last executing test programs:

16.352630296s ago: executing program 4 (id=6):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

16.150433327s ago: executing program 4 (id=7):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0)
mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0)

15.271253781s ago: executing program 4 (id=30):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

15.252742021s ago: executing program 4 (id=31):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=r0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYRESHEX=0x0], 0x6, 0x2c0, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
lstat(&(0x7f0000000340)='./file2\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x8882, &(0x7f0000000680)={[{@gid={'gid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x8}}, {@uid={'uid', 0x3d, r1}}]})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r4, r3, 0x0, 0x80000000)

15.182903182s ago: executing program 4 (id=34):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x6)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00')
readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6)

13.59494543s ago: executing program 4 (id=71):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000050000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3)

13.59478381s ago: executing program 32 (id=71):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000050000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3)

9.316602892s ago: executing program 1 (id=150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74)

9.285411512s ago: executing program 1 (id=153):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000100))

9.225767323s ago: executing program 1 (id=154):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

9.179851373s ago: executing program 1 (id=155):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x0, 0x8, 0xffffff8a})

9.111365313s ago: executing program 1 (id=159):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)

8.839040954s ago: executing program 1 (id=165):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r2, r2, 0x0, 0x80000000)

8.838877695s ago: executing program 33 (id=165):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r2, r2, 0x0, 0x80000000)

8.589380216s ago: executing program 2 (id=173):
r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

8.463670516s ago: executing program 2 (id=176):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="5e0de6d0a46fa97f7414d5d4beddb6230d028c2985c07fd13ab9cd215be43701b0695c176f010c8522dc892d07fde1c4dd61620c6f145357d324923d98eafd69fcb6929e5d0149b55ad366cb405eb1db194e21eff7ee1ffd0fc491f7a1bd5ef94daa60e4ca4f86b607c0bfa43209a15cc602bced1e30290c9c66b61c0ce079072dc9c55937e87e811990c0a91e53fb7262746f85989515c54010fd24e6ce0415a26322ae81df827d5dcd02a05bea25986e519c3ec6192d3b14cf5fe367c9165b7e625e7c8389494b52ea3019206695e90ce8167dbf5a4157b8943bb48d9b485936f5e27d9538b9a26e5aba36d03db6093d2d3572600e08431993ce973d4cc18848c4593672ae571311d7723653de6825ebf2cb1ea583fe04db14c9ce1762a6b8f00dfd20f64f9acc3ced5097658b468f02c66bb8a7a586d00970044ace79a1202a934310f37359976a87a4b407ee8c3838f48255c0dd8dec7e6be5ef228cb602d83169cc3cdd372823665e0173e6d17bce2a6fb31d80542852c651fbb12c1f875a9f9f7654944b6054fbd6a2755f1eac851d3574df50e5bcf52b771784b7494278b1ee4954fcc101a27cd2caa6bed9d137b06ac60716f64745446165f75818f9ee4d0d02407e33f2cbe25398555191dc68ca32d57d986da35f029b57bc9ddbdb3c7286994688782975d4e91dfd0ae1aca248ac78df50ecf1a84b8a88577c1884bd97c96b3feea64f35e34b41ee47cc845f9240bfabb68c11e1dec3ae7aa4642af97341fb2358ec2c9fffb1c0bb90f375020e7a14c3c46c41766614442a0eeb6c5a55c6dc8d735ad8f724be9123a12f1416ed9404a070da645be79878b39e36eb461ec426c46a5d0201543fa3ccd8b0c305655aee8dbbae71e1f187bae5abe882e52a41dfb52a057704dbf359f993f0fde8bcab0f8ba7ec1f84e7386e8c72c81a6317bc937529063f8f5cf7b8753592629199a0e63773f9d1c63373738804b8267c989434168ecdfd0805e8936f99b5dffbab3a2c326a8bcf5881fe5f79cf58bea52d236abdfb1986331fabb9aab70f3e50acf81e2f5b4db83a73f9d0ec011f840fc5f62e5762cd4abfabebe5737d1486d65ad58f846c29bb1e94c7b20b04a34be7be0ec348f502dffb12f7e4140f8d70120ff1015664afa4c0dab33e5c04ea296ae48c0f4d7c67db9c319de481e018299990c727eb95b6746cc5bbfbdee52a77d96f2406b2f883eb3cce1deb571bc322dd113d69aac36e3816ca2256067391a1d10386503d2788eb5f3289ed462c3bea4951e2e9843cfa0ee70826c2d29ab31a902ccd9f82e43e56a6299b3f5c19ab010ee56c7d71031684ab754c1a442c386b93fa66dcc36f9c1d372434e75a5a7f8651ec4bb2b46ab61fc45a019abf8e20107e9a228ec07ecadfcb2f2373bf977cdedcdaa103bba3b70fb2ab373070f3fa88ef3ff54c1bf05df0350c3d9f8fc6d35734798bfe454da9128e2011e33e8b7602d3e45c160eb85ff49d722c1d049de00b151a938c5cb59861e19669b381f0ebcae398a93789ce8e2579aaf7b1493db08d71165d6c60396e0f2626b9f4609965d6c063fc071592e5eb58b707a942ab6a8a09192fd0bd3f0964c9ff7c978fbb46bd951f0d60c296f00d38c78bdee7f9e894b04b174a15aa68ff527376b3fc319996400f2e705cdf15f133a59a496402afc90824306d0f5c49993d3fa24ede9304f11fd30b31e7ce0517d9ea1919f2f5ef3ed1ede8f39872e17e0fbfdf1a9342dc65b192cb01dcbae1bbfab8b3fa2db08b09cd2aa9ad36ad9d4fc7039dafe688b1dff5986e172cc2e3476caa63ad6603568b2290252dc015c12323a980c6a347ec50efc9aea18c124bb21877b3807df36b71ad0e108f819988b8769cd1a6ec5d5b853939845187763ccc818d50146b912e3c76dbb7d893d787c898727be3b369c1c0526845b4ce2e842dbb120b2d7174203b3096f381743f4e0480206a13aee6f6514818dc77c5bf1e0476c1e391a71d2c58cc862063c5723bb0e7eb06e7e2d22252793c5b65c77c850530ef57f894145b332708371a06135382b7eea0782f8f7a88392c2be365934785685a2af96aa2b6e2035c3cb6f556071be1fb411f8c8497c041573e261a205d40b098ac2546cf2d25b7947c503ed6c9c9c3217a8695e1ca1b359ac92b91740344796243fac99189c0c46215df1a42478ebdb8c4a8d99e6ee985886de89c5d33f9485891da2023ce3d3c3b7b620c4231100c1911730f9d03e90ccf9cd10e4c7953e79a10913d683b3860db3c40f53f85ef77b9bdc108661a1d7b6c28d3c9f1c8bdd4d6110ba986c1f639de668a027740124ecdf54ab9e877f3208dad0139d434eb76ad3d6fb08ef20b6bdca5392d5e21ff9be075658192e70ff175beaa325397b45bdf9d5025935f9369d6a8bb9e368cab2beae3b891faeb1c9623104cacebffac39be98e324991983a268fce8226ef81184e4f2bab4b05f4c0111bcff4de5633fe26dda28197418470c59a254d18320afb3264ba857e0666e35e504d93054c8fc6e5e6bde8845abd33f6607d988da0e41831bb1228dcd83a894d094fdae1f592078d6d1b79dc8dc40d76e7b065b7ddb42b82773251dfd887fd0083d581deefd2cc8bf133f239aa7d014b67cd27eab9c40578449f61aef4831d1cef26902d886f29ada6624c45ef13caea199e8e98a14eb66559cb55296d7b1bfe87ff39c4e29598a014d723d245a2501301d2e9ac28caa8848532acc0c142b45f02e2daf692ba28decf4e0f6afcf5eeaa84e5282b91c3026d7c350bae653b2fcae8b77e9236348be3717552db2351cb289a4848cfaef7fcca4d246c91aeb619c7fdfc2a740736fd3677599d7e0092cd32274817188964b2be954bcfb3bc7928367be69d05688509f0b1edfbdb2138d766cff0bed83d67fea0ed79a6d02cee5ff6a4a6c6cd05f769cae141cc543af8705d1878953b63b3b1bb9f65e3c35891e9716959627b8bd8cda654dbaf44b2240144d587b2ee6b7c14d4246a920eeb5dd6adde20e4782f015a39b7e1287a3b00d93e7ae0dab496644aa5e833fc2334777c41b8935461c845d44f82fbdd821d413ed3b4a8c35ce5e36729b755c10400e66f49e012b7b1416744498d99093074574068230236c3559a25b4badfc4610cd4bca127b17434a76f10638e26cd77bdc8d9063398def2a36b115b381d03ea4a556aa608bde59c0e6662c0a1382d4bb26563e42b80d21c8400e4f48ccf62bbff0faa291cca6d5093cf12ac83979505bcf31682c225d9f5d02b43a83c4b0d9a9ceaab087b9acf6ec300f3e82f1fb348786704dfb536cdb65e1e35a8e68c9cd2490b198c1d0d46fb7f51ea8f5e210d3547c9577396a6619476871b3260ea49a5bb95825192688cff7e22520b821ceeeccc1f54471b76ae855c3733054be0ce00a4c44de27e45c2c0569de1b7c1621089f731fe64022e5b2225f3d85b71d4dba61a0a51b2a93687a33fa26f586da98f7b811221c717180d717546ef88e8ef37fdb381643f9eb32fbf327f37dc16f725b384d7bec64fb64a25836dd46a3ed3403ae2d9c751056d6db1983c0b36226bef498caa786c78f26a0e56b6fae8034df8fe9e76b466c6f67774c6bcdfa4429c3a5fb1edaa3f0e44f60f13a63c9ed19f360a30dcbdff3a30c8003a5c0eb51d8f1620fc58134550c46a7e66cfcb411c9bb151fe823ef2dbdfaad4ed4b54bd02740aad65163d30c43425c05032107fdb2de4b9be600fd35a33abda297087cd206cc56ade830c52524130ca577cc34f7538fd1bdb1c0608ede243a47cc6021447183509091511565b138126840859812db525691bd0b357bd6499e70ae3aa2d2711298dda1b4f274a6c24e31f548693c2ffb86ac957b00fe7fb802c72cf70977a116972fe9ccfdf206977c6137d152010132a6a3b01197769a418126b57ad67661c555d8c11ad8c09c8ba43a4ff55b28bf37ff03febf4688f30a3ab759b0088810c7e7d45eeeee778fdc9cd0efc719a84170d47246e9ed1e072799d7e2419bab5af06f3d319e2e19819237b6b5ba746d221796086570e1bf3365078d4c9806c7949e773c752665a73adfc3ee5d24fd17c653009ad1f3f5a0b3184c99f72dea417702391bcc4f2d1f924298c056d18b4083e075255799b77ed11b003cb5b54f26f28716582dffbcb3fbb9891c2b27ee8a0e3ea8e0412a13e63920ef0886e97b7b22aea7d22734459fe2f09007e16160b0770b6e5235c6cd19fd76b9305615018a0b1ec748a2daedb768680ec63b5c4cc8848221e474c7f3e24f339ce640534e682209d119c29652b95b4d63e1633b31f4c31b27f67ddd456c2816bf9f60457c36c1b6f011251a30b708cb218e25523f967c90a320eaa1e7d9aa8bcfc3c46d89881a9ca821ee324ee883aa7fcfb528e588e05e9e9cdaa7ae84ef5dabba76681d9b2b16af60b0ec3770e5d44b72fdfa193ba723875ea8bc93d50fb22b2ebb576826da6c4e1f7574e4d9ef140986fdc01b0334d8a646e7ac43d12c12463d8142236432e5f03ba68beec4c578016c396ac719e108a6ff7c1d2c7aaea8085dd176f716cbb815f944153657289625f22a8ee62e596d498ed2246ae8daa093280f5e33677ccdb95682faecf22d091c31fd8a0d541adcdb78090368ccdba3afda265ca1bd4bd412b236892ca41a629cdd6bd96529ba789a8f25f7122902f9bd121b050ea3075cf9c8ab7051ec2e7647b5e7ca81ab314863868c2519b0700b924d862fcae1ad13c08cece894ee7026ed0795166e8abac03f593285a8e82a05d0354a8b9e464e363660b7b2674a109397fbb0d191dcd32b1aad1ff7742b7a208ba423058329038ff7e54c963322b1ab821af6d500a996afdf94086293ec0089ebebc7996b76f3a315d7e515c5c56363c8fbf8f5af457bc8ee55ab884b2129cc064e0540315bb758441c25e2c4675972966581ce8dbe69cb52e6ed39b6ea6f752f1d2014cf5e30928815ddff44fc2b7260eafa9a9fb647f2f211ef3a79bd0d2d46d2e64db000db30350977c5b7638565c0db0115e7affbf3b554dc4a7066c50a6a22c6e75487d8624bc2c46a97f51a93009f747cb685af75ae2e8f79894f63e8a79ecae8548ccaf89006607adc82197ed1ceaad2f74f63cef83454e0cae3220d0c2d5ae37f90938cda02ef853e03358ee634707c806262752cb33dfd1e9061d032f8402c075293c33c3fc850ae7cf79cafb1f7629cffbaa6afe2873470ddae816f46877f5d1b463fd0cdc6564b17968058a014ac214bd49240ef7e939ab4220f1e3f641591db5c2a289f42e3f831f6743e03491e7bd97e3eb6edd8b9b7d31985a052bdeaf5682bb8eac75ad212a5fe79fb2ddd3c170336d7d96fc121d0700f71b0e12d1dfed19c372d999dddfe3e350f99803cae669208822fb126a440650c8dc39151f82cb26810edf96a13a198fceafd94b1ad15aef421f01ee62e527295adbb10fda8e3335369cc31297b6bb6597f19a429d73d6f68a6719909c846b825c858f82b4c8f432475812ebe8085e445beea7807c00d3a092e1b00fa02ae41fdf2a1013a7f1f87bf5b3ed8238fe94d07a8851ac2c1d8399af64ac964e2011f888ae935e0c24349127a339cca1b23e1039b89045df50918dc869803526f3f761c66b5a32cb3f370810af2f7a2e6deab47ba0bce10f5f1650776d84896b60f735282196208cc477e68762303830cdb687f9c9f9727bd938b170a4cf32aedbe132fea64c3c649b20ba74caebe8587e634d4d86ca8d7dc637a998b8dd921e9", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
fallocate(r0, 0x0, 0x0, 0x9000f4)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$tmpfs(0x0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5a010, 0x0, 0x1, 0x0, &(0x7f0000000000))
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

