last executing test programs:

2m28.12059644s ago: executing program 32 (id=1463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

2m11.094517715s ago: executing program 3 (id=2072):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x1abb01, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x18)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

2m11.033697864s ago: executing program 3 (id=2074):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
close(r0)

2m10.814255834s ago: executing program 3 (id=2084):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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")
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
syz_emit_ethernet(0xfdef, &(0x7f00000007c0)=ANY=[], 0x0)

2m10.800605194s ago: executing program 5 (id=2086):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0x6)

2m10.742240064s ago: executing program 0 (id=2087):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x3f2, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0)

2m10.684402654s ago: executing program 5 (id=2088):
r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x100045, 0x1, 0x0, 0x3, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000200)='~', 0x1)

2m10.622741653s ago: executing program 0 (id=2090):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000008000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfff7ffffffffff76}, 0x18)
mlockall(0x7)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140))
io_setup(0xfb, &(0x7f0000000140))

2m10.622420873s ago: executing program 5 (id=2091):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r2, 0x0)

2m10.620092623s ago: executing program 0 (id=2092):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

2m10.603103864s ago: executing program 3 (id=2093):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0xa)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"])
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m10.582923083s ago: executing program 5 (id=2095):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x400c080)

2m10.572479233s ago: executing program 0 (id=2096):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f00000000c0)={[{@norecovery}, {@mblk_io_submit}, {@lazytime}, {}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$eJzs28trXNUfAPDvnSR995f8Sn30oUarGHwkTfqwCzeKggsLgi7qMiZpqZ020kSwpWgVqUspuC8uBf8CV7oRdSW41b0UimTTKghX7sy9ycxkJp2Jk0zrfD5wk3PuPZNzvnPvuXPOPZkA+tZo9iOJ2BURv0bEcDVbX2C0+uvO0pWZP5euzCSRpm/+kVTK3V66MlMULV63s8gMRpQ+TeJAk3oXLl0+N10uz13M8xOL59+bWLh0+fmz56fPzJ2ZuzB14sTRI5MvHJ861pU4s7hu7/9w/uC+196+fnLm1PV3fvw6KeJviKNLRtc6+FSadrm63tpdk04GVx/ftpmNoW0D1W4aQ5X+PxwDsXLyhuPVT3raOGBDpWmaPtj68NUU+A9LotctAHqj+KDP5r/FtklDj3vCrZeqE6As7jv5Vj0yGKW8zFDD/LabRiPi1NW/bmRbbMxzCACAOt9m45/nmo3/SlH7XOh/+RrKSET8PyL2RMTxiNgbEQ9EVMo+FBEPd1h/4yLJ6vFP6ea6AmtTNv57MV/bqh//FaO/GBnIc7sr8Q8lp8+W5w7n78lYDG3N8pNr1PHdK7983upY7fgv27L6i7Fg3o6bg1vrXzM7vTj9b2KudevjiP2DzeJPllcCkojYFxH711nH2We+OtjqWJP4/07T9EZbf7jJOlOn0i8jnq6e/6vREH8hWXt9cmJblOcOTxRXxWo//XztjVb13/38b6zs/O9oev0vxz+S1K7XLnRex7XfPms5p1nv9b8leatu3wfTi4sXJyO2JK8PRX6fWt4/1VBuaqV8Fv/Yoeb9f0+svBMHIiK7iB+JiEcj4rG87Y9HxBMRcWiN+H94+cl363aM7eog/o2VxT/b0flfSWyJxj3NEwPnvv+mrtKR6CD+7PwfraTG8j3t3P/aadf6rmYAAAC4/5QiYlckpfHldKk0Pl79H/69saNUnl9YfPb0/PsXZqvfERiJoVLxpGu45nnoZD6tL/JTDfkj+XPjLwa2V/LjM/Pl2V4HD31uZ4v+n/l9oNetAzZcF9bRgPuU/g/9S/+H/qX/Q/9q0v+396IdwOZr9vn/UQ/aAWy+hv5v2Q/6iPk/9C/9H/qX/g99aWF73P1L8hISqxJRuieaIdFJ4uSxtgv3+s4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHf8EAAD//yeb6Hg=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

2m10.379298553s ago: executing program 0 (id=2099):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)

2m10.378741443s ago: executing program 5 (id=2100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000022c0), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18)
personality(0x619641b6fb4b8591)

2m10.371757623s ago: executing program 3 (id=2101):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x0, 0x2, 0x2}}, 0x20)

2m10.166095932s ago: executing program 5 (id=2107):
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m10.165631362s ago: executing program 0 (id=2108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000))
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

2m10.158090402s ago: executing program 3 (id=2109):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0)

2m10.139731192s ago: executing program 33 (id=2108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000))
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

2m10.098629752s ago: executing program 34 (id=2107):
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m10.098514462s ago: executing program 35 (id=2109):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0)

1m51.914331903s ago: executing program 1 (id=2648):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101301)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f00000001c0), 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect)

1m51.744335263s ago: executing program 1 (id=2657):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)

1m51.696937372s ago: executing program 1 (id=2659):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x80000000000}, 0x18)
setns(r1, 0x24020000)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

1m51.393157492s ago: executing program 1 (id=2669):
syz_mount_image$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x2051014, 0x0, 0x2, 0x0, &(0x7f0000000000))
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, &(0x7f0000000180)='\x00', 0x160)

1m51.320001262s ago: executing program 1 (id=2674):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="50000000100001", @ANYBLOB], 0x50}, 0x1, 0x2}, 0x0)

1m50.979742471s ago: executing program 7 (id=2687):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0)

1m50.85059541s ago: executing program 1 (id=2691):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001940)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008884}, 0x0)

1m50.831928901s ago: executing program 36 (id=2691):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001940)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008884}, 0x0)

1m50.82875625s ago: executing program 7 (id=2693):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200"], 0x48)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0)

1m50.77977507s ago: executing program 7 (id=2696):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)

1m50.396614929s ago: executing program 7 (id=2704):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m50.358382969s ago: executing program 7 (id=2705):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
fchown(r2, 0x0, 0x0)

1m50.044602928s ago: executing program 7 (id=2710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x1, 0xff, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)={0x2c, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0)

1m50.038642768s ago: executing program 37 (id=2710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x1, 0xff, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)={0x2c, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0)

1m18.282151562s ago: executing program 8 (id=3389):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
msgctl$IPC_RMID(0x0, 0x0)
mlockall(0x7)

1m18.162817501s ago: executing program 8 (id=3392):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}})

1m17.73924871s ago: executing program 2 (id=3398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

1m17.66496153s ago: executing program 8 (id=3401):
mkdir(&(0x7f0000000140)='./file0\x00', 0x91)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')

1m17.66426308s ago: executing program 4 (id=3402):
sched_setscheduler(0x0, 0x1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000380)=[{0x3, 0xffff}], 0x1)

1m17.60207564s ago: executing program 8 (id=3403):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

1m17.55330771s ago: executing program 8 (id=3405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
sendfile(r2, r2, 0x0, 0x7a680000)

1m17.54784409s ago: executing program 2 (id=3406):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x9}, 0x18)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@loopback, @loopback, 0xc002, "66c5aff8a7eb3af1f6cec2e7420000008c84aea317000000000000000066d800", 0x0, 0x2, 0x0, 0xe}, 0x3c)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)

1m17.52878942s ago: executing program 4 (id=3407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

1m17.48053371s ago: executing program 2 (id=3410):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1m17.475979969s ago: executing program 4 (id=3411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
request_key(0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000000)={[], [{@uid_eq}], 0x2c}, 0x1, 0x9ce, &(0x7f0000001740)="$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")

1m17.305883989s ago: executing program 6 (id=3413):
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

1m17.045056958s ago: executing program 4 (id=3415):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
timer_create(0x3, 0x0, &(0x7f0000bbdffc))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

1m17.028947008s ago: executing program 2 (id=3416):
unshare(0x40020000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)

1m13.594110708s ago: executing program 8 (id=3417):
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x40840)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m11.763494053s ago: executing program 2 (id=3418):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x3c)
close_range(r1, r2, 0x0)

1m7.678379342s ago: executing program 6 (id=3419):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
flock(r1, 0x2)

1m2.775252168s ago: executing program 9 (id=3420):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x60f8, &(0x7f0000000a40)={0x0, 0x1, 0x2, 0xfffffffe, 0x40003bd})
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r2, 0x4)
close_range(r1, r2, 0x0)

1m1.723613995s ago: executing program 4 (id=3421):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

1m0.436007771s ago: executing program 2 (id=3422):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"})
close(0x3)

58.127855355s ago: executing program 38 (id=3417):
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x40840)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

56.607182871s ago: executing program 4 (id=3424):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

55.448650587s ago: executing program 6 (id=3425):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = syz_io_uring_setup(0x57e5, &(0x7f0000000600)={0x0, 0x0, 0x13580, 0xfffffffb}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}})
io_uring_enter(r1, 0x6b4d, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x0, 0x3, 0x7, 0x0, 0x0)

54.639429815s ago: executing program 9 (id=3426):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xb}}, {@sysvgroups}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ff}}, {@orlov}, {@dioread_lock}, {@noauto_da_alloc}, {@data_err_abort}]}, 0x3, 0x570, &(0x7f0000000680)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$TCSETS(r0, 0x5420, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x13, "9e4d2236078f0080001880ff98023dffffffff"})

48.871155249s ago: executing program 6 (id=3427):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x3}, 0xc)
bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)

47.628679365s ago: executing program 9 (id=3428):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r2, 0x10, 0x3, 0x7c27)

42.39679118s ago: executing program 39 (id=3422):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"})
close(0x3)

40.371428434s ago: executing program 6 (id=3430):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000fc0)='sched_switch\x00', r1}, 0x10)
write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8)

39.982296743s ago: executing program 40 (id=3424):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

33.662581835s ago: executing program 9 (id=3432):
gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)

