executing program 8 (id=5040):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="183b00000400000000000000000000001847000008000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000ffff0007010000f8ffffffb702000008000000b70300000400000085"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0)

1.512063635s ago: executing program 4 (id=5042):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

1.432990726s ago: executing program 8 (id=5043):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00')
r3 = socket(0x18, 0x0, 0x0)
connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'gre0\x00'}}, 0x1e)
sendfile(r3, r2, 0x0, 0x8)

1.432599496s ago: executing program 8 (id=5044):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))

830.746827ms ago: executing program 4 (id=5052):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
io_setup(0xc, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
shutdown(r2, 0x0)

724.521148ms ago: executing program 4 (id=5055):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3, 0x0, 0xc7ad}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x300, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

602.772361ms ago: executing program 2 (id=5056):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0xf8, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xcc, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0xb4, 0x7, [@m_skbmod={0xb0, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x4, 0x0, 0x6}, 0x8}}]}, {0x60, 0x6, "415f1218594ad7bb608704b3c0649719d54f7eb6599e6ef1df2378814503224d268b24c6059c68cb5997c7623efbf9e43db308d546742e8845bfe831236c2179180e8afd7d974bb44a3842fc4a997f64d1beee156d77c3d4f0732d62"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_ACT]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x800)

548.986601ms ago: executing program 4 (id=5058):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x417, &(0x7f0000000500)={0x0, 0xcc90, 0x400, 0x1, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f00000003c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3513, 0x217, 0xa1, 0x0, 0x0)
close_range(r0, r1, 0x0)

471.744762ms ago: executing program 5 (id=5060):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0}, 0xc)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15)
accept(r3, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000140)=0x80)
epoll_create(0x4)

471.076872ms ago: executing program 2 (id=5061):
unshare(0x22020400)
write$tun(0xffffffffffffffff, 0x0, 0x46)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160)

462.054612ms ago: executing program 5 (id=5062):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000300000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

451.544353ms ago: executing program 1 (id=5063):
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='/dev/snd/timer\x00')
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x1, 0x5, 0x2fe, 0x9, 0x0, 0x2, 0x0})
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @empty}, {0x6, @link_local}, 0x8, {0x2, 0x4e24, @remote}, 'ip6gre0\x00'})
syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40))

427.471593ms ago: executing program 2 (id=5064):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x4074, &(0x7f00000002c0)={0x0, 0xb7ea, 0x10, 0x2, 0x5f})
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

400.760374ms ago: executing program 1 (id=5065):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
io_setup(0xc, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
shutdown(r2, 0x0)

400.059654ms ago: executing program 4 (id=5075):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r0, &(0x7f0000001780)=[{&(0x7f0000001240)=""/242, 0xf2}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_open_pts(r0, 0x101)
r2 = dup3(r1, r0, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c)

382.600544ms ago: executing program 2 (id=5066):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x571, &(0x7f0000001180)="$eJzs3c1rHOUfAPDvbF76kvbXFEr56UECPVip3TSJLxU81KNosaD3uiTTULLplOymNLFge7AXL1IEEQviH+DdY/Ef8K8oaKFoCXrwEpnNbLpNdvO6Nan7+cBunmdmdp95dub75Pvs7LIB9KyR/K4U8VJEfJVEHGtZ1x/FypGV7Zae3JrMb0ksL3/8exJJsay5fVL8HSoq/4+In7+IOFNa325tYXGmUq2mc0V9tD57fbS2sHj26mxlOp1Or41PTJx/c2L8nbff6lpfX7v017cfPXj//Jenlr758dHxe0lciCPFutZ+7MLt1spIjBSvyUBcWLPhWBca20+Svd4BdqSviPOByMeAY9FXRD3w3/d5RCwDPSoR/9CjmnlAc27fpXnwC+PxeysToPX97195byQONuZGh5eSZ2ZG+Xx3uAvt52389Nv9e/ktuvc+BMCmbt+JiHP9/evHv6QY/3bu3Ba2WdvGNse/5W3uEtDiQZ7/vN4u/8mKLQ427tfmP0NtYncnNo//0qMuNNNRnv+92zb/Xb1oNdxX1I42cr6B5MrVapqPbf+LiNMxcCCvb3Q95/zSw47j1NP8b7CRA+btN3PBYj8e9R949jFTlXplN31u9fhOxMtt899kNf9N2hz//PW4tMU2Tqb3X+m0rjX/bd//52v5h4hXi+N/+5k50dMrWsnG1ydHG+fDaPOsWO/Puyd/6dR+5/4ffQ69XS8//ofbnv+r/R9OWq/X1rbfxvcH/047rdv8+Lc//weTTxrlwWLZzUq9PjcWMZh8uH75+NPHNuvN7fP+nz7VPv43Ov8PRcSnW+z/3RN3O2661+d/3v+pbR3/7RcefvDZd53a39rxf6NROl0s2cr4t9Ud3M1rBwAAAAAAAPtNKSKORFIqr5ZLpXJ55fMdJ+JwqZrV6meuZPPXpqLxXdnhGCg1r3QPtXweYqz4PGyzPr6mPhERxyPi675DjXp5MqtO7XXnAQAAAAAAAAAAAAAAAAAAYJ8Y6vD9/9yvfXu9d8Bz5ye/oXdtGv/d+KUnYF/y/x96l/iH3iX+oXeJf+hd4h96l/iH3iX+oXeJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqSxcv5rflpSe3JvP61I2F+ZnsxtmptDZTnp2fLE9mc9fL01k2XU3Lk9nshk+W/BHVLLs+Nh7zN0fraa0+WltYvDybzV+rX746W5lOL6cD/1bHAAAAAAAAAAAAAAAAAAAA4AVSW1icqVSr6ZyCwo4K/ftjNxRWCs3A3vUT7u24BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACt/gkAAP//ys442g==")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x7fffffff, 0xf, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0x3, 0xe0}]}}}}})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fallocate(r0, 0x8, 0x40000, 0x10000)

380.817574ms ago: executing program 5 (id=5067):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
close(r2)

265.562666ms ago: executing program 1 (id=5068):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0xffffffffffffffe6, 0x22004811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

234.934847ms ago: executing program 4 (id=5069):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

234.378096ms ago: executing program 5 (id=5070):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)

198.327777ms ago: executing program 1 (id=5071):
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x78, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params, @NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x7}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x12, 0x2, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @void}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
personality(0x400000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)

172.403888ms ago: executing program 2 (id=5082):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="183b00000400000000000000000000001847000008000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000ffff0007010000f8ffffffb702000008000000b70300000400000085"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0)

171.871177ms ago: executing program 1 (id=5072):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0xf8, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xcc, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0xb4, 0x7, [@m_skbmod={0xb0, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x4, 0x0, 0x6}, 0x8}}]}, {0x60, 0x6, "415f1218594ad7bb608704b3c0649719d54f7eb6599e6ef1df2378814503224d268b24c6059c68cb5997c7623efbf9e43db308d546742e8845bfe831236c2179180e8afd7d974bb44a3842fc4a997f64d1beee156d77c3d4f0732d62"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_ACT]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x800)

141.720628ms ago: executing program 5 (id=5073):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8)
faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300)

71.911659ms ago: executing program 1 (id=5074):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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")
llistxattr(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x80000000}}], [], 0x6b}})

43.30213ms ago: executing program 5 (id=5076):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000180)={0x3fffffffc00, 0x3ff, 0x4, 0x2})

0s ago: executing program 2 (id=5077):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