8.321364657s ago: executing program 2 (id=178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

8.177780978s ago: executing program 2 (id=180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)

8.103584738s ago: executing program 2 (id=181):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

7.886410989s ago: executing program 2 (id=187):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@inlinecrypt}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

7.873005229s ago: executing program 34 (id=187):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@inlinecrypt}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

3.002203645s ago: executing program 6 (id=282):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

2.864729165s ago: executing program 6 (id=286):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x3, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0a00ffff0000", 0x6}])

2.681573956s ago: executing program 6 (id=295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2253}, 0x18)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000830500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}}, 0x0)

2.476867187s ago: executing program 6 (id=300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001900010000000000000000001d0100000800050004fef4061e010600ffff000500c87b656e285d281181111413f0081ddc21c51ffc7e9526ed8503c2aa9a5e0a96d01a3ad6c30d6baa1bdf0f6c4db0f4286fccba8944cee7e579a8dc8b3cde07b51c0a437334c8c52b2cc9301fdc5a473aaf13fbd5536aa0c719f9e37963f8e40ae29ee94ccd6deef4750b5d9d6e8dc3967a4a5190ce4bc0dc8fac276a4270ec73d98334dbb9a2c0797698e4386e2c1872d2a04e6904ccd29d2a7b59082689da3602b982a9a619fa91f33a33723f92930f8a430d10ca1d979db27615a77556811503f3e6f300770b42f29d54f7f5f2fbe93144d1ee8a63e74d5f84c61acf20e8931d09f7c29048edbaff2ea4b29242fd9eec8082002947c4fa12d0fbffe2c4befd01dbf6ad"], 0x154}}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140))

2.161560019s ago: executing program 6 (id=310):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xd, 0x0, 0x7ffc0002}]})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = epoll_create1(0x0)
epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x8001)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000007})

1.228629984s ago: executing program 0 (id=328):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r2, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x20008040)

1.098502524s ago: executing program 6 (id=330):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
epoll_create1(0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x620201, 0x0)
unshare(0x2c020400)
pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0)

1.098306144s ago: executing program 35 (id=330):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
epoll_create1(0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x620201, 0x0)
unshare(0x2c020400)
pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0)

949.041595ms ago: executing program 0 (id=336):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000017c0)=r1, 0x4)
sendmsg$AUDIT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x3c}}, 0x0)

873.376645ms ago: executing program 3 (id=338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

818.878966ms ago: executing program 5 (id=339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='fd\x00')
r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xe1\xaf\x82\r\xd9\xd8\xb4\x96\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x9)
write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000021c0)=""/102395, 0x18ffb)

818.572816ms ago: executing program 0 (id=340):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2000000000000217, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x13c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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")

812.129616ms ago: executing program 5 (id=341):
r0 = syz_io_uring_setup(0x6117, &(0x7f00000002c0)={0x0, 0x1d42, 0x13290}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x6, 0x6, 0x8, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x7, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000)

763.638666ms ago: executing program 3 (id=342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x64, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)

694.942066ms ago: executing program 5 (id=343):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)

662.342706ms ago: executing program 5 (id=344):
r0 = gettid()
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000006"], 0x24}}, 0x0)

610.164987ms ago: executing program 0 (id=345):
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r4}, 0x10)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

542.664787ms ago: executing program 0 (id=347):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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")
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

438.931288ms ago: executing program 0 (id=350):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a)
r2 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0)
r3 = io_uring_setup(0x3e76, &(0x7f0000000000))
dup2(r2, r3)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
tee(r0, r4, 0xfffffffffffffc01, 0x0)
tee(r0, r4, 0x60000000000, 0x0)