32.017912351s ago: executing program 6 (id=3433):
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
utime(&(0x7f0000000200)='./file0\x00', 0x0)

26.812600686s ago: executing program 9 (id=3434):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x932, &(0x7f0000000000)={0x0, 0x8267, 0x8, 0x4, 0x328})
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000002080)={0x0}, 0x1)

17.569972179s ago: executing program 9 (id=3435):
unshare(0x6060600)
clock_gettime(0x6, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/4096, 0x1010}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000007c0)=""/44, 0xff11}], 0x10}, 0x0)

14.814957071s ago: executing program 41 (id=3433):
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
utime(&(0x7f0000000200)='./file0\x00', 0x0)

0s ago: executing program 42 (id=3435):
unshare(0x6060600)
clock_gettime(0x6, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/4096, 0x1010}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000007c0)=""/44, 0xff11}], 0x10}, 0x0)

kernel console output (not intermixed with test programs):

a_ino
[  107.410776][ T9983] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2551: couldn't read orphan inode 15 (err -117)
[  107.424069][ T9983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.438640][ T9988] bridge0: port 3(bond0) entered blocking state
[  107.445050][ T9988] bridge0: port 3(bond0) entered disabled state
[  107.467253][ T9983] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  107.478876][ T9983] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  107.489028][ T9983] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2551: Corrupt directory, running e2fsck is recommended
[  107.489554][ T9988] bond0: entered allmulticast mode
[  107.507195][ T9988] bond_slave_0: entered allmulticast mode
[  107.513027][ T9988] bond_slave_1: entered allmulticast mode
[  107.518860][ T9983] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  107.530442][ T9983] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  107.540550][ T9983] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2551: Corrupt directory, running e2fsck is recommended
[  107.561032][ T9988] bond0: entered promiscuous mode
[  107.566158][ T9988] bond_slave_0: entered promiscuous mode
[  107.572071][ T9988] bond_slave_1: entered promiscuous mode
[  107.591715][ T9988] bridge0: port 3(bond0) entered blocking state
[  107.598115][ T9988] bridge0: port 3(bond0) entered forwarding state
[  107.620764][ T9983] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  107.632456][ T9983] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  107.642823][ T9983] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2551: Corrupt directory, running e2fsck is recommended
[  107.690707][ T9983] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  107.723444][T10005] smc: net device bond0 applied user defined pnetid SYZ2
[  107.730919][T10005] smc: net device bond0 erased user defined pnetid SYZ2
[  107.781456][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.835300][T10017] loop6: detected capacity change from 0 to 512
[  107.890829][T10017] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  107.921911][T10023] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2574'.
[  107.932185][T10023] netlink: 'syz.8.2574': attribute type 9 has an invalid length.
[  107.940016][T10023] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2574'.
[  107.949174][T10023] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2574'.
[  107.966268][T10017] EXT4-fs (loop6): 1 truncate cleaned up
[  107.984481][T10017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.350629][T10068] loop7: detected capacity change from 0 to 512
[  108.359701][T10068] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.368365][T10068] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  108.376511][T10068] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  108.394585][T10068] EXT4-fs (loop7): 1 truncate cleaned up
[  108.402067][T10068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.420798][T10068] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #2: block 4: comm syz.7.2595: lblock 0 mapped to illegal pblock 4 (length 1)
[  108.436146][T10068] EXT4-fs (loop7): Remounting filesystem read-only
[  108.459205][ T8869] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.515787][T10079] xt_CT: No such helper "netbios-ns"
[  108.599948][T10089] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  108.859261][    C1] hrtimer: interrupt took 69305 ns
[  108.998504][T10017] syz.6.2570 (10017) used greatest stack depth: 7176 bytes left
[  109.008616][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.123451][T10117] loop7: detected capacity change from 0 to 256
[  109.146117][T10117] FAT-fs (loop7): bogus number of FAT sectors
[  109.152330][T10117] FAT-fs (loop7): Can't find a valid FAT filesystem
[  109.192678][T10123] rdma_op ffff888108944980 conn xmit_rdma 0000000000000000
[  109.298017][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'.
[  109.540830][   T29] kauditd_printk_skb: 155 callbacks suppressed
[  109.540846][   T29] audit: type=1400 audit(1737479588.982:2910): avc:  denied  { setopt } for  pid=10151 comm="syz.7.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  109.712145][T10165] wireguard0: entered promiscuous mode
[  109.717762][T10165] wireguard0: entered allmulticast mode
[  109.740574][T10169] loop7: detected capacity change from 0 to 1024
[  109.764142][T10169] EXT4-fs: Ignoring removed orlov option
[  109.769956][T10169] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.782181][T10171] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  109.790106][T10171] vhci_hcd: invalid port number 23
[  109.838229][T10169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.839769][   T29] audit: type=1400 audit(1737479589.284:2911): avc:  denied  { create } for  pid=10176 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  109.911170][   T29] audit: type=1400 audit(1737479589.314:2912): avc:  denied  { connect } for  pid=10176 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  109.931539][   T29] audit: type=1326 audit(1737479589.334:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d6db5d29 code=0x7ffc0000
[  109.955150][   T29] audit: type=1326 audit(1737479589.334:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d6db5d29 code=0x7ffc0000
[  109.978867][   T29] audit: type=1326 audit(1737479589.334:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d6db5d29 code=0x7ffc0000
[  110.002747][   T29] audit: type=1326 audit(1737479589.334:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d6db5d29 code=0x7ffc0000
[  110.026287][   T29] audit: type=1326 audit(1737479589.344:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d6db5d29 code=0x7ffc0000
[  110.049898][   T29] audit: type=1326 audit(1737479589.344:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d6db5d29 code=0x7ffc0000
[  110.073513][   T29] audit: type=1326 audit(1737479589.344:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d6db5d29 code=0x7ffc0000
[  110.104857][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2644'.
[  110.127168][T10185] IPVS: Error joining to the multicast group
[  110.162725][ T8869] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.785201][T10248] xt_hashlimit: max too large, truncated to 1048576
[  110.793876][T10248] Cannot find set identified by id 0 to match
[  110.801892][T10251] sg_write: data in/out 58720220/8 bytes for SCSI command 0xd0-- guessing data in;
[  110.801892][T10251]    program syz.2.2676 not setting count and/or reply_len properly
[  110.960348][T10263] dummy0: entered promiscuous mode
[  110.967342][T10263] dummy0: left promiscuous mode
[  111.083212][T10277] loop2: detected capacity change from 0 to 256
[  111.163215][T10281] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2690'.
[  111.172433][T10281] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2690'.
[  111.181646][T10281] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2690'.
[  111.645507][T10313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2702'.
[  111.787401][T10291] chnl_net:caif_netlink_parms(): no params data found
[  111.817716][T10324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2707'.
[  111.908585][T10291] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.915873][T10291] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.964547][T10291] bridge_slave_0: entered allmulticast mode
[  111.988274][T10291] bridge_slave_0: entered promiscuous mode
[  112.015939][T10291] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.023054][T10291] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.060679][T10291] bridge_slave_1: entered allmulticast mode
[  112.079841][T10291] bridge_slave_1: entered promiscuous mode
[  112.106435][   T52] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.188523][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.212895][   T52] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.245994][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.295240][   T52] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.316660][T10291] team0: Port device team_slave_0 added
[  112.330809][T10291] team0: Port device team_slave_1 added
[  112.353260][   T52] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.388361][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.395421][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.421424][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.439848][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.446972][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.473095][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.516286][T10291] hsr_slave_0: entered promiscuous mode
[  112.529301][T10291] hsr_slave_1: entered promiscuous mode
[  112.535837][T10291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.550374][T10291] Cannot create hsr debugfs directory
[  112.623864][   T52] bridge_slave_1: left allmulticast mode
[  112.629589][   T52] bridge_slave_1: left promiscuous mode
[  112.635353][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.662733][   T52] bridge_slave_0: left allmulticast mode
[  112.667151][T10358] sg_write: data in/out 14238/14 bytes for SCSI command 0x0-- guessing data in;
[  112.667151][T10358]    program syz.2.2717 not setting count and/or reply_len properly
[  112.668445][   T52] bridge_slave_0: left promiscuous mode
[  112.691163][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.741447][T10360] loop8: detected capacity change from 0 to 128
[  112.798669][T10360] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  112.817888][T10360] +}[@: attempt to access beyond end of device
[  112.817888][T10360] loop8: rw=3, sector=6950, nr_sectors = 2 limit=128
[  112.853658][T10360] +}[@: attempt to access beyond end of device
[  112.853658][T10360] loop8: rw=2051, sector=6952, nr_sectors = 942 limit=128
[  112.873203][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.895388][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.906252][   T52] bond0 (unregistering): Released all slaves
[  113.064468][T10376] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.124215][   T52] hsr_slave_0: left promiscuous mode
[  113.162686][   T52] hsr_slave_1: left promiscuous mode
[  113.173284][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.180848][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.195679][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.203260][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.241435][   T52] veth1_macvtap: left promiscuous mode
[  113.247090][   T52] veth0_macvtap: left promiscuous mode
[  113.252727][   T52] veth1_vlan: left promiscuous mode
[  113.258010][   T52] veth0_vlan: left promiscuous mode
[  113.353514][   T52] team0 (unregistering): Port device team_slave_1 removed
[  113.365394][   T52] team0 (unregistering): Port device team_slave_0 removed
[  113.418855][T10376] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.454244][T10338] chnl_net:caif_netlink_parms(): no params data found
[  113.534885][T10376] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.630705][T10291] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  113.646364][T10291] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  113.660956][T10376] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.689133][T10338] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.696289][T10338] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.716708][T10338] bridge_slave_0: entered allmulticast mode
[  113.724776][T10338] bridge_slave_0: entered promiscuous mode
[  113.731737][T10291] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  113.747017][T10338] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.754250][T10338] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.771778][T10338] bridge_slave_1: entered allmulticast mode
[  113.778328][T10338] bridge_slave_1: entered promiscuous mode
[  113.800993][T10291] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  113.834912][T10338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.845459][T10338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.879721][T10376] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.904519][T10338] team0: Port device team_slave_0 added
[  113.916988][T10376] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.919409][T10421] loop2: detected capacity change from 0 to 1024
[  113.937734][T10376] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.949895][T10338] team0: Port device team_slave_1 added
[  113.964847][T10421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.966632][T10376] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.987460][T10421] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.2.2744: corrupted in-inode xattr: bad magic number in in-inode xattr
[  114.004338][T10338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.011417][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.037557][T10338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.063400][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.075174][T10338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.082216][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.108201][T10338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.176013][T10338] hsr_slave_0: entered promiscuous mode
