last executing test programs:

28.155116662s ago: executing program 1 (id=150):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a"], 0x58}}, 0x0)

27.931166282s ago: executing program 1 (id=164):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000640)='mm_page_alloc\x00', r1}, 0x2e)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000400)}], 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000))

27.902928635s ago: executing program 1 (id=166):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
syz_emit_ethernet(0x38, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @remote}, @info_reply}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

27.881851887s ago: executing program 1 (id=167):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@jqfmt_vfsold}, {@data_err_abort}, {@norecovery}, {@norecovery}]}, 0x1, 0x4cd, &(0x7f0000000a00)="$eJzs3ctrXNcZAPBvZqyn1cp2S7FdqA0uuA+s0YNiqe2iXbVdGEoN3bTgqtJYVTXSCM3ItYShcrLzIouQkEDIIstA/oFkE69iAiHrZB+8CA6Jo0ASCEyYOzPy6DHKJJY8Qff3g+s595zr+c7R8B3dOXM1N4DUOl/7JxMxFBHvRsRwfXf7AefrD5sPb83UtkxUq1c/ziTH1fabhzb/3/GI2IiI/oj4258i/p3ZHbe8tr4wXSwWVhr7+cricr68tn5pfnF6rjBXWBqbvDw1NTk6MT51YGO988x/71x54y+9r33+9IN7z771Zq1bQ4221nEcpPrQe+JkS92xiPj9YQTrglxjPAPd7gjfSe31+1FEXEjyfzhyyasJpEG1Wq1+Ve1r17xRBY6sbHIOnMmORES9nM2OjNTP4X8cg9liqVz59fXS6tJs/Vz5RPRkr88XC6ON9wonoidT2x9Lyo/2x3fsT0Qk58DP5QaS/ZGZUnH2yU51wA7Hd+T/Z7l6/gMp4S0/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kEp/vXKltlWbf/8+e2NtdaF049Jsobwwsrg6MzJTWomRuVLf6509X7FUWh77TazezFcK5Uq+vLZ+bbG0ulS5Nr84PdcbhZ5DHg/QuZPn7r6fiYiN3w4kW01vo02uwtFW/X/9OwCA9Ml1ewICusbSH6SX9/jAHl/Ru01/u4blx4r6TWGBQ5TtdgeArrl4xud/kFbW/yG9rP9Dem0/x3c2AGnUnfV/oJus/0N6DbXc/yfTcv+vH7Tcu2s0In4YEe/levqa9/oCjoLsh5lG7l8c/vnQztbezBfJokBvRPzvpasv3JyuVFbGavWfbNVXXqzX93aj+0DHkvwdbzz6RQ4Aqbb58NZMc9uqPHH4cT/6Y/0ihN3xjzXWJvuTzygHNzPbrlXIHNC1Cxu3I+L0XvEzjfud1z/5GNzM7Yp/qvGYqT9F0t9jyX3THyf+/Vc7jX+mJf7PWuKffeyfCqTD3dr8M7pX/meTnI6t/Ns+/wwd0PXR7ee/7Nb8l2sz/53rMMZ/Xn7qftv4tyPO7hm/Ga8/ibUzfq1vFzuM/+Cff/9Ju7bqK/Xn2St+U62Urywu58tr65fmF6fnCnOFpbHJy1NTk6MT41P5ZI0631yp3u13p9+5t9/4B9vE32/8tbpfdjj+L3/69j/O7xP/Fxf2fv1P7RN/ICJ+1WH8T8c/+Fe7tlr82Tbjz+6M37LAV6ub6DB++fk/93V4KADwBJTX1hemi8XCioKCwrcsVIbrWfR96c9BFro9MwGH7VHSd7snAAAAAAAAAAAAQKcO7JrhP0Tbpm6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKPg6AAD//029zuw=")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x20, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000, 0x1000000}])

27.584736163s ago: executing program 1 (id=173):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}}, 0x0)

27.314347337s ago: executing program 1 (id=176):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

27.314140807s ago: executing program 32 (id=176):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

20.909396035s ago: executing program 0 (id=372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x3)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

20.872127378s ago: executing program 0 (id=376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

19.974341328s ago: executing program 0 (id=420):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x14, 0x0, 0x848734f50186bb25, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x24048801}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x44020}, 0x8080)

19.882767636s ago: executing program 0 (id=426):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES64], 0x3, 0x377, &(0x7f00000002c0)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x101002, 0x0)
setns(r1, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x80000}, 0x20)

19.624025459s ago: executing program 0 (id=434):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

19.324068305s ago: executing program 0 (id=447):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

19.323873735s ago: executing program 33 (id=447):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

18.511193998s ago: executing program 3 (id=467):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x22, &(0x7f0000000340)=""/4124, &(0x7f0000000000)=0x101c)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001380)={r2, 0x8000, 0x1, "e1"}, 0x9)

18.449845503s ago: executing program 3 (id=470):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
close(r0)

17.725966708s ago: executing program 3 (id=480):
open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
fadvise64(r2, 0x0, 0x0, 0x4)

17.686878461s ago: executing program 3 (id=482):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)

17.322012783s ago: executing program 3 (id=495):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x4c}}, 0x4004)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.484472247s ago: executing program 3 (id=513):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

16.484324857s ago: executing program 34 (id=513):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

11.849266779s ago: executing program 7 (id=657):
socket$inet6(0xa, 0x3, 0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r1, 0x12081ff)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
sendfile(r2, r2, 0x0, 0x100000000)

11.686829563s ago: executing program 7 (id=658):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x100}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x100}, {{0x4}, {0x2, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11.592038871s ago: executing program 7 (id=661):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10.685577562s ago: executing program 7 (id=691):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x7, 0x1010f3)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

10.524766636s ago: executing program 7 (id=694):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

10.107162363s ago: executing program 4 (id=706):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x40)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f)

10.069337377s ago: executing program 4 (id=708):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00')
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0)

9.946387917s ago: executing program 7 (id=710):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033300fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

9.946079928s ago: executing program 35 (id=710):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033300fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

9.80231966s ago: executing program 4 (id=712):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file1'}, 0xb)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0)

9.784019452s ago: executing program 4 (id=713):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')

9.734883816s ago: executing program 4 (id=716):
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = gettid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

9.486436869s ago: executing program 4 (id=719):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
unshare(0x2040400)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r1, 0x0, 0x0)

9.486011908s ago: executing program 36 (id=719):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
unshare(0x2040400)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r1, 0x0, 0x0)

1.888325083s ago: executing program 6 (id=943):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./file0\x00', 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x19c, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c666c7573682c74696d6505000000000000003078303030303030303030303030303264622c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6572726f72733d72656d6f756e742d726f2c646f74732c6e6f646f74732c6e6f646f74732c646f74732c7379735f696d6d757461626c652c646d61736b3d30303030303030303030303030303030303030303030362c646f74732c636865636b3d7374726963742c6e6f646f74732c757365667265652c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00"], 0xfd, 0x20e, &(0x7f0000000ac0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

1.559955211s ago: executing program 6 (id=949):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)

1.421683874s ago: executing program 6 (id=953):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532"], 0x138)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
semget$private(0x0, 0x4, 0x4d1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0x6)

1.308778744s ago: executing program 9 (id=954):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff})

1.041420247s ago: executing program 9 (id=958):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)

980.231093ms ago: executing program 6 (id=961):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)

853.457824ms ago: executing program 2 (id=965):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x38}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

829.695126ms ago: executing program 2 (id=966):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x18800, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x374, &(0x7f0000000f80)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1c5902, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x10)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x1000000201005)

753.628393ms ago: executing program 6 (id=967):
socket$caif_seqpacket(0x25, 0x5, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x6000004, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0)

708.668187ms ago: executing program 8 (id=968):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0)
close(0x3)

674.34824ms ago: executing program 5 (id=978):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xe21, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1)

671.289381ms ago: executing program 2 (id=969):
r0 = getpid()
setreuid(0xee00, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_clone3(&(0x7f00000008c0)={0x17140000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58)

533.952903ms ago: executing program 2 (id=970):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="170000000000000004000000fe"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4048004}, 0x800)

501.952485ms ago: executing program 8 (id=971):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
sendmsg$key(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020700f2070000000000000000000000050008ff"], 0x38}}, 0x0)

499.239956ms ago: executing program 2 (id=972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

485.851207ms ago: executing program 5 (id=973):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)

420.845763ms ago: executing program 8 (id=974):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)

419.222773ms ago: executing program 5 (id=975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x2, 0x124, 0x0)

369.739377ms ago: executing program 2 (id=976):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
r2 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400004, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0)

358.429148ms ago: executing program 8 (id=977):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x452c, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\x0e\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_\x95\x00\x00\x00j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7-\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x6)
fchown(r2, 0x0, 0x0)

299.281853ms ago: executing program 8 (id=979):
r0 = socket$packet(0x11, 0x2, 0x300)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

219.153371ms ago: executing program 8 (id=980):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0), 0x1, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)="a6", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

195.771312ms ago: executing program 5 (id=981):
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYBLOB], 0x48)
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'})

168.619855ms ago: executing program 9 (id=982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5)

168.407715ms ago: executing program 6 (id=983):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000440)=@file={0x1}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1}, 0x6e)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0)

147.103247ms ago: executing program 9 (id=984):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129800, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400})
close(r2)

131.829238ms ago: executing program 37 (id=983):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000440)=@file={0x1}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1}, 0x6e)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0)

58.941645ms ago: executing program 5 (id=986):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='\x00\x00\x00\x00\x00', 0x17, 0x0, 0x0, 0x37)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "f5aad96737f637f4", "6f484b8afba4bdca0000000000000080", "528b0f51", "bb0bbf1f26e730c3"}, 0x28)

45.750046ms ago: executing program 9 (id=987):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0)

30.746377ms ago: executing program 5 (id=988):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/148, 0xffffff96)