438.559708ms ago: executing program 7 (id=352):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x87\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\x83v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1)
close(r1)

424.315538ms ago: executing program 7 (id=353):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x8}})
write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)

393.166168ms ago: executing program 7 (id=354):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

294.939199ms ago: executing program 7 (id=355):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xb)
splice(r3, 0x0, r2, 0x0, 0x1000, 0x0)
write$binfmt_misc(r4, 0x0, 0xfdef)
splice(r0, 0x0, r4, 0x0, 0x80, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20)

259.228309ms ago: executing program 5 (id=356):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))

243.510209ms ago: executing program 3 (id=357):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
umount2(&(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x9)

154.919199ms ago: executing program 7 (id=358):
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

154.66854ms ago: executing program 3 (id=359):
r0 = epoll_create(0x3ff)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xa})

154.520569ms ago: executing program 5 (id=360):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000280)={0x1d, r1}, 0x10)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000017c0)=""/4093, 0xffd}], 0x1}, 0xd619}], 0x1, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0)

154.37759ms ago: executing program 3 (id=361):
unshare(0x8000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000180), &(0x7f00000004c0)=r1}, 0x20)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$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")
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)

114.12021ms ago: executing program 7 (id=362):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

0s ago: executing program 3 (id=363):
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1808008, &(0x7f00000000c0)={[], [{@seclabel}]}, 0x6, 0x58f, &(0x7f0000000e80)="$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")
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000180), &(0x7f00000003c0)='%ps    \x00'}, 0x20)

kernel console output (not intermixed with test programs):