[  114.185324][T10338] hsr_slave_1: entered promiscuous mode
[  114.191567][T10338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.199142][T10338] Cannot create hsr debugfs directory
[  114.238255][T10291] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.276966][T10291] 8021q: adding VLAN 0 to HW filter on device team0
[  114.357436][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.364537][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.400989][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.408167][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.563085][   T29] kauditd_printk_skb: 116 callbacks suppressed
[  114.563099][   T29] audit: type=1400 audit(1737479594.031:3036): avc:  denied  { create } for  pid=10450 comm="syz.2.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  114.605690][   T29] audit: type=1400 audit(1737479594.061:3037): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  114.627923][   T29] audit: type=1400 audit(1737479594.061:3038): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.649617][   T29] audit: type=1400 audit(1737479594.061:3039): avc:  denied  { open } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  114.672365][   T29] audit: type=1400 audit(1737479594.061:3040): avc:  denied  { getattr } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  114.695210][   T29] audit: type=1400 audit(1737479594.061:3041): avc:  denied  { ioctl } for  pid=10450 comm="syz.2.2754" path="socket:[27020]" dev="sockfs" ino=27020 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  114.724346][T10451] .: renamed from bond0 (while UP)
[  114.777989][T10291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.790974][T10453] xt_connbytes: Forcing CT accounting to be enabled
[  114.797686][T10453] Cannot find add_set index 0 as target
[  114.842740][   T29] audit: type=1400 audit(1737479594.312:3042): avc:  denied  { sys_module } for  pid=10291 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  114.921171][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.971383][T10338] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  114.987794][T10338] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  114.998141][T10338] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  115.010206][T10338] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  115.076231][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2757'.
[  115.142483][T10338] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.179047][T10338] 8021q: adding VLAN 0 to HW filter on device team0
[  115.200755][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.208036][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.223655][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.230846][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.240256][T10481] netem: incorrect gi model size
[  115.245220][T10481] netem: change failed
[  115.276580][   T29] audit: type=1400 audit(1737479594.755:3043): avc:  denied  { create } for  pid=10483 comm="syz.8.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  115.298600][T10291] veth0_vlan: entered promiscuous mode
[  115.315212][T10291] veth1_vlan: entered promiscuous mode
[  115.356310][T10291] veth0_macvtap: entered promiscuous mode
[  115.374923][   T29] audit: type=1400 audit(1737479594.815:3044): avc:  denied  { connect } for  pid=10483 comm="syz.8.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  115.376078][T10291] veth1_macvtap: entered promiscuous mode
[  115.394866][   T29] audit: type=1400 audit(1737479594.815:3045): avc:  denied  { write } for  pid=10483 comm="syz.8.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  115.441888][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.452496][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.462438][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.472946][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.482804][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.493242][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.503093][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.513613][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.523475][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.533953][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.585880][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.607375][T10338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.627226][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.644311][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.653535][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.654855][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.672361][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.682976][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.692916][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.703533][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.713556][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.724264][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.734233][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.744765][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.759619][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.780543][T10291] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.789319][T10291] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.798096][T10291] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.806896][T10291] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.012713][T10338] veth0_vlan: entered promiscuous mode
[  116.020977][T10338] veth1_vlan: entered promiscuous mode
[  116.044105][T10338] veth0_macvtap: entered promiscuous mode
[  116.062692][T10338] veth1_macvtap: entered promiscuous mode
[  116.098795][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.109386][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.119307][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.129844][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.139956][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.150594][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.160558][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.171138][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.180981][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.191485][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.201407][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.211880][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.226480][T10338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.241794][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.252391][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.262250][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.272793][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.282702][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.293147][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.303048][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.313500][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.323374][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.333862][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.343724][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.354269][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.370816][T10338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.400499][T10338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.409266][T10338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.418059][T10338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.426887][T10338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.493663][T10539] loop9: detected capacity change from 0 to 1024
[  116.555445][T10539] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.607128][T10553] loop4: detected capacity change from 0 to 512
[  116.631783][T10552] loop8: detected capacity change from 0 to 512
[  116.639072][T10552] EXT4-fs (loop8): Invalid log block size: 134217728
[  116.658936][T10553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.731531][T10553] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.775527][T10338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.797088][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2784'.
[  116.856288][T10568] loop4: detected capacity change from 0 to 1024
[  116.871555][T10568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.901444][T10568] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.939726][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.072132][T10590] gretap0: entered promiscuous mode
[  117.082906][T10590] vlan2: entered promiscuous mode
[  117.180781][T10595] loop8: detected capacity change from 0 to 512
[  117.194531][T10595] EXT4-fs: Ignoring removed oldalloc option
[  117.224160][T10595] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  117.249327][T10595] EXT4-fs (loop8): 1 truncate cleaned up
[  117.259193][T10595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.323904][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.415800][T10617] loop8: detected capacity change from 0 to 512
[  117.447044][T10617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.457518][T10622] loop9: detected capacity change from 0 to 512
[  117.467847][T10617] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.498394][T10622] EXT4-fs: Ignoring removed oldalloc option
[  117.512432][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.531405][T10622] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  117.566789][T10584] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  117.584152][T10622] EXT4-fs (loop9): 1 truncate cleaned up
[  117.591873][T10584] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 28 with error 28
[  117.604411][T10584] EXT4-fs (loop4): This should not happen!! Data will be lost
[  117.604411][T10584] 
[  117.614096][T10584] EXT4-fs (loop4): Total free blocks count 0
[  117.620104][T10584] EXT4-fs (loop4): Free/Dirty block details
[  117.626122][T10584] EXT4-fs (loop4): free_blocks=4293918720
[  117.631872][T10584] EXT4-fs (loop4): dirty_blocks=16400
[  117.637485][T10584] EXT4-fs (loop4): Block reservation details
[  117.643595][T10584] EXT4-fs (loop4): i_reserved_data_blocks=1025
[  117.648023][T10622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.679849][T10631] vlan2: entered allmulticast mode
[  117.712411][   T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28
[  117.727284][T10622] loop9: detected capacity change from 512 to 64
[  117.747292][T10622] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 223:freeing already freed block (bit 222); block bitmap corrupt.
[  117.761935][T10622] EXT4-fs (loop9): pa ffff8881069598c0: logic 0, phys. 193, len 32
[  117.769923][T10622] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 32, pa_free 31
[  117.830076][T10291] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -12)
[  117.853685][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.867696][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2813'.
[  117.877083][T10643] loop6: detected capacity change from 0 to 1024
[  117.884033][T10642] veth1_macvtap: left promiscuous mode
[  117.938440][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.946121][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.953585][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.961637][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.969068][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.976492][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.983934][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.991406][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  117.998824][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.006298][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.013774][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.014498][T10652] xt_hashlimit: max too large, truncated to 1048576
[  118.021322][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.021363][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.021388][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.022168][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.028798][T10652] No such timeout policy "syz1"
[  118.035545][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.070044][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.077514][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.085039][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.086870][T10654] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  118.092466][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.092489][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.100722][T10654] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  118.124263][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.131730][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.139178][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.146638][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.154109][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.161546][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.168955][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.176388][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  118.185290][ T3376] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  118.226224][T10661] xt_hashlimit: size too large, truncated to 1048576
[  118.307034][T10668] ALSA: seq fatal error: cannot create timer (-22)
[  118.522446][T10681] loop6: detected capacity change from 0 to 2048
[  118.541721][T10681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.555041][T10681] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.971947][T10696] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2839'.
[  119.048213][   T11] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set
[  119.085871][   T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  119.098630][   T11] EXT4-fs (loop6): This should not happen!! Data will be lost
[  119.098630][   T11] 
[  119.107361][T10698] Cannot find del_set index 0 as target