1745293816.971:9122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15289 comm="syz.9.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82de94e169 code=0x7ffc0000
[  215.267461][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4407'.
[  215.306507][T15300] IPVS: Error joining to the multicast group
[  215.314908][T15256] chnl_net:caif_netlink_parms(): no params data found
[  215.386266][T15256] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.393530][T15256] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.400912][T15256] bridge_slave_0: entered allmulticast mode
[  215.408216][T15256] bridge_slave_0: entered promiscuous mode
[  215.415101][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4409'.
[  215.425691][T15256] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.432974][T15256] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.441983][T15256] bridge_slave_1: entered allmulticast mode
[  215.448658][T15256] bridge_slave_1: entered promiscuous mode
[  215.478979][T15256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.500353][T15256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.534867][T15256] team0: Port device team_slave_0 added
[  215.552627][T15256] team0: Port device team_slave_1 added
[  215.669532][T15256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.676568][T15256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.702828][T15256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.714329][T15256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.721380][T15256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.747618][T15256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.791664][T15256] hsr_slave_0: entered promiscuous mode
[  215.801495][T15256] hsr_slave_1: entered promiscuous mode
[  215.807939][T15256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.815836][T15256] Cannot create hsr debugfs directory
[  216.084489][T15256] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  216.104938][T15256] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  216.113909][T15256] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  216.123206][T15256] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  216.158890][T15256] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.170717][T15256] 8021q: adding VLAN 0 to HW filter on device team0
[  216.180177][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.187291][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.197918][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.205036][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.261727][T15256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.353666][T15256] veth0_vlan: entered promiscuous mode
[  216.361812][T15256] veth1_vlan: entered promiscuous mode
[  216.377386][T15256] veth0_macvtap: entered promiscuous mode
[  216.384476][T15256] veth1_macvtap: entered promiscuous mode
[  216.394810][T15256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.405359][T15256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.415320][T15256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.425819][T15256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.435765][T15256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.446296][T15256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.457356][T15256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.468192][T15256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.478734][T15256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.488560][T15256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.499019][T15256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.508887][T15256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.519325][T15256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.529976][T15256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.539508][T15256] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.548302][T15256] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.557164][T15256] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.566066][T15256] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.655477][T15349] netlink: 'syz.4.4425': attribute type 4 has an invalid length.
[  216.704866][T15352] loop7: detected capacity change from 0 to 512
[  216.711933][T15352] EXT4-fs: Ignoring removed nomblk_io_submit option
[  216.718641][T15352] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.742913][T15352] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  216.759405][T15352] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  216.774330][T15352] EXT4-fs (loop7): 1 truncate cleaned up
[  216.782707][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'.
[  216.845295][T15357] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  217.201105][T15389] loop4: detected capacity change from 0 to 2048
[  217.334495][T15389] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  217.369189][T15389] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  217.428830][T15399] loop9: detected capacity change from 0 to 512
[  217.436456][T15399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  217.522945][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4437'.
[  217.542958][T15403] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  217.566503][T15399] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.689478][T15414] atomic_op ffff888125e26d28 conn xmit_atomic 0000000000000000
[  217.827950][T15420] netem: incorrect gi model size
[  217.833006][T15420] netem: change failed
[  217.922039][T15422] loop4: detected capacity change from 0 to 512
[  217.922429][T15424] loop9: detected capacity change from 0 to 512
[  217.948888][T15422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  217.961506][T15424] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.004746][T15424] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  218.007290][ T5729] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  218.030323][T15422] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.043447][ T5729] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  218.202108][T15443] loop0: detected capacity change from 0 to 512
[  218.210963][T15443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  218.235437][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4451'.
[  218.261671][T15443] EXT4-fs (loop0): 1 truncate cleaned up
[  218.303755][T15445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  218.321334][T15450] loop9: detected capacity change from 0 to 2048
[  218.341320][T15456] loop4: detected capacity change from 0 to 128
[  218.370733][T15450] Alternate GPT is invalid, using primary GPT.
[  218.377132][T15450]  loop9: p1 p2 p3
[  218.484002][T15475] loop6: detected capacity change from 0 to 512
[  218.510657][T15475] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.538188][T15475] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  218.582419][ T5730] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  218.591066][ T5730] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  218.635871][T15491] loop6: detected capacity change from 0 to 512
[  218.649977][T15491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  218.679903][T15491] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.879731][T15504] macvlan2: entered promiscuous mode
[  218.885677][T15504] bridge0: entered promiscuous mode
[  218.904412][T15504] bridge0: port 2(macvlan2) entered blocking state
[  218.913586][T15504] bridge0: port 2(macvlan2) entered disabled state
[  218.935459][T15504] macvlan2: entered allmulticast mode
[  218.941502][T15504] bridge0: entered allmulticast mode
[  218.959508][T15504] macvlan2: left allmulticast mode
[  218.965666][T15504] bridge0: left allmulticast mode
[  218.999439][T15504] bridge0: left promiscuous mode
[  219.174863][T15561] loop0: detected capacity change from 0 to 512
[  219.185747][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4471'.
[  219.195187][T15562] IPVS: Error joining to the multicast group
[  219.225331][T15561] ext4 filesystem being mounted at /747/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.237812][T15559] vhci_hcd: invalid port number 96
[  219.243537][T15559] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  219.271210][T15561] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  219.311884][ T5729] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  219.331640][ T5729] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  219.401680][T15589] syzkaller0: entered promiscuous mode
[  219.407280][T15589] syzkaller0: entered allmulticast mode
[  219.426322][T15600] loop4: detected capacity change from 0 to 128
[  219.473783][T15608] loop0: detected capacity change from 0 to 128
[  219.478839][T15600] loop4: detected capacity change from 128 to 0
[  219.497709][T15600] bio_check_eod: 98 callbacks suppressed
[  219.497725][T15600] syz.4.4481: attempt to access beyond end of device
[  219.497725][T15600] loop4: rw=0, sector=32, nr_sectors = 1 limit=0
[  219.518163][T15608] syz.0.4483: attempt to access beyond end of device
[  219.518163][T15608] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  219.543629][T15608] syz.0.4483: attempt to access beyond end of device
[  219.543629][T15608] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  219.567202][T15608] syz.0.4483: attempt to access beyond end of device
[  219.567202][T15608] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  219.620719][T15600] FAT-fs (loop4): FAT read failed (blocknr 32)
[  219.637288][T15600] syz.4.4481: attempt to access beyond end of device
[  219.637288][T15600] loop4: rw=2049, sector=58, nr_sectors = 8 limit=0
[  219.650908][T15608] syz.0.4483: attempt to access beyond end of device
[  219.650908][T15608] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  219.664970][T15600] syz.4.4481: attempt to access beyond end of device
[  219.664970][T15600] loop4: rw=2049, sector=98, nr_sectors = 24 limit=0
[  219.688149][T15608] syz.0.4483: attempt to access beyond end of device
[  219.688149][T15608] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  219.717108][T15608] syz.0.4483: attempt to access beyond end of device
[  219.717108][T15608] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  219.733271][T13839] syz-executor: attempt to access beyond end of device
[  219.733271][T13839] loop4: rw=524288, sector=34, nr_sectors = 1 limit=0
[  219.748573][T13839] FAT-fs (loop4): Directory bread(block 34) failed
[  219.758233][T13839] FAT-fs (loop4): Directory bread(block 35) failed
[  219.766333][T15637] 9pnet: p9_errstr2errno: server reported unknown error 
[  219.775621][T13839] FAT-fs (loop4): Directory bread(block 36) failed
[  219.782233][T13839] FAT-fs (loop4): Directory bread(block 37) failed
[  219.789016][T13839] FAT-fs (loop4): Directory bread(block 38) failed
[  219.795551][T13839] FAT-fs (loop4): Directory bread(block 39) failed
[  219.799259][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4487'.
[  219.802230][T13839] FAT-fs (loop4): Directory bread(block 40) failed
[  219.813952][T15639] IPVS: Error joining to the multicast group
[  219.820852][T13839] FAT-fs (loop4): Directory bread(block 41) failed
[  219.867515][ T3552] FAT-fs (loop4): unable to read inode block for updating (i_pos 548)
[  219.876224][T15645] loop0: detected capacity change from 0 to 2048
[  219.878244][ T3552] FAT-fs (loop4): bread failed in fat_clusters_flush
[  219.902484][T13839] FAT-fs (loop4): unable to read boot sector to mark fs as dirty
[  219.929715][T15655] loop7: detected capacity change from 0 to 512
[  219.968909][T15655] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.030467][T15655] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  220.050576][ T3542] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  220.072729][T15661] infiniband syz!: set down
[  220.077439][T15661] infiniband syz!: added team_slave_0
[  220.097213][ T3542] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 886 with error 28
[  220.109649][ T3542] EXT4-fs (loop0): This should not happen!! Data will be lost
[  220.109649][ T3542] 
[  220.119394][ T3542] EXT4-fs (loop0): Total free blocks count 0
[  220.125395][ T3542] EXT4-fs (loop0): Free/Dirty block details
[  220.131363][ T3542] EXT4-fs (loop0): free_blocks=2415919104
[  220.137207][ T3542] EXT4-fs (loop0): dirty_blocks=896
[  220.142517][ T3542] EXT4-fs (loop0): Block reservation details
[  220.148538][ T3542] EXT4-fs (loop0): i_reserved_data_blocks=56
[  220.155952][T15666] EXT4-fs (loop0): shut down requested (0)
[  220.162101][T15645] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  220.175507][T15661] RDS/IB: syz!: added
[  220.202689][T15661] smc: adding ib device syz! with port count 1
[  220.233657][T15661] smc:    ib device syz! port 1 has pnetid 
[  220.276512][   T29] kauditd_printk_skb: 158 callbacks suppressed
[  220.276530][   T29] audit: type=1326 audit(1745293822.341:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.322722][   T29] audit: type=1326 audit(1745293822.391:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.346382][   T29] audit: type=1326 audit(1745293822.391:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.370076][   T29] audit: type=1326 audit(1745293822.391:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.393742][   T29] audit: type=1326 audit(1745293822.391:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.417349][   T29] audit: type=1326 audit(1745293822.391:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.440833][   T29] audit: type=1326 audit(1745293822.391:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.464687][   T29] audit: type=1326 audit(1745293822.391:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.488468][   T29] audit: type=1326 audit(1745293822.391:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717b7e169 code=0x7ffc0000
[  220.512079][   T29] audit: type=1326 audit(1745293822.391:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.7.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5717b7cc1f code=0x7ffc0000
[  220.566989][T15687] 9pnet: p9_errstr2errno: server reported unknown error 
[  220.832510][T15667] chnl_net:caif_netlink_parms(): no params data found
[  220.938318][T15667] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.945446][T15667] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.953331][T15667] bridge_slave_0: entered allmulticast mode
[  220.959971][T15667] bridge_slave_0: entered promiscuous mode
[  220.967121][T15667] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.974254][T15667] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.981731][T15667] bridge_slave_1: entered allmulticast mode
[  220.988437][T15667] bridge_slave_1: entered promiscuous mode
[  221.006926][T15667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.017614][T15667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.038448][T15667] team0: Port device team_slave_0 added
[  221.045173][T15667] team0: Port device team_slave_1 added