[   20.773823][   T29] audit: type=1400 audit(1731903837.246:81): avc:  denied  { read } for  pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts.
[   26.376643][   T29] audit: type=1400 audit(1731903842.856:82): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.377848][ T3305] cgroup: Unknown subsys name 'net'
[   26.399336][   T29] audit: type=1400 audit(1731903842.856:83): avc:  denied  { mount } for  pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.426679][   T29] audit: type=1400 audit(1731903842.876:84): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.546467][ T3305] cgroup: Unknown subsys name 'cpuset'
[   26.552516][ T3305] cgroup: Unknown subsys name 'rlimit'
[   26.680745][   T29] audit: type=1400 audit(1731903843.156:85): avc:  denied  { setattr } for  pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.705052][   T29] audit: type=1400 audit(1731903843.156:86): avc:  denied  { create } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.725718][   T29] audit: type=1400 audit(1731903843.156:87): avc:  denied  { write } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.733581][ T3308] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.746056][   T29] audit: type=1400 audit(1731903843.156:88): avc:  denied  { read } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.774863][   T29] audit: type=1400 audit(1731903843.166:89): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.799642][   T29] audit: type=1400 audit(1731903843.166:90): avc:  denied  { mount } for  pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.822894][   T29] audit: type=1400 audit(1731903843.226:91): avc:  denied  { relabelto } for  pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.864279][ T3305] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.893294][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   27.968430][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.975525][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.982753][ T3322] bridge_slave_0: entered allmulticast mode
[   27.989202][ T3322] bridge_slave_0: entered promiscuous mode
[   28.013442][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   28.032516][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.039677][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.046792][ T3322] bridge_slave_1: entered allmulticast mode
[   28.052972][ T3322] bridge_slave_1: entered promiscuous mode
[   28.090633][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   28.100279][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.111420][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   28.134224][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.167635][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   28.188328][ T3322] team0: Port device team_slave_0 added
[   28.201570][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.208774][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.215930][ T3315] bridge_slave_0: entered allmulticast mode
[   28.222232][ T3315] bridge_slave_0: entered promiscuous mode
[   28.230961][ T3322] team0: Port device team_slave_1 added
[   28.249733][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.256854][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.263961][ T3315] bridge_slave_1: entered allmulticast mode
[   28.270340][ T3315] bridge_slave_1: entered promiscuous mode
[   28.299004][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.312558][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.319606][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.345591][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.356676][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.363612][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.389528][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.410860][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.420068][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.427129][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.434271][ T3316] bridge_slave_0: entered allmulticast mode
[   28.440528][ T3316] bridge_slave_0: entered promiscuous mode
[   28.467277][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.474342][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.481458][ T3316] bridge_slave_1: entered allmulticast mode
[   28.488119][ T3316] bridge_slave_1: entered promiscuous mode
[   28.499622][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.506760][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.513867][ T3321] bridge_slave_0: entered allmulticast mode
[   28.520195][ T3321] bridge_slave_0: entered promiscuous mode
[   28.526495][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.533557][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.540738][ T3317] bridge_slave_0: entered allmulticast mode
[   28.546963][ T3317] bridge_slave_0: entered promiscuous mode
[   28.553812][ T3315] team0: Port device team_slave_0 added
[   28.560369][ T3315] team0: Port device team_slave_1 added
[   28.570883][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.578015][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.585164][ T3321] bridge_slave_1: entered allmulticast mode
[   28.591521][ T3321] bridge_slave_1: entered promiscuous mode
[   28.597893][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.605032][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.612151][ T3317] bridge_slave_1: entered allmulticast mode
[   28.618456][ T3317] bridge_slave_1: entered promiscuous mode
[   28.634893][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.645149][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.684372][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.691341][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.717391][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.729847][ T3322] hsr_slave_0: entered promiscuous mode
[   28.737149][ T3322] hsr_slave_1: entered promiscuous mode
[   28.748797][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.759276][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.768640][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.775608][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.801656][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.819849][ T3316] team0: Port device team_slave_0 added
[   28.826321][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.836208][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.846742][ T3316] team0: Port device team_slave_1 added
[   28.877921][ T3315] hsr_slave_0: entered promiscuous mode
[   28.883848][ T3315] hsr_slave_1: entered promiscuous mode
[   28.889877][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.897503][ T3315] Cannot create hsr debugfs directory
[   28.916949][ T3317] team0: Port device team_slave_0 added
[   28.937753][ T3321] team0: Port device team_slave_0 added
[   28.943830][ T3317] team0: Port device team_slave_1 added
[   28.949760][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.956761][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.982842][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.994126][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.001117][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.027041][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.043614][ T3321] team0: Port device team_slave_1 added
[   29.092187][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.099152][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.125132][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.141284][ T3316] hsr_slave_0: entered promiscuous mode
[   29.147479][ T3316] hsr_slave_1: entered promiscuous mode
[   29.153331][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.160947][ T3316] Cannot create hsr debugfs directory
[   29.166679][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.173629][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.199537][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.210375][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.217361][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.243305][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.258741][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.265678][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.291632][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.355194][ T3317] hsr_slave_0: entered promiscuous mode
[   29.361163][ T3317] hsr_slave_1: entered promiscuous mode
[   29.367223][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.374772][ T3317] Cannot create hsr debugfs directory
[   29.398891][ T3321] hsr_slave_0: entered promiscuous mode
[   29.404988][ T3321] hsr_slave_1: entered promiscuous mode
[   29.410908][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.418469][ T3321] Cannot create hsr debugfs directory
[   29.467768][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.478029][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.503003][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.521561][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.572116][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.580571][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.600698][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.609860][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.633274][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.647282][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.655803][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.664236][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.690677][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.699766][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.716533][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.734022][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.747064][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.755333][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.764054][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.773108][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.784159][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.814109][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   29.833786][ T1747] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.840908][ T1747] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.866743][ T1747] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.873871][ T1747] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.919330][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.932600][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.947551][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.955948][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.974223][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   29.987330][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   29.998872][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   30.007177][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   30.015667][ T1747] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.022770][ T1747] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.033623][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.040682][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.057513][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.064604][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.073376][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.080512][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.089916][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.096965][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.105407][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.112616][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.129912][ T1747] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.136981][ T1747] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.148485][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.155524][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.207332][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.223970][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.254933][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.303056][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.342480][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.360268][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.376855][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.496428][ T3316] veth0_vlan: entered promiscuous mode
[   30.518183][ T3316] veth1_vlan: entered promiscuous mode
[   30.530708][ T3322] veth0_vlan: entered promiscuous mode
[   30.553281][ T3322] veth1_vlan: entered promiscuous mode
[   30.562056][ T3316] veth0_macvtap: entered promiscuous mode
[   30.569453][ T3317] veth0_vlan: entered promiscuous mode
[   30.582465][ T3315] veth0_vlan: entered promiscuous mode
[   30.595773][ T3317] veth1_vlan: entered promiscuous mode
[   30.603597][ T3321] veth0_vlan: entered promiscuous mode
[   30.614382][ T3316] veth1_macvtap: entered promiscuous mode
[   30.625423][ T3315] veth1_vlan: entered promiscuous mode
[   30.635099][ T3322] veth0_macvtap: entered promiscuous mode
[   30.645267][ T3321] veth1_vlan: entered promiscuous mode
[   30.652936][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.662024][ T3322] veth1_macvtap: entered promiscuous mode
[   30.674127][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.689726][ T3317] veth0_macvtap: entered promiscuous mode
[   30.696255][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.704972][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.713745][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.722528][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.736947][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.747503][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.758085][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.765581][ T3317] veth1_macvtap: entered promiscuous mode
[   30.776387][ T3321] veth0_macvtap: entered promiscuous mode
[   30.784723][ T3321] veth1_macvtap: entered promiscuous mode
[   30.792069][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.802596][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.813119][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.822365][ T3322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.831149][ T3322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.839897][ T3322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.848634][ T3322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.877248][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.887792][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.897727][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.908221][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.919217][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.932080][ T3315] veth0_macvtap: entered promiscuous mode
[   30.940712][ T3315] veth1_macvtap: entered promiscuous mode