[  119.177930][T10700] syz.9.2841[10700] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  119.178119][T10700] syz.9.2841[10700] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  119.223880][   T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28
[  119.248088][   T11] EXT4-fs (loop6): This should not happen!! Data will be lost
[  119.248088][   T11] 
[  119.257829][   T11] EXT4-fs (loop6): Total free blocks count 0
[  119.263883][   T11] EXT4-fs (loop6): Free/Dirty block details
[  119.270004][   T11] EXT4-fs (loop6): free_blocks=0
[  119.274991][   T11] EXT4-fs (loop6): dirty_blocks=2048
[  119.280305][   T11] EXT4-fs (loop6): Block reservation details
[  119.287076][T10700] syz.9.2841[10700] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  119.520841][T10716] netlink: 64924 bytes leftover after parsing attributes in process `syz.2.2848'.
[  119.580113][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'.
[  119.640746][   T29] kauditd_printk_skb: 195 callbacks suppressed
[  119.640762][   T29] audit: type=1400 audit(1737479599.138:3241): avc:  denied  { mounton } for  pid=10706 comm="syz.8.2844" path="/proc/303/task" dev="proc" ino=28174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  119.710186][   T29] audit: type=1400 audit(1737479599.188:3242): avc:  denied  { read } for  pid=10723 comm="syz.2.2851" path="socket:[27646]" dev="sockfs" ino=27646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  119.749672][T10728] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2851'.
[  119.814489][   T29] audit: type=1400 audit(1737479599.288:3243): avc:  denied  { write } for  pid=10726 comm="syz.9.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  119.817535][T10730] loop6: detected capacity change from 0 to 1024
[  119.861055][T10732] loop2: detected capacity change from 0 to 256
[  119.884557][   T29] audit: type=1400 audit(1737479599.369:3244): avc:  denied  { listen } for  pid=10733 comm="syz.9.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  119.904261][   T29] audit: type=1400 audit(1737479599.369:3245): avc:  denied  { accept } for  pid=10733 comm="syz.9.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  119.943973][   T29] audit: type=1400 audit(1737479599.419:3246): avc:  denied  { write } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  119.949441][T10730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.965568][   T29] audit: type=1400 audit(1737479599.419:3247): avc:  denied  { remove_name } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  119.965604][   T29] audit: type=1400 audit(1737479599.419:3248): avc:  denied  { rename } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  120.022700][   T29] audit: type=1400 audit(1737479599.419:3249): avc:  denied  { add_name } for  pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.038865][T10730] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.045255][   T29] audit: type=1400 audit(1737479599.419:3250): avc:  denied  { unlink } for  pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  120.085739][T10741] loop8: detected capacity change from 0 to 1024
[  120.104355][T10732] tipc: New replicast peer: 100.1.1.1
[  120.109837][T10732] tipc: Enabled bearer <udp:÷5>, priority 10
[  120.138270][T10741] EXT4-fs: Ignoring removed nobh option
[  120.190190][T10741] EXT4-fs: Ignoring removed oldalloc option
[  120.196201][T10741] EXT4-fs: Ignoring removed bh option
[  120.207867][T10745] gretap0: entered promiscuous mode
[  120.302400][T10741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  120.376541][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  120.649298][T10764] loop8: detected capacity change from 0 to 128
[  120.857847][T10776] netlink: 'syz.9.2870': attribute type 1 has an invalid length.
[  120.888121][T10751] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  120.945466][T10751] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 28 with error 28
[  120.957997][T10751] EXT4-fs (loop6): This should not happen!! Data will be lost
[  120.957997][T10751] 
[  120.967690][T10751] EXT4-fs (loop6): Total free blocks count 0
[  120.973699][T10751] EXT4-fs (loop6): Free/Dirty block details
[  120.979627][T10751] EXT4-fs (loop6): free_blocks=4293918720
[  120.985440][T10751] EXT4-fs (loop6): dirty_blocks=13616
[  120.990938][T10751] EXT4-fs (loop6): Block reservation details
[  120.996962][T10751] EXT4-fs (loop6): i_reserved_data_blocks=851
[  121.026587][T10786] loop8: detected capacity change from 0 to 512
[  121.038522][T10786] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  121.066424][T10786] EXT4-fs (loop8): 1 truncate cleaned up
[  121.072550][T10786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.138471][ T3389] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28
[  121.228206][T10792] loop2: detected capacity change from 0 to 2048
[  121.286703][T10792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.317028][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.383228][T10802] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2881'.
[  121.398055][ T1617] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  121.416757][T10806] loop9: detected capacity change from 0 to 512
[  121.423594][ T1617] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  121.435987][ T1617] EXT4-fs (loop2): This should not happen!! Data will be lost
[  121.435987][ T1617] 
[  121.445882][ T1617] EXT4-fs (loop2): Total free blocks count 0
[  121.451932][ T1617] EXT4-fs (loop2): Free/Dirty block details
[  121.457992][ T1617] EXT4-fs (loop2): free_blocks=66060288
[  121.463625][ T1617] EXT4-fs (loop2): dirty_blocks=32
[  121.468752][ T1617] EXT4-fs (loop2): Block reservation details
[  121.474793][ T1617] EXT4-fs (loop2): i_reserved_data_blocks=2
[  121.483567][T10808] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2891'.
[  121.493841][ T1617] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2 with error 28
[  121.522002][T10806] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2882: bg 0: block 248: padding at end of block bitmap is not set
[  121.605089][T10806] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.2882: Failed to acquire dquot type 1
[  121.647631][T10817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.655172][T10817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.680943][T10806] EXT4-fs (loop9): 1 truncate cleaned up
[  121.694318][T10806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.708719][T10817] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.716221][T10817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.725785][T10806] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.927268][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2895'.
[  121.928695][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2895'.
[  121.966812][T10827] syzkaller0: entered promiscuous mode
[  121.972357][T10827] syzkaller0: entered allmulticast mode
[  122.008234][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.202088][T10853] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2906'.
[  122.330711][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2909'.
[  122.412053][T10871] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2912'.
[  122.524917][T10882] loop8: detected capacity change from 0 to 512
[  122.562816][T10882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.563044][T10884] loop9: detected capacity change from 0 to 256
[  122.590657][T10882] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.748024][T10896] loop4: detected capacity change from 0 to 8192
[  122.779372][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.811952][T10896]  loop4: p1 p2 p3
[  122.815758][T10896] loop4: p1 size 67108864 extends beyond EOD, truncated
[  122.853092][T10896] loop4: p2 start 98631679 is beyond EOD, truncated
[  122.859900][T10896] loop4: p3 size 423702036 extends beyond EOD, truncated
[  123.069969][T10913] netlink: 'syz.2.2933': attribute type 10 has an invalid length.
[  123.087931][T10913] bridge0: port 3(.) entered disabled state
[  123.094005][T10913] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.101330][T10913] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.151026][T10930] loop6: detected capacity change from 0 to 512
[  123.174696][T10913] bridge0: port 3(.) entered blocking state
[  123.180839][T10913] bridge0: port 3(.) entered forwarding state
[  123.181559][T10928] SELinux:  policydb version 0 does not match my version range 15-33
[  123.187089][T10913] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.202302][T10913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.209669][T10913] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.216759][T10913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.233181][T10928] SELinux: failed to load policy
[  123.255958][T10913] bridge0: port 3(.) entered disabled state
[  123.262073][T10913] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.269286][T10913] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.301403][T10926] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.310252][T10926] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.319059][T10926] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.327805][T10926] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.332931][T10930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.350616][T10930] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.368644][T10926] vxlan0: entered promiscuous mode
[  123.373823][T10926] vxlan0: entered allmulticast mode
[  123.421765][T10926] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.430777][T10926] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.439733][T10926] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.448729][T10926] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.501576][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.688807][T10958] pimreg: entered allmulticast mode
[  123.707430][T10958] pimreg: left allmulticast mode
[  123.731315][T10963] loop8: detected capacity change from 0 to 512
[  123.758596][T10963] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2952: bg 0: block 248: padding at end of block bitmap is not set
[  123.791466][T10963] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2952: Failed to acquire dquot type 1
[  123.806732][T10963] EXT4-fs (loop8): 1 truncate cleaned up
[  123.812870][T10963] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.858785][T10977] rdma_op ffff88812a81c580 conn xmit_rdma 0000000000000000
[  124.110776][T10995] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[  124.144391][T10995] macsec1: entered allmulticast mode
[  124.149828][T10995] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  124.174366][T11002] loop6: detected capacity change from 0 to 1024
[  124.186394][T11004] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2967'.
[  124.249263][T11007] loop2: detected capacity change from 0 to 512
[  124.309893][T11007] ext4 filesystem being mounted at /653/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.382224][T11018] loop9: detected capacity change from 0 to 512
[  124.430362][T11018] EXT4-fs: Mount option(s) incompatible with ext2
[  124.452992][T11022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11022 comm=syz.2.2974
[  124.544215][T11002] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  124.567706][T11002] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  124.580324][T11002] EXT4-fs (loop6): This should not happen!! Data will be lost
[  124.580324][T11002] 
[  124.590080][T11002] EXT4-fs (loop6): Total free blocks count 0
[  124.596088][T11002] EXT4-fs (loop6): Free/Dirty block details
[  124.602031][T11002] EXT4-fs (loop6): free_blocks=68451041280
[  124.607862][T11002] EXT4-fs (loop6): dirty_blocks=5040
[  124.613233][T11002] EXT4-fs (loop6): Block reservation details
[  124.619276][T11002] EXT4-fs (loop6): i_reserved_data_blocks=315
[  124.659859][T11031] pimreg: entered allmulticast mode
[  124.680260][T11031] pimreg: left allmulticast mode
[  124.696749][ T1617] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  124.709550][ T1617] EXT4-fs (loop6): This should not happen!! Data will be lost
[  124.709550][ T1617] 
[  124.909592][T11051] xt_hashlimit: max too large, truncated to 1048576
[  124.916291][T11051] No such timeout policy "syz1"
[  125.029484][   T29] kauditd_printk_skb: 133 callbacks suppressed
[  125.029501][   T29] audit: type=1326 audit(1737479604.554:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.064952][T11061] $Hÿ: renamed from bond0 (while UP)
[  125.074357][T11061] bridge0: port 3($Hÿ) entered disabled state
[  125.100952][   T29] audit: type=1326 audit(1737479604.584:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.124567][   T29] audit: type=1326 audit(1737479604.584:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.148161][   T29] audit: type=1326 audit(1737479604.584:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.171694][   T29] audit: type=1326 audit(1737479604.584:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.195319][   T29] audit: type=1326 audit(1737479604.584:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.219157][   T29] audit: type=1326 audit(1737479604.584:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.242706][   T29] audit: type=1326 audit(1737479604.584:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.266278][   T29] audit: type=1326 audit(1737479604.584:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.289918][   T29] audit: type=1326 audit(1737479604.584:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.8.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  125.374565][T11072] loop8: detected capacity change from 0 to 1024
[  125.393659][T11072] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  125.404775][T11072] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  125.454274][T11072] JBD2: no valid journal superblock found
[  125.460355][T11072] EXT4-fs (loop8): Could not load journal inode
[  125.503444][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2998'.
[  125.570158][ T1617] bond0: (slave bond_slave_0): interface is now down