[  221.061464][T15667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.068531][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.094521][T15667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.106791][T15667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.113852][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.139803][T15667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.170200][T15667] hsr_slave_0: entered promiscuous mode
[  221.176268][T15667] hsr_slave_1: entered promiscuous mode
[  221.182543][T15667] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.190238][T15667] Cannot create hsr debugfs directory
[  221.414494][T15667] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  221.423290][T15667] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  221.432648][T15667] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  221.441945][T15667] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  221.481214][T15667] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.494230][T15667] 8021q: adding VLAN 0 to HW filter on device team0
[  221.504090][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.511209][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.522294][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.529419][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.589292][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.681838][T15667] veth0_vlan: entered promiscuous mode
[  221.689932][T15667] veth1_vlan: entered promiscuous mode
[  221.706087][T15667] veth0_macvtap: entered promiscuous mode
[  221.713700][T15667] veth1_macvtap: entered promiscuous mode
[  221.724451][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.735123][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.745020][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.755493][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.765371][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.775797][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.785720][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.796150][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.807544][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.818467][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.829016][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.839019][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.849506][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.859472][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.869918][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.879840][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.890389][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.901641][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.910100][T15667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.918921][T15667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.927729][T15667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.936443][T15667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.991150][T15722] loop0: detected capacity change from 0 to 1024
[  221.991430][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4518'.
[  221.997936][T15722] EXT4-fs: Ignoring removed orlov option
[  222.066764][T15729] loop5: detected capacity change from 0 to 512
[  222.082363][T15729] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.096559][T15729] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  222.244483][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4511'.
[  222.265048][T15741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  222.397789][T15748] loop5: detected capacity change from 0 to 2048
[  222.466902][T15748] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  222.482805][T15748] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1696 with error 28
[  222.495455][T15748] EXT4-fs (loop5): This should not happen!! Data will be lost
[  222.495455][T15748] 
[  222.505235][T15748] EXT4-fs (loop5): Total free blocks count 0
[  222.511404][T15748] EXT4-fs (loop5): Free/Dirty block details
[  222.517346][T15748] EXT4-fs (loop5): free_blocks=2415919104
[  222.523172][T15748] EXT4-fs (loop5): dirty_blocks=1712
[  222.528552][T15748] EXT4-fs (loop5): Block reservation details
[  222.534633][T15748] EXT4-fs (loop5): i_reserved_data_blocks=107
[  222.542864][T15752] EXT4-fs (loop5): shut down requested (0)
[  222.568861][ T3612] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  222.889216][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.896734][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.904301][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.912975][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.920418][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.927863][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.935296][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.942786][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.950302][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.957868][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.965267][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.972694][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.980105][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.987522][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.995003][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.002503][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.010071][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.017640][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.025099][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.032603][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.040055][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.047728][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.055157][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.062773][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.070291][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.077738][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.085235][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.092731][ T2967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  223.134269][T15768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.151469][T15768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.164969][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4530'.
[  223.175795][T15772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  223.185683][ T2967] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  223.231038][T15776] loop7: detected capacity change from 0 to 128
[  223.255784][T15778] loop6: detected capacity change from 0 to 164
[  223.272321][T15778] Unable to read rock-ridge attributes
[  223.318030][T15784] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  223.369156][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.418407][T15797] loop0: detected capacity change from 0 to 128
[  223.428570][T15797] vfat: Unknown parameter 'x/v/|� 񀕨taCVx���5��컶���
�&�fr�4L���~j�+��/�4�^i�p��	�Yv$��w�j��k��\$��<��� ~�'
[  223.473965][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.481583][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.489046][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.496889][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.504375][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.511949][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.519591][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.527367][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.534998][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.542445][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.549911][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.557378][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.564819][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.572295][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.580087][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.587533][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.594995][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.602547][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.610036][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.617467][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.624883][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.632344][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.639787][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.647259][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.654685][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.662348][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.669863][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.677328][ T5730] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  223.690980][ T5730] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  223.726256][T15812] xt_hashlimit: max too large, truncated to 1048576
[  223.771339][T15814] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  223.782090][T15816] loop0: detected capacity change from 0 to 512
[  223.789482][T15816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  223.821024][T15816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002]
[  223.830085][T15816] System zones: 1-12
[  223.835145][T15816] EXT4-fs (loop0): 1 truncate cleaned up
[  224.100142][T15843] netlink: 'syz.7.4560': attribute type 4 has an invalid length.
[  224.142077][T15843] netlink: 'syz.7.4560': attribute type 4 has an invalid length.
[  224.169866][T15849] loop0: detected capacity change from 0 to 128
[  224.208979][T15849] loop0: detected capacity change from 128 to 0
[  224.216532][T15849] FAT-fs (loop0): FAT read failed (blocknr 32)
[  224.243557][ T5606] FAT-fs (loop0): Directory bread(block 34) failed
[  224.250743][ T5606] FAT-fs (loop0): Directory bread(block 35) failed
[  224.267510][ T5606] FAT-fs (loop0): Directory bread(block 36) failed
[  224.274151][ T5606] FAT-fs (loop0): Directory bread(block 37) failed
[  224.284123][ T5606] FAT-fs (loop0): Directory bread(block 38) failed
[  224.294580][ T5606] FAT-fs (loop0): Directory bread(block 39) failed
[  224.302256][ T5606] FAT-fs (loop0): Directory bread(block 40) failed
[  224.309059][ T5606] FAT-fs (loop0): Directory bread(block 41) failed
[  224.325046][  T332] FAT-fs (loop0): unable to read inode block for updating (i_pos 548)
[  224.358844][  T332] FAT-fs (loop0): bread failed in fat_clusters_flush
[  224.368789][T15857] loop5: detected capacity change from 0 to 512
[  224.376236][ T8208] FAT-fs (loop0): unable to read boot sector to mark fs as dirty
[  224.398983][T15857] EXT4-fs (loop5): orphan cleanup on readonly fs
[  224.405748][T15857] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.4566: bad orphan inode 13
[  224.456579][T15857] ext4_test_bit(bit=12, block=18) = 1
[  224.462077][T15857] is_bad_inode(inode)=0
[  224.466257][T15857] NEXT_ORPHAN(inode)=2130706432
[  224.471233][T15857] max_ino=32
[  224.474523][T15857] i_nlink=1
[  224.488806][T15857] EXT4-fs mount: 36 callbacks suppressed
[  224.488823][T15857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  224.631153][T15874] loop6: detected capacity change from 0 to 512
[  224.648036][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.690819][T15874] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4573: bg 0: block 248: padding at end of block bitmap is not set
[  224.707540][T15874] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.4573: Failed to acquire dquot type 1
[  224.727754][T15874] EXT4-fs (loop6): 1 truncate cleaned up
[  224.733963][T15874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.797147][T15874] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.824632][T15858] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  224.903276][T14467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.904160][T15887] loop7: detected capacity change from 0 to 128
[  224.922352][ T3612] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:58: Failed to release dquot type 1
[  224.988137][T15887] loop7: detected capacity change from 128 to 0
[  225.008533][T15887] bio_check_eod: 47 callbacks suppressed
[  225.008550][T15887] syz.7.4578: attempt to access beyond end of device
[  225.008550][T15887] loop7: rw=0, sector=32, nr_sectors = 1 limit=0
[  225.040206][T15893] loop5: detected capacity change from 0 to 1024
[  225.073737][T15887] FAT-fs (loop7): FAT read failed (blocknr 32)
[  225.079642][T15893] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  225.080397][T15887] syz.7.4578: attempt to access beyond end of device
[  225.080397][T15887] loop7: rw=2049, sector=58, nr_sectors = 8 limit=0
[  225.102985][T15887] syz.7.4578: attempt to access beyond end of device
[  225.102985][T15887] loop7: rw=2049, sector=98, nr_sectors = 24 limit=0
[  225.111713][T15893] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  225.133543][T15256] syz-executor: attempt to access beyond end of device
[  225.133543][T15256] loop7: rw=524288, sector=34, nr_sectors = 1 limit=0
[  225.147229][T15256] syz-executor: attempt to access beyond end of device
[  225.147229][T15256] loop7: rw=524288, sector=35, nr_sectors = 1 limit=0
[  225.150895][T15893] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #32: comm syz.5.4579: iget: special inode unallocated
[  225.160835][T15256] syz-executor: attempt to access beyond end of device
[  225.160835][T15256] loop7: rw=524288, sector=36, nr_sectors = 1 limit=0
[  225.188904][T15893] EXT4-fs (loop5): Remounting filesystem read-only
[  225.189157][T15256] syz-executor: attempt to access beyond end of device
[  225.189157][T15256] loop7: rw=524288, sector=37, nr_sectors = 1 limit=0
[  225.195472][T15893] EXT4-fs (loop5): no journal found
[  225.211601][T15256] syz-executor: attempt to access beyond end of device
[  225.211601][T15256] loop7: rw=524288, sector=38, nr_sectors = 1 limit=0
[  225.214270][T15893] EXT4-fs (loop5): can't get journal size
[  225.229444][T15256] syz-executor: attempt to access beyond end of device
[  225.229444][T15256] loop7: rw=524288, sector=39, nr_sectors = 1 limit=0
[  225.241002][T15865] chnl_net:caif_netlink_parms(): no params data found
[  225.247167][T15256] syz-executor: attempt to access beyond end of device
[  225.247167][T15256] loop7: rw=524288, sector=40, nr_sectors = 1 limit=0
[  225.267446][T15256] FAT-fs (loop7): Directory bread(block 34) failed
[  225.273986][T15256] FAT-fs (loop7): Directory bread(block 35) failed
[  225.280591][T15256] FAT-fs (loop7): Directory bread(block 36) failed
[  225.286813][T15893] EXT4-fs (loop5): failed to initialize system zone (-117)
[  225.287163][T15256] FAT-fs (loop7): Directory bread(block 37) failed
[  225.294366][T15893] EXT4-fs (loop5): mount failed
[  225.300890][T15256] FAT-fs (loop7): Directory bread(block 38) failed
[  225.312418][T15256] FAT-fs (loop7): Directory bread(block 39) failed
[  225.319011][T15256] FAT-fs (loop7): Directory bread(block 40) failed