[   30.948605][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.956109][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.973605][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.983490][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.994012][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.003896][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.014410][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.025320][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.033422][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.043894][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.053721][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.064191][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.074886][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.092662][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.103251][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.113208][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.123697][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.133519][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.143935][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.154666][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.163038][ T3321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.171760][ T3321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.180471][ T3321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.189173][ T3321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.208224][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.217114][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.225856][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.234542][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.254816][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.265305][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.275219][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.285781][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.295589][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.306034][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.315939][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.326397][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.336759][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.366660][ T3463] pim6reg1: entered promiscuous mode
[   31.371969][ T3463] pim6reg1: entered allmulticast mode
[   31.379544][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.390068][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.399950][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.410396][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.420212][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.430652][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.440516][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.450993][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.462362][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.471477][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.480214][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.488935][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.497662][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.617635][   T29] kauditd_printk_skb: 36 callbacks suppressed
[   31.617651][   T29] audit: type=1400 audit(1731903848.096:128): avc:  denied  { watch watch_reads } for  pid=3474 comm="syz.2.8" path="/proc/4" dev="proc" ino=4155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   31.701221][   T29] audit: type=1400 audit(1731903848.176:129): avc:  denied  { create } for  pid=3483 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.731746][   T29] audit: type=1400 audit(1731903848.196:130): avc:  denied  { ioctl } for  pid=3483 comm="syz.3.10" path="socket:[4173]" dev="sockfs" ino=4173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.760399][   T29] audit: type=1400 audit(1731903848.236:131): avc:  denied  { read } for  pid=3486 comm="syz.1.11" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   31.784460][   T29] audit: type=1400 audit(1731903848.236:132): avc:  denied  { open } for  pid=3486 comm="syz.1.11" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   31.811371][   T29] audit: type=1400 audit(1731903848.236:133): avc:  denied  { ioctl } for  pid=3486 comm="syz.1.11" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   31.827028][ T3495] loop1: detected capacity change from 0 to 128
[   31.838194][ T3496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'.
[   31.859447][   T29] audit: type=1400 audit(1731903848.336:134): avc:  denied  { mount } for  pid=3493 comm="syz.1.13" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   31.927251][ T3498] process 'syz.3.15' launched './file0' with NULL argv: empty string added
[   31.928061][   T29] audit: type=1400 audit(1731903848.406:135): avc:  denied  { execute } for  pid=3497 comm="syz.3.15" name="file0" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   31.960151][   T29] audit: type=1400 audit(1731903848.436:136): avc:  denied  { unmount } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   31.992372][ T3501] mmap: syz.3.17 (3501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   32.002536][   T29] audit: type=1326 audit(1731903848.466:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.3.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   32.051751][ T3502] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.286228][ T3525] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET)
[   32.370726][ T3533] loop3: detected capacity change from 0 to 128
[   32.389152][ T3533] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   32.402868][ T3533] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   32.459787][ T3539] loop4: detected capacity change from 0 to 256
[   32.485432][ T3539] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   32.495646][ T3539] FAT-fs (loop4): Filesystem has been set read-only
[   32.502525][ T3539] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   32.523128][ T3322] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   32.525708][   T35] hid-generic 0000:400000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[   32.541077][ T3322] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   32.552802][ T3533] syz.3.29 (3533) used greatest stack depth: 10728 bytes left
[   32.583047][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   32.703283][ T3560] netlink: 68 bytes leftover after parsing attributes in process `syz.0.41'.
[   32.746618][ T3563] loop0: detected capacity change from 0 to 512
[   32.766079][ T3563] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.42: corrupted in-inode xattr: invalid ea_ino
[   32.783090][ T3563] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.42: couldn't read orphan inode 15 (err -117)
[   32.795259][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.837214][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.858349][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7
[   32.865807][ T3392] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max
[   32.876917][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.884368][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.891832][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.899243][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.906637][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.914352][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.921762][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.929242][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.936655][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.944032][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.951421][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.958850][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.966248][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.973675][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.981082][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.988478][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   32.995866][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   33.003264][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   33.010757][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   33.018213][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   33.025665][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   33.034859][ T3392] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   33.275136][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   33.568586][ T3614] loop0: detected capacity change from 0 to 256
[   33.605727][ T3614] loop0: detected capacity change from 256 to 11
[   33.613222][ T3614] FAT-fs (loop0): unable to read inode block for updating (i_pos 202)
[   33.621677][ T3614] FAT-fs (loop0): unable to read inode block for updating (i_pos 202)
[   33.702488][ T3321] FAT-fs (loop0): Directory bread(block 3) failed
[   33.714278][ T3430] kworker/u8:8: attempt to access beyond end of device
[   33.714278][ T3430] loop0: rw=1, sector=84, nr_sectors = 4 limit=11
[   33.727448][ T3430] Buffer I/O error on dev loop0, logical block 21, lost async page write
[   33.735999][ T3430] kworker/u8:8: attempt to access beyond end of device
[   33.735999][ T3430] loop0: rw=1, sector=88, nr_sectors = 24 limit=11
[   33.749253][ T3430] FAT-fs (loop0): unable to read inode block for updating (i_pos 202)
[   34.070623][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.254258][ T3633] chnl_net:caif_netlink_parms(): no params data found
[   34.282833][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.323279][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.354314][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.361408][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.369448][ T3633] bridge_slave_0: entered allmulticast mode
[   34.375992][ T3633] bridge_slave_0: entered promiscuous mode
[   34.384691][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.397834][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.404905][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.412139][ T3633] bridge_slave_1: entered allmulticast mode
[   34.418712][ T3633] bridge_slave_1: entered promiscuous mode
[   34.424895][ T3639] chnl_net:caif_netlink_parms(): no params data found
[   34.449769][ T3633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.460137][ T3633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.491021][ T3633] team0: Port device team_slave_0 added
[   34.511670][ T3633] team0: Port device team_slave_1 added
[   34.562299][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.569327][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.595266][ T3633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.635296][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.642471][ T3639] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.651791][ T3639] bridge_slave_0: entered allmulticast mode
[   34.658229][ T3639] bridge_slave_0: entered promiscuous mode
[   34.665192][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.672232][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.673725][ T3673] loop3: detected capacity change from 0 to 8192
[   34.698204][ T3633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.723623][   T50] bridge_slave_1: left allmulticast mode
[   34.729394][   T50] bridge_slave_1: left promiscuous mode
[   34.735046][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.744142][   T50] bridge_slave_0: left allmulticast mode
[   34.749966][   T50] bridge_slave_0: left promiscuous mode
[   34.755635][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.795046][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   34.869330][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   34.879722][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   34.895388][   T50] bond0 (unregistering): Released all slaves
[   34.905456][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.912606][ T3639] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.920696][ T3639] bridge_slave_1: entered allmulticast mode
[   34.927192][ T3639] bridge_slave_1: entered promiscuous mode
[   34.954607][ T3639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.977107][ T3633] hsr_slave_0: entered promiscuous mode
[   34.991471][ T3633] hsr_slave_1: entered promiscuous mode
[   35.004549][ T3633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   35.018222][ T3633] Cannot create hsr debugfs directory
[   35.027933][ T3639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.039340][   T50] hsr_slave_0: left promiscuous mode
[   35.045032][   T50] hsr_slave_1: left promiscuous mode
[   35.051444][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.058846][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   35.066445][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.073830][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   35.083041][   T50] veth1_macvtap: left promiscuous mode
[   35.088664][   T50] veth0_macvtap: left promiscuous mode
[   35.094206][   T50] veth1_vlan: left promiscuous mode
[   35.099504][   T50] veth0_vlan: left promiscuous mode
[   35.163422][ T3718] loop2: detected capacity change from 0 to 164
[   35.172417][ T3718] rock: corrupted directory entry. extent=41, offset=65536, size=8
[   35.183877][ T3718] rock: corrupted directory entry. extent=41, offset=65536, size=8
[   35.193534][ T3718] iso9660: Corrupted directory entry in block 4 of inode 1792
[   35.207904][   T50] team0 (unregistering): Port device team_slave_1 removed
[   35.223644][   T50] team0 (unregistering): Port device team_slave_0 removed
[   35.291388][ T3639] team0: Port device team_slave_0 added
[   35.299304][ T3639] team0: Port device team_slave_1 added
[   35.334200][ T3722] syzkaller0: entered promiscuous mode
[   35.339734][ T3722] syzkaller0: entered allmulticast mode
[   35.355325][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.362670][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.388800][ T3639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.409213][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.416232][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.442491][ T3639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.480143][ T3639] hsr_slave_0: entered promiscuous mode
[   35.486442][ T3639] hsr_slave_1: entered promiscuous mode
[   35.560936][ T3737] loop2: detected capacity change from 0 to 512
[   35.599051][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.628881][ T3639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.641320][ T3633] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   35.663289][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.665422][ T3633] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   35.684502][ T3633] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   35.697416][ T3633] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   35.709690][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   35.719763][ T3639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.776221][ T3749] loop2: detected capacity change from 0 to 2048
[   35.783581][ T3639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.804456][ T3633] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.814477][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.829708][ T3633] 8021q: adding VLAN 0 to HW filter on device team0
[   35.843163][ T3639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.867179][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.874246][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.901251][ T3763] netlink: 'syz.3.91': attribute type 10 has an invalid length.
[   35.910768][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.936249][ T3763] team0: Port device geneve0 added
[   35.951338][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.958412][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.979300][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'.
[   35.988167][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'.
[   36.003227][ T3769] erspan0: entered promiscuous mode
[   36.031390][ T3769] erspan0: left promiscuous mode
[   36.055993][   T50] bridge_slave_1: left allmulticast mode
[   36.061646][   T50] bridge_slave_1: left promiscuous mode
[   36.067688][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.086014][   T50] bridge_slave_0: left allmulticast mode
[   36.091803][   T50] bridge_slave_0: left promiscuous mode
[   36.097708][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.170080][ T3788] ref_ctr_offset mismatch. inode: 0x71 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[   36.202612][ T3790] loop3: detected capacity change from 0 to 2048