[  125.572664][T11089] netlink: 'syz.4.3004': attribute type 10 has an invalid length.
[  125.576920][ T1617] bond0: (slave bond_slave_1): interface is now down
[  125.591533][T11089] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.598782][T11089] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.610884][T11089] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.618061][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.625398][T11089] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.632500][T11089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.640354][ T3389] bond0: (slave bond_slave_0): interface is now down
[  125.647185][ T3389] bond0: (slave bond_slave_1): interface is now down
[  125.665558][T11089] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  125.674408][ T1617] bond0: (slave bond_slave_0): interface is now down
[  125.681130][ T1617] bond0: (slave bond_slave_1): interface is now down
[  125.687876][ T1617] bond0: (slave bridge0): interface is now down
[  125.715208][T11092] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.743951][ T1617] bond0: (slave bond_slave_0): interface is now down
[  125.750733][ T1617] bond0: (slave bond_slave_1): interface is now down
[  125.757524][ T1617] bond0: (slave bridge0): interface is now down
[  125.810699][ T1617] bond0: (slave bond_slave_0): interface is now down
[  125.817930][ T1617] bond0: (slave bond_slave_1): interface is now down
[  125.824685][ T1617] bond0: (slave bridge0): interface is now down
[  125.873950][ T1617] bond0: now running without any active interface!
[  125.902606][T11092] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.942016][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3012'.
[  126.010323][T11115] xt_hashlimit: size too large, truncated to 1048576
[  126.020029][T11092] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.224643][T11092] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode
[  126.243344][T11120] Falling back ldisc for ttyS3.
[  126.248968][T11092] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.369000][T11092] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.416696][T11092] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.441406][T11127] loop2: detected capacity change from 0 to 8192
[  126.476292][T11133] loop4: detected capacity change from 0 to 4096
[  126.483050][T11092] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.509886][T11127]  loop2: p1 p2 p3
[  126.514895][T11133] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.3021: corrupted inode contents
[  126.518201][T11127] loop2: p1 size 67108864 extends beyond EOD, truncated
[  126.536081][T11092] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.564019][T11127] loop2: p2 start 98631679 is beyond EOD, truncated
[  126.570725][T11127] loop2: p3 size 423702036 extends beyond EOD, truncated
[  126.587258][T11133] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #15: comm syz.4.3021: mark_inode_dirty error
[  126.678434][T11133] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.3021: corrupted inode contents
[  126.720364][T11133] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3021: mark_inode_dirty error
[  126.777759][T11133] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.3021: corrupted inode contents
[  126.807739][T11145] loop2: detected capacity change from 0 to 512
[  126.821484][T11133] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3021: mark_inode_dirty error
[  126.835348][T11145] EXT4-fs: Ignoring removed i_version option
[  126.841473][T11145] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.859863][T11149] loop6: detected capacity change from 0 to 2048
[  126.885890][T11133] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.3021: corrupted inode contents
[  126.887087][T11152] loop9: detected capacity change from 0 to 128
[  126.914687][T11145] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  126.934712][T11133] EXT4-fs error (device loop4): ext4_truncate:4240: inode #15: comm syz.4.3021: mark_inode_dirty error
[  126.950123][T11145] EXT4-fs (loop2): 1 truncate cleaned up
[  126.960845][T11145] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  126.968229][T11133] EXT4-fs error (device loop4) in ext4_setattr:5569: Corrupt filesystem
[  126.975816][T11152] syz.9.3028: attempt to access beyond end of device
[  126.975816][T11152] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128
[  127.007199][T11139] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.3021: corrupted inode contents
[  127.016276][T11151] syz.9.3028: attempt to access beyond end of device
[  127.016276][T11151] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128
[  127.030896][ T1617] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  127.052704][T11151] syz.9.3028: attempt to access beyond end of device
[  127.052704][T11151] loop9: rw=0, sector=209, nr_sectors = 8 limit=128
[  127.070611][ T1617] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  127.083055][ T1617] EXT4-fs (loop6): This should not happen!! Data will be lost
[  127.083055][ T1617] 
[  127.092749][ T1617] EXT4-fs (loop6): Total free blocks count 0
[  127.099430][ T1617] EXT4-fs (loop6): Free/Dirty block details
[  127.105339][ T1617] EXT4-fs (loop6): free_blocks=2415919104
[  127.111219][ T1617] EXT4-fs (loop6): dirty_blocks=32
[  127.116392][ T1617] EXT4-fs (loop6): Block reservation details
[  127.122625][ T1617] EXT4-fs (loop6): i_reserved_data_blocks=2
[  127.141606][T11151] syz.9.3028: attempt to access beyond end of device
[  127.141606][T11151] loop9: rw=0, sector=209, nr_sectors = 8 limit=128
[  127.159449][T11152] syz.9.3028: attempt to access beyond end of device
[  127.159449][T11152] loop9: rw=0, sector=209, nr_sectors = 8 limit=128
[  127.172960][T11152] syz.9.3028: attempt to access beyond end of device
[  127.172960][T11152] loop9: rw=0, sector=209, nr_sectors = 8 limit=128
[  127.229926][T11169] dccp_v6_rcv: dropped packet with invalid checksum
[  127.295553][T11179] loop9: detected capacity change from 0 to 1024
[  127.416420][T11190] netlink: 'syz.2.3042': attribute type 4 has an invalid length.
[  127.460984][T11190] netlink: 'syz.2.3042': attribute type 4 has an invalid length.
[  127.539227][T11195] loop4: detected capacity change from 0 to 512
[  127.555835][T11195] EXT4-fs: Mount option(s) incompatible with ext2
[  127.678375][T11179] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  127.704333][T11179] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  127.716857][T11179] EXT4-fs (loop9): This should not happen!! Data will be lost
[  127.716857][T11179] 
[  127.726866][T11179] EXT4-fs (loop9): Total free blocks count 0
[  127.727074][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3049'.
[  127.732934][T11179] EXT4-fs (loop9): Free/Dirty block details
[  127.747871][T11179] EXT4-fs (loop9): free_blocks=68451041280
[  127.753702][T11179] EXT4-fs (loop9): dirty_blocks=2976
[  127.759063][T11179] EXT4-fs (loop9): Block reservation details
[  127.765090][T11179] EXT4-fs (loop9): i_reserved_data_blocks=186
[  127.940795][   T11] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 912 with error 28
[  127.953617][   T11] EXT4-fs (loop9): This should not happen!! Data will be lost
[  127.953617][   T11] 
[  127.966806][T11224] SELinux: security policydb version 18 (MLS) not backwards compatible
[  127.985431][T11224] SELinux: failed to load policy
[  128.027918][T10291] EXT4-fs unmount: 13 callbacks suppressed
[  128.165179][T11227] syz.2.3060: attempt to access beyond end of device
[  128.165179][T11227] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  128.314091][T11257] loop6: detected capacity change from 0 to 512
[  128.328674][T11254] loop2: detected capacity change from 0 to 1024
[  128.349598][T11255] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.374753][T11251] loop8: detected capacity change from 0 to 8192
[  128.385794][T11257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.398608][T11261] sch_tbf: burst 25 is lower than device lo mtu (65550) !
[  128.406212][T11257] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.414484][T11254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.435850][T11255] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.456498][T11251]  loop8: p1 p2 p3
[  128.460267][T11251] loop8: p1 size 67108864 extends beyond EOD, truncated
[  128.482397][T11251] loop8: p2 start 98631679 is beyond EOD, truncated
[  128.489040][T11251] loop8: p3 size 423702036 extends beyond EOD, truncated
[  128.544690][T11255] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.578017][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.604690][T11270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  128.651024][T11255] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.680993][T11270] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1368 with error 28
[  128.693787][T11270] EXT4-fs (loop2): This should not happen!! Data will be lost
[  128.693787][T11270] 
[  128.703813][T11270] EXT4-fs (loop2): Total free blocks count 0
[  128.709838][T11270] EXT4-fs (loop2): Free/Dirty block details
[  128.715740][T11270] EXT4-fs (loop2): free_blocks=68451041280
[  128.721623][T11270] EXT4-fs (loop2): dirty_blocks=1376
[  128.726996][T11270] EXT4-fs (loop2): Block reservation details
[  128.733022][T11270] EXT4-fs (loop2): i_reserved_data_blocks=86
[  128.797681][T11255] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.826874][T11255] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.866203][T11255] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.894283][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.912682][T11255] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.960497][ T3153] kernel write not supported for file /snd/seq (pid: 3153 comm: kworker/1:2)
[  128.989631][T11286] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3081'.
[  129.097676][T11290] xt_hashlimit: size too large, truncated to 1048576
[  129.134371][T11288] syzkaller0: entered promiscuous mode
[  129.139982][T11288] syzkaller0: entered allmulticast mode
[  129.447770][T11310] loop4: detected capacity change from 0 to 2048
[  129.958366][T11310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.132849][   T29] kauditd_printk_skb: 265 callbacks suppressed
[  130.132867][   T29] audit: type=1400 audit(1737479609.677:3655): avc:  denied  { lock } for  pid=11328 comm="syz.8.3100" path="socket:[29398]" dev="sockfs" ino=29398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  130.187892][   T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  130.220139][T11330] loop9: detected capacity change from 0 to 512
[  130.242216][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  130.254744][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[  130.254744][   T11] 
[  130.264531][   T11] EXT4-fs (loop4): Total free blocks count 0
[  130.270658][   T11] EXT4-fs (loop4): Free/Dirty block details
[  130.276604][   T11] EXT4-fs (loop4): free_blocks=2415919104
[  130.282349][   T11] EXT4-fs (loop4): dirty_blocks=32
[  130.287623][   T11] EXT4-fs (loop4): Block reservation details
[  130.287860][T11330] EXT4-fs: Ignoring removed i_version option
[  130.293763][   T11] EXT4-fs (loop4): i_reserved_data_blocks=2
[  130.305954][T11330] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.347255][T10338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.382739][T11330] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  130.431061][T11330] EXT4-fs (loop9): 1 truncate cleaned up
[  130.456219][   T29] audit: type=1326 audit(1737479609.998:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.8.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  130.492428][T11330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.513383][   T29] audit: type=1326 audit(1737479610.028:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.8.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  130.537147][   T29] audit: type=1326 audit(1737479610.028:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.8.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  130.560700][   T29] audit: type=1326 audit(1737479610.028:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.8.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  130.584256][   T29] audit: type=1326 audit(1737479610.028:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.8.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x7ffc0000
[  130.608079][   T29] audit: type=1400 audit(1737479610.048:3661): avc:  denied  { mac_admin } for  pid=11327 comm="syz.9.3099" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  130.629516][   T29] audit: type=1400 audit(1737479610.048:3662): avc:  denied  { relabelto } for  pid=11327 comm="syz.9.3099" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  130.655813][   T29] audit: type=1400 audit(1737479610.108:3663): avc:  denied  { write } for  pid=11327 comm="syz.9.3099" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  130.681495][   T29] audit: type=1400 audit(1737479610.108:3664): avc:  denied  { remove_name } for  pid=11327 comm="syz.9.3099" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  130.837374][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.854000][T11345] loop4: detected capacity change from 0 to 8192
[  130.898768][T11345] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  130.906098][T11337] syz.6.3103[11337] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.906752][T11345] FAT-fs (loop4): Filesystem has been set read-only
[  130.906787][T11337] syz.6.3103[11337] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.951743][T11337] syz.6.3103[11337] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.978867][T11351] ebtables: ebtables: counters copy to user failed while replacing table
[  131.273661][T11369] 9pnet_fd: p9_fd_create_unix (11369): problem connecting socket: éq‰Y’3aK: -111
[  131.372103][T11376] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3119'.
[  131.524575][T11389] loop4: detected capacity change from 0 to 2048
[  131.599246][T11389]  loop4: p1 < > p4
[  131.615315][T11389] loop4: p4 size 8388608 extends beyond EOD, truncated
[  131.770252][T11407] loop8: detected capacity change from 0 to 2048