[  225.329833][T15256] FAT-fs (loop7): Directory bread(block 41) failed
[  225.345473][ T3538] FAT-fs (loop7): unable to read inode block for updating (i_pos 548)
[  225.353826][ T3538] FAT-fs (loop7): bread failed in fat_clusters_flush
[  225.366027][T15256] FAT-fs (loop7): unable to read boot sector to mark fs as dirty
[  225.398459][T15902] netlink: 'syz.6.4591': attribute type 4 has an invalid length.
[  225.407639][T15865] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.414805][T15865] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.422196][T15865] bridge_slave_0: entered allmulticast mode
[  225.428788][T15865] bridge_slave_0: entered promiscuous mode
[  225.436512][T15865] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.443648][T15865] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.451045][T15865] bridge_slave_1: entered allmulticast mode
[  225.457686][T15865] bridge_slave_1: entered promiscuous mode
[  225.464337][T15902] netlink: 'syz.6.4591': attribute type 4 has an invalid length.
[  225.489575][T15865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.500544][T15865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.512487][T15907] loop6: detected capacity change from 0 to 1024
[  225.526985][T15865] team0: Port device team_slave_0 added
[  225.534380][T15865] team0: Port device team_slave_1 added
[  225.558221][T15907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.592956][ T3538] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.604683][T15912] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  225.611879][T15865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.618994][T15865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.644963][T15865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.657779][T15865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.664798][T15865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.690909][T15865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.731339][ T3538] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.741629][T15907] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4583: bg 0: block 88: padding at end of block bitmap is not set
[  225.773793][T15865] hsr_slave_0: entered promiscuous mode
[  225.786927][T15865] hsr_slave_1: entered promiscuous mode
[  225.795119][T15865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.804391][T15865] Cannot create hsr debugfs directory
[  225.816693][ T3538] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.828349][T14467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.880015][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4590'.
[  225.896487][ T3538] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.938479][T15926] 8021q: adding VLAN 0 to HW filter on device bond1
[  225.943426][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4590'.
[  225.970377][T15931] bond1 (unregistering): Released all slaves
[  226.031785][ T3538] bridge_slave_1: left allmulticast mode
[  226.037519][ T3538] bridge_slave_1: left promiscuous mode
[  226.043176][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.053217][ T3538] bridge_slave_0: left allmulticast mode
[  226.059047][ T3538] bridge_slave_0: left promiscuous mode
[  226.064721][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.105154][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4593'.
[  226.153722][T15939] loop6: detected capacity change from 0 to 128
[  226.171263][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.181829][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.193263][ T3538] bond0 (unregistering): Released all slaves
[  226.272108][ T3538] hsr_slave_0: left promiscuous mode
[  226.278040][ T3538] hsr_slave_1: left promiscuous mode
[  226.284072][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.291762][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.302171][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.309720][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.322990][ T3538] veth1_macvtap: left promiscuous mode
[  226.328666][ T3538] veth0_macvtap: left promiscuous mode
[  226.334340][ T3538] veth1_vlan: left promiscuous mode
[  226.339765][ T3538] veth0_vlan: left promiscuous mode
[  226.410335][T15947] loop9: detected capacity change from 0 to 1024
[  226.422877][ T3538] team0 (unregistering): Port device team_slave_1 removed
[  226.433233][ T3538] team0 (unregistering): Port device team_slave_0 removed
[  226.457015][T15949] loop5: detected capacity change from 0 to 2048
[  226.470658][T15947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.512287][T15947] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4599: bg 0: block 88: padding at end of block bitmap is not set
[  226.526845][T15958] loop6: detected capacity change from 0 to 512
[  226.529838][T15949]  loop5: p1 < > p4
[  226.548491][T15949] loop5: p4 size 8388608 extends beyond EOD, truncated
[  226.556787][T15958] EXT4-fs (loop6): orphan cleanup on readonly fs
[  226.565763][T15914] chnl_net:caif_netlink_parms(): no params data found
[  226.574571][T15958] EXT4-fs error (device loop6): ext4_orphan_get:1416: comm syz.6.4602: bad orphan inode 13
[  226.589360][T15958] ext4_test_bit(bit=12, block=18) = 1
[  226.594868][T15958] is_bad_inode(inode)=0
[  226.599070][T15958] NEXT_ORPHAN(inode)=2130706432
[  226.604173][T15958] max_ino=32
[  226.607423][T15958] i_nlink=1
[  226.611058][T15958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  226.626129][T11426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.714056][T15914] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.721200][T15914] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.732635][T14467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.741946][T15914] bridge_slave_0: entered allmulticast mode
[  226.748747][T15914] bridge_slave_0: entered promiscuous mode
[  226.755641][T15914] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.762798][T15914] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.770486][T15914] bridge_slave_1: entered allmulticast mode
[  226.777217][T15914] bridge_slave_1: entered promiscuous mode
[  226.812253][T15914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.825230][T15914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.850065][T15865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  226.861082][T15914] team0: Port device team_slave_0 added
[  226.870125][T15914] team0: Port device team_slave_1 added
[  226.896987][T15865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  226.906238][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4606'.
[  226.920470][T15865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  226.939682][T15914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.946769][T15914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.972959][T15914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.985181][T15865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  227.017557][T15914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.024563][T15914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.050755][T15914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.099200][T15914] hsr_slave_0: entered promiscuous mode
[  227.105380][T15914] hsr_slave_1: entered promiscuous mode
[  227.111374][T15914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.119309][T15914] Cannot create hsr debugfs directory
[  227.134090][T15991] loop9: detected capacity change from 0 to 128
[  227.187127][T15991] loop9: detected capacity change from 128 to 0
[  227.194412][T15991] FAT-fs (loop9): FAT read failed (blocknr 32)
[  227.211971][T11426] FAT-fs (loop9): Directory bread(block 34) failed
[  227.218669][T11426] FAT-fs (loop9): Directory bread(block 35) failed
[  227.225223][T11426] FAT-fs (loop9): Directory bread(block 36) failed
[  227.226345][T15865] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.231995][T11426] FAT-fs (loop9): Directory bread(block 37) failed
[  227.249253][T11426] FAT-fs (loop9): Directory bread(block 38) failed
[  227.255965][T11426] FAT-fs (loop9): Directory bread(block 39) failed
[  227.264168][T11426] FAT-fs (loop9): Directory bread(block 40) failed
[  227.271159][T11426] FAT-fs (loop9): Directory bread(block 41) failed
[  227.294997][T15865] 8021q: adding VLAN 0 to HW filter on device team0
[  227.320585][T15998] loop5: detected capacity change from 0 to 512
[  227.330656][ T3542] FAT-fs (loop9): unable to read inode block for updating (i_pos 548)
[  227.342279][ T3542] FAT-fs (loop9): bread failed in fat_clusters_flush
[  227.351574][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.357846][T14460] FAT-fs (loop9): unable to read boot sector to mark fs as dirty
[  227.358822][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.374782][T16000] loop6: detected capacity change from 0 to 512
[  227.377831][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.388265][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.400683][T15998] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4625: bg 0: block 248: padding at end of block bitmap is not set
[  227.415322][T15998] __quota_error: 114 callbacks suppressed
[  227.415338][T15998] Quota error (device loop5): write_blk: dquota write failed
[  227.429404][T15998] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  227.441142][T15998] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4625: Failed to acquire dquot type 1
[  227.454740][T16000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.456448][T15998] EXT4-fs (loop5): 1 truncate cleaned up
[  227.469617][T16000] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  227.476316][T15998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.496657][T15998] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.517569][T15865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.535034][T14467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.559959][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.570832][ T3542] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5
[  227.577613][T15865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.579923][ T3542] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:32: Failed to release dquot type 1
[  227.627334][T15914] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  227.636544][T15914] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  227.645960][T15914] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  227.654928][T15914] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  227.676214][ T3542] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.686194][ T3542] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.704267][T15865] veth0_vlan: entered promiscuous mode
[  227.718000][T15865] veth1_vlan: entered promiscuous mode
[  227.750935][ T3542] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.760821][ T3542] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.791985][T15865] veth0_macvtap: entered promiscuous mode
[  227.811628][T15865] veth1_macvtap: entered promiscuous mode
[  227.826855][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.837500][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.847464][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.858143][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.868063][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.878582][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.888521][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.898972][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.909613][T15865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.923077][ T3542] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.932952][ T3542] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.944821][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.955405][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.965267][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.975786][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.985663][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.996110][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.006026][T15865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.016468][T15865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.026984][T15865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.047409][T15914] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.055741][T15865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.064556][T15865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.073275][T15865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.082024][T15865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.106499][ T3542] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.116446][ T3542] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.133348][T15914] 8021q: adding VLAN 0 to HW filter on device team0
[  228.160267][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.167470][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.193701][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.200851][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.204417][T16031] loop3: detected capacity change from 0 to 128
[  228.217238][T16031] vfat: Unknown parameter 'x/v/|� 񀕨taCVx���5��컶���
�&�fr�4L���~j�+��/�4�^i�p��	�Yv$��w�j��k��\$��<��� ~�'
[  228.312686][T16020] chnl_net:caif_netlink_parms(): no params data found
[  228.331804][ T3542] team0: left allmulticast mode
[  228.336733][ T3542] team_slave_0: left allmulticast mode
[  228.342270][ T3542] team_slave_1: left allmulticast mode
[  228.348084][ T3542] bridge0: port 4(team0) entered disabled state
[  228.355117][ T3542] dummy0: left allmulticast mode
[  228.360411][ T3542] bridge0: port 3(dummy0) entered disabled state
[  228.367786][ T3542] bridge_slave_1: left allmulticast mode
[  228.373505][ T3542] bridge_slave_1: left promiscuous mode
[  228.379372][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.387901][ T3542] bridge_slave_0: left allmulticast mode
[  228.393616][ T3542] bridge_slave_0: left promiscuous mode
[  228.399404][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.493421][ T3542] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  228.521112][   T29] audit: type=1326 audit(1745293830.591:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.5.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c8fde169 code=0x7ffc0000
[  228.573338][T16047] loop3: detected capacity change from 0 to 512
[  228.580193][   T29] audit: type=1326 audit(1745293830.591:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.5.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fd6c8fde169 code=0x7ffc0000
[  228.580256][   T29] audit: type=1326 audit(1745293830.591:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.5.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c8fde169 code=0x7ffc0000
[  228.580337][   T29] audit: type=1326 audit(1745293830.591:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.5.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd6c8fde169 code=0x7ffc0000