[   36.237363][ T3790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.251855][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   36.263557][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   36.278278][   T50] bond0 (unregistering): Released all slaves
[   36.299138][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.330638][ T3639] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   36.339462][ T3639] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   36.354623][   T50] hsr_slave_0: left promiscuous mode
[   36.374607][   T50] hsr_slave_1: left promiscuous mode
[   36.380779][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   36.388233][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   36.399920][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.407358][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.417027][   T50] veth1_macvtap: left promiscuous mode
[   36.422517][   T50] veth0_macvtap: left promiscuous mode
[   36.428101][   T50] veth1_vlan: left promiscuous mode
[   36.433325][   T50] veth0_vlan: left promiscuous mode
[   36.512904][   T50] team0 (unregistering): Port device team_slave_1 removed
[   36.523527][   T50] team0 (unregistering): Port device team_slave_0 removed
[   36.560954][ T3639] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   36.579915][ T3639] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   36.605025][ T3808] tipc: Started in network mode
[   36.610029][ T3808] tipc: Node identity f0, cluster identity 4711
[   36.616317][ T3808] tipc: Node number set to 240
[   36.672773][ T3639] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.683454][   T29] kauditd_printk_skb: 171 callbacks suppressed
[   36.683467][   T29] audit: type=1326 audit(1731903853.156:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   36.732406][ T3639] 8021q: adding VLAN 0 to HW filter on device team0
[   36.739812][ T3818] SELinux:  Context � is not valid (left unmapped).
[   36.752495][   T29] audit: type=1326 audit(1731903853.186:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   36.775796][   T29] audit: type=1326 audit(1731903853.186:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   36.799148][   T29] audit: type=1326 audit(1731903853.186:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   36.822529][   T29] audit: type=1326 audit(1731903853.186:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   36.845913][   T29] audit: type=1400 audit(1731903853.226:314): avc:  denied  { sqpoll } for  pid=3829 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   36.874172][ T3639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.884689][ T3639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.899664][  T407] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.906816][  T407] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.919191][  T407] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.926323][  T407] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.938750][ T3840] Illegal XDP return value 4294967274 on prog  (id 90) dev N/A, expect packet loss!
[   36.953279][   T29] audit: type=1400 audit(1731903853.426:315): avc:  denied  { ioctl } for  pid=3841 comm="syz.2.116" path="socket:[4874]" dev="sockfs" ino=4874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   36.991068][ T3633] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.093048][   T29] audit: type=1400 audit(1731903853.566:316): avc:  denied  { watch watch_reads } for  pid=3857 comm="syz.2.120" path="/22/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   37.163063][ T3639] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.174536][   T29] audit: type=1400 audit(1731903853.636:317): avc:  denied  { name_bind } for  pid=3873 comm="syz.2.123" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   37.196230][   T29] audit: type=1400 audit(1731903853.636:318): avc:  denied  { node_bind } for  pid=3873 comm="syz.2.123" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   37.303254][ T3639] veth0_vlan: entered promiscuous mode
[   37.323927][ T3639] veth1_vlan: entered promiscuous mode
[   37.331583][ T3633] veth0_vlan: entered promiscuous mode
[   37.361505][ T3639] veth0_macvtap: entered promiscuous mode
[   37.371365][ T3639] veth1_macvtap: entered promiscuous mode
[   37.386492][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.397054][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.406891][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.417393][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.427313][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.438179][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.448849][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.457161][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.467648][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.477480][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.487928][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.497938][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.508469][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.518913][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.526678][ T3633] veth1_vlan: entered promiscuous mode
[   37.533385][ T3639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.542110][ T3639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.550838][ T3639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.559619][ T3639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.613169][ T3633] veth0_macvtap: entered promiscuous mode
[   37.648298][ T3914] capability: warning: `+}[@' uses deprecated v2 capabilities in a way that may be insecure
[   37.665014][ T3633] veth1_macvtap: entered promiscuous mode
[   37.700399][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.710888][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.714311][ T3926] syz.0.130[3926] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.720697][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.720716][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.720726][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.720741][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.752287][ T3926] syz.0.130[3926] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.762851][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.792688][ T3926] syz.0.130[3926] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.794094][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.802643][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.826245][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.829386][ T3931] syz.0.130[3931] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.836736][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.836749][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.868314][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.874931][ T3931] syz.0.130[3931] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.878407][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.900063][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.909996][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.912980][ T3931] syz.0.130[3931] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   37.920467][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.921660][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.992945][ T3633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.001858][ T3633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.010696][ T3633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.019390][ T3633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.172510][ T3962] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   38.225090][ T3972] loop0: detected capacity change from 0 to 1024
[   38.290727][ T3972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.320481][ T3972] syz.0.144[3972] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.320563][ T3972] syz.0.144[3972] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.324997][ T3976] loop3: detected capacity change from 0 to 1024
[   38.349684][ T3976] EXT4-fs: Ignoring removed nobh option
[   38.355312][ T3976] EXT4-fs: Ignoring removed orlov option
[   38.361799][ T3972] syz.0.144[3972] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.431054][ T3639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.431584][ T3976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.541303][ T4013] loop1: detected capacity change from 0 to 128
[   38.565274][ T4013] program syz.1.155 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   38.598329][ T3316] VFS: Lookup of '.  ' in vfat loop1 would have caused loop
[   38.625310][ T3316] VFS: Lookup of '.  ' in vfat loop1 would have caused loop
[   38.642137][ T4020] random: crng reseeded on system resumption
[   38.752562][ T4037] 
: renamed from bond0 (while UP)
[   38.800158][ T4043] loop2: detected capacity change from 0 to 512
[   38.830260][   T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.846366][ T4043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.869707][ T4043] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.902179][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.923896][   T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.990493][   T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.049420][   T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.094333][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.135414][ T4079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'.
[   39.148211][ T4079] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[   39.158503][ T4079] Zero length message leads to an empty skb
[   39.174981][ T4086] loop3: detected capacity change from 0 to 2048
[   39.216704][ T4090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.243703][   T56] bridge_slave_1: left allmulticast mode
[   39.243928][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.249366][   T56] bridge_slave_1: left promiscuous mode
[   39.267478][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.279957][ T4095] loop0: detected capacity change from 0 to 512
[   39.290689][ T4095] EXT4-fs: Ignoring removed orlov option
[   39.297286][ T4095] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.301359][ T4099] loop2: detected capacity change from 0 to 128
[   39.310409][ T4095] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   39.322340][ T4095] EXT4-fs (loop0): 1 orphan inode deleted
[   39.332297][ T4095] EXT4-fs (loop0): 1 truncate cleaned up
[   39.338138][   T56] bridge_slave_0: left allmulticast mode
[   39.343838][   T56] bridge_slave_0: left promiscuous mode
[   39.349627][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.359585][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.382675][ T4086] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.171: bg 0: block 234: padding at end of block bitmap is not set
[   39.411703][ T4086] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   39.423950][ T4086] EXT4-fs (loop3): This should not happen!! Data will be lost
[   39.423950][ T4086] 
[   39.433613][ T4086] EXT4-fs (loop3): Total free blocks count 0
[   39.439638][ T4086] EXT4-fs (loop3): Free/Dirty block details
[   39.445559][ T4086] EXT4-fs (loop3): free_blocks=0
[   39.450539][ T4086] EXT4-fs (loop3): dirty_blocks=16
[   39.455649][ T4086] EXT4-fs (loop3): Block reservation details
[   39.461660][ T4086] EXT4-fs (loop3): i_reserved_data_blocks=1
[   39.506661][ T4086] syz.3.171 (4086) used greatest stack depth: 10112 bytes left
[   39.518002][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.530182][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   39.542014][ T4106] =======================================================
[   39.542014][ T4106] WARNING: The mand mount option has been deprecated and
[   39.542014][ T4106]          and is ignored by this kernel. Remove the mand
[   39.542014][ T4106]          option from the mount to silence this warning.
[   39.542014][ T4106] =======================================================
[   39.542133][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   39.587853][   T56] bond0 (unregistering): Released all slaves
[   39.655601][   T56] tipc: Left network mode
[   39.674606][   T56] hsr_slave_0: left promiscuous mode
[   39.694952][   T56] hsr_slave_1: left promiscuous mode
[   39.713918][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.721395][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.732954][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.740433][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.757579][   T56] veth1_macvtap: left promiscuous mode
[   39.763129][   T56] veth0_macvtap: left promiscuous mode
[   39.768642][   T56] veth1_vlan: left promiscuous mode
[   39.773927][   T56] veth0_vlan: left promiscuous mode
[   39.799515][ T4133] loop5: detected capacity change from 0 to 512
[   39.820155][ T4133] EXT4-fs: Ignoring removed oldalloc option
[   39.845629][ T4133] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   39.867002][ T4133] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   39.880254][ T4133] EXT4-fs (loop5): 1 truncate cleaned up
[   39.887749][ T4133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.931994][   T56] team0 (unregistering): Port device team_slave_1 removed
[   39.943029][   T56] team0 (unregistering): Port device team_slave_0 removed
[   39.951245][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.997466][ T4060] chnl_net:caif_netlink_parms(): no params data found
[   40.099302][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.106439][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.115231][ T4060] bridge_slave_0: entered allmulticast mode
[   40.122357][ T4060] bridge_slave_0: entered promiscuous mode
[   40.129861][ T3639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.143016][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.150099][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.166097][ T4060] bridge_slave_1: entered allmulticast mode
[   40.172814][ T4060] bridge_slave_1: entered promiscuous mode
[   40.241439][ T4179] loop3: detected capacity change from 0 to 128
[   40.256961][ T4060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.260291][ T4176] loop0: detected capacity change from 0 to 512
[   40.307053][ T4060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.331685][ T4179] syz.3.197: attempt to access beyond end of device
[   40.331685][ T4179] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[   40.362827][ T4060] team0: Port device team_slave_0 added
[   40.372213][ T4060] team0: Port device team_slave_1 added
[   40.379737][ T4176] EXT4-fs (loop0): too many log groups per flexible block group
[   40.387475][ T4176] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   40.408707][ T4176] EXT4-fs (loop0): mount failed
[   40.431260][ T4139] chnl_net:caif_netlink_parms(): no params data found
[   40.445197][   T11] kworker/u8:0: attempt to access beyond end of device
[   40.445197][   T11] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[   40.485810][   T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.513412][ T4201] pim6reg1: entered promiscuous mode
[   40.518861][ T4201] pim6reg1: entered allmulticast mode
[   40.531234][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_0
[   40.538262][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.564306][ T4060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   40.575449][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_1
[   40.582411][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.608424][ T4060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.646515][   T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.689325][ T4060] hsr_slave_0: entered promiscuous mode
[   40.695369][ T4060] hsr_slave_1: entered promiscuous mode
[   40.701626][ T4060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   40.710635][ T4060] Cannot create hsr debugfs directory