[  131.780561][T11412] netlink: 'syz.4.3135': attribute type 3 has an invalid length.
[  131.825648][T11407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.042440][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.103541][T11434] syz.8.3143[11434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.103656][T11434] syz.8.3143[11434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.145099][T11434] syz.8.3143[11434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.204806][T11434] loop8: detected capacity change from 0 to 512
[  132.213255][T11436] loop9: detected capacity change from 0 to 512
[  132.237773][T11438] loop6: detected capacity change from 0 to 512
[  132.246421][T11434] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  132.277330][T11434] EXT4-fs (loop8): 1 truncate cleaned up
[  132.287515][T11436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.295267][T11434] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.300385][T11436] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.418075][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.490606][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.561131][T11453] loop4: detected capacity change from 0 to 2048
[  132.629751][T11453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.822878][T10338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.278547][T11495] loop8: detected capacity change from 0 to 2048
[  133.315218][T11495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.378332][T11495] EXT4-fs (loop8): shut down requested (0)
[  133.466461][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.851984][T11515] syzkaller0: entered promiscuous mode
[  133.857508][T11515] syzkaller0: entered allmulticast mode
[  133.983323][T11521] bridge0: port 4(veth0_to_bridge) entered blocking state
[  133.990686][T11521] bridge0: port 4(veth0_to_bridge) entered disabled state
[  134.012092][T11521] veth0_to_bridge: entered allmulticast mode
[  134.027462][T11521] veth0_to_bridge: entered promiscuous mode
[  134.100431][T11527] vlan2: entered allmulticast mode
[  134.119674][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'.
[  134.289227][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'.
[  134.745665][T11576] sch_tbf: burst 25 is lower than device lo mtu (65550) !
[  134.876322][T11584] rdma_op ffff88813e073d80 conn xmit_rdma 0000000000000000
[  134.898253][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3221'.
[  134.971919][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3221'.
[  135.103702][T11599] ref_ctr_offset mismatch. inode: 0x48f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[  135.246067][T11606] bridge0: port 3(veth0_to_bridge) entered blocking state
[  135.253305][T11606] bridge0: port 3(veth0_to_bridge) entered disabled state
[  135.281057][T11606] veth0_to_bridge: entered allmulticast mode
[  135.290020][T11606] veth0_to_bridge: entered promiscuous mode
[  135.296109][T11606] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.371685][T11606] bridge0: port 3(veth0_to_bridge) entered blocking state
[  135.378905][T11606] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  135.393390][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  135.393404][   T29] audit: type=1400 audit(1737479614.958:3816): avc:  denied  { bind } for  pid=11615 comm="syz.9.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  135.419097][   T29] audit: type=1400 audit(1737479614.958:3817): avc:  denied  { name_bind } for  pid=11615 comm="syz.9.3225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  135.440117][   T29] audit: type=1400 audit(1737479614.958:3818): avc:  denied  { node_bind } for  pid=11615 comm="syz.9.3225" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  135.520165][   T29] audit: type=1400 audit(1737479615.029:3819): avc:  denied  { listen } for  pid=11615 comm="syz.9.3225" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  135.541850][   T29] audit: type=1400 audit(1737479615.029:3820): avc:  denied  { connect } for  pid=11615 comm="syz.9.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  135.561538][   T29] audit: type=1400 audit(1737479615.029:3821): avc:  denied  { name_connect } for  pid=11615 comm="syz.9.3225" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  135.582921][   T29] audit: type=1326 audit(1737479615.029:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f17935d29 code=0x7ffc0000
[  135.606611][   T29] audit: type=1326 audit(1737479615.029:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f17935d29 code=0x7ffc0000
[  135.630141][   T29] audit: type=1326 audit(1737479615.029:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f17935d29 code=0x7ffc0000
[  135.653786][   T29] audit: type=1326 audit(1737479615.029:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f17935d29 code=0x7ffc0000
[  135.825995][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3230'.
[  135.916995][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3230'.
[  135.997730][T11633] loop8: detected capacity change from 0 to 1024
[  136.003628][T11612] Set syz1 is full, maxelem 65536 reached
[  136.025165][T11633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.187196][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.286538][T11652] loop2: detected capacity change from 0 to 1024
[  136.308798][T11652] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  136.319955][T11652] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  136.334558][T11652] JBD2: no valid journal superblock found
[  136.340500][T11652] EXT4-fs (loop2): Could not load journal inode
[  136.355938][T11656] loop4: detected capacity change from 0 to 764
[  136.371643][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'.
[  136.675836][T11665] SELinux: security policydb version 18 (MLS) not backwards compatible
[  136.696310][T11665] SELinux: failed to load policy
[  136.883953][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'.
[  137.477284][T11703] loop4: detected capacity change from 0 to 1024
[  137.541860][T11703] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  137.552839][T11703] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  137.600190][T11703] JBD2: no valid journal superblock found
[  137.606178][T11703] EXT4-fs (loop4): Could not load journal inode
[  137.645823][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'.
[  137.654035][T11707] loop8: detected capacity change from 0 to 2048
[  137.694974][T11707]  loop8: p1 < > p4
[  137.700573][T11707] loop8: p4 size 8388608 extends beyond EOD, truncated
[  137.858045][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'.
[  138.019143][T11726] syz.8.3270[11726] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.019251][T11726] syz.8.3270[11726] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.065089][T11726] syz.8.3270[11726] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.084018][T11730] loop4: detected capacity change from 0 to 512
[  138.184013][T11730] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  138.412862][T11739] loop9: detected capacity change from 0 to 1024
[  138.447964][T11739] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  138.459150][T11739] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  138.534129][T11739] JBD2: no valid journal superblock found
[  138.539972][T11739] EXT4-fs (loop9): Could not load journal inode
[  138.638805][T11751] xt_hashlimit: max too large, truncated to 1048576
[  138.693378][T11759] loop2: detected capacity change from 0 to 128
[  138.714922][T11759] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  138.732026][T11759] ext4 filesystem being mounted at /711/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.816118][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.926625][T11779] loop6: detected capacity change from 0 to 2048
[  138.993618][T11779] Alternate GPT is invalid, using primary GPT.
[  139.000133][T11779]  loop6: p2 p3 p7
[  139.008873][T11780] loop2: detected capacity change from 0 to 1024
[  139.158413][T11787] syz.6.3292[11787] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.158477][T11787] syz.6.3292[11787] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.192739][T11787] syz.6.3292[11787] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.325135][T11791] loop6: detected capacity change from 0 to 4096
[  139.385769][T11791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.422959][T11791] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #15: comm syz.6.3294: corrupted inode contents
[  139.497272][T11791] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #15: comm syz.6.3294: mark_inode_dirty error
[  139.517137][T11802] hsr_slave_0: left promiscuous mode
[  139.532864][T11791] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #15: comm syz.6.3294: corrupted inode contents
[  139.563018][T11802] hsr_slave_1: left promiscuous mode
[  139.587746][T11791] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.3294: mark_inode_dirty error
[  139.623595][T11791] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #15: comm syz.6.3294: corrupted inode contents
[  139.637346][T11791] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.3294: mark_inode_dirty error
[  139.681782][T11791] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #15: comm syz.6.3294: corrupted inode contents
[  139.811008][T11791] EXT4-fs error (device loop6): ext4_truncate:4240: inode #15: comm syz.6.3294: mark_inode_dirty error
[  139.832355][T11831] SELinux:  Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped).
[  139.844375][T11791] EXT4-fs error (device loop6) in ext4_setattr:5569: Corrupt filesystem
[  139.858855][T11801] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #15: comm syz.6.3294: corrupted inode contents
[  139.898086][T11836] __nla_validate_parse: 2 callbacks suppressed
[  139.898103][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  139.913558][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  139.917166][T11838] program syz.8.3310 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.922683][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  139.969888][T11838] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  139.980466][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.018823][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  140.027984][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  140.037226][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  140.062383][T11842] netlink: 'syz.9.3312': attribute type 12 has an invalid length.
[  140.131959][T11850] loop6: detected capacity change from 0 to 512
[  140.164746][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  140.174069][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  140.183109][T11836] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3309'.
[  140.208259][T11850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  140.321162][T11850] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.454218][T11864] netlink: 133492 bytes leftover after parsing attributes in process `syz.9.3319'.
[  140.477153][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  140.496458][T11866] loop4: detected capacity change from 0 to 2048
[  140.545266][   T29] kauditd_printk_skb: 161 callbacks suppressed
[  140.545283][   T29] audit: type=1400 audit(1737479620.118:3987): avc:  denied  { write } for  pid=11867 comm="syz.6.3321" path="socket:[32779]" dev="sockfs" ino=32779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  140.617325][   T29] audit: type=1400 audit(1737479620.178:3988): avc:  denied  { block_suspend } for  pid=11869 comm="syz.6.3322" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  140.624814][T11866] Alternate GPT is invalid, using primary GPT.
[  140.645339][T11866]  loop4: p2 p3 p7
[  140.730704][   T29] audit: type=1400 audit(1737479620.259:3989): avc:  denied  { sqpoll } for  pid=11874 comm="syz.6.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  140.925527][   T29] audit: type=1400 audit(1737479620.509:3990): avc:  denied  { append } for  pid=11888 comm="syz.2.3328" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  140.954899][T11889] program syz.2.3328 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  141.039065][   T29] audit: type=1326 audit(1737479620.620:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.8.3334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2adf75d29 code=0x0
[  141.245851][   T29] audit: type=1326 audit(1737479620.831:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d45c75d29 code=0x7ffc0000
[  141.273011][T11907] loop6: detected capacity change from 0 to 512
[  141.281801][T11907] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  141.303584][   T29] audit: type=1326 audit(1737479620.861:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0d45c75d29 code=0x7ffc0000
[  141.327225][   T29] audit: type=1326 audit(1737479620.861:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d45c75d29 code=0x7ffc0000
[  141.351042][   T29] audit: type=1326 audit(1737479620.861:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d45c75d29 code=0x7ffc0000
[  141.374565][   T29] audit: type=1326 audit(1737479620.861:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d45c75d29 code=0x7ffc0000
[  141.456576][T11912] loop6: detected capacity change from 0 to 1024
[  141.490941][T11912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.524338][T11912] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.578270][T11912] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  141.603865][T11912] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  141.616461][T11912] EXT4-fs (loop6): This should not happen!! Data will be lost
[  141.616461][T11912] 
[  141.626154][T11912] EXT4-fs (loop6): Total free blocks count 0
[  141.632181][T11912] EXT4-fs (loop6): Free/Dirty block details
[  141.638153][T11912] EXT4-fs (loop6): free_blocks=4293918720
[  141.643969][T11912] EXT4-fs (loop6): dirty_blocks=64
[  141.649111][T11912] EXT4-fs (loop6): Block reservation details
[  141.655129][T11912] EXT4-fs (loop6): i_reserved_data_blocks=4
[  141.699389][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.784352][T11932] loop6: detected capacity change from 0 to 1024