[  228.580369][   T29] audit: type=1326 audit(1745293830.591:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.5.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c8fde169 code=0x7ffc0000
[  228.580400][   T29] audit: type=1326 audit(1745293830.621:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.5.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c8fde169 code=0x7ffc0000
[  228.749428][T16047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.764573][T16047] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.780254][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.792700][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.803518][ T3542] bond0 (unregistering): Released all slaves
[  228.814495][ T3542] bond1 (unregistering): Released all slaves
[  228.880340][ T3542] tipc: Left network mode
[  228.888423][T15865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.913479][T16020] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.920662][T16020] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.953016][T16020] bridge_slave_0: entered allmulticast mode
[  228.966371][T16020] bridge_slave_0: entered promiscuous mode
[  229.009065][T16020] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.016197][T16020] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.051200][T16020] bridge_slave_1: entered allmulticast mode
[  229.068129][T16020] bridge_slave_1: entered promiscuous mode
[  229.150688][ T3542] hsr_slave_0: left promiscuous mode
[  229.157984][ T3542] hsr_slave_1: left promiscuous mode
[  229.163838][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.171486][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.181778][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.189288][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.210328][ T3542] veth1_macvtap: left promiscuous mode
[  229.216692][ T3542] veth0_macvtap: left promiscuous mode
[  229.229714][ T3542] veth1_vlan: left promiscuous mode
[  229.235156][ T3542] veth0_vlan: left promiscuous mode
[  229.336809][ T3542] team_slave_1 (unregistering): left promiscuous mode
[  229.346935][ T3542] team0 (unregistering): Port device team_slave_1 removed
[  229.360616][ T3542] team_slave_0 (unregistering): left promiscuous mode
[  229.368462][ T3542] team0 (unregistering): Port device team_slave_0 removed
[  229.470589][T16020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.505307][T16020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.528827][T16077] loop6: detected capacity change from 0 to 2048
[  229.566198][T16020] team0: Port device team_slave_0 added
[  229.573252][T16020] team0: Port device team_slave_1 added
[  229.599635][T16077]  loop6: p1 < > p4
[  229.604065][T16077] loop6: p4 size 8388608 extends beyond EOD, truncated
[  229.613806][T16020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.620871][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.646969][T16020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.668546][T16020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.675636][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.701724][T16020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.759993][T15914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.781954][T16020] hsr_slave_0: entered promiscuous mode
[  229.799667][T16020] hsr_slave_1: entered promiscuous mode
[  229.805728][T16020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.825232][T16020] Cannot create hsr debugfs directory
[  229.966225][T15914] veth0_vlan: entered promiscuous mode
[  229.982251][T15914] veth1_vlan: entered promiscuous mode
[  230.014721][T15914] veth0_macvtap: entered promiscuous mode
[  230.026381][T15914] veth1_macvtap: entered promiscuous mode
[  230.041039][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.051628][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.061492][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.072011][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.081911][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.092383][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.102217][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.112732][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.127933][T15914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.142945][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.153586][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.163567][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.174060][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.183961][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.194483][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.204413][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.214869][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.227274][T15914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.236954][T15914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.245815][T15914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.254554][T15914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.263436][T15914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.284093][T16104] loop6: detected capacity change from 0 to 512
[  230.295076][T16104] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  230.319993][T16104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002]
[  230.328560][T16104] System zones: 1-12
[  230.334199][T16104] EXT4-fs (loop6): 1 truncate cleaned up
[  230.341952][T16104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.438898][T16109] batadv_slave_0: entered promiscuous mode
[  230.479939][T16020] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  230.494374][T16109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.516001][T16020] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  230.526140][T16020] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  230.538058][T16020] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  230.601666][T16020] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.609227][T14467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.614237][T16020] 8021q: adding VLAN 0 to HW filter on device team0
[  230.646928][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.654114][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.697657][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.704892][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.824031][T16020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.991115][T16020] veth0_vlan: entered promiscuous mode
[  231.011767][T16020] veth1_vlan: entered promiscuous mode
[  231.068566][T16020] veth0_macvtap: entered promiscuous mode
[  231.094720][T16020] veth1_macvtap: entered promiscuous mode
[  231.195179][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.205771][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.215714][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.226192][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.236131][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.246667][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.256509][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.267076][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.276905][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.287367][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.326194][T16020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.336692][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.347362][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.357237][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.367911][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.377838][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.388372][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.398238][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.408862][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.418852][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.429365][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.468155][T16020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.475634][T16108] batadv_slave_0: left promiscuous mode
[  231.514890][T16020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.523742][T16020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.532565][T16020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.541389][T16020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.620040][T16137] xt_hashlimit: max too large, truncated to 1048576
[  231.629185][T16137] Cannot find set identified by id 0 to match
[  231.676641][ T8825] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[  231.684162][ T8825] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[  231.691684][ T8825] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[  231.727359][ T8825] hid-generic 0000:0004:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  231.866262][   T29] audit: type=1400 audit(1745293833.931:9408): avc:  denied  { shutdown } for  pid=16147 comm="syz.5.4653" lport=51212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  231.910361][T16159] loop3: detected capacity change from 0 to 128
[  231.918508][T16159] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  231.948666][ T3612] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  231.963721][T16109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.008467][T16165] loop3: detected capacity change from 0 to 736
[  232.015071][T16165] iso9660: Unknown parameter '��Q�{U���a��N�D��?�s�M00000000000000000000'
[  232.109861][T16174] loop6: detected capacity change from 0 to 256
[  232.123666][T16174] FAT-fs (loop6): Directory bread(block 64) failed
[  232.130736][T16174] FAT-fs (loop6): Directory bread(block 65) failed
[  232.135790][T16176] bridge0: entered promiscuous mode
[  232.143265][T16174] FAT-fs (loop6): Directory bread(block 66) failed
[  232.144225][T16176] batadv0: entered promiscuous mode
[  232.149894][T16174] FAT-fs (loop6): Directory bread(block 67) failed
[  232.161975][T16174] FAT-fs (loop6): Directory bread(block 68) failed
[  232.162636][T16176] bridge0: left promiscuous mode
[  232.168616][T16174] FAT-fs (loop6): Directory bread(block 69) failed
[  232.180164][T16176] batadv0: left promiscuous mode
[  232.180178][T16174] FAT-fs (loop6): Directory bread(block 70) failed
[  232.191733][T16174] FAT-fs (loop6): Directory bread(block 71) failed
[  232.198478][T16174] FAT-fs (loop6): Directory bread(block 72) failed
[  232.205053][T16174] FAT-fs (loop6): Directory bread(block 73) failed
[  232.397441][T14467] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  232.405940][T14467] FAT-fs (loop6): Filesystem has been set read-only
[  232.550294][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  232.550330][   T29] audit: type=1400 audit(1745293834.621:9467): avc:  denied  { prog_load } for  pid=16184 comm="syz.3.4671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  232.575659][   T29] audit: type=1400 audit(1745293834.621:9468): avc:  denied  { bpf } for  pid=16184 comm="syz.3.4671" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  232.596317][   T29] audit: type=1400 audit(1745293834.621:9469): avc:  denied  { perfmon } for  pid=16184 comm="syz.3.4671" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  232.622383][   T29] audit: type=1400 audit(1745293834.621:9470): avc:  denied  { prog_run } for  pid=16184 comm="syz.3.4671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  232.641589][   T29] audit: type=1400 audit(1745293834.631:9471): avc:  denied  { execmem } for  pid=16186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  232.661175][   T29] audit: type=1400 audit(1745293834.671:9472): avc:  denied  { read } for  pid=16187 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  232.682634][   T29] audit: type=1400 audit(1745293834.671:9473): avc:  denied  { open } for  pid=16187 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  232.706271][   T29] audit: type=1400 audit(1745293834.671:9474): avc:  denied  { mounton } for  pid=16187 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  232.728144][   T29] audit: type=1400 audit(1745293834.681:9475): avc:  denied  { module_request } for  pid=16187 comm="syz-executor" kmod="netdev-nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  232.750149][   T29] audit: type=1400 audit(1745293834.691:9476): avc:  denied  { sys_module } for  pid=16187 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  232.792971][T16193] pim6reg1: entered promiscuous mode
[  232.798379][T16193] pim6reg1: entered allmulticast mode
[  232.871992][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4685'.
[  232.952374][T16211] bridge0: entered promiscuous mode
[  232.959277][T16211] batadv0: entered promiscuous mode
[  232.966378][T16211] bridge0: left promiscuous mode
[  232.972119][T16211] batadv0: left promiscuous mode
[  233.000300][T16187] chnl_net:caif_netlink_parms(): no params data found
[  233.056682][T16187] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.064062][T16187] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.082389][T16187] bridge_slave_0: entered allmulticast mode
[  233.089641][T16187] bridge_slave_0: entered promiscuous mode
[  233.096508][T16187] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.103621][T16187] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.111319][T16187] bridge_slave_1: entered allmulticast mode
[  233.117952][T16187] bridge_slave_1: entered promiscuous mode
[  233.156616][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4682'.
[  233.181441][T16187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.206695][T16226] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  233.208588][T16187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.250721][T16187] team0: Port device team_slave_0 added
[  233.345543][ T3604] bond0 (unregistering): Released all slaves
[  233.385063][T16230] loop3: detected capacity change from 0 to 1024
[  233.416084][T16187] team0: Port device team_slave_1 added
[  233.427125][T16109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.454982][T16187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.462077][T16187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.488067][T16187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.503036][T16187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.510295][T16187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.536271][T16187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.565960][ T3604] tipc: Left network mode
[  233.582053][T16187] hsr_slave_0: entered promiscuous mode
[  233.600759][T16187] hsr_slave_1: entered promiscuous mode
[  233.606919][T16187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.616290][T16187] Cannot create hsr debugfs directory
[  233.633720][T16230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.760719][T16109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.829568][T16109] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.847071][T15865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.856295][ T3604] hsr_slave_0: left promiscuous mode