0s ago: executing program 9 (id=989):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x20000015)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
truncate(&(0x7f0000000000)='./file1\x00', 0x1100)

kernel console output (not intermixed with test programs):

m_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.001535][ T3326] veth0_macvtap: entered promiscuous mode
[   39.026891][   T29] audit: type=1400 audit(1731150296.127:108): avc:  denied  { mount } for  pid=3325 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.049116][   T29] audit: type=1400 audit(1731150296.127:109): avc:  denied  { mounton } for  pid=3325 comm="syz-executor" path="/root/syzkaller.mhX8sm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.074806][   T29] audit: type=1400 audit(1731150296.127:110): avc:  denied  { mount } for  pid=3325 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.097695][   T29] audit: type=1400 audit(1731150296.127:111): avc:  denied  { mounton } for  pid=3325 comm="syz-executor" path="/root/syzkaller.mhX8sm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.125598][   T29] audit: type=1400 audit(1731150296.127:112): avc:  denied  { mounton } for  pid=3325 comm="syz-executor" path="/root/syzkaller.mhX8sm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.153224][   T29] audit: type=1400 audit(1731150296.127:113): avc:  denied  { unmount } for  pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.173902][   T29] audit: type=1400 audit(1731150296.167:114): avc:  denied  { mounton } for  pid=3325 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.198746][ T3325] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.219442][ T3323] veth0_macvtap: entered promiscuous mode
[   39.231026][ T3326] veth1_macvtap: entered promiscuous mode
[   39.248095][   T29] audit: type=1400 audit(1731150296.377:115): avc:  denied  { read write } for  pid=3325 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.273099][ T3323] veth1_macvtap: entered promiscuous mode
[   39.276151][   T29] audit: type=1400 audit(1731150296.397:116): avc:  denied  { open } for  pid=3325 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.283411][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.313747][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.323690][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.334162][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.344069][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.354574][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.365107][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.373324][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.383816][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.393697][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.404192][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.414074][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.424553][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.435548][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.444363][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.453217][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.461969][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.470701][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.488630][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.499232][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.509334][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.519807][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.529764][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.540326][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.550195][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.560721][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.572178][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.582531][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.593089][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.602994][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.613793][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.623665][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.634173][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.644105][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.654561][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.666543][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.697735][ T3463] loop0: detected capacity change from 0 to 128
[   39.709667][ T3326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.718560][ T3326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.727274][ T3326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.736048][ T3326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.863047][ T3463] syz.0.6: attempt to access beyond end of device
[   39.863047][ T3463] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[   39.949252][ T3476] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.4'.
[   39.987240][ T3478] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   40.015559][ T3481] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[   40.071727][ T3483] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   40.260843][ T3491] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   40.375365][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'.
[   40.510286][ T3518] netlink: 'syz.4.26': attribute type 7 has an invalid length.
[   40.560995][ T3524] loop4: detected capacity change from 0 to 512
[   40.582851][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.597217][ T3524] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.625026][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.771357][ T3546] loop3: detected capacity change from 0 to 128
[   40.838946][ T3552] xt_TCPMSS: Only works on TCP SYN packets
[   40.968262][ T3565] Zero length message leads to an empty skb
[   41.024146][ T3570] loop1: detected capacity change from 0 to 128
[   41.053401][ T3570] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   41.093808][ T3570] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   41.128814][ T3576] loop2: detected capacity change from 0 to 512
[   41.160983][ T3576] EXT4-fs: Ignoring removed orlov option
[   41.168206][ T3576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.181591][ T3576] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   41.226665][ T3576] EXT4-fs (loop2): 1 orphan inode deleted
[   41.232575][ T3576] EXT4-fs (loop2): 1 truncate cleaned up
[   41.248849][ T3576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.253134][ T3583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'.
[   41.290084][ T3586] rdma_op ffff88811527a580 conn xmit_rdma 0000000000000000
[   41.497647][ T3599] loop3: detected capacity change from 0 to 1024
[   41.510187][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.527472][ T3599] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   41.542791][ T3599] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28
[   41.555262][ T3599] EXT4-fs (loop3): This should not happen!! Data will be lost
[   41.555262][ T3599] 
[   41.565027][ T3599] EXT4-fs (loop3): Total free blocks count 0
[   41.571073][ T3599] EXT4-fs (loop3): Free/Dirty block details
[   41.577027][ T3599] EXT4-fs (loop3): free_blocks=68451041280
[   41.582995][ T3599] EXT4-fs (loop3): dirty_blocks=32
[   41.588137][ T3599] EXT4-fs (loop3): Block reservation details
[   41.594259][ T3599] EXT4-fs (loop3): i_reserved_data_blocks=2
[   41.608362][ T3599] syz.3.56 (3599) used greatest stack depth: 9944 bytes left
[   41.616438][ T2245] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   41.647408][ T3604] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   41.656435][ T3604] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   41.689606][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.732208][ T3608] loop2: detected capacity change from 0 to 2048
[   41.779403][ T3608]  loop2: p1 < > p4
[   41.784560][ T3608] loop2: p4 size 8388608 extends beyond EOD, truncated
[   41.805519][ T3019]  loop2: p1 < > p4
[   41.813571][ T3019] loop2: p4 size 8388608 extends beyond EOD, truncated
[   41.840082][ T3616] Cannot find del_set index 0 as target
[   41.859892][ T3618] syz.2.64[3618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.860082][ T3618] syz.2.64[3618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.870171][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   41.888782][ T3618] syz.2.64[3618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.897195][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   41.926302][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.943323][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'.
[   42.067513][ T3641] sd 0:0:1:0: device reset
[   42.154789][ T3650] loop1: detected capacity change from 0 to 2048
[   42.192165][ T3650]  loop1: p1 < > p4
[   42.205580][ T3650] loop1: p4 size 8388608 extends beyond EOD, truncated
[   42.245888][ T3019]  loop1: p1 < > p4
[   42.259720][ T3019] loop1: p4 size 8388608 extends beyond EOD, truncated
[   42.324806][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   42.336174][ T3672] wireguard0: entered promiscuous mode
[   42.339518][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   42.342196][ T3672] wireguard0: entered allmulticast mode
[   42.383805][ T3675] SELinux:  Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped).
[   42.421322][ T3670] udevd[3670]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   42.432387][ T3675] process 'syz.0.89' launched '/dev/fd/3' with NULL argv: empty string added
[   42.443956][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   42.541739][ T3683] loop2: detected capacity change from 0 to 512
[   42.606766][ T3683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.619786][ T3690] =======================================================
[   42.619786][ T3690] WARNING: The mand mount option has been deprecated and
[   42.619786][ T3690]          and is ignored by this kernel. Remove the mand
[   42.619786][ T3690]          option from the mount to silence this warning.
[   42.619786][ T3690] =======================================================
[   42.623398][ T3683] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.726588][ T3688] netlink: 'syz.0.94': attribute type 10 has an invalid length.
[   42.741638][ T3688] team0: Device hsr_slave_0 failed to register rx_handler
[   42.749903][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.856499][ T3704] loop0: detected capacity change from 0 to 512
[   42.891818][ T3704] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   42.907367][ T3704] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   42.922953][ T3704] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   42.936880][ T3704] EXT4-fs (loop0): 1 truncate cleaned up
[   42.944308][ T3704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.959229][ T3709] loop2: detected capacity change from 0 to 2048
[   43.031008][ T3723] serio: Serial port ptm0
[   43.445526][ T3773] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   43.453909][ T3773] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   43.527794][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'.
[   43.551135][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.624099][ T3788] can0: slcan on ttyS3.
[   43.665303][ T3790] loop0: detected capacity change from 0 to 512
[   43.689148][ T3788] can0 (unregistered): slcan off ttyS3.
[   43.696762][ T3788] Falling back ldisc for ttyS3.
[   43.702390][ T3790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.741752][ T3790] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.766520][ T3810] bridge0: port 3(syz_tun) entered blocking state
[   43.773321][ T3810] bridge0: port 3(syz_tun) entered disabled state
[   43.779994][ T3810] syz_tun: entered allmulticast mode
[   43.782240][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #18: comm syz.0.123: corrupted inode contents
[   43.785821][ T3810] syz_tun: entered promiscuous mode
[   43.803252][ T3810] bridge0: port 3(syz_tun) entered blocking state
[   43.809757][ T3810] bridge0: port 3(syz_tun) entered forwarding state
[   43.851136][ T3790] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.123: mark_inode_dirty error
[   43.880121][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #18: comm syz.0.123: corrupted inode contents
[   43.893324][ T3790] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #18: comm syz.0.123: mark_inode_dirty error
[   43.907380][ T3790] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #18: comm syz.0.123: mark inode dirty (error -117)
[   43.923790][ T3790] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117)
[   43.974224][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.092563][   T29] kauditd_printk_skb: 371 callbacks suppressed
[   44.092584][   T29] audit: type=1326 audit(1731150301.227:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677600e719 code=0x7ffc0000
[   44.122486][ T3853] syz.1.142 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   44.156815][   T29] audit: type=1326 audit(1731150301.257:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f677600e719 code=0x7ffc0000
[   44.180572][   T29] audit: type=1400 audit(1731150301.267:490): avc:  denied  { unmount } for  pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   44.200744][   T29] audit: type=1326 audit(1731150301.277:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677600e719 code=0x7ffc0000
[   44.224093][   T29] audit: type=1326 audit(1731150301.277:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677600e719 code=0x7ffc0000
[   44.247402][   T29] audit: type=1404 audit(1731150301.277:493): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   44.262674][   T29] audit: type=1404 audit(1731150301.277:494): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   44.277752][   T29] audit: type=1326 audit(1731150301.287:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f677600e719 code=0x7ffc0000
[   44.301201][   T29] audit: type=1400 audit(1731150301.287:496): avc:  denied  { map_create } for  pid=3852 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   44.320326][   T29] audit: type=1400 audit(1731150301.287:497): avc:  denied  { perfmon } for  pid=3852 comm="syz.1.142" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   44.466663][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   44.487676][ T3878] geneve2: entered promiscuous mode
[   44.493026][ T3878] geneve2: entered allmulticast mode
[   44.527567][ T3885] Illegal XDP return value 4294967274 on prog  (id 128) dev N/A, expect packet loss!
[   44.674589][ T3906] loop0: detected capacity change from 0 to 512
[   44.682213][ T3906] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.689986][ T3911] loop1: detected capacity change from 0 to 512
[   44.690223][ T2348] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   44.698114][ T3911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   44.722314][ T3906] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm +}[@: corrupted in-inode xattr: invalid ea_ino
[   44.723160][ T3911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.737445][ T3906] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm +}[@: couldn't read orphan inode 15 (err -117)