[  141.804113][T11932] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  141.815104][T11932] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  141.841665][T11932] JBD2: no valid journal superblock found
[  141.847552][T11932] EXT4-fs (loop6): Could not load journal inode
[  141.950071][T11940] loop2: detected capacity change from 0 to 512
[  141.973467][T11940] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  142.256518][T11950] hsr_slave_0: left promiscuous mode
[  142.264480][T11951] netlink: 'syz.2.3353': attribute type 4 has an invalid length.
[  142.276354][T11950] hsr_slave_1: left promiscuous mode
[  142.311632][T11951] netlink: 'syz.2.3353': attribute type 4 has an invalid length.
[  142.315518][T11953] loop4: detected capacity change from 0 to 512
[  142.372197][T11953] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  142.440466][T11953] EXT4-fs (loop4): 1 truncate cleaned up
[  142.446834][T11953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.479991][T10338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.806430][T11982] bridge2: entered promiscuous mode
[  142.811705][T11982] bridge2: entered allmulticast mode
[  142.837816][T11982] team0: Port device bridge2 added
[  143.361499][T12019] loop2: detected capacity change from 0 to 1024
[  143.396749][T12019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.428661][T12019] ext4 filesystem being mounted at /726/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.515449][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.868027][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.875579][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.883013][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.923720][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.924864][T12042] loop6: detected capacity change from 0 to 512
[  143.931267][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.944948][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.952377][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.959808][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.961463][T12042] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  143.967221][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.984438][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.992152][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  143.999557][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.007180][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.014605][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.022045][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.029445][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.036953][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.044366][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.051823][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.073837][T12042] EXT4-fs (loop6): 1 truncate cleaned up
[  144.099770][T12042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.118235][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.125772][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.133250][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.140745][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.148151][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.155630][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.163106][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.170539][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.177966][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.185433][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.192953][ T3372] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  144.201291][ T3372] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  144.310052][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.353151][T12053] bridge3: entered promiscuous mode
[  144.358590][T12053] bridge3: entered allmulticast mode
[  144.396794][T12057] loop6: detected capacity change from 0 to 1764
[  144.396989][T12053] team0: Port device bridge3 added
[  144.423157][T12057] ISOFS: unable to read i-node block
[  144.428673][T12057] isofs_fill_super: get root inode failed
[  144.532787][T12074] loop9: detected capacity change from 0 to 512
[  144.565207][T12074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.610311][T12074] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.857805][T12070] loop8: detected capacity change from 0 to 8192
[  144.879684][T12083] loop4: detected capacity change from 0 to 1764
[  144.940765][T12070] syz.8.3405: attempt to access beyond end of device
[  144.940765][T12070] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  144.954401][T12070] Buffer I/O error on dev loop8, logical block 57847, async page read
[  145.037313][T12070] syz.8.3405: attempt to access beyond end of device
[  145.037313][T12070] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  145.050891][T12070] Buffer I/O error on dev loop8, logical block 57847, async page read
[  145.113062][T12070] syz.8.3405: attempt to access beyond end of device
[  145.113062][T12070] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  145.126614][T12070] Buffer I/O error on dev loop8, logical block 57847, async page read
[  145.174157][T12070] syz.8.3405: attempt to access beyond end of device
[  145.174157][T12070] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  145.187746][T12070] Buffer I/O error on dev loop8, logical block 57847, async page read
[  145.753422][T12089] netlink: 'syz.2.3416': attribute type 12 has an invalid length.
[  145.903652][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  145.907589][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.915881][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  145.928006][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.939695][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  145.951863][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.963567][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  145.975732][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.987515][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  145.999636][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  146.744526][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.896746][    C0] net_ratelimit: 54047 callbacks suppressed
[  150.896766][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  150.897033][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.902807][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  150.915101][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.926718][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  150.938906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.950648][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  150.962860][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.974507][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  150.986733][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  154.564146][   T29] kauditd_printk_skb: 138 callbacks suppressed
[  154.564213][   T29] audit: type=1326 audit(1737479634.195:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.9.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee86c5d29 code=0x7ffc0000
[  154.601524][   T29] audit: type=1326 audit(1737479634.195:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.9.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee86c5d29 code=0x7ffc0000
[  154.629209][   T29] audit: type=1326 audit(1737479634.195:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.9.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f4ee86c5d29 code=0x7ffc0000
[  154.656406][   T29] audit: type=1326 audit(1737479634.195:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.9.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee86c5d29 code=0x7ffc0000
[  154.683649][   T29] audit: type=1326 audit(1737479634.195:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.9.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee86c5d29 code=0x7ffc0000
[  155.891684][    C0] net_ratelimit: 53834 callbacks suppressed
[  155.891704][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  155.891768][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.897770][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  155.910073][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.921728][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  155.934502][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.946131][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  155.958399][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.970012][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  155.982247][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.395913][   T29] audit: type=1400 audit(1737479640.011:4140): avc:  denied  { watch_reads } for  pid=12110 comm="syz.2.3418" path="/734" dev="tmpfs" ino=3803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  160.887496][    C0] net_ratelimit: 54349 callbacks suppressed
[  160.887514][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  160.887746][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.893579][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  160.906132][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.917870][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  160.930122][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.941909][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  160.954202][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.965799][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  160.978039][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.453755][   T29] audit: type=1400 audit(1737479645.115:4141): avc:  denied  { mounton } for  pid=12127 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  165.884464][    C1] net_ratelimit: 52604 callbacks suppressed
[  165.884485][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.884585][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  165.890795][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.902435][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  165.914705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.926304][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  165.938533][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.950163][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  165.962405][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.974105][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  170.882368][    C0] net_ratelimit: 53473 callbacks suppressed
[  170.882383][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  170.882472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  170.888468][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  170.900758][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  170.912416][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  170.924725][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  170.936377][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  170.948560][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  170.960196][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  170.972469][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  172.844576][T12144] loop9: detected capacity change from 0 to 1024
[  173.013387][T12144] EXT4-fs: Ignoring removed orlov option
[  173.314248][T12144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.881020][    C0] net_ratelimit: 54333 callbacks suppressed
[  175.881038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  175.881040][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  175.887325][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  175.899066][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  175.911251][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  175.922872][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  175.935083][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  175.946714][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  175.959048][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  175.970593][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  176.982738][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.842253][T12133] pim6reg1: entered allmulticast mode
[  180.880634][    C0] net_ratelimit: 54525 callbacks suppressed
[  180.880651][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  180.880740][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  180.886727][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  180.898924][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  180.910692][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  180.923029][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  180.934537][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  180.946724][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  180.958502][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  180.980951][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.423086][T12163] loop6: detected capacity change from 0 to 2048
[  184.827963][T12163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.880864][    C0] net_ratelimit: 55465 callbacks suppressed
[  185.880883][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  185.881064][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  185.886909][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  185.899030][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  185.910861][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  185.923177][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  185.934705][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  185.946776][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  185.958553][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  185.970868][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  186.088419][T12169] loop9: detected capacity change from 0 to 512