[  233.860302][T16239] loop1: detected capacity change from 0 to 128
[  233.868258][ T3604] hsr_slave_1: left promiscuous mode
[  233.956108][  T332] smc: removing ib device syz!
[  234.002964][T16109] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.024215][T16239] bio_check_eod: 47 callbacks suppressed
[  234.024235][T16239] syz.1.4688: attempt to access beyond end of device
[  234.024235][T16239] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  234.039006][T16109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.043515][T16239] syz.1.4688: attempt to access beyond end of device
[  234.043515][T16239] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  234.066054][T16246] pim6reg1: entered promiscuous mode
[  234.067390][T16239] syz.1.4688: attempt to access beyond end of device
[  234.067390][T16239] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  234.071539][T16246] pim6reg1: entered allmulticast mode
[  234.084890][T16239] syz.1.4688: attempt to access beyond end of device
[  234.084890][T16239] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  234.113119][T16109] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.121508][T16239] syz.1.4688: attempt to access beyond end of device
[  234.121508][T16239] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  234.147302][T16239] syz.1.4688: attempt to access beyond end of device
[  234.147302][T16239] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  234.165728][T16239] syz.1.4688: attempt to access beyond end of device
[  234.165728][T16239] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  234.182280][T16239] syz.1.4688: attempt to access beyond end of device
[  234.182280][T16239] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  234.195944][T16239] syz.1.4688: attempt to access beyond end of device
[  234.195944][T16239] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  234.236292][T16239] syz.1.4688: attempt to access beyond end of device
[  234.236292][T16239] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  234.375787][T16260] loop5: detected capacity change from 0 to 512
[  234.390823][T16260] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  234.430437][T16260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002]
[  234.438616][T16260] System zones: 1-12
[  234.444167][T16260] EXT4-fs (loop5): 1 truncate cleaned up
[  234.489566][T16260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.720671][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.722009][T16187] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  234.739759][T16187] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  234.749123][T16187] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  234.758438][T16187] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  234.851377][T16285] loop3: detected capacity change from 0 to 2048
[  234.907914][T16285]  loop3: p1 < > p4
[  234.919590][T16187] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.928779][T16285] loop3: p4 size 8388608 extends beyond EOD, truncated
[  234.959664][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4708'.
[  234.974426][T16187] 8021q: adding VLAN 0 to HW filter on device team0
[  235.002353][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.009485][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.020767][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.028003][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.058161][T16289] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  235.065525][T16187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  235.078544][T16187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.136103][T16302] bridge0: entered promiscuous mode
[  235.160086][T16302] batadv0: entered promiscuous mode
[  235.171772][T16302] bridge0: left promiscuous mode
[  235.186608][T16302] batadv0: left promiscuous mode
[  235.213083][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4714'.
[  235.239592][T16187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.321918][T16318] bridge_slave_0: left allmulticast mode
[  235.327928][T16318] bridge_slave_0: left promiscuous mode
[  235.333652][T16318] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.355949][T16318] bridge_slave_1: left allmulticast mode
[  235.361716][T16318] bridge_slave_1: left promiscuous mode
[  235.367411][T16318] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.420168][T16318] bond0: (slave bond_slave_0): Releasing backup interface
[  235.439155][T16318] bond0: (slave bond_slave_1): Releasing backup interface
[  235.452555][T16318] team0: Port device team_slave_0 removed
[  235.462309][T16318] team0: Port device team_slave_1 removed
[  235.469697][T16318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.477255][T16318] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.486804][T16318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.494316][T16318] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.504431][ T8825] IPVS: starting estimator thread 0...
[  235.596912][T16187] veth0_vlan: entered promiscuous mode
[  235.605414][T16187] veth1_vlan: entered promiscuous mode
[  235.617501][T16323] IPVS: using max 2400 ests per chain, 120000 per kthread
[  235.620705][T16187] veth0_macvtap: entered promiscuous mode
[  235.635834][T16187] veth1_macvtap: entered promiscuous mode
[  235.646694][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.657508][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.667441][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.677996][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.687905][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.698385][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.708226][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.718666][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.728539][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.739060][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.750091][T16187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.761360][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.772003][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.781890][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.792373][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.802302][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.812878][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.823289][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.833920][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.844071][T16187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.854559][T16187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.865430][T16187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.876317][T16187] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.885365][T16187] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.894180][T16187] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.903159][T16187] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.110472][T16336] loop1: detected capacity change from 0 to 1024
[  236.111005][T16350] loop3: detected capacity change from 0 to 256
[  236.124341][T16350] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  236.186753][T16336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.226674][T16359] loop5: detected capacity change from 0 to 2048
[  236.275033][T16359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.385869][T16020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.581678][T16377] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  236.619525][T16377] netlink: 'syz.8.4735': attribute type 1 has an invalid length.
[  236.698805][T16386] loop3: detected capacity change from 0 to 256
[  236.714168][T16388] loop1: detected capacity change from 0 to 512
[  236.730625][T16388] EXT4-fs: Ignoring removed nobh option
[  236.749556][T16390] loop8: detected capacity change from 0 to 512
[  236.760025][T16390] EXT4-fs: Mount option(s) incompatible with ext3
[  236.780792][T16388] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  236.790031][T16388] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4739: attempt to clear invalid blocks 2 len 1
[  236.804906][T16388] EXT4-fs (loop1): Remounting filesystem read-only
[  236.812624][T16388] EXT4-fs (loop1): 1 truncate cleaned up
[  236.819287][T16388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.852659][T16020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.210180][T16411] loop3: detected capacity change from 0 to 256
[  237.236811][T16411] FAT-fs (loop3): Directory bread(block 64) failed
[  237.256367][T16411] FAT-fs (loop3): Directory bread(block 65) failed
[  237.271518][T16413] loop1: detected capacity change from 0 to 2048
[  237.278191][T16411] FAT-fs (loop3): Directory bread(block 66) failed
[  237.278591][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.284857][T16411] FAT-fs (loop3): Directory bread(block 67) failed
[  237.302775][T16411] FAT-fs (loop3): Directory bread(block 68) failed
[  237.309528][T16411] FAT-fs (loop3): Directory bread(block 69) failed
[  237.316357][T16411] FAT-fs (loop3): Directory bread(block 70) failed
[  237.323245][T16411] FAT-fs (loop3): Directory bread(block 71) failed
[  237.330526][T16411] FAT-fs (loop3): Directory bread(block 72) failed
[  237.337534][T16411] FAT-fs (loop3): Directory bread(block 73) failed
[  237.346263][T16413]  loop1: p1 < > p4
[  237.355882][T16413] loop1: p4 size 8388608 extends beyond EOD, truncated
[  237.573727][   T29] kauditd_printk_skb: 255 callbacks suppressed
[  237.573745][   T29] audit: type=1400 audit(1745293839.641:9732): avc:  denied  { setopt } for  pid=16427 comm="syz.1.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  237.606151][   T29] audit: type=1400 audit(1745293839.671:9733): avc:  denied  { connect } for  pid=16427 comm="syz.1.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  237.700244][T15865] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  237.708249][T15865] FAT-fs (loop3): Filesystem has been set read-only
[  237.803281][  T332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.816859][   T29] audit: type=1400 audit(1745293839.881:9734): avc:  denied  { append } for  pid=16443 comm="syz.8.4764" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  237.818959][T16444] blktrace: Concurrent blktraces are not allowed on sg0
[  237.842738][   T29] audit: type=1400 audit(1745293839.881:9735): avc:  denied  { open } for  pid=16443 comm="syz.8.4764" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  237.872134][   T29] audit: type=1400 audit(1745293839.891:9736): avc:  denied  { ioctl } for  pid=16443 comm="syz.8.4764" path="socket:[54943]" dev="sockfs" ino=54943 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  237.897162][   T29] audit: type=1400 audit(1745293839.891:9737): avc:  denied  { ioctl } for  pid=16443 comm="syz.8.4764" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  237.925659][   T29] audit: type=1400 audit(1745293839.971:9738): avc:  denied  { execmem } for  pid=16448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  237.948256][T16446] loop1: detected capacity change from 0 to 2048
[  237.957167][  T332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.972775][   T29] audit: type=1400 audit(1745293840.041:9739): avc:  denied  { read } for  pid=16449 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  238.000464][   T29] audit: type=1400 audit(1745293840.061:9740): avc:  denied  { open } for  pid=16449 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  238.007718][T16446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.024175][   T29] audit: type=1400 audit(1745293840.061:9741): avc:  denied  { mounton } for  pid=16449 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  238.080400][  T332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.153546][  T332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.225062][T16465] loop8: detected capacity change from 0 to 512
[  238.236252][  T332] bridge_slave_1: left allmulticast mode
[  238.242027][  T332] bridge_slave_1: left promiscuous mode
[  238.247783][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.255808][  T332] bridge_slave_0: left allmulticast mode
[  238.256310][T16465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.261613][  T332] bridge_slave_0: left promiscuous mode
[  238.261745][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.287249][T16465] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  238.349315][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.373345][T16469] loop8: detected capacity change from 0 to 256
[  238.396761][T16469] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  238.419510][  T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.430294][  T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.440962][  T332] bond0 (unregistering): Released all slaves
[  238.508830][  T332] hsr_slave_0: left promiscuous mode
[  238.518555][  T332] hsr_slave_1: left promiscuous mode
[  238.526717][  T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.534280][  T332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.556385][  T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.564043][  T332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.579541][  T332] veth1_macvtap: left promiscuous mode
[  238.585212][  T332] veth0_macvtap: left promiscuous mode
[  238.591922][  T332] veth1_vlan: left promiscuous mode
[  238.598971][  T332] veth0_vlan: left promiscuous mode
[  238.602054][T16481] loop2: detected capacity change from 0 to 256
[  238.731546][  T332] team0 (unregistering): Port device team_slave_1 removed
[  238.744830][  T332] team0 (unregistering): Port device team_slave_0 removed
[  238.789618][T16449] chnl_net:caif_netlink_parms(): no params data found
[  238.863780][T16489] bridge_slave_0: left allmulticast mode
[  238.869586][T16489] bridge_slave_0: left promiscuous mode
[  238.875244][T16489] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.891433][T16489] bridge_slave_1: left allmulticast mode
[  238.897284][T16489] bridge_slave_1: left promiscuous mode
[  238.903072][T16489] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.920098][T16489] bond0: (slave bond_slave_0): Releasing backup interface
[  238.928276][T16020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.942818][T16489] bond0: (slave bond_slave_1): Releasing backup interface
[  238.962281][T16489] team0: Port device team_slave_0 removed
[  238.978485][T16495] loop2: detected capacity change from 0 to 1024
[  238.978483][T16489] team0: Port device team_slave_1 removed
[  238.979666][T16489] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.998464][T16489] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.007743][T16489] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.009553][T16495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.015259][T16489] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.136692][T16449] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.143972][T16449] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.153410][T16449] bridge_slave_0: entered allmulticast mode