[   44.748471][ T3911] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.770834][ T3906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.811349][ T3918] loop3: detected capacity change from 0 to 512
[   44.832247][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.833271][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.844936][ T3918] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.868620][ T3911] loop1: detected capacity change from 512 to 11
[   44.878741][ T3921] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory
[   44.896635][ T3923] loop0: detected capacity change from 0 to 2048
[   44.901358][ T3921] EXT4-fs (loop1): Remounting filesystem read-only
[   44.912894][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.923757][ T3923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.954785][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.992812][ T3319] bridge0: port 3(syz_tun) entered disabled state
[   45.009897][ T3319] syz_tun (unregistering): left allmulticast mode
[   45.016387][ T3319] syz_tun (unregistering): left promiscuous mode
[   45.022863][ T3319] bridge0: port 3(syz_tun) entered disabled state
[   45.150099][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.163417][   T84] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.175633][ T3913] kmmpd-loop1: attempt to access beyond end of device
[   45.175633][ T3913] loop1: rw=14337, sector=34, nr_sectors = 2 limit=11
[   45.189117][ T3913] Buffer I/O error on dev loop1, logical block 17, lost sync page write
[   45.232854][   T84] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.284664][   T84] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.349187][   T84] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.427748][   T84] bridge_slave_1: left allmulticast mode
[   45.433522][   T84] bridge_slave_1: left promiscuous mode
[   45.439295][   T84] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.464384][   T84] bridge_slave_0: left allmulticast mode
[   45.470116][   T84] bridge_slave_0: left promiscuous mode
[   45.475813][   T84] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.494849][ T3952] random: crng reseeded on system resumption
[   45.772101][   T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.788546][   T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.799505][   T84] bond0 (unregistering): Released all slaves
[   45.843374][   T84] hsr_slave_0: left promiscuous mode
[   45.871218][   T84] hsr_slave_1: left promiscuous mode
[   45.894541][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.902177][   T84] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.911273][ T3966] loop0: detected capacity change from 0 to 1024
[   45.928453][ T3966] ext4: Unknown parameter 'mask'
[   45.954132][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.961752][   T84] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.005557][   T84] veth1_macvtap: left promiscuous mode
[   46.011403][   T84] veth0_macvtap: left promiscuous mode
[   46.016940][   T84] veth1_vlan: left promiscuous mode
[   46.022347][   T84] veth0_vlan: left promiscuous mode
[   46.042997][ T3979] loop4: detected capacity change from 0 to 512
[   46.058052][ T3979] EXT4-fs (loop4): corrupt root inode, run e2fsck
[   46.066902][ T3979] EXT4-fs (loop4): mount failed
[   46.309473][   T84] team0 (unregistering): Port device team_slave_1 removed
[   46.350066][   T84] team0 (unregistering): Port device team_slave_0 removed
[   46.523145][ T3937] chnl_net:caif_netlink_parms(): no params data found
[   46.530906][ T4002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   46.559951][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'.
[   46.569030][ T4003] netlink: 'syz.0.193': attribute type 10 has an invalid length.
[   46.593172][ T4003] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   46.667017][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.674382][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.688936][ T3937] bridge_slave_0: entered allmulticast mode
[   46.695572][ T3937] bridge_slave_0: entered promiscuous mode
[   46.702627][ T3937] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.709961][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.718295][ T3937] bridge_slave_1: entered allmulticast mode
[   46.725533][ T3937] bridge_slave_1: entered promiscuous mode
[   46.741364][ T4025] mmap: syz.3.199 (4025) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   46.776838][ T3937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.794081][ T3937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.842748][ T4027] loop0: detected capacity change from 0 to 512
[   46.868648][ T4027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   46.879329][ T3937] team0: Port device team_slave_0 added
[   46.887286][ T3937] team0: Port device team_slave_1 added
[   46.897670][ T4027] EXT4-fs (loop0): 1 truncate cleaned up
[   46.903973][ T4027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.922698][ T4041] netlink: 92 bytes leftover after parsing attributes in process `syz.2.203'.
[   46.933223][ T4027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.980032][ T3937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.987197][ T3937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.013350][ T3937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.027336][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.054637][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.088101][ T3937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.095216][ T3937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.122045][ T3937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.161435][ T3937] hsr_slave_0: entered promiscuous mode
[   47.167752][ T3937] hsr_slave_1: entered promiscuous mode
[   47.184151][ T3399] kernel write not supported for file /sg0 (pid: 3399 comm: kworker/1:5)
[   47.192820][ T3937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.206966][ T3937] Cannot create hsr debugfs directory
[   47.267917][ T4080] xt_hashlimit: max too large, truncated to 1048576
[   47.349366][ T3937] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   47.358462][ T3937] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   47.367292][ T3937] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   47.377124][ T3937] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   47.410257][ T3937] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.417416][ T3937] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.424905][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.432023][ T3937] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.453278][ T2245] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.461501][ T2245] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.517911][ T3937] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.534443][ T3937] 8021q: adding VLAN 0 to HW filter on device team0
[   47.542384][ T4105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   47.549663][ T4105] IPv6: NLM_F_CREATE should be set when creating new route
[   47.562516][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.569658][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.582930][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.590056][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.614330][ T4109] loop4: detected capacity change from 0 to 512
[   47.625911][ T4109] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   47.719437][ T4123] syz.0.224[4123] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.719515][ T4123] syz.0.224[4123] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.754441][ T4123] syz.0.224[4123] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.775651][ T3937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.915077][ T4154] loop3: detected capacity change from 0 to 512
[   47.929761][ T4154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.969067][ T4154] EXT4-fs (loop3): orphan cleanup on readonly fs
[   47.987247][ T4154] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.231: bg 0: block 248: padding at end of block bitmap is not set
[   47.989435][ T4167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'.
[   48.024294][ T4154] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.231: Failed to acquire dquot type 1
[   48.044313][ T4154] EXT4-fs (loop3): 1 truncate cleaned up
[   48.077975][ T4154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.098885][ T4154] syz.3.231 (4154) used greatest stack depth: 9344 bytes left
[   48.115236][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.127991][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.235'.
[   48.161327][ T3937] veth0_vlan: entered promiscuous mode
[   48.190081][ T3937] veth1_vlan: entered promiscuous mode
[   48.231178][ T3937] veth0_macvtap: entered promiscuous mode
[   48.244430][ T3937] veth1_macvtap: entered promiscuous mode
[   48.269552][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.280314][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.290221][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.300744][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.310680][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.321211][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.331153][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.341693][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.352369][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.362667][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.373251][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.383365][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.393903][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.403988][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.414438][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.424271][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.434789][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.457026][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.478372][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   48.487375][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   48.496419][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   48.505337][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   48.535087][ T4196] geneve2: entered promiscuous mode
[   48.540410][ T4196] geneve2: entered allmulticast mode
[   48.552244][ T3937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.561041][ T3937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.569910][ T3937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.578658][ T3937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.867064][ T4242] loop4: detected capacity change from 0 to 164
[   48.884869][ T4247] pim6reg1: entered promiscuous mode
[   48.890502][ T4247] pim6reg1: entered allmulticast mode
[   48.905787][ T4253] netlink: 332 bytes leftover after parsing attributes in process `syz.5.256'.
[   48.919748][ T4242] Unable to read rock-ridge attributes
[   48.958459][ T4242] Unable to read rock-ridge attributes
[   49.034904][ T4268] loop4: detected capacity change from 0 to 512
[   49.063629][ T4274] loop2: detected capacity change from 0 to 128
[   49.071483][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.084420][ T4268] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.099901][ T4274] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.124180][   T29] kauditd_printk_skb: 209 callbacks suppressed
[   49.124273][   T29] audit: type=1400 audit(1731150306.257:705): avc:  denied  { setattr } for  pid=4267 comm="syz.4.261" path="/63/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.159432][ T4274] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   49.198595][   T29] audit: type=1400 audit(1731150306.297:706): avc:  denied  { associate } for  pid=4280 comm="syz.3.263" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   49.261100][ T4268] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.261: corrupted inode contents
[   49.262535][   T29] audit: type=1400 audit(1731150306.397:707): avc:  denied  { create } for  pid=4285 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   49.280641][ T4288] syz.5.266[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.294426][ T4268] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.261: mark_inode_dirty error
[   49.301623][ T4288] syz.5.266[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.310164][ T4268] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.261: corrupted inode contents
[   49.319077][ T4288] syz.5.266[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.328955][ T4286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.265'.
[   49.364094][   T29] audit: type=1400 audit(1731150306.467:708): avc:  denied  { write } for  pid=4285 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   49.384232][   T29] audit: type=1400 audit(1731150306.467:709): avc:  denied  { nlmsg_write } for  pid=4285 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   49.406275][ T4268] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.261: mark_inode_dirty error
[   49.420741][ T4268] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.261: mark inode dirty (error -117)
[   49.435423][   T29] audit: type=1400 audit(1731150306.577:710): avc:  denied  { map } for  pid=4292 comm="syz.5.267" path="socket:[6852]" dev="sockfs" ino=6852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   49.448067][ T4293] loop5: detected capacity change from 0 to 2048
[   49.458828][   T29] audit: type=1400 audit(1731150306.577:711): avc:  denied  { read } for  pid=4292 comm="syz.5.267" path="socket:[6852]" dev="sockfs" ino=6852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   49.490125][ T4268] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[   49.500653][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   49.517854][   T29] audit: type=1400 audit(1731150306.657:712): avc:  denied  { create } for  pid=4294 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   49.537287][   T29] audit: type=1400 audit(1731150306.657:713): avc:  denied  { write } for  pid=4294 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   49.568553][   T29] audit: type=1400 audit(1731150306.697:714): avc:  denied  { watch watch_reads } for  pid=4297 comm="syz.0.270" path="/51" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   49.596307][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.631274][ T4293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.690961][ T3937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.780075][ T4322] capability: warning: `syz.0.280' uses deprecated v2 capabilities in a way that may be insecure
[   49.844078][ T4329] xt_hashlimit: size too large, truncated to 1048576
[   49.903951][ T4337] loop5: detected capacity change from 0 to 1024
[   49.927907][ T4337] EXT4-fs (loop5): bad geometry: block count 33554432 exceeds size of device (512 blocks)
[   50.004794][ T4345] loop5: detected capacity change from 0 to 512
[   50.028072][ T4345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   50.061538][ T4345] EXT4-fs (loop5): orphan cleanup on readonly fs