[  186.715509][T12169] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.861601][T12169] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.145771][T12168] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  187.321554][   T29] audit: type=1400 audit(1737479667.022:4142): avc:  denied  { append } for  pid=12167 comm="syz.9.3428" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  187.351673][T12168] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1154 with error 28
[  187.368176][T12168] EXT4-fs (loop6): This should not happen!! Data will be lost
[  187.368176][T12168] 
[  187.377818][T12168] EXT4-fs (loop6): Total free blocks count 0
[  187.387553][T12168] EXT4-fs (loop6): Free/Dirty block details
[  187.397310][T12168] EXT4-fs (loop6): free_blocks=2415919104
[  187.406892][T12168] EXT4-fs (loop6): dirty_blocks=1168
[  187.416061][T12168] EXT4-fs (loop6): Block reservation details
[  187.425917][T12168] EXT4-fs (loop6): i_reserved_data_blocks=73
[  188.268821][T10291] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.881800][    C0] net_ratelimit: 55319 callbacks suppressed
[  190.881819][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  190.881914][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  190.887864][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  190.900046][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  190.911823][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  190.924137][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  190.935673][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  190.947764][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  190.959545][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  190.971884][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.883351][    C0] net_ratelimit: 55253 callbacks suppressed
[  195.883385][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  195.883444][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.889408][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  195.901786][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.913292][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  195.925394][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.937157][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  195.949463][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.961024][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  195.973158][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.237280][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.885401][    C0] net_ratelimit: 56359 callbacks suppressed
[  200.885421][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  200.885823][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.891466][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  200.903731][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.915454][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  200.927770][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.939303][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  200.951401][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.963215][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  200.975689][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  205.888106][    C0] net_ratelimit: 56203 callbacks suppressed
[  205.888124][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  205.888187][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  205.894193][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  205.906328][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  205.918097][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  205.930528][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  205.941996][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  205.954144][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  205.965905][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  205.978276][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  210.891235][    C0] net_ratelimit: 54215 callbacks suppressed
[  210.891254][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  210.891657][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  210.897293][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  210.909596][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  210.921405][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  210.933808][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  210.945272][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  210.957344][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  210.969156][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  210.981541][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  215.894858][    C0] net_ratelimit: 55037 callbacks suppressed
[  215.894877][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  215.895285][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  215.900931][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  215.913019][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  215.924819][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  215.937209][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  215.948728][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  215.960811][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  215.972621][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  215.984963][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.898922][    C0] net_ratelimit: 56319 callbacks suppressed
[  220.898941][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  220.899132][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.905035][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  220.917133][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.928893][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  220.941261][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.952751][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  220.964833][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.976634][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  220.988955][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.032896][T12188] IPv6: sit1: Disabled Multicast RS
[  225.903339][    C1] net_ratelimit: 53701 callbacks suppressed
[  225.903358][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.903429][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  225.909552][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.921348][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  225.933681][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.945229][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  225.957255][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.969040][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  225.981416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.992899][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  230.908099][    C0] net_ratelimit: 56490 callbacks suppressed
[  230.908117][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  230.908349][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  230.914231][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  230.926360][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  230.938164][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  230.950442][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  230.961988][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  230.974080][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  230.985820][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  230.998197][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  235.913289][    C0] net_ratelimit: 56292 callbacks suppressed
[  235.913328][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  235.913548][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  235.919474][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  235.931838][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  235.943387][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  235.955429][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  235.967197][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  235.979531][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  235.991065][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  236.003154][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  239.909623][    C1] ==================================================================
[  239.917744][    C1] BUG: KCSAN: data-race in bond_rcv_validate / bond_rcv_validate
[  239.925488][    C1] 
[  239.927814][    C1] write to 0xffff88813a85f028 of 8 bytes by interrupt on cpu 0:
[  239.935456][    C1]  bond_rcv_validate+0x255/0x7c0
[  239.940427][    C1]  bond_handle_frame+0xdd/0x5c0
[  239.945298][    C1]  __netif_receive_skb_core+0xba7/0x2400
[  239.950956][    C1]  __netif_receive_skb+0x5a/0x280
[  239.955998][    C1]  netif_receive_skb+0x4a/0x320
[  239.960883][    C1]  br_pass_frame_up+0x239/0x310
[  239.965847][    C1]  br_handle_frame_finish+0xd28/0xe70
[  239.971326][    C1]  br_nf_hook_thresh+0x1e5/0x220
[  239.976301][    C1]  br_nf_pre_routing_finish_ipv6+0x575/0x5a0
[  239.982296][    C1]  br_nf_pre_routing_ipv6+0x1f6/0x2a0
[  239.987687][    C1]  br_nf_pre_routing+0x517/0xbc0
[  239.992659][    C1]  br_handle_frame+0x4dd/0x9a0
[  239.997444][    C1]  __netif_receive_skb_core+0xba7/0x2400
[  240.003109][    C1]  __netif_receive_skb+0x5a/0x280
[  240.008156][    C1]  process_backlog+0x22e/0x440
[  240.012947][    C1]  __napi_poll+0x63/0x3c0
[  240.017302][    C1]  net_rx_action+0x3a1/0x7f0
[  240.021920][    C1]  handle_softirqs+0xbf/0x280
[  240.026627][    C1]  run_ksoftirqd+0x1c/0x30
[  240.031063][    C1]  smpboot_thread_fn+0x31c/0x4c0
[  240.036067][    C1]  kthread+0x1d1/0x210
[  240.040240][    C1]  ret_from_fork+0x4b/0x60
[  240.044672][    C1]  ret_from_fork_asm+0x1a/0x30
[  240.049458][    C1] 
[  240.051797][    C1] write to 0xffff88813a85f028 of 8 bytes by interrupt on cpu 1:
[  240.059437][    C1]  bond_rcv_validate+0x255/0x7c0
[  240.064399][    C1]  bond_handle_frame+0xdd/0x5c0
[  240.069263][    C1]  __netif_receive_skb_core+0xba7/0x2400
[  240.074924][    C1]  __netif_receive_skb+0x5a/0x280
[  240.079974][    C1]  netif_receive_skb+0x4a/0x320
[  240.084851][    C1]  br_pass_frame_up+0x239/0x310
[  240.089718][    C1]  br_handle_frame_finish+0xd28/0xe70
[  240.095115][    C1]  br_nf_hook_thresh+0x1e5/0x220
[  240.100091][    C1]  br_nf_pre_routing_finish_ipv6+0x575/0x5a0
[  240.106092][    C1]  br_nf_pre_routing_ipv6+0x1f6/0x2a0
[  240.111486][    C1]  br_nf_pre_routing+0x517/0xbc0
[  240.116456][    C1]  br_handle_frame+0x4dd/0x9a0
[  240.121248][    C1]  __netif_receive_skb_core+0xba7/0x2400
[  240.126904][    C1]  __netif_receive_skb+0x5a/0x280
[  240.131955][    C1]  process_backlog+0x22e/0x440
[  240.136752][    C1]  __napi_poll+0x63/0x3c0
[  240.141105][    C1]  net_rx_action+0x3a1/0x7f0
[  240.145739][    C1]  handle_softirqs+0xbf/0x280
[  240.150567][    C1]  do_softirq+0x5e/0x90
[  240.154751][    C1]  __local_bh_enable_ip+0x6e/0x70
[  240.159811][    C1]  wg_timers_any_authenticated_packet_traversal+0xe5/0x110
[  240.167056][    C1]  wg_packet_handshake_send_worker+0xd7/0x150
[  240.173140][    C1]  process_scheduled_works+0x483/0x9a0
[  240.178627][    C1]  worker_thread+0x51d/0x6f0
[  240.183258][    C1]  kthread+0x1d1/0x210
[  240.187351][    C1]  ret_from_fork+0x4b/0x60
[  240.191782][    C1]  ret_from_fork_asm+0x1a/0x30
[  240.196565][    C1] 
[  240.198893][    C1] value changed: 0x00000000ffffe889 -> 0x00000000ffffe88a
[  240.206018][    C1] 
[  240.208357][    C1] Reported by Kernel Concurrency Sanitizer on:
[  240.214522][    C1] CPU: 1 UID: 0 PID: 12094 Comm: kworker/u8:10 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  240.225209][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  240.235282][    C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
[  240.242246][    C1] ==================================================================
[  240.918693][    C0] net_ratelimit: 55428 callbacks suppressed
[  240.918713][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  240.919079][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  240.924752][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  240.936870][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  240.948671][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  240.960996][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  240.972485][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  240.984613][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  240.996373][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  241.008911][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  242.863509][   T29] audit: type=1400 audit(1737479722.553:4143): avc:  denied  { write } for  pid=3286 comm="syz-executor" path="pipe:[2468]" dev="pipefs" ino=2468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  243.460465][   T29] audit: type=1400 audit(1737479723.244:4144): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  243.486309][   T29] audit: type=1400 audit(1737479723.244:4145): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  243.730030][   T29] audit: type=1400 audit(1737479723.304:4146): avc:  denied  { append } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  243.759782][   T29] audit: type=1400 audit(1737479723.304:4147): avc:  denied  { open } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  243.785985][   T29] audit: type=1400 audit(1737479723.304:4148): avc:  denied  { getattr } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  245.924444][    C0] net_ratelimit: 55452 callbacks suppressed
[  245.924462][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  245.924540][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  245.930559][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  245.942803][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  245.954421][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  245.966515][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  245.978265][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  245.990367][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  246.002115][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:69:38:5e:aa:59, vlan:0)
[  246.014353][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)