[  239.161039][T16449] bridge_slave_0: entered promiscuous mode
[  239.168263][T16449] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.175377][T16449] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.182915][T16449] bridge_slave_1: entered allmulticast mode
[  239.189525][T16449] bridge_slave_1: entered promiscuous mode
[  239.219480][T16449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.233584][T16449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.251611][T15914] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.266039][T16449] team0: Port device team_slave_0 added
[  239.274776][T16449] team0: Port device team_slave_1 added
[  239.317869][T16449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.324967][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.351071][T16449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.378382][  T332] IPVS: stop unused estimator thread 0...
[  239.384884][T16449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.391918][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.418020][T16449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.474437][T16449] hsr_slave_0: entered promiscuous mode
[  239.482162][T16525] loop5: detected capacity change from 0 to 512
[  239.482621][T16449] hsr_slave_1: entered promiscuous mode
[  239.506531][T16525] EXT4-fs: Mount option(s) incompatible with ext3
[  239.506679][T16449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  239.528989][T16449] Cannot create hsr debugfs directory
[  239.592454][T16533] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.4794'.
[  239.601713][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4794'.
[  239.693912][T16537] loop5: detected capacity change from 0 to 1024
[  239.711976][T16539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16539 comm=syz.2.4797
[  239.733317][T16537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.770355][T16545] 9pnet: p9_errstr2errno: server reported unknown error 
[  239.843628][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.876332][T16449] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  239.885811][ T3456] IPVS: starting estimator thread 0...
[  239.904309][T16550] bridge_slave_0: left allmulticast mode
[  239.910140][T16550] bridge_slave_0: left promiscuous mode
[  239.915859][T16550] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.926986][T16550] bridge_slave_1: left allmulticast mode
[  239.932806][T16550] bridge_slave_1: left promiscuous mode
[  239.938595][T16550] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.948567][T16550] bond0: (slave bond_slave_0): Releasing backup interface
[  239.958666][T16550] bond0: (slave bond_slave_1): Releasing backup interface
[  239.970840][T16550] team0: Port device team_slave_0 removed
[  239.977287][T16552] IPVS: using max 2304 ests per chain, 115200 per kthread
[  239.986339][T16550] team0: Port device team_slave_1 removed
[  239.993493][T16550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.001174][T16550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.010477][T16550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.018007][T16550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.039131][T16449] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  240.060536][T16449] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  240.074632][T16449] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  240.124998][T16449] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.144694][T16449] 8021q: adding VLAN 0 to HW filter on device team0
[  240.152780][T16565] loop1: detected capacity change from 0 to 512
[  240.161475][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.161759][T16565] EXT4-fs: Mount option(s) incompatible with ext3
[  240.168585][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.170306][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.189450][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.291450][T16449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.365726][T16591] loop1: detected capacity change from 0 to 512
[  240.388674][T16591] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4814: Invalid inode bitmap blk 4 in block_group 0
[  240.409860][T16591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.441822][T16449] veth0_vlan: entered promiscuous mode
[  240.452096][T16449] veth1_vlan: entered promiscuous mode
[  240.467222][T16449] veth0_macvtap: entered promiscuous mode
[  240.475331][T16449] veth1_macvtap: entered promiscuous mode
[  240.482508][T16605] loop8: detected capacity change from 0 to 164
[  240.491628][T16605] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  240.504885][T16449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.515568][T16449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.521227][T16605] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  240.525474][T16449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.544136][T16449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.554229][T16449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.559235][T16605] Symlink component flag not implemented
[  240.564870][T16449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.570436][T16605] Symlink component flag not implemented
[  240.583467][T16605] Symlink component flag not implemented (7)
[  240.587448][T16449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.592069][T16605] Symlink component flag not implemented (116)
[  240.600560][T16449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.616100][T16449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.617947][T16020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.626030][T16449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.645565][T16449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.655418][T16449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.665893][T16449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.676869][T16449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.689523][T16449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.698399][T16449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.707260][T16449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.716189][T16449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.766290][T16609] bridge_slave_0: left allmulticast mode
[  240.772052][T16609] bridge_slave_0: left promiscuous mode
[  240.777877][T16609] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.788202][T16611] loop8: detected capacity change from 0 to 128
[  240.795663][T16611] vfat: Unknown parameter 'kfree'
[  240.803908][T16609] bridge_slave_1: left allmulticast mode
[  240.809767][T16609] bridge_slave_1: left promiscuous mode
[  240.815597][T16609] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.828878][T16609] bond0: (slave bond_slave_0): Releasing backup interface
[  240.841173][T16609] bond0: (slave bond_slave_1): Releasing backup interface
[  240.854126][T16609] team0: Port device team_slave_0 removed
[  240.864017][T16609] team0: Port device team_slave_1 removed
[  240.871035][T16609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.878591][T16609] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.887957][T16609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.895410][T16609] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.965238][ T3377] IPVS: starting estimator thread 0...
[  241.057092][T16619] IPVS: using max 1824 ests per chain, 91200 per kthread
[  241.073061][T16631] loop8: detected capacity change from 0 to 512
[  241.081056][T16631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  241.093510][T16631] EXT4-fs (loop8): orphan cleanup on readonly fs
[  241.101573][T16631] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4824: bg 0: block 248: padding at end of block bitmap is not set
[  241.118361][T16631] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4824: Failed to acquire dquot type 1
[  241.131572][T16631] EXT4-fs (loop8): 1 truncate cleaned up
[  241.140099][T16631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  241.203027][T16631] smc: net device bond0 erased user defined pnetid SYZ0
[  241.251476][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.391527][T16645] syzkaller0: entered allmulticast mode
[  241.399362][T16645] syzkaller0: entered promiscuous mode
[  241.406883][T16645] syzkaller0 (unregistering): left promiscuous mode
[  241.413627][T16645] syzkaller0 (unregistering): left allmulticast mode
[  241.471457][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4843'.
[  241.560823][T16652] loop8: detected capacity change from 0 to 1024
[  241.596609][T16649] vlan2: entered allmulticast mode
[  241.607471][T16649] bridge_slave_0: entered allmulticast mode
[  241.633808][T16652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.710808][T16656] bridge_slave_0: left allmulticast mode
[  241.716544][T16656] bridge_slave_0: left promiscuous mode
[  241.722376][T16656] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.733704][T16656] bridge_slave_1: left allmulticast mode
[  241.739450][T16656] bridge_slave_1: left promiscuous mode
[  241.745186][T16656] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.764264][T16656] bond0: (slave bond_slave_0): Releasing backup interface
[  241.765049][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.784374][T16656] bond0: (slave bond_slave_1): Releasing backup interface
[  241.807652][T16656] team0: Port device team_slave_0 removed
[  241.819503][T16656] team0: Port device team_slave_1 removed
[  241.827093][T16656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.834646][T16656] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.844286][T16656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.851955][T16656] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.855165][T16671] hub 9-0:1.0: USB hub found
[  241.863983][T16671] hub 9-0:1.0: 8 ports detected
[  241.935274][T16673] loop8: detected capacity change from 0 to 1024
[  241.987893][T16673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.019022][T16673] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.126270][ T3612] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 393: padding at end of block bitmap is not set
[  242.165105][ T3612] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117
[  242.177952][ T3612] EXT4-fs (loop8): This should not happen!! Data will be lost
[  242.177952][ T3612] 
[  242.244494][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.272359][T16695] loop4: detected capacity change from 0 to 1024
[  242.363969][T16695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.502257][T16714] loop5: detected capacity change from 0 to 512
[  242.521159][T16714] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4855: Invalid inode bitmap blk 4 in block_group 0
[  242.562787][T16449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.572707][T16714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.607480][   T29] kauditd_printk_skb: 229 callbacks suppressed
[  242.607496][   T29] audit: type=1400 audit(1745293844.681:9969): avc:  denied  { write } for  pid=16724 comm="syz.4.4857" name="tcp6" dev="proc" ino=4026533789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  242.639219][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4857'.
[  242.648268][T16725] netlink: 'syz.4.4857': attribute type 7 has an invalid length.
[  242.656015][T16725] netlink: 'syz.4.4857': attribute type 8 has an invalid length.
[  242.663898][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4857'.
[  242.681508][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4857'.
[  242.690790][T16725] netlink: 'syz.4.4857': attribute type 7 has an invalid length.
[  242.698840][T16725] netlink: 'syz.4.4857': attribute type 8 has an invalid length.
[  242.706617][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4857'.
[  242.738223][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.792621][   T29] audit: type=1326 audit(1745293844.861:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  242.835581][   T29] audit: type=1326 audit(1745293844.861:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  242.859489][   T29] audit: type=1326 audit(1745293844.861:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  242.883112][   T29] audit: type=1326 audit(1745293844.861:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  242.906783][   T29] audit: type=1326 audit(1745293844.861:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  242.930382][   T29] audit: type=1326 audit(1745293844.861:9975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  242.953998][   T29] audit: type=1326 audit(1745293844.861:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  242.977636][   T29] audit: type=1326 audit(1745293844.861:9977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  243.001230][   T29] audit: type=1326 audit(1745293844.861:9978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.2.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5376e169 code=0x7ffc0000
[  243.239408][T16778] loop2: detected capacity change from 0 to 512
[  243.247770][T16778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  243.259482][T16778] EXT4-fs (loop2): orphan cleanup on readonly fs
[  243.266373][T16778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4879: bg 0: block 248: padding at end of block bitmap is not set
[  243.281255][T16778] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4879: Failed to acquire dquot type 1
[  243.293191][T16778] EXT4-fs (loop2): 1 truncate cleaned up
[  243.301825][T16778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  243.319065][T16778] smc: net device bond0 applied user defined pnetid SYZ2
[  243.329100][T16778] smc: net device bond0 erased user defined pnetid SYZ2
[  243.348063][T15914] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.364680][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4892'.
[  243.433497][T16785] vlan2: entered allmulticast mode
[  243.439986][T16785] bridge_slave_0: entered allmulticast mode
[  243.599185][T16800] loop5: detected capacity change from 0 to 512
[  243.609386][T16800] EXT4-fs: Ignoring removed nobh option
[  243.618144][T16800] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4888: invalid indirect mapped block 256 (level 2)
[  243.634182][T16800] EXT4-fs (loop5): 2 truncates cleaned up
[  243.641407][T16800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.656059][T16800] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4888: bg 0: block 5: invalid block bitmap
[  243.683341][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.753154][T16812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4895'.
[  243.791416][T16820] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.4894'.