[   50.088034][ T4345] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.289: bg 0: block 248: padding at end of block bitmap is not set
[   50.107494][ T4345] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.289: Failed to acquire dquot type 1
[   50.182807][ T4345] EXT4-fs (loop5): 1 truncate cleaned up
[   50.206664][ T4345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.247896][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'.
[   50.291419][ T3937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.620284][ T4413] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   50.756102][ T4429] netlink: 'syz.5.325': attribute type 10 has an invalid length.
[   50.764444][ T4429] geneve1: entered promiscuous mode
[   50.774404][ T4429] bond0: (slave geneve1): Enslaving as an active interface with an up link
[   50.857561][ T4439] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   50.857561][ T4439]    program syz.5.330 not setting count and/or reply_len properly
[   51.037829][ T4459] netlink: 'syz.5.339': attribute type 9 has an invalid length.
[   51.049105][ T4459] bond0: entered promiscuous mode
[   51.054301][ T4459] bond_slave_0: entered promiscuous mode
[   51.060081][ T4459] bond_slave_1: entered promiscuous mode
[   51.066362][ T4459] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   51.075598][ T4459] bond0: left promiscuous mode
[   51.080554][ T4459] bond_slave_0: left promiscuous mode
[   51.086185][ T4459] bond_slave_1: left promiscuous mode
[   51.169281][ T4469] IPv6: NLM_F_CREATE should be specified when creating new route
[   51.182931][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'.
[   51.195725][ T4472] bridge0: port 3(macvlan2) entered blocking state
[   51.202362][ T4472] bridge0: port 3(macvlan2) entered disabled state
[   51.210387][ T4472] macvlan2: entered allmulticast mode
[   51.215919][ T4472] bridge0: entered allmulticast mode
[   51.222528][ T4472] macvlan2: left allmulticast mode
[   51.227754][ T4472] bridge0: left allmulticast mode
[   51.326166][ T4483] loop4: detected capacity change from 0 to 1024
[   51.338907][ T4483] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.389081][ T4483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.413553][ T4501] block device autoloading is deprecated and will be removed.
[   51.490380][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.524490][ T4507] loop0: detected capacity change from 0 to 8192
[   51.549797][ T4507] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.052733][ T4570] geneve0: entered allmulticast mode
[   52.197887][ T4581] netlink: 'syz.2.397': attribute type 10 has an invalid length.
[   52.212248][ T4581] 8021q: adding VLAN 0 to HW filter on device team0
[   52.223565][ T4581] bond0: (slave team0): Enslaving as an active interface with an up link
[   52.285757][ T4596] loop4: detected capacity change from 0 to 512
[   52.296111][ T4596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.307329][ T4596] EXT4-fs (loop4): 1 truncate cleaned up
[   52.313648][ T4596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.360176][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.521012][ T4627] loop4: detected capacity change from 0 to 512
[   52.537018][ T4627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.571494][ T4632] program syz.2.418 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.571560][ T4627] EXT4-fs (loop4): 1 truncate cleaned up
[   52.571888][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.653378][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'.
[   52.689706][ T4647] loop0: detected capacity change from 0 to 256
[   52.734948][ T4647] FAT-fs (loop0): Directory bread(block 64) failed
[   52.744530][ T4649] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.756503][ T4647] FAT-fs (loop0): Directory bread(block 65) failed
[   52.764385][ T4647] FAT-fs (loop0): Directory bread(block 66) failed
[   52.781596][ T4647] FAT-fs (loop0): Directory bread(block 67) failed
[   52.800207][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.805741][ T4647] FAT-fs (loop0): Directory bread(block 68) failed
[   52.817061][ T4647] FAT-fs (loop0): Directory bread(block 69) failed
[   52.827663][ T4647] FAT-fs (loop0): Directory bread(block 70) failed
[   52.834735][ T4647] FAT-fs (loop0): Directory bread(block 71) failed
[   52.842521][ T4647] FAT-fs (loop0): Directory bread(block 72) failed
[   52.854790][ T4647] FAT-fs (loop0): Directory bread(block 73) failed
[   52.945651][ T3325] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   52.953320][ T3325] FAT-fs (loop0): Filesystem has been set read-only
[   53.120090][ T4663] cgroup: fork rejected by pids controller in /syz2
[   53.205428][ T4722] SELinux:  Context :yz1 is not valid (left unmapped).
[   53.224168][ T2128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.252467][ T4725] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   53.282105][ T2128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.331651][ T2128] bond0: (slave netdevsim1): Releasing backup interface
[   53.341144][ T2128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.396326][ T2128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.470661][ T4744] program syz.4.451 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.472524][ T4727] chnl_net:caif_netlink_parms(): no params data found
[   53.515032][ T2128] bridge_slave_1: left allmulticast mode
[   53.521827][ T2128] bridge_slave_1: left promiscuous mode
[   53.527598][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.539185][ T2128] bridge_slave_0: left allmulticast mode
[   53.544885][ T2128] bridge_slave_0: left promiscuous mode
[   53.550753][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.661681][ T4755] loop5: detected capacity change from 0 to 128
[   53.711381][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.727197][ T4761] loop5: detected capacity change from 0 to 512
[   53.735619][ T4761] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   53.735968][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.763922][ T4761] EXT4-fs (loop5): 1 truncate cleaned up
[   53.767713][ T2128] bond0 (unregistering): Released all slaves
[   53.770249][ T4761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.812011][ T3937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.860968][ T2128] hsr_slave_0: left promiscuous mode
[   53.888441][ T2128] hsr_slave_1: left promiscuous mode
[   53.895628][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.903123][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.910811][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.918251][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.927300][ T2128] veth1_macvtap: left promiscuous mode
[   53.933085][ T2128] veth0_macvtap: left promiscuous mode
[   53.938638][ T2128] veth1_vlan: left promiscuous mode
[   53.943901][ T2128] veth0_vlan: left promiscuous mode
[   54.007569][ T4779] loop5: detected capacity change from 0 to 128
[   54.114231][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4
[   54.122188][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2
[   54.143575][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.143702][ T2128] team0 (unregistering): Port device team_slave_1 removed
[   54.151484][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.168280][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.176371][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.184205][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.192036][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.199886][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.207578][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.215554][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.223479][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.231753][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.239488][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.247249][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.255138][ T3395] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   54.263582][ T2128] team0 (unregistering): Port device team_slave_0 removed
[   54.279831][   T29] kauditd_printk_skb: 271 callbacks suppressed
[   54.279847][   T29] audit: type=1400 audit(1731150311.417:984): avc:  denied  { connect } for  pid=4768 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   54.313811][   T29] audit: type=1400 audit(1731150311.417:985): avc:  denied  { create } for  pid=4793 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   54.330426][ T3395] hid-generic 0000:3000000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   54.333343][   T29] audit: type=1400 audit(1731150311.417:986): avc:  denied  { bind } for  pid=4793 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   54.362688][   T29] audit: type=1400 audit(1731150311.417:987): avc:  denied  { name_bind } for  pid=4793 comm="syz.2.471" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   54.383323][   T29] audit: type=1400 audit(1731150311.417:988): avc:  denied  { node_bind } for  pid=4793 comm="syz.2.471" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   54.429092][ T4799] syz.4.473[4799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.429364][ T4799] syz.4.473[4799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.441943][ T4799] syz.4.473[4799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.453853][   T29] audit: type=1326 audit(1731150311.577:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   54.496108][   T29] audit: type=1326 audit(1731150311.577:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   54.520092][   T29] audit: type=1326 audit(1731150311.577:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   54.543474][   T29] audit: type=1326 audit(1731150311.587:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   54.567648][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.574860][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.582239][ T4727] bridge_slave_0: entered allmulticast mode
[   54.588917][ T4727] bridge_slave_0: entered promiscuous mode
[   54.600300][ T4805] loop5: detected capacity change from 0 to 512
[   54.613279][ T4805] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.476: bg 0: block 248: padding at end of block bitmap is not set
[   54.618638][ T4790] syzkaller0: entered promiscuous mode
[   54.633049][ T4790] syzkaller0: entered allmulticast mode
[   54.639414][ T4805] Quota error (device loop5): write_blk: dquota write failed
[   54.646898][ T4805] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.476: Failed to acquire dquot type 1
[   54.650616][ T4799] loop4: detected capacity change from 0 to 1024
[   54.672189][ T4805] EXT4-fs (loop5): 1 truncate cleaned up
[   54.678348][ T4805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.678797][ T4799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.691026][ T4805] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.722074][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.729407][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.736691][ T4727] bridge_slave_1: entered allmulticast mode
[   54.743157][ T4727] bridge_slave_1: entered promiscuous mode
[   54.760483][ T3937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.773012][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.784342][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.784992][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.813570][ T4727] team0: Port device team_slave_0 added
[   54.840708][ T4727] team0: Port device team_slave_1 added
[   54.908573][ T4820] loop3: detected capacity change from 0 to 512
[   54.921533][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.928714][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.955042][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.971598][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.978914][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.010073][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.043069][ T4820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.062899][ T4820] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.090881][ T4727] hsr_slave_0: entered promiscuous mode
[   55.099937][ T4727] hsr_slave_1: entered promiscuous mode
[   55.122830][ T4727] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.143480][ T4727] Cannot create hsr debugfs directory
[   55.179601][ T4820] loop3: detected capacity change from 512 to 0
[   55.200897][ T4848] syz.3.482: attempt to access beyond end of device
[   55.200897][ T4848] loop3: rw=12288, sector=148, nr_sectors = 4 limit=0
[   55.238470][ T3326] syz-executor: attempt to access beyond end of device
[   55.238470][ T3326] loop3: rw=12288, sector=12, nr_sectors = 4 limit=0
[   55.262181][ T3326] syz-executor: attempt to access beyond end of device
[   55.262181][ T3326] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0
[   55.267181][ T4850] loop5: detected capacity change from 0 to 1024
[   55.276583][ T3326] syz-executor: attempt to access beyond end of device
[   55.276583][ T3326] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0
[   55.290420][ T4850] EXT4-fs: Ignoring removed orlov option
[   55.301984][ T4850] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.314742][ T3326] syz-executor: attempt to access beyond end of device
[   55.314742][ T3326] loop3: rw=12288, sector=136, nr_sectors = 4 limit=0
[   55.314889][ T4853] bridge0: port 3(vlan2) entered blocking state
[   55.329730][ T3326] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #2: block 34: comm syz-executor: unable to read itable block
[   55.334605][ T4853] bridge0: port 3(vlan2) entered disabled state
[   55.353791][ T3326] syz-executor: attempt to access beyond end of device
[   55.353791][ T3326] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0
[   55.353830][ T3326] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.353848][ T3326] EXT4-fs (loop3): I/O error while writing superblock
[   55.369585][ T4853] vlan2: entered allmulticast mode
[   55.375638][ T3326] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure
[   55.396421][ T3326] syz-executor: attempt to access beyond end of device
[   55.396421][ T3326] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0
[   55.396520][ T4853] vlan2: left allmulticast mode
[   55.410201][ T3326] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.418794][ T4850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.424247][ T3326] EXT4-fs (loop3): I/O error while writing superblock
[   55.446139][ T3326] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error
[   55.458088][ T3326] syz-executor: attempt to access beyond end of device
[   55.458088][ T3326] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0
[   55.471604][ T3326] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.489727][ T3326] EXT4-fs (loop3): I/O error while writing superblock
[   55.495471][ T4727] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   55.503821][ T3937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.513359][   T36] kworker/u8:2: attempt to access beyond end of device
[   55.513359][   T36] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0