[   40.721261][ T4218] uprobe: syz.3.207:4218 failed to unregister, leaking uprobe
[   40.731575][   T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.788265][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.795419][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.795977][ T4229] loop5: detected capacity change from 0 to 1024
[   40.807087][ T4139] bridge_slave_0: entered allmulticast mode
[   40.810360][ T4229] EXT4-fs: Ignoring removed oldalloc option
[   40.815112][ T4139] bridge_slave_0: entered promiscuous mode
[   40.828239][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.835399][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.842794][ T4139] bridge_slave_1: entered allmulticast mode
[   40.848824][ T4229] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   40.849285][ T4139] bridge_slave_1: entered promiscuous mode
[   40.869964][ T4229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.885281][   T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.919554][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.921081][ T4139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.939145][ T4139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.979647][ T4139] team0: Port device team_slave_0 added
[   40.987660][ T4139] team0: Port device team_slave_1 added
[   41.021911][ T4139] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.028900][ T4139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.054848][ T4139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.080994][ T4139] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.088015][ T4139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.114008][ T4139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.135578][   T56] bridge_slave_1: left allmulticast mode
[   41.141294][   T56] bridge_slave_1: left promiscuous mode
[   41.146969][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.157000][   T56] bridge_slave_0: left allmulticast mode
[   41.162672][   T56] bridge_slave_0: left promiscuous mode
[   41.168391][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.180074][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[   41.190892][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[   41.254573][ T4261] option changes via remount are deprecated (pid=4260 comm=syz.3.218)
[   41.278006][   T56] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[   41.289439][   T56] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[   41.299973][   T56] 
 (unregistering): Released all slaves
[   41.324784][ T4060] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   41.359616][ T4265] netlink: 256 bytes leftover after parsing attributes in process `syz.3.220'.
[   41.359796][ T4060] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   41.381326][ T4268] loop0: detected capacity change from 0 to 512
[   41.382241][ T4060] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   41.401521][ T4268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   41.402585][   T56] hsr_slave_0: left promiscuous mode
[   41.417238][   T56] hsr_slave_1: left promiscuous mode
[   41.423119][ T4268] EXT4-fs (loop0): 1 truncate cleaned up
[   41.423134][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.430875][ T4268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.436353][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.460354][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.467868][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.477279][   T56] veth1_macvtap: left promiscuous mode
[   41.482807][   T56] veth0_macvtap: left promiscuous mode
[   41.488383][   T56] veth1_vlan: left promiscuous mode
[   41.489211][ T4273] syz.0.221 (4273) used greatest stack depth: 9984 bytes left
[   41.493593][   T56] veth0_vlan: left promiscuous mode
[   41.504036][ T4268] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.221: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   41.540393][ T3639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.572340][ T4275] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   41.602876][ T4277] tipc: Failed to remove unknown binding: 66,1,1/0:1390020617/1390020619
[   41.612889][ T4277] tipc: Failed to remove unknown binding: 66,1,1/0:1390020617/1390020619
[   41.621445][ T4277] tipc: Failed to remove unknown binding: 66,1,1/0:1390020617/1390020619
[   41.641837][   T56] team0 (unregistering): Port device team_slave_1 removed
[   41.653728][   T56] team0 (unregistering): Port device team_slave_0 removed
[   41.698404][ T4139] hsr_slave_0: entered promiscuous mode
[   41.704495][ T4139] hsr_slave_1: entered promiscuous mode
[   41.712901][ T4139] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   41.720504][ T4139] Cannot create hsr debugfs directory
[   41.730889][ T4060] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   41.735811][   T29] kauditd_printk_skb: 167 callbacks suppressed
[   41.735826][   T29] audit: type=1326 audit(1731903858.216:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4264 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   41.770794][   T29] audit: type=1326 audit(1731903858.246:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4264 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cab96e719 code=0x7ffc0000
[   41.797569][ T4060] 8021q: adding VLAN 0 to HW filter on device bond0
[   41.839626][   T29] audit: type=1400 audit(1731903858.306:488): avc:  denied  { map } for  pid=4283 comm="syz.0.226" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   41.863643][   T29] audit: type=1400 audit(1731903858.306:489): avc:  denied  { read write } for  pid=4283 comm="syz.0.226" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   41.893569][ T4060] 8021q: adding VLAN 0 to HW filter on device team0
[   41.918748][  T407] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.926199][  T407] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.934092][   T29] audit: type=1400 audit(1731903858.396:490): avc:  denied  { create } for  pid=4287 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[   41.954740][   T29] audit: type=1400 audit(1731903858.396:491): avc:  denied  { bind } for  pid=4287 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[   41.973912][ T4294] serio: Serial port ttyS3
[   41.975435][   T29] audit: type=1400 audit(1731903858.396:492): avc:  denied  { connect } for  pid=4287 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[   41.987288][  T407] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.000306][   T29] audit: type=1400 audit(1731903858.396:493): avc:  denied  { sendto } for  pid=4287 comm="syz.3.227" path=2F37322FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[   42.007153][  T407] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.111973][ T4060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   42.122504][ T4060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   42.158696][ T4304] loop5: detected capacity change from 0 to 2048
[   42.202476][   T29] audit: type=1400 audit(1731903858.676:494): avc:  denied  { create } for  pid=4314 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   42.221770][   T29] audit: type=1400 audit(1731903858.676:495): avc:  denied  { write } for  pid=4314 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   42.243583][ T4139] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   42.273208][ T4139] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   42.288552][ T4139] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   42.297957][ T4304] Alternate GPT is invalid, using primary GPT.
[   42.304329][ T4304]  loop5: p2 p3 p7
[   42.305271][ T4323] hub 9-0:1.0: USB hub found
[   42.313238][ T4323] hub 9-0:1.0: 8 ports detected
[   42.320809][ T4139] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   42.347258][ T4060] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.364544][ T3016] Alternate GPT is invalid, using primary GPT.
[   42.370900][ T3016]  loop5: p2 p3 p7
[   42.420131][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   42.436701][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   42.447839][ T4097] udevd[4097]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[   42.527805][ T4139] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.537380][ T4097] udevd[4097]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[   42.544069][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   42.551151][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   42.578311][ T4139] 8021q: adding VLAN 0 to HW filter on device team0
[   42.610310][  T407] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.617435][  T407] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.630121][  T407] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.637269][  T407] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.641670][ T4358] loop5: detected capacity change from 0 to 128
[   42.671005][ T4352] wg2: entered promiscuous mode
[   42.675945][ T4352] wg2: entered allmulticast mode
[   42.712303][ T4139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   42.722698][ T4139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   42.788871][ T4375] loop3: detected capacity change from 0 to 256
[   42.821461][ T4060] veth0_vlan: entered promiscuous mode
[   42.844075][ T4139] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.858209][ T4380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.247'.
[   42.867333][ T4380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.247'.
[   42.925341][ T4060] veth1_vlan: entered promiscuous mode
[   42.991322][ T4060] veth0_macvtap: entered promiscuous mode
[   43.020380][ T4060] veth1_macvtap: entered promiscuous mode
[   43.086813][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.097369][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.107313][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.118178][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.128196][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.138757][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.161887][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.186673][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.197385][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.207292][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.217886][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.227713][ T4060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.238198][ T4060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.252419][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.274130][ T4427] loop0: detected capacity change from 0 to 2048
[   43.297207][ T4060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.306019][ T4060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.314731][ T4060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.323474][ T4060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.347708][ T4427]  loop0: p1 < > p2 < > p3 p4 < >
[   43.352783][ T4427] loop0: partition table partially beyond EOD, truncated
[   43.376803][ T4427] loop0: p1 start 2305 is beyond EOD, truncated
[   43.383080][ T4427] loop0: p2 start 4294902784 is beyond EOD, truncated
[   43.389995][ T4427] loop0: p3 start 3724543488 is beyond EOD, truncated
[   43.418742][ T3016]  loop0: p1 < > p2 < > p3 p4 < >
[   43.423821][ T3016] loop0: partition table partially beyond EOD, truncated
[   43.433899][ T4442] loop3: detected capacity change from 0 to 512
[   43.435632][ T3016] loop0: p1 start 2305 is beyond EOD, truncated
[   43.446712][ T3016] loop0: p2 start 4294902784 is beyond EOD, truncated
[   43.453500][ T3016] loop0: p3 start 3724543488 is beyond EOD, truncated
[   43.479394][ T4139] veth0_vlan: entered promiscuous mode
[   43.486269][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   43.503943][ T4442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.520218][ T4442] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.523126][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   43.577700][ T4139] veth1_vlan: entered promiscuous mode
[   43.590372][ T4139] veth0_macvtap: entered promiscuous mode
[   43.597809][ T4139] veth1_macvtap: entered promiscuous mode
[   43.607892][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.618458][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.628287][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.638746][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.648566][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.659035][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.668861][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.679391][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.702022][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.726427][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.740390][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.750932][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.760992][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.771565][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.781411][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.792067][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.802008][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.812599][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.823849][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.850456][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.262'.
[   43.901407][ T4139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.910217][ T4139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.919060][ T4139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.927897][ T4139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.519882][ T4535] loop6: detected capacity change from 0 to 512
[   44.563008][ T4542] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   44.666655][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.7.281'.
[   44.722801][ T4548] loop0: detected capacity change from 0 to 8192
[   44.764062][ T4555] loop7: detected capacity change from 0 to 7
[   44.777031][ T4548] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   44.786396][ T4548] FAT-fs (loop0): Filesystem has been set read-only
[   44.799602][ T4555] Buffer I/O error on dev loop7, logical block 0, async page read
[   44.811029][ T4548] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   44.824545][ T4555] Buffer I/O error on dev loop7, logical block 0, async page read
[   44.832492][ T4555]  loop7: unable to read partition table
[   44.841255][ T4548] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   44.856655][ T4548] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   44.869834][ T4555] loop_reread_partitions: partition scan of loop7 (�被x������ڬ��dƤ����ݡ�����
[   44.869834][ T4555] 
) failed (rc=-5)
[   44.885424][ T3016] Buffer I/O error on dev loop7, logical block 0, async page read
[   44.908617][ T3016] Buffer I/O error on dev loop7, logical block 0, async page read
[   44.916538][ T3016]  loop7: unable to read partition table
[   44.924309][ T4579] syz.3.287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   45.029857][ T4594] loop3: detected capacity change from 0 to 1024
[   45.059086][ T4598] macvlan0: entered promiscuous mode
[   45.065606][ T4598] ipvlan0: entered promiscuous mode
[   45.085395][ T4594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.087774][ T4598] ipvlan0: left promiscuous mode
[   45.103833][ T4598] macvlan0: left promiscuous mode
[   45.119754][ T4604] random: crng reseeded on system resumption
[   45.258588][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.281044][ T4623] netlink: 24 bytes leftover after parsing attributes in process `syz.6.300'.
[   45.315199][ T4623] loop6: detected capacity change from 0 to 128