[  243.838233][T16826] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  243.838233][T16826]    program syz.2.4897 not setting count and/or reply_len properly
[  243.905314][T16837] loop2: detected capacity change from 0 to 512
[  243.931077][T16837] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4899: Invalid inode bitmap blk 4 in block_group 0
[  243.944469][T16837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.998479][T15914] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.091469][T16858] loop2: detected capacity change from 0 to 2048
[  244.132340][T16848] vlan2: entered allmulticast mode
[  244.157709][T16848] bridge_slave_0: entered allmulticast mode
[  244.182519][T16858]  loop2: p1 < > p4
[  244.191082][T16858] loop2: p4 size 8388608 extends beyond EOD, truncated
[  244.642652][T16899] loop8: detected capacity change from 0 to 1024
[  244.704572][T16899] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.826515][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.840684][T16883] syzkaller0: entered promiscuous mode
[  244.847066][T16883] syzkaller0: entered allmulticast mode
[  244.857624][T16933] __nla_validate_parse: 2 callbacks suppressed
[  244.857642][T16933] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4913'.
[  244.873056][T16933] netlink: 'syz.8.4913': attribute type 7 has an invalid length.
[  244.880987][T16933] netlink: 'syz.8.4913': attribute type 8 has an invalid length.
[  244.888862][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4913'.
[  244.919568][T16934] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4913'.
[  244.928645][T16934] netlink: 'syz.8.4913': attribute type 7 has an invalid length.
[  244.936514][T16934] netlink: 'syz.8.4913': attribute type 8 has an invalid length.
[  244.944576][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4913'.
[  244.978635][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4914'.
[  245.024166][T16940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4917'.
[  245.038372][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4916'.
[  245.090863][T16948] loop2: detected capacity change from 0 to 2048
[  245.109058][T16948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.156749][T16957] loop8: detected capacity change from 0 to 164
[  245.284233][T15914] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.284259][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4927'.
[  245.284294][T16970] netlink: 'syz.5.4927': attribute type 7 has an invalid length.
[  245.310171][T16970] netlink: 'syz.5.4927': attribute type 8 has an invalid length.
[  245.317968][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4927'.
[  245.335052][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4927'.
[  245.556670][T16987] loop1: detected capacity change from 0 to 128
[  245.593811][T16991] loop4: detected capacity change from 0 to 512
[  245.611288][T16991] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4934: Invalid inode bitmap blk 4 in block_group 0
[  245.636216][T16994] loop1: detected capacity change from 0 to 256
[  245.684872][T16991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.800252][T16449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.864243][T17001] loop8: detected capacity change from 0 to 1024
[  246.030495][T17001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.242258][T17022] loop4: detected capacity change from 0 to 164
[  246.330209][T16187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.334330][T17030] loop1: detected capacity change from 0 to 8192
[  246.432859][T17047] loop5: detected capacity change from 0 to 128
[  246.802437][T17062] loop5: detected capacity change from 0 to 1024
[  246.854691][T17079] loop4: detected capacity change from 0 to 128
[  246.871996][T17062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.951218][T17090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17090 comm=syz.4.4975
[  246.963902][T17090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17090 comm=syz.4.4975
[  247.092957][T15667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.124961][T17103] loop5: detected capacity change from 0 to 512
[  247.133517][T17103] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4980: corrupted in-inode xattr: invalid ea_ino
[  247.149634][T17103] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4980: couldn't read orphan inode 15 (err -117)
[  247.254921][T17119] loop8: detected capacity change from 0 to 128
[  247.261583][T17117] loop5: detected capacity change from 0 to 8192
[  247.410617][T17127] loop5: detected capacity change from 0 to 1024
[  247.841195][T17186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17186 comm=syz.1.5007
[  247.853876][T17186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17186 comm=syz.1.5007
[  247.908007][T17200] loop8: detected capacity change from 0 to 512
[  247.943248][T17200] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4998: Invalid inode bitmap blk 4 in block_group 0
[  248.293803][T17266] loop2: detected capacity change from 0 to 128
[  248.475515][T17294] program syz.2.5015 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  248.475679][   T29] kauditd_printk_skb: 123 callbacks suppressed
[  248.475749][   T29] audit: type=1400 audit(1745293850.541:10100): avc:  denied  { getopt } for  pid=17293 comm="syz.2.5015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  248.561915][T17300] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.578630][T17297] bridge0: entered promiscuous mode
[  248.584333][T17297] macvlan2: entered promiscuous mode
[  248.591118][T17297] bridge0: port 1(macvlan2) entered blocking state
[  248.597782][T17297] bridge0: port 1(macvlan2) entered disabled state
[  248.604674][T17297] macvlan2: entered allmulticast mode
[  248.610169][T17297] bridge0: entered allmulticast mode
[  248.624942][T17297] macvlan2: left allmulticast mode
[  248.630218][T17297] bridge0: left allmulticast mode
[  248.655717][T17297] bridge0: left promiscuous mode
[  248.709944][T17300] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.775766][T17300] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.848282][T17300] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.944421][T17300] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.983011][T17300] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.023274][T17300] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.036544][T17335] usb usb9: usbfs: process 17335 (syz.2.5033) did not claim interface 9 before use
[  249.058631][T17300] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.081404][T17337] sd 0:0:1:0: device reset
[  249.086609][   T29] audit: type=1400 audit(1745293851.151:10101): avc:  denied  { read } for  pid=17336 comm="syz.4.5035" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  249.146669][T17341] loop2: detected capacity change from 0 to 128
[  249.156078][T17341] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.172448][T17344] 9pnet: p9_errstr2errno: server reported unknown error 
[  249.190342][   T29] audit: type=1400 audit(1745293851.261:10102): avc:  denied  { setattr } for  pid=17340 comm="syz.2.5037" path="/72/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  249.280453][   T29] audit: type=1400 audit(1745293851.351:10103): avc:  denied  { read write } for  pid=17350 comm="syz.8.5040" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  249.307679][   T29] audit: type=1400 audit(1745293851.351:10104): avc:  denied  { bind } for  pid=17348 comm="syz.4.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  249.327457][   T29] audit: type=1400 audit(1745293851.381:10105): avc:  denied  { open } for  pid=17350 comm="syz.8.5040" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  249.351025][   T29] audit: type=1400 audit(1745293851.381:10106): avc:  denied  { ioctl } for  pid=17350 comm="syz.8.5040" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  249.375980][   T29] audit: type=1400 audit(1745293851.401:10107): avc:  denied  { write } for  pid=17348 comm="syz.4.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  249.473970][T17354] syzkaller0: entered promiscuous mode
[  249.479608][T17354] syzkaller0: entered allmulticast mode
[  249.520478][T17364] loop2: detected capacity change from 0 to 128
[  249.560669][T17364] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1)
[  249.760376][T17378] sd 0:0:1:0: device reset
[  249.882812][T17362] syzkaller0: entered promiscuous mode
[  249.891954][T17362] syzkaller0: entered allmulticast mode
[  249.917941][T17364] bio_check_eod: 94 callbacks suppressed
[  249.917958][T17364] syz.2.5045: attempt to access beyond end of device
[  249.917958][T17364] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128
[  249.977125][T17364] syz.2.5045: attempt to access beyond end of device
[  249.977125][T17364] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128
[  249.993217][T17364] syz.2.5045: attempt to access beyond end of device
[  249.993217][T17364] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[  250.011019][T17364] syz.2.5045: attempt to access beyond end of device
[  250.011019][T17364] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128
[  250.024636][T17364] syz.2.5045: attempt to access beyond end of device
[  250.024636][T17364] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128
[  250.038369][T17364] syz.2.5045: attempt to access beyond end of device
[  250.038369][T17364] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  250.052060][T17364] syz.2.5045: attempt to access beyond end of device
[  250.052060][T17364] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  250.104162][T17364] syz.2.5045: attempt to access beyond end of device
[  250.104162][T17364] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  250.117946][   T29] audit: type=1400 audit(1745293852.171:10108): avc:  denied  { create } for  pid=17387 comm="syz.5.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  250.137614][   T29] audit: type=1400 audit(1745293852.171:10109): avc:  denied  { connect } for  pid=17387 comm="syz.5.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  250.159569][T17364] syz.2.5045: attempt to access beyond end of device
[  250.159569][T17364] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  250.174187][T17364] syz.2.5045: attempt to access beyond end of device
[  250.174187][T17364] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  250.215227][T17390] bridge0: entered promiscuous mode
[  250.220704][T17390] macvlan2: entered promiscuous mode
[  250.226425][T17390] bridge0: port 1(macvlan2) entered blocking state
[  250.233093][T17390] bridge0: port 1(macvlan2) entered disabled state
[  250.252670][T17392] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  250.260759][T17390] macvlan2: entered allmulticast mode
[  250.260780][T17390] bridge0: entered allmulticast mode
[  250.276809][T17390] macvlan2: left allmulticast mode
[  250.282062][T17390] bridge0: left allmulticast mode
[  250.297723][  T332] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1)
[  250.308841][T17390] bridge0: left promiscuous mode
[  250.334064][T17394] __nla_validate_parse: 8 callbacks suppressed
[  250.334079][T17394] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5056'.
[  250.401555][T17400] loop1: detected capacity change from 0 to 128
[  250.482916][T17409] usb usb9: usbfs: process 17409 (syz.1.5063) did not claim interface 9 before use
[  250.506318][T17407] wg2: entered promiscuous mode
[  250.511339][T17407] wg2: entered allmulticast mode
[  250.553663][T17416] loop2: detected capacity change from 0 to 1024
[  250.575313][T17416] EXT4-fs warning (device loop2): ext4_rmdir:3185: inode #11: comm syz.2.5066: empty directory 'file1' has too many links (111)
[  250.703704][T17428] loop4: detected capacity change from 0 to 2048
[  250.762495][T17437] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5072'.
[  250.888408][T17446] loop1: detected capacity change from 0 to 512
[  250.900545][T17446] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  250.934722][T17448] loop5: detected capacity change from 0 to 1024
[  250.943771][T17428] ==================================================================
[  250.951901][T17428] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  250.959152][T17428] 
[  250.961493][T17428] write to 0xffff888106797374 of 4 bytes by task 17439 on cpu 1:
[  250.969243][T17428]  __xa_set_mark+0x192/0x1c0
[  250.970416][T17448] EXT4-fs: Ignoring removed bh option
[  250.973856][T17428]  __folio_mark_dirty+0x3b8/0x4e0
[  250.984303][T17428]  mark_buffer_dirty+0x134/0x230
[  250.989284][T17428]  block_write_end+0x123/0x210
[  250.994072][T17428]  ext4_write_end+0x148/0x770
[  250.998791][T17428]  ext4_da_write_end+0x74/0x810
[  251.003667][T17428]  generic_perform_write+0x31e/0x4b0
[  251.008993][T17428]  ext4_buffered_write_iter+0x1ed/0x3c0
[  251.014566][T17428]  ext4_file_write_iter+0x3b2/0xf80
[  251.019808][T17428]  iter_file_splice_write+0x5f2/0x980
[  251.025229][T17428]  direct_splice_actor+0x160/0x2c0
[  251.030422][T17428]  splice_direct_to_actor+0x305/0x680
[  251.035830][T17428]  do_splice_direct+0xd9/0x150
[  251.040636][T17428]  do_sendfile+0x40a/0x690
[  251.045090][T17428]  __x64_sys_sendfile64+0x113/0x160
[  251.050323][T17428]  x64_sys_call+0xfc3/0x2e10
[  251.054948][T17428]  do_syscall_64+0xc9/0x1a0
[  251.059484][T17428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.065400][T17428] 
[  251.067743][T17428] read to 0xffff888106797374 of 4 bytes by task 17428 on cpu 0:
[  251.075414][T17428]  xas_find_marked+0x614/0x660
[  251.080219][T17428]  find_get_entry+0x5d/0x370
[  251.084837][T17428]  filemap_get_folios_tag+0xa0/0x220
[  251.090166][T17428]  file_write_and_wait_range+0x206/0x2f0
[  251.095861][T17428]  generic_buffers_fsync_noflush+0x46/0x120
[  251.101800][T17428]  ext4_sync_file+0x1c3/0x6c0
[  251.106547][T17428]  vfs_fsync_range+0x116/0x130
[  251.111345][T17428]  ext4_buffered_write_iter+0x358/0x3c0
[  251.116910][T17428]  ext4_file_write_iter+0x3b2/0xf80
[  251.122138][T17428]  iter_file_splice_write+0x5f2/0x980
[  251.127575][T17428]  direct_splice_actor+0x160/0x2c0
[  251.132762][T17428]  splice_direct_to_actor+0x305/0x680
[  251.138176][T17428]  do_splice_direct+0xd9/0x150
[  251.142997][T17428]  do_sendfile+0x40a/0x690
[  251.147452][T17428]  __x64_sys_sendfile64+0x113/0x160
[  251.152683][T17428]  x64_sys_call+0xfc3/0x2e10
[  251.157306][T17428]  do_syscall_64+0xc9/0x1a0
[  251.161841][T17428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.167752][T17428] 
[  251.170087][T17428] value changed: 0x04000021 -> 0x0e000021
[  251.175819][T17428] 
[  251.178161][T17428] Reported by Kernel Concurrency Sanitizer on:
[  251.184333][T17428] CPU: 0 UID: 0 PID: 17428 Comm: syz.4.5069 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[  251.197061][T17428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  251.207138][T17428] ==================================================================