[   55.515427][ T4727] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   55.536681][ T4727] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   55.547629][   T36] kworker/u8:2: attempt to access beyond end of device
[   55.547629][   T36] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0
[   55.564497][   T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #15: block 34: comm kworker/u8:2: unable to read itable block
[   55.579090][   T36] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.587570][ T4727] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   55.594536][   T36] EXT4-fs (loop3): I/O error while writing superblock
[   55.601567][   T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #18: block 35: comm kworker/u8:2: unable to read itable block
[   55.631949][   T36] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.659133][   T36] EXT4-fs (loop3): I/O error while writing superblock
[   55.666071][   T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #19: block 35: comm kworker/u8:2: unable to read itable block
[   55.684179][   T36] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.694680][   T36] EXT4-fs (loop3): I/O error while writing superblock
[   55.699560][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.701741][   T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #2: block 34: comm kworker/u8:2: unable to read itable block
[   55.726374][ T4727] 8021q: adding VLAN 0 to HW filter on device team0
[   55.739559][   T36] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.739762][ T2348] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.747973][   T36] EXT4-fs (loop3): I/O error while writing superblock
[   55.755017][ T2348] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.779268][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.797833][ T4727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.808579][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.823038][ T3326] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   55.824089][ T2348] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.831979][ T3326] EXT4-fs (loop3): I/O error while writing superblock
[   55.838949][ T2348] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.854184][ T4829] Buffer I/O error on dev loop3, logical block 12, lost sync page write
[   55.928743][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.016769][ T4891] vlan2: entered allmulticast mode
[   56.028340][ T4896] rdma_op ffff88811e977180 conn xmit_rdma 0000000000000000
[   56.211081][ T4727] veth0_vlan: entered promiscuous mode
[   56.227578][ T4727] veth1_vlan: entered promiscuous mode
[   56.250872][ T4727] veth0_macvtap: entered promiscuous mode
[   56.275271][ T4727] veth1_macvtap: entered promiscuous mode
[   56.296653][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.311570][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.322851][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.333805][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.344053][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.355346][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.366733][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.379496][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.432468][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.451399][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.461940][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.471937][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.482702][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.492708][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.503252][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.513265][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.523904][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.534997][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.545674][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'.
[   56.572596][ T4727] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.581505][ T4727] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.590394][ T4727] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.599158][ T4727] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.730006][ T4913] chnl_net:caif_netlink_parms(): no params data found
[   56.811179][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.818450][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.826001][ T4913] bridge_slave_0: entered allmulticast mode
[   56.832623][ T4913] bridge_slave_0: entered promiscuous mode
[   56.844224][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.851436][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.858998][ T4913] bridge_slave_1: entered allmulticast mode
[   56.865689][ T4913] bridge_slave_1: entered promiscuous mode
[   56.886112][ T4913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.897251][ T4913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.934009][ T4913] team0: Port device team_slave_0 added
[   56.951318][ T4913] team0: Port device team_slave_1 added
[   56.992345][ T4913] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.999718][ T4913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.025802][ T4913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.045444][ T4913] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.052519][ T4913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.078563][ T4913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.114226][ T4913] hsr_slave_0: entered promiscuous mode
[   57.120985][ T4913] hsr_slave_1: entered promiscuous mode
[   57.126974][ T4913] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.136281][ T4913] Cannot create hsr debugfs directory
[   57.342503][ T5017] syzkaller0: entered promiscuous mode
[   57.348108][ T5017] syzkaller0: entered allmulticast mode
[   57.400705][ T4913] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   57.421751][ T4913] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   57.450289][ T4913] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   57.481085][ T4913] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   57.593640][ T4913] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.653691][ T4913] 8021q: adding VLAN 0 to HW filter on device team0
[   57.692944][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.700448][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.712736][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'.
[   57.741181][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.750105][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.781942][ T4913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.793370][ T4913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.905705][ T4913] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.194747][ T4913] veth0_vlan: entered promiscuous mode
[   58.217936][ T4913] veth1_vlan: entered promiscuous mode
[   58.242292][ T4913] veth0_macvtap: entered promiscuous mode
[   58.260724][ T4913] veth1_macvtap: entered promiscuous mode
[   58.283346][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.295026][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.305710][ T5095] loop5: detected capacity change from 0 to 1024
[   58.305850][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.325210][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.337618][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.352876][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.364032][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.374600][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.384471][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.395130][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.406497][ T4913] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.418830][ T5095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.437144][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.447747][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.457658][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.468157][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.478024][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.488687][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.498968][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.509823][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.520053][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.530820][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.541798][ T5095] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   58.543734][ T4913] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.560992][ T4913] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.569902][ T4913] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.578682][ T4913] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.587867][ T4913] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.613038][ T3937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.751982][ T5119] loop7: detected capacity change from 0 to 512
[   58.771568][ T5119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.784398][ T5119] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.798265][ T5119] Process accounting resumed
[   58.804813][ T5119] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   58.852119][ T4913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.884869][ T5130] capability: warning: `syz.4.598' uses 32-bit capabilities (legacy support in use)
[   58.947240][ T5131] loop7: detected capacity change from 0 to 128
[   59.060523][ T5145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.605'.
[   59.142310][ T5157] loop6: detected capacity change from 0 to 512
[   59.154715][ T5155] bond_slave_0: entered promiscuous mode
[   59.156823][ T5157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.161937][ T5155] bond_slave_1: entered promiscuous mode
[   59.180852][ T5155] bond_slave_0: left promiscuous mode
[   59.186364][ T5155] bond_slave_1: left promiscuous mode
[   59.197050][ T4727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.239914][ T5163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.247369][ T5163] IPv6: NLM_F_CREATE should be set when creating new route
[   59.331238][ T5171] netem: incorrect ge model size
[   59.336272][ T5171] netem: change failed
[   59.377122][ T5173] netlink: 92 bytes leftover after parsing attributes in process `syz.4.618'.
[   59.490614][   T29] kauditd_printk_skb: 233 callbacks suppressed
[   59.490632][   T29] audit: type=1326 audit(1731150316.627:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   59.526271][ T5184] loop5: detected capacity change from 0 to 512
[   59.534068][   T29] audit: type=1326 audit(1731150316.657:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   59.559717][   T29] audit: type=1326 audit(1731150316.657:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb393e5e753 code=0x7ffc0000
[   59.583036][   T29] audit: type=1326 audit(1731150316.657:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb393e5d1ff code=0x7ffc0000
[   59.606264][   T29] audit: type=1326 audit(1731150316.657:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb393e5e7a7 code=0x7ffc0000
[   59.629613][   T29] audit: type=1326 audit(1731150316.657:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb393e5d0b0 code=0x7ffc0000
[   59.653417][   T29] audit: type=1326 audit(1731150316.657:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb393e5e31b code=0x7ffc0000
[   59.676785][   T29] audit: type=1326 audit(1731150316.667:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb393e5d3aa code=0x7ffc0000
[   59.701126][   T29] audit: type=1326 audit(1731150316.667:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb393e5d3aa code=0x7ffc0000
[   59.710942][ T5184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.728123][   T29] audit: type=1326 audit(1731150316.667:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb393e5cfb7 code=0x7ffc0000
[   59.770413][ T5184] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.805429][ T3937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.018602][ T5203] loop5: detected capacity change from 0 to 128
[   60.064133][ T5207] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   60.081752][ T5209] syz.5.632[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.081834][ T5209] syz.5.632[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.101274][ T5209] syz.5.632[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.184341][ T5223] netlink: 16 bytes leftover after parsing attributes in process `syz.7.640'.
[   60.225558][ T5228] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   60.263288][ T5230] loop7: detected capacity change from 0 to 256
[   60.275539][ T5230] FAT-fs (loop7): bogus number of FAT sectors
[   60.281980][ T5230] FAT-fs (loop7): Can't find a valid FAT filesystem
[   60.342524][ T5241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.359090][ T5241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.397082][ T5247] loop7: detected capacity change from 0 to 512
[   60.423494][ T5247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.439679][ T5247] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.451310][ T5253] loop6: detected capacity change from 0 to 512
[   60.473138][ T4913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.482884][ T5253] EXT4-fs (loop6): orphan cleanup on readonly fs
[   60.490836][ T5253] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.651: bg 0: block 248: padding at end of block bitmap is not set
[   60.512402][ T5253] EXT4-fs error (device loop6): ext4_acquire_dquot:6879: comm syz.6.651: Failed to acquire dquot type 1
[   60.539424][ T5253] EXT4-fs (loop6): 1 truncate cleaned up
[   60.553376][ T5253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   60.577191][ T5260] netlink: 3 bytes leftover after parsing attributes in process `syz.7.654'.
[   60.588038][ T5260] 0ªX¹¦À: renamed from caif0
[   60.588196][ T4727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.611482][ T5263] syz.6.655[5263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.611553][ T5263] syz.6.655[5263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.623220][ T5263] syz.6.655[5263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.645702][ T5260] 0ªX¹¦À: entered allmulticast mode
[   60.651134][ T5260] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   60.993844][ T5305] loop7: detected capacity change from 0 to 128