[   45.349094][ T4623] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.372319][ T4623] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   45.491007][ T4656] loop5: detected capacity change from 0 to 512
[   45.508019][ T4656] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   45.519611][ T4656] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[   45.529748][ T4656] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.311: Corrupt directory, running e2fsck is recommended
[   45.545946][ T4060] EXT4-fs error (device loop6): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   45.558423][ T4656] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[   45.566527][ T4060] EXT4-fs error (device loop6): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   45.582182][ T4656] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.311: corrupted in-inode xattr: invalid ea_ino
[   45.590647][ T4060] EXT4-fs error (device loop6): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   45.621307][ T4656] EXT4-fs (loop5): Remounting filesystem read-only
[   45.634118][ T4656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.648496][ T4671] loop7: detected capacity change from 0 to 256
[   45.655184][ T4671] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   45.667393][ T4060] EXT4-fs error (device loop6): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   45.681058][ T4673] loop0: detected capacity change from 0 to 1024
[   45.681642][ T4656] SELinux: (dev loop5, type ext4) getxattr errno 5
[   45.694580][ T4060] EXT4-fs error (device loop6): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   45.694864][ T4656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.714225][ T4673] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.726557][ T4671] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   45.737739][ T4060] EXT4-fs error (device loop6): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   45.751113][ T4060] EXT4-fs error (device loop6): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   45.766497][ T4060] EXT4-fs error (device loop6): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   45.767682][ T4673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.788294][ T4060] EXT4-fs error (device loop6): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   45.841485][ T3639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.851660][ T4060] EXT4-fs error (device loop6): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   45.921098][ T4692] loop7: detected capacity change from 0 to 1024
[   45.952427][ T4692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.021940][ T4139] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.043571][ T4709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.064835][ T4709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.135335][ T4722] loop0: detected capacity change from 0 to 512
[   46.148307][ T4722] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.323: corrupted in-inode xattr: invalid ea_ino
[   46.163549][ T4722] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.323: couldn't read orphan inode 15 (err -117)
[   46.178453][ T4722] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.222848][ T3639] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[   46.279443][ T4742] loop0: detected capacity change from 0 to 256
[   46.291697][ T4740] loop3: detected capacity change from 0 to 2048
[   46.309792][ T4742] FAT-fs (loop0): Directory bread(block 64) failed
[   46.318188][ T4742] FAT-fs (loop0): Directory bread(block 65) failed
[   46.318277][ T4740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.324727][ T4742] FAT-fs (loop0): Directory bread(block 66) failed
[   46.345818][ T4742] FAT-fs (loop0): Directory bread(block 67) failed
[   46.352462][ T4742] FAT-fs (loop0): Directory bread(block 68) failed
[   46.360463][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.369148][ T4742] FAT-fs (loop0): Directory bread(block 69) failed
[   46.376162][ T4742] FAT-fs (loop0): Directory bread(block 70) failed
[   46.382728][ T4742] FAT-fs (loop0): Directory bread(block 71) failed
[   46.389416][ T4742] FAT-fs (loop0): Directory bread(block 72) failed
[   46.396343][ T4742] FAT-fs (loop0): Directory bread(block 73) failed
[   46.540047][ T4765] vhci_hcd: invalid port number 157
[   46.545298][ T4765] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   46.569934][ T4060] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.594222][ T1747] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.706315][ T1747] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.743375][ T4787] smc: net device bond0 applied user defined pnetid SYZ0
[   46.776272][ T4787] smc: net device bond0 erased user defined pnetid SYZ0
[   46.789811][ T1747] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.804147][   T29] kauditd_printk_skb: 125 callbacks suppressed
[   46.804159][   T29] audit: type=1400 audit(1731903863.276:621): avc:  denied  { nlmsg_write } for  pid=4791 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   46.869672][ T1747] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.898911][ T4804] loop0: detected capacity change from 0 to 512
[   46.923419][ T4804] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   46.962258][ T4804] EXT4-fs (loop0): 1 truncate cleaned up
[   46.986202][ T4804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.021396][ T4804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.055298][   T29] audit: type=1400 audit(1731903863.506:622): avc:  denied  { write } for  pid=4811 comm="syz.5.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.104333][ T1747] bridge_slave_1: left allmulticast mode
[   47.110056][ T1747] bridge_slave_1: left promiscuous mode
[   47.115663][ T1747] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.139356][ T1747] bridge_slave_0: left allmulticast mode
[   47.145007][ T1747] bridge_slave_0: left promiscuous mode
[   47.150676][ T1747] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.181104][ T4823] loop0: detected capacity change from 0 to 128
[   47.190591][ T4818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.344'.
[   47.228813][ T4827] Cannot find del_set index 0 as target
[   47.289764][ T1747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.302145][ T1747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.312881][ T1747] bond0 (unregistering): Released all slaves
[   47.370230][ T4813] bond1: entered promiscuous mode
[   47.375378][ T4813] bond1: entered allmulticast mode
[   47.381753][ T4813] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.392481][ T4813] bond1 (unregistering): Released all slaves
[   47.405724][ T1747] hsr_slave_0: left promiscuous mode
[   47.432754][ T1747] hsr_slave_1: left promiscuous mode
[   47.445813][ T1747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.453219][ T1747] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.461811][ T1747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.469233][ T1747] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.481579][ T1747] veth1_macvtap: left promiscuous mode
[   47.487163][ T1747] veth0_macvtap: left promiscuous mode
[   47.492667][ T1747] veth1_vlan: left promiscuous mode
[   47.498070][ T1747] veth0_vlan: left promiscuous mode
[   47.545827][   T29] audit: type=1400 audit(1731903864.016:623): avc:  denied  { setopt } for  pid=4859 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.565164][   T29] audit: type=1400 audit(1731903864.016:624): avc:  denied  { ioctl } for  pid=4859 comm="syz.5.360" path="socket:[8932]" dev="sockfs" ino=8932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.597540][ T4862] loop3: detected capacity change from 0 to 128
[   47.611184][ T4862] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   47.623699][   T29] audit: type=1400 audit(1731903864.096:625): avc:  denied  { read } for  pid=4859 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.629454][ T4862] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   47.654560][ T4864] hub 2-0:1.0: USB hub found
[   47.659348][ T4864] hub 2-0:1.0: 8 ports detected
[   47.674059][   T29] audit: type=1400 audit(1731903864.146:626): avc:  denied  { write } for  pid=4859 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.705299][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   47.721568][ T1747] team0 (unregistering): Port device team_slave_1 removed
[   47.731904][ T3317] ==================================================================
[   47.740006][ T3317] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[   47.747577][ T3317] 
[   47.749899][ T3317] read-write to 0xffff888237d2ac68 of 1 bytes by task 4868 on cpu 1:
[   47.757963][ T3317]  folio_add_lru+0xa3/0x1f0
[   47.762470][ T3317]  folio_add_lru_vma+0x48/0x60
[   47.767242][ T3317]  do_wp_page+0x17a5/0x2340
[   47.771759][ T3317]  handle_mm_fault+0xc47/0x2aa0
[   47.776603][ T3317]  exc_page_fault+0x3b9/0x650
[   47.781278][ T3317]  asm_exc_page_fault+0x26/0x30
[   47.786121][ T3317] 
[   47.788435][ T3317] read to 0xffff888237d2ac68 of 1 bytes by task 3317 on cpu 0:
[   47.795981][ T3317]  __lru_add_drain_all+0x136/0x3f0
[   47.801098][ T3317]  lru_add_drain_all+0x10/0x20
[   47.805864][ T3317]  invalidate_bdev+0x47/0x70
[   47.810489][ T3317]  ext4_put_super+0x571/0x840
[   47.815168][ T3317]  generic_shutdown_super+0xe5/0x220
[   47.820461][ T3317]  kill_block_super+0x2a/0x70
[   47.825172][ T3317]  ext4_kill_sb+0x44/0x80
[   47.829497][ T3317]  deactivate_locked_super+0x7d/0x1c0
[   47.834881][ T3317]  deactivate_super+0x9f/0xb0
[   47.839559][ T3317]  cleanup_mnt+0x268/0x2e0
[   47.843966][ T3317]  __cleanup_mnt+0x19/0x20
[   47.848383][ T3317]  task_work_run+0x13a/0x1a0
[   47.852975][ T3317]  syscall_exit_to_user_mode+0xbe/0x130
[   47.858522][ T3317]  do_syscall_64+0xd6/0x1c0
[   47.863032][ T3317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.868952][ T3317] 
[   47.871263][ T3317] value changed: 0x01 -> 0x02
[   47.875932][ T3317] 
[   47.878254][ T3317] Reported by Kernel Concurrency Sanitizer on:
[   47.884401][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted 6.12.0-syzkaller #0
[   47.893176][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   47.903229][ T3317] ==================================================================
[   47.912906][   T29] audit: type=1400 audit(1731903864.386:627): avc:  denied  { write } for  pid=3305 comm="syz-executor" path="pipe:[2216]" dev="pipefs" ino=2216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   47.924228][ T1747] team0 (unregistering): Port device team_slave_0 removed
[   47.954100][ T4871] loop3: detected capacity change from 0 to 512
[   47.990877][ T4871] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   48.022164][ T4871] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[   48.022195][ T4871] EXT4-fs: failed to create workqueue
[   48.037194][ T4871] EXT4-fs (loop3): mount failed
[   48.403727][ T1747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.439101][ T1747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.509264][ T1747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.558904][ T1747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.624294][ T1747] bridge_slave_1: left allmulticast mode
[   48.630054][ T1747] bridge_slave_1: left promiscuous mode
[   48.635840][ T1747] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.645321][ T1747] bridge_slave_0: left allmulticast mode
[   48.651052][ T1747] bridge_slave_0: left promiscuous mode
[   48.656843][ T1747] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.719881][ T1747] team0: Port device geneve0 removed
[   48.808089][ T1747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   48.818522][ T1747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   48.828605][ T1747] bond0 (unregistering): Released all slaves
[   48.836809][ T1747] bond0 (unregistering): Released all slaves
[   50.319602][ T1747] hsr_slave_0: left promiscuous mode
[   50.325302][ T1747] hsr_slave_1: left promiscuous mode
[   50.330922][ T1747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.338441][ T1747] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.347172][ T1747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.354587][ T1747] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.363560][ T1747] veth1_macvtap: left promiscuous mode
[   50.369150][ T1747] veth0_macvtap: left promiscuous mode
[   50.374648][ T1747] veth1_vlan: left promiscuous mode
[   50.379981][ T1747] veth0_vlan: left promiscuous mode
[   50.459311][ T1747] team0 (unregistering): Port device team_slave_1 removed
[   50.469373][ T1747] team0 (unregistering): Port device team_slave_0 removed
[   50.840403][  T407] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.879218][  T407] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.919630][  T407] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.968215][  T407] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.042117][  T407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.091748][  T407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.139111][  T407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.179554][  T407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.253826][  T407] bridge_slave_1: left allmulticast mode
[   51.259527][  T407] bridge_slave_1: left promiscuous mode
[   51.265240][  T407] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.273926][  T407] bridge_slave_0: left allmulticast mode
[   51.279686][  T407] bridge_slave_0: left promiscuous mode
[   51.285389][  T407] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.296576][  T407] bridge_slave_1: left allmulticast mode
[   51.302272][  T407] bridge_slave_1: left promiscuous mode
[   51.307949][  T407] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.315850][  T407] bridge_slave_0: left allmulticast mode
[   51.321491][  T407] bridge_slave_0: left promiscuous mode
[   51.327202][  T407] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.527586][  T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.537842][  T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.547965][  T407] bond0 (unregistering): Released all slaves
[   51.556844][  T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.567029][  T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.577006][  T407] bond0 (unregistering): Released all slaves
[   51.621071][  T407] hsr_slave_0: left promiscuous mode
[   51.626958][  T407] hsr_slave_1: left promiscuous mode
[   51.632767][  T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.640248][  T407] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.647985][  T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.655373][  T407] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.664358][  T407] hsr_slave_0: left promiscuous mode
[   51.670207][  T407] hsr_slave_1: left promiscuous mode
[   51.676086][  T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.683815][  T407] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.692219][  T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.699673][  T407] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.710423][  T407] veth1_macvtap: left promiscuous mode
[   51.716014][  T407] veth0_macvtap: left promiscuous mode
[   51.721516][  T407] veth1_vlan: left promiscuous mode
[   51.726900][  T407] veth0_vlan: left promiscuous mode
[   51.732649][  T407] veth1_macvtap: left promiscuous mode
[   51.738196][  T407] veth0_macvtap: left promiscuous mode
[   51.743708][  T407] veth1_vlan: left promiscuous mode
[   51.749010][  T407] veth0_vlan: left promiscuous mode
[   51.870844][  T407] team0 (unregistering): Port device team_slave_1 removed
[   51.880857][  T407] team0 (unregistering): Port device team_slave_0 removed
[   51.943123][  T407] team0 (unregistering): Port device team_slave_1 removed
[   51.953884][  T407] team0 (unregistering): Port device team_slave_0 removed