[   61.010927][ T5305] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   61.036823][ T5305] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   61.072785][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.076362][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.080534][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.080585][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.080674][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.092737][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.098351][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.129422][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.137161][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.145826][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.153542][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.164741][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.174507][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.187295][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.194896][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.202361][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.210005][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.217438][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.225013][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.232513][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.240029][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.247743][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.255248][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.262787][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.270372][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.278126][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.285765][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.293448][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.301001][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.308561][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.316547][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.323999][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.331551][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.339088][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.347390][ T3395] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   61.396546][  T166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.407201][  T166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   61.439629][    C0] hrtimer: interrupt took 31601 ns
[   61.468917][  T166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.479694][  T166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   61.543108][  T166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.553953][  T166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   61.613256][  T166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.623709][  T166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   61.674577][  T166] bridge_slave_1: left allmulticast mode
[   61.680993][  T166] bridge_slave_1: left promiscuous mode
[   61.686753][  T166] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.716022][  T166] bridge_slave_0: left allmulticast mode
[   61.725865][  T166] bridge_slave_0: left promiscuous mode
[   61.732920][  T166] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.875765][ T4913] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   61.913558][  T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.939124][ T5376] loop7: detected capacity change from 0 to 128
[   61.950643][  T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.972067][ T5376] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   61.973910][  T166] bond0 (unregistering): Released all slaves
[   62.003231][ T5373] pim6reg1: entered promiscuous mode
[   62.009010][ T5373] pim6reg1: entered allmulticast mode
[   62.051843][  T166] hsr_slave_0: left promiscuous mode
[   62.062744][  T166] hsr_slave_1: left promiscuous mode
[   62.068798][  T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.076228][  T166] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.088414][  T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.095932][  T166] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.117211][  T166] veth1_macvtap: left promiscuous mode
[   62.122958][  T166] veth0_macvtap: left promiscuous mode
[   62.128573][  T166] veth1_vlan: left promiscuous mode
[   62.133995][  T166] veth0_vlan: left promiscuous mode
[   62.268437][  T166] team0 (unregistering): Port device team_slave_1 removed
[   62.279441][  T166] team0 (unregistering): Port device team_slave_0 removed
[   62.406698][    T8] IPVS: starting estimator thread 0...
[   62.518591][ T5402] IPVS: using max 2016 ests per chain, 100800 per kthread
[   62.723151][  T166] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.822231][  T166] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.859945][ T5439] syz.2.717[5439] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   62.860077][ T5439] syz.2.717[5439] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   62.871662][ T5439] syz.2.717[5439] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   62.886564][  T166] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.945958][ T5419] chnl_net:caif_netlink_parms(): no params data found
[   62.963336][  T166] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.997114][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.004356][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.011754][ T5419] bridge_slave_0: entered allmulticast mode
[   63.018163][ T5419] bridge_slave_0: entered promiscuous mode
[   63.026697][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.033915][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.042271][ T5419] bridge_slave_1: entered allmulticast mode
[   63.049514][ T5419] bridge_slave_1: entered promiscuous mode
[   63.074871][ T5419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.100995][ T5419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.126665][  T166] bridge_slave_1: left allmulticast mode
[   63.132437][  T166] bridge_slave_1: left promiscuous mode
[   63.138692][  T166] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.147159][  T166] bridge_slave_0: left allmulticast mode
[   63.152968][  T166] bridge_slave_0: left promiscuous mode
[   63.159017][  T166] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.261768][  T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.273064][  T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.287674][  T166] bond0 (unregistering): Released all slaves
[   63.313529][ T5419] team0: Port device team_slave_0 added
[   63.321831][ T5419] team0: Port device team_slave_1 added
[   63.339333][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.346317][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.374006][ T5419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.386641][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.393667][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.419955][ T5419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.446906][  T166] hsr_slave_0: left promiscuous mode
[   63.453207][  T166] hsr_slave_1: left promiscuous mode
[   63.458966][  T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.466611][  T166] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.474499][  T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.482081][  T166] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.492137][  T166] veth1_macvtap: left promiscuous mode
[   63.497707][  T166] veth0_macvtap: left promiscuous mode
[   63.503573][  T166] veth1_vlan: left promiscuous mode
[   63.509017][  T166] veth0_vlan: left promiscuous mode
[   63.574287][ T5464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.724'.
[   63.636344][  T166] team0 (unregistering): Port device team_slave_1 removed
[   63.647479][ T5472] loop5: detected capacity change from 0 to 512
[   63.647598][  T166] team0 (unregistering): Port device team_slave_0 removed
[   63.665457][ T5472] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   63.674305][ T5472] EXT4-fs (loop5): orphan cleanup on readonly fs
[   63.680756][ T5472] EXT4-fs error (device loop5): ext4_quota_enable:7049: comm syz.5.726: Bad quota inum: 1, type: 1
[   63.692369][ T5472] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix.
[   63.708277][ T5472] EXT4-fs (loop5): Cannot turn on quotas: error -117
[   63.738321][ T5472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.726'.
[   63.747304][ T5472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.754743][ T5472] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.764212][ T5472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.771811][ T5472] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.812483][ T5419] hsr_slave_0: entered promiscuous mode
[   63.822248][ T5419] hsr_slave_1: entered promiscuous mode
[   63.830364][ T5419] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.838086][ T5419] Cannot create hsr debugfs directory
[   63.986513][ T5494] pim6reg: entered allmulticast mode
[   63.996152][ T5494] pim6reg: left allmulticast mode
[   64.009796][ T5448] chnl_net:caif_netlink_parms(): no params data found
[   64.078101][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.085338][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.093616][ T5448] bridge_slave_0: entered allmulticast mode
[   64.100506][ T5448] bridge_slave_0: entered promiscuous mode
[   64.107775][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.114907][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.122260][ T5448] bridge_slave_1: entered allmulticast mode
[   64.129044][ T5448] bridge_slave_1: entered promiscuous mode
[   64.152586][ T5448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.172299][ T5448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.182439][ T5419] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   64.215176][ T5419] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   64.228191][ T5419] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   64.237933][ T5512] serio: Serial port ptm0
[   64.245445][ T5448] team0: Port device team_slave_0 added
[   64.252327][ T5448] team0: Port device team_slave_1 added
[   64.258352][ T5419] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   64.289918][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.296925][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.323181][ T5448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.342963][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.350027][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.376089][ T5448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.455352][ T5448] hsr_slave_0: entered promiscuous mode
[   64.467551][ T5448] hsr_slave_1: entered promiscuous mode
[   64.481730][ T5448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.497398][ T5448] Cannot create hsr debugfs directory
[   64.537906][ T5419] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.567623][ T5419] 8021q: adding VLAN 0 to HW filter on device team0
[   64.594915][   T29] kauditd_printk_skb: 151 callbacks suppressed
[   64.594934][   T29] audit: type=1326 audit(1731150321.727:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.627226][   T29] audit: type=1326 audit(1731150321.727:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.653614][   T29] audit: type=1326 audit(1731150321.747:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.688367][   T29] audit: type=1326 audit(1731150321.747:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.711839][   T29] audit: type=1326 audit(1731150321.747:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.735489][   T29] audit: type=1326 audit(1731150321.747:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.759205][   T29] audit: type=1326 audit(1731150321.747:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.783339][   T29] audit: type=1326 audit(1731150321.747:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.807240][   T29] audit: type=1326 audit(1731150321.767:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.830665][   T29] audit: type=1326 audit(1731150321.767:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb393e5e719 code=0x7ffc0000
[   64.856756][ T2348] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.864455][ T2348] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.904357][ T2348] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.911808][ T2348] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.955300][ T5419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.965882][ T5419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.030433][ T5448] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   65.049385][ T5448] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   65.061359][ T5419] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.069527][ T5448] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   65.097297][ T5448] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   65.142702][ T5571] loop6: detected capacity change from 0 to 512
[   65.160985][ T5573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.765'.
[   65.179858][ T5573] bridge0: port 3(vlan2) entered blocking state
[   65.186212][ T5573] bridge0: port 3(vlan2) entered disabled state
[   65.192857][ T5573] vlan2: entered allmulticast mode
[   65.201881][ T5573] vlan2: left allmulticast mode
[   65.232742][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.259122][ T5448] 8021q: adding VLAN 0 to HW filter on device team0
[   65.297842][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.304975][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.322561][ T5571] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.346157][ T5448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.356767][ T5448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.373699][  T166] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.380958][  T166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.524310][ T5419] veth0_vlan: entered promiscuous mode
[   65.539778][ T2245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.562637][ T5419] veth1_vlan: entered promiscuous mode
[   65.601781][ T5448] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.628235][ T5419] veth0_macvtap: entered promiscuous mode
[   65.637643][ T5419] veth1_macvtap: entered promiscuous mode
[   65.720140][ T5603] loop5: detected capacity change from 0 to 512
[   65.734017][ T2245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.755243][ T5603] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.802223][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.812939][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.823161][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.833642][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.843583][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.854163][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.869554][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.907893][ T2245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.945244][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.955915][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.965909][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.976627][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.986568][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.997171][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.008944][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.029404][ T2245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.049319][ T5624] loop6: detected capacity change from 0 to 1024
[   66.059181][ T5419] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.071434][ T5419] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.081735][ T5419] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.082621][ T5624] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[   66.091009][ T5419] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.110395][ T5624] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (31507!=20869)
[   66.120488][ T5624] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   66.130683][ T5624] EXT4-fs error (device loop6): ext4_get_journal_inode:5762: inode #17: comm syz.6.776: iget: bad extended attribute block 281474976710655
[   66.148457][ T5624] EXT4-fs (loop6): no journal found
[   66.258915][ T2245] bridge_slave_1: left allmulticast mode
[   66.264713][ T2245] bridge_slave_1: left promiscuous mode
[   66.270495][ T2245] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.293399][ T2245] bridge_slave_0: left allmulticast mode
[   66.299162][ T2245] bridge_slave_0: left promiscuous mode
[   66.305005][ T2245] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.466915][ T2245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.479222][ T2245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.492659][ T2245] bond0 (unregistering): Released all slaves
[   66.521856][ T5643] pim6reg: entered allmulticast mode
[   66.527898][ T5648] pim6reg: left allmulticast mode
[   66.555443][ T5654] batadv0: entered promiscuous mode
[   66.566838][ T5654] batadv_slave_0: entered promiscuous mode
[   66.572999][ T5654] batadv_slave_0: left promiscuous mode
[   66.579827][ T5654] batadv0: left promiscuous mode
[   66.624754][ T2245] hsr_slave_0: left promiscuous mode
[   66.661508][ T2245] hsr_slave_1: left promiscuous mode
[   66.684975][ T2245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.692569][ T2245] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.704295][ T2245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.711903][ T2245] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.722895][ T2245] veth1_macvtap: left promiscuous mode
[   66.728578][ T2245] veth0_macvtap: left promiscuous mode
[   66.734147][ T2245] veth1_vlan: left promiscuous mode
[   66.739527][ T2245] veth0_vlan: left promiscuous mode
[   66.769215][ T5674] loop8: detected capacity change from 0 to 512
[   66.778080][ T5674] EXT4-fs: Ignoring removed i_version option
[   66.784222][ T5674] EXT4-fs: Ignoring removed nobh option
[   66.797863][ T5674] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   66.812692][ T5674] EXT4-fs (loop8): 1 truncate cleaned up
[   66.881168][ T2245] team0 (unregistering): Port device team_slave_1 removed
[   66.892773][ T2245] team0 (unregistering): Port device team_slave_0 removed
[   66.902731][ T5683] loop8: detected capacity change from 0 to 128
[   67.009887][ T5448] veth0_vlan: entered promiscuous mode
[   67.016985][ T5690] loop5: detected capacity change from 0 to 1024
[   67.029486][ T5448] veth1_vlan: entered promiscuous mode
[   67.046958][ T5448] veth0_macvtap: entered promiscuous mode
[   67.055018][ T5448] veth1_macvtap: entered promiscuous mode
[   67.071506][ T5690] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.5.799: corrupted in-inode xattr: bad magic number in in-inode xattr
[   67.074274][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.098230][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.108220][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.118833][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.128773][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.139286][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.153291][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.171198][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.181797][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.191830][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.202324][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.204392][ T5696] loop6: detected capacity change from 0 to 164
[   67.212212][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.212235][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.250281][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.260774][ T5696] Unable to read rock-ridge attributes
[   67.281101][ T5448] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.290061][ T5448] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.299134][ T5448] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.309206][ T5448] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.320580][ T5696] Unable to read rock-ridge attributes
[   67.332429][ T5696] iso9660: Corrupted directory entry in block 4 of inode 1792
[   67.434800][ T5714] loop6: detected capacity change from 0 to 2048
[   67.497723][ T5714] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.549768][ T5726] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   68.145544][ T5781] loop6: detected capacity change from 0 to 2048
[   68.236715][ T5789] netlink: 268 bytes leftover after parsing attributes in process `syz.2.841'.
[   68.242997][ T5793] loop6: detected capacity change from 0 to 256
[   68.245805][ T5789] unsupported nla_type 65024
[   68.296880][ T5797] loop5: detected capacity change from 0 to 1024
[   68.304002][ T5797] EXT4-fs: Ignoring removed orlov option
[   68.309841][ T5797] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.436301][ T5817] loop5: detected capacity change from 0 to 512
[   68.456804][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.6.855'.
[   68.469291][ T5817] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.853: bg 0: block 35: padding at end of block bitmap is not set
[   68.489537][ T5817] EXT4-fs (loop5): Remounting filesystem read-only
[   68.499230][ T5817] EXT4-fs (loop5): 1 truncate cleaned up
[   68.509408][ T5817] SELinux: (dev loop5, type ext4) getxattr errno 5
[   68.536510][ T5817] nfs4: Unknown parameter 'È'
[   68.562709][ T5826] loop8: detected capacity change from 0 to 1024
[   68.586652][ T5826] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   68.608612][ T5826] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   68.624189][ T5826] jbd2_journal_init_inode: Cannot locate journal superblock
[   68.631614][ T5826] EXT4-fs (loop8): Could not load journal inode
[   68.681887][ T5840] sd 0:0:1:0: device reset
[   68.760048][ T5856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=5856 comm=syz.8.871
[   68.779656][ T5859] loop6: detected capacity change from 0 to 2048
[   68.808032][ T5865] loop5: detected capacity change from 0 to 128
[   68.868938][ T5873] loop8: detected capacity change from 0 to 1024
[   68.877234][ T5873] EXT4-fs: Ignoring removed orlov option
[   68.883019][ T5873] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.904469][ T5872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.923798][ T5872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.966190][ T5880] loop9: detected capacity change from 0 to 1024
[   68.997595][ T5886] loop5: detected capacity change from 0 to 512
[   69.046461][ T5886] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.060857][ T5886] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #2: comm syz.5.883: corrupted inode contents
[   69.076804][ T5896] loop8: detected capacity change from 0 to 512
[   69.084975][ T5886] EXT4-fs error (device loop5): ext4_dirty_inode:5984: inode #2: comm syz.5.883: mark_inode_dirty error
[   69.096944][ T5886] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #2: comm syz.5.883: corrupted inode contents
[   69.110149][ T5886] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.883: mark_inode_dirty error
[   69.115661][ T5896] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.241453][ T5912] loop5: detected capacity change from 0 to 512
[   69.262657][ T5912] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.892: bg 0: block 35: padding at end of block bitmap is not set
[   69.277796][ T5912] EXT4-fs (loop5): Remounting filesystem read-only
[   69.291663][ T5912] EXT4-fs (loop5): 1 truncate cleaned up
[   69.298059][ T5912] SELinux: (dev loop5, type ext4) getxattr errno 5
[   69.520202][ T5936] netlink: 184 bytes leftover after parsing attributes in process `syz.5.902'.
[   69.670784][ T5951] bridge1: entered promiscuous mode
[   69.676060][ T5951] bridge1: entered allmulticast mode
[   69.683026][ T5951] team0: Port device bridge1 added
[   69.738036][ T5956] loop5: detected capacity change from 0 to 1024
[   69.745056][ T5956] EXT4-fs: Ignoring removed nobh option
[   69.750874][ T5956] EXT4-fs: Ignoring removed orlov option
[   69.768208][   T29] kauditd_printk_skb: 197 callbacks suppressed
[   69.768224][   T29] audit: type=1326 audit(1731150326.897:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.798134][   T29] audit: type=1326 audit(1731150326.907:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.821734][   T29] audit: type=1326 audit(1731150326.907:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.845315][   T29] audit: type=1326 audit(1731150326.907:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.868817][   T29] audit: type=1326 audit(1731150326.907:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.892340][   T29] audit: type=1326 audit(1731150326.907:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.915768][   T29] audit: type=1326 audit(1731150326.907:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.939319][   T29] audit: type=1326 audit(1731150326.907:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.6.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4b3fe719 code=0x7ffc0000
[   69.988457][ T5964] syz.5.914[5964] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.989655][ T5964] syz.5.914[5964] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.006476][   T29] audit: type=1326 audit(1731150327.147:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.8.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740347e719 code=0x7fc00000
[   70.042214][ T5964] syz.5.914[5964] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.046368][ T5968] loop9: detected capacity change from 0 to 512
[   70.063135][ T5964] loop5: detected capacity change from 0 to 512
[   70.071777][ T5968] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[   70.083639][ T5968] EXT4-fs (loop9): 1 truncate cleaned up
[   70.084444][ T5964] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.100859][   T29] audit: type=1400 audit(1731150327.237:1600): avc:  denied  { create } for  pid=5967 comm="syz.9.916" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   70.249317][ T5983] vhci_hcd: invalid port number 61
[   70.346006][ T5997] syz.6.928[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.346139][ T5997] syz.6.928[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.357928][ T5997] syz.6.928[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.427788][ T6003] loop5: detected capacity change from 0 to 1024
[   70.512432][ T6015] SELinux:  Context system_u: is not valid (left unmapped).
[   70.527733][ T6017] EXT4-fs (loop5): shut down requested (0)
[   70.545161][ T6018] loop8: detected capacity change from 0 to 512
[   70.566403][ T6018] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   70.607795][ T6018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   70.622380][ T6018] System zones: 1-12
[   70.631777][ T6018] EXT4-fs (loop8): 1 truncate cleaned up
[   70.637993][ T6018] EXT4-fs mount: 39 callbacks suppressed
[   70.638008][ T6018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.678141][ T6032] loop6: detected capacity change from 0 to 128
[   70.697542][ T6032] FAT-fs (loop6): Directory bread(block 32) failed
[   70.704294][ T6032] FAT-fs (loop6): Directory bread(block 33) failed
[   70.713788][ T6032] FAT-fs (loop6): Directory bread(block 34) failed
[   70.721564][ T6032] FAT-fs (loop6): Directory bread(block 35) failed
[   70.729693][ T5419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.738771][ T6032] FAT-fs (loop6): Directory bread(block 36) failed
[   70.745365][ T6032] FAT-fs (loop6): Directory bread(block 37) failed
[   70.752181][ T6032] FAT-fs (loop6): Directory bread(block 38) failed
[   70.758788][ T6032] FAT-fs (loop6): Directory bread(block 39) failed
[   70.765428][ T6032] FAT-fs (loop6): Directory bread(block 40) failed
[   70.772163][ T6032] FAT-fs (loop6): Directory bread(block 41) failed
[   70.848629][ T6032] bio_check_eod: 16 callbacks suppressed
[   70.848645][ T6032] syz.6.943: attempt to access beyond end of device
[   70.848645][ T6032] loop6: rw=0, sector=4108, nr_sectors = 4 limit=128
[   70.867790][   T50] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   70.867908][ T6032] FAT-fs (loop6): Filesystem has been set read-only
[   70.891851][   T50] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   70.904629][   T50] EXT4-fs (loop5): This should not happen!! Data will be lost
[   70.904629][   T50] 
[   70.906679][ T6032] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[   70.914690][   T50] EXT4-fs (loop5): Total free blocks count 0
[   70.929051][   T50] EXT4-fs (loop5): Free/Dirty block details
[   70.935042][   T50] EXT4-fs (loop5): free_blocks=68451041280
[   70.940913][   T50] EXT4-fs (loop5): dirty_blocks=16384
[   70.946523][   T50] EXT4-fs (loop5): Block reservation details
[   70.952572][   T50] EXT4-fs (loop5): i_reserved_data_blocks=1024
[   70.973383][ T2128] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   71.168255][ T6051] loop8: detected capacity change from 0 to 512
[   71.169773][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4
[   71.182409][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2
[   71.190105][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.197775][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.205546][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.213414][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.221193][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.229244][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.236920][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.244707][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.252489][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.260271][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.267958][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.275719][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.283500][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.291226][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.298993][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.306665][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.314417][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.322145][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.329982][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.337685][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.344917][ T6051] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.952: bg 0: block 248: padding at end of block bitmap is not set
[   71.345423][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.367330][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.375473][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.382654][ T6051] EXT4-fs error (device loop8): ext4_acquire_dquot:6879: comm syz.8.952: Failed to acquire dquot type 1
[   71.383460][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.395819][ T6051] EXT4-fs (loop8): 1 truncate cleaned up
[   71.401960][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.408139][ T6051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.415235][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.435574][   T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0
[   71.458089][ T6051] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.530483][ T5419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.550631][   T35] hid-generic 0000:3000000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   71.564913][ T6070] can0: slcan on ttyS3.
[   71.595583][ T6075] loop6: detected capacity change from 0 to 512
[   71.605885][ T6077] loop8: detected capacity change from 0 to 2048
[   71.618921][ T6069] can0 (unregistered): slcan off ttyS3.
[   71.631636][ T6077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.645277][ T6075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.658095][ T6075] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.697368][ T6085] loop5: detected capacity change from 0 to 8192
[   71.715435][ T6077] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.962: bg 0: block 274: padding at end of block bitmap is not set
[   71.730243][ T6077] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[   71.735313][ T6090] loop2: detected capacity change from 0 to 128
[   71.742785][ T6077] EXT4-fs (loop8): This should not happen!! Data will be lost
[   71.742785][ T6077] 
[   71.751048][ T6090] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 2)
[   71.768843][ T6075] loop6: detected capacity change from 512 to 0
[   71.776298][    C1] I/O error, dev loop6, sector 148 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[   71.798378][ T4727] syz-executor: attempt to access beyond end of device
[   71.798378][ T4727] loop6: rw=12288, sector=12, nr_sectors = 4 limit=0
[   71.814607][ T4727] syz-executor: attempt to access beyond end of device
[   71.814607][ T4727] loop6: rw=524288, sector=140, nr_sectors = 4 limit=0
[   71.836724][ T6077] syz.8.962 (6077) used greatest stack depth: 9336 bytes left
[   71.844596][ T6090] syz.2.966: attempt to access beyond end of device
[   71.844596][ T6090] loop2: rw=0, sector=121, nr_sectors = 112 limit=128
[   71.847024][ T4727] syz-executor: attempt to access beyond end of device
[   71.847024][ T4727] loop6: rw=524288, sector=144, nr_sectors = 4 limit=0
[   71.871962][ T4727] syz-executor: attempt to access beyond end of device
[   71.871962][ T4727] loop6: rw=12288, sector=136, nr_sectors = 4 limit=0
[   71.882832][ T5419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.888810][ T4727] EXT4-fs error (device loop6): ext4_get_inode_loc:4541: inode #2: block 34: comm syz-executor: unable to read itable block
[   71.907831][ T2245] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 2)
[   71.907916][ T4727] syz-executor: attempt to access beyond end of device
[   71.907916][ T4727] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0
[   71.918797][ T2245] kworker/u8:8: attempt to access beyond end of device
[   71.918797][ T2245] loop2: rw=1, sector=233, nr_sectors = 808 limit=128
[   71.930411][ T4727] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   71.955817][ T4727] EXT4-fs (loop6): I/O error while writing superblock
[   71.962686][ T4727] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5780: IO failure
[   71.971607][ T4727] syz-executor: attempt to access beyond end of device
[   71.971607][ T4727] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0
[   71.985106][ T4727] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   71.993402][ T4727] EXT4-fs (loop6): I/O error while writing superblock
[   72.000224][ T4727] EXT4-fs error (device loop6): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error
[   72.011893][ T4727] syz-executor: attempt to access beyond end of device
[   72.011893][ T4727] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0
[   72.025569][ T4727] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   72.033894][ T4727] EXT4-fs (loop6): I/O error while writing superblock
[   72.061765][ T2348] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4526: inode #15: block 34: comm kworker/u8:9: unable to read itable block
[   72.077339][ T2348] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   72.085948][ T2348] EXT4-fs (loop6): I/O error while writing superblock
[   72.093372][ T2348] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4526: inode #18: block 35: comm kworker/u8:9: unable to read itable block
[   72.107602][ T2348] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   72.117075][ T2348] EXT4-fs (loop6): I/O error while writing superblock
[   72.124245][ T2348] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4526: inode #19: block 35: comm kworker/u8:9: unable to read itable block
[   72.141887][ T2348] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   72.152248][ T2348] EXT4-fs (loop6): I/O error while writing superblock
[   72.160022][ T2348] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4526: inode #2: block 34: comm kworker/u8:9: unable to read itable block
[   72.173999][ T2348] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   72.182779][ T2348] EXT4-fs (loop6): I/O error while writing superblock
[   72.190792][ T4727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.207624][ T4727] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[   72.216551][ T4727] EXT4-fs (loop6): I/O error while writing superblock
[   72.225176][ T6079] Buffer I/O error on dev loop6, logical block 12, lost sync page write
[   72.349095][ T6120] loop8: detected capacity change from 0 to 512
[   72.356094][ T6120] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   72.368999][ T6120] EXT4-fs (loop8): 1 truncate cleaned up
[   72.375075][ T6120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.432565][ T2128] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.486580][ T2128] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.532718][ T2128] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.585077][ T2128] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.702448][ T6129] ==================================================================
[   72.710603][ T6129] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark
[   72.718379][ T6129] 
[   72.720725][ T6129] write to 0xffff8881064fb8a4 of 4 bytes by task 6120 on cpu 1:
[   72.728382][ T6129]  xas_set_mark+0x131/0x150
[   72.732941][ T6129]  tag_pages_for_writeback+0xa5/0x2a0
[   72.738366][ T6129]  ext4_do_writepages+0x694/0x2130
[   72.743614][ T6129]  ext4_writepages+0x159/0x2e0
[   72.748407][ T6129]  do_writepages+0x1d8/0x480
[   72.753045][ T6129]  filemap_fdatawrite_wbc+0xdb/0x100
[   72.758376][ T6129]  file_write_and_wait_range+0xc4/0x250
[   72.763976][ T6129]  generic_buffers_fsync_noflush+0x46/0x120
[   72.769909][ T6129]  ext4_sync_file+0x1ff/0x6c0
[   72.774635][ T6129]  vfs_fsync_range+0x116/0x130
[   72.779451][ T6129]  ext4_buffered_write_iter+0x326/0x370
[   72.785045][ T6129]  ext4_file_write_iter+0x293/0xe10
[   72.790289][ T6129]  iter_file_splice_write+0x5f1/0x980
[   72.795708][ T6129]  direct_splice_actor+0x160/0x2c0
[   72.800853][ T6129]  splice_direct_to_actor+0x302/0x670
[   72.806261][ T6129]  do_splice_direct+0xd7/0x150
[   72.811109][ T6129]  do_sendfile+0x39b/0x970
[   72.815567][ T6129]  __x64_sys_sendfile64+0x110/0x150
[   72.820805][ T6129]  x64_sys_call+0xed5/0x2d60
[   72.825442][ T6129]  do_syscall_64+0xc9/0x1c0
[   72.829975][ T6129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.836009][ T6129] 
[   72.838349][ T6129] read to 0xffff8881064fb8a4 of 4 bytes by task 6129 on cpu 0:
[   72.845924][ T6129]  filemap_fdatawrite_wbc+0x5c/0x100
[   72.851262][ T6129]  file_write_and_wait_range+0xc4/0x250
[   72.856851][ T6129]  generic_buffers_fsync_noflush+0x46/0x120
[   72.862790][ T6129]  ext4_sync_file+0x1ff/0x6c0
[   72.867523][ T6129]  vfs_fsync_range+0x116/0x130
[   72.872338][ T6129]  ext4_buffered_write_iter+0x326/0x370
[   72.877947][ T6129]  ext4_file_write_iter+0x293/0xe10
[   72.883195][ T6129]  iter_file_splice_write+0x5f1/0x980
[   72.888602][ T6129]  direct_splice_actor+0x160/0x2c0
[   72.893756][ T6129]  splice_direct_to_actor+0x302/0x670
[   72.899159][ T6129]  do_splice_direct+0xd7/0x150
[   72.903952][ T6129]  do_sendfile+0x39b/0x970
[   72.908408][ T6129]  __x64_sys_sendfile64+0x110/0x150
[   72.913656][ T6129]  x64_sys_call+0xed5/0x2d60
[   72.918284][ T6129]  do_syscall_64+0xc9/0x1c0
[   72.922822][ T6129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.928771][ T6129] 
[   72.931112][ T6129] value changed: 0x02000021 -> 0x04000021
[   72.936843][ T6129] 
[   72.939181][ T6129] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   72.945358][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.8.980 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
[   72.955985][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   72.966071][ T6129] ==================================================================
[   73.007868][ T2128] bridge_slave_1: left allmulticast mode
[   73.013793][ T2128] bridge_slave_1: left promiscuous mode
[   73.019674][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.080827][ T2128] bridge_slave_0: left allmulticast mode
[   73.086988][ T2128] bridge_slave_0: left promiscuous mode
[   73.092804][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.201068][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.211999][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.222326][ T2128] bond0 (unregistering): Released all slaves
[   73.272221][ T2128] hsr_slave_0: left promiscuous mode
[   73.277970][ T2128] hsr_slave_1: left promiscuous mode
[   73.284366][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.291945][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.299809][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.307246][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.316435][ T2128] veth1_macvtap: left promiscuous mode
[   73.322099][ T2128] veth0_macvtap: left promiscuous mode
[   73.327648][ T2128] veth1_vlan: left promiscuous mode
[   73.333021][ T2128] veth0_vlan: left promiscuous mode
[   73.407246][ T6120] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.438693][ T2128] team0 (unregistering): Port device team_slave_1 removed
[   73.448835][ T2128] team0 (unregistering): Port device team_slave_0 removed
[   73.693738][ T2128] IPVS: stop unused estimator thread 0...
[   73.743953][ T2128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.821821][ T2128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.881559][ T2128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.941972][ T2128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.993843][ T2128] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.051904][ T2128] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.101870][ T2128] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.171548][ T2128] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.244110][ T2128] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.291758][ T2128] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.342041][ T2128] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.391654][ T2128] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.462061][ T2128] bridge_slave_1: left allmulticast mode
[   74.467788][ T2128] bridge_slave_1: left promiscuous mode
[   74.473511][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.481309][ T2128] bridge_slave_0: left allmulticast mode
[   74.486962][ T2128] bridge_slave_0: left promiscuous mode
[   74.492664][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.501131][ T2128] bridge_slave_1: left allmulticast mode
[   74.506939][ T2128] bridge_slave_1: left promiscuous mode
[   74.512607][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.520563][ T2128] bridge_slave_0: left allmulticast mode
[   74.526254][ T2128] bridge_slave_0: left promiscuous mode
[   74.532009][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.540208][ T2128] bridge_slave_1: left allmulticast mode
[   74.545962][ T2128] bridge_slave_1: left promiscuous mode
[   74.551713][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.559530][ T2128] bridge_slave_0: left allmulticast mode
[   74.565187][ T2128] bridge_slave_0: left promiscuous mode
[   74.571184][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.970789][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.981209][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.991512][ T2128] bond0 (unregistering): (slave team0): Releasing backup interface
[   75.001207][ T2128] bond0 (unregistering): Released all slaves
[   75.010282][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.020511][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.030539][ T2128] bond0 (unregistering): Released all slaves
[   75.039681][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.050358][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.060472][ T2128] bond0 (unregistering): Released all slaves
[   75.069092][ T2128] bond0 (unregistering): Released all slaves
[   75.117036][ T2128] hsr_slave_0: left promiscuous mode
[   75.122849][ T2128] hsr_slave_1: left promiscuous mode
[   75.128694][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.136440][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.144726][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.152519][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.161696][ T2128] hsr_slave_0: left promiscuous mode
[   75.167385][ T2128] hsr_slave_1: left promiscuous mode
[   75.173165][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.180616][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.188143][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.195639][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.204953][ T2128] hsr_slave_0: left promiscuous mode
[   75.211154][ T2128] hsr_slave_1: left promiscuous mode
[   75.216860][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.224306][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.231825][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.239304][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.251113][ T2128] veth1_vlan: left promiscuous mode
[   75.256410][ T2128] veth0_vlan: left promiscuous mode
[   75.262639][ T2128] veth1_macvtap: left promiscuous mode
[   75.268142][ T2128] veth0_macvtap: left promiscuous mode
[   75.273786][ T2128] veth1_vlan: left promiscuous mode
[   75.279169][ T2128] veth0_vlan: left promiscuous mode
[   75.285286][ T2128] veth1_macvtap: left promiscuous mode
[   75.290853][ T2128] veth0_macvtap: left promiscuous mode
[   75.296482][ T2128] veth1_vlan: left promiscuous mode
[   75.301838][ T2128] veth0_vlan: left promiscuous mode
[   75.467816][ T2128] team0 (unregistering): Port device team_slave_1 removed
[   75.477692][ T2128] team0 (unregistering): Port device team_slave_0 removed
[   75.539927][ T2128] team0 (unregistering): Port device team_slave_1 removed
[   75.550205][ T2128] team0 (unregistering): Port device team_slave_0 removed
[   75.612526][ T2128] team0 (unregistering): Port device team_slave_1 removed
[   75.622909][ T2128] team0 (unregistering): Port device team_slave_0 removed