last executing test programs:

1m7.816592424s ago: executing program 3 (id=346):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000001140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
utime(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f0000000340)=@v3={0x3000000, [{0x8, 0x7fffffff}, {0x6, 0x5}]}, 0x18, 0x1)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008011}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r6 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x4800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r9, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r10)
sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r11, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

1m6.377851636s ago: executing program 3 (id=355):
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000050000000004", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ed04dca361dc5f7b66be55a537896191a8e67d5b88480d9ba4645edf491ec3e400b6d0029a0627913d2da9ff2c232b945631c82982bb3a608989359b7a2347c3bdcd1922e1fde15a34"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20e8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000"], 0x0, 0x2e, 0x0, 0x1, 0x3}, 0x28)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0})
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x9, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000802", @ANYRES32=<r7=>0xffffffffffffffff, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cc2b61b6cac48e9702de0ca936789f2472198d53a519134bfdc1fdf6086a80254b9f197d484bf967e3ca87bfea"], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000080), 0x8, 0x601, &(0x7f0000001440)="$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")
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x9, 0x8})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYBLOB="0100000005000000040000000000000000000000ae100000000000004ee77876e8dcc5b29070aad34ab1546ee293552225394fcf4b21c16e74c3f912ca1b17788955185b35f643a29e00fdec32de1d70ef6b4904a0788972d5285228c771e52cc04b9f524358560c8783443fbfd5d0b073f9715f6191d466158826c92e11bccaf9044f9c59cffd89f467563047c34175b216703b26a64a7bf07c39fb546f3043b1111ae127d075b263ed592da52d59"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0x6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)

1m6.212078678s ago: executing program 3 (id=356):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x288500, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x123000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, 0x0, 0x0)

1m6.196166298s ago: executing program 3 (id=357):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)

1m6.172130609s ago: executing program 3 (id=358):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x3, 0x5})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x20, 0x1b0874, 0x4, 0x1, 0x81, 0x0, 0x4, 0x0, 0x0, 0x3})
close(r0)

1m1.820761745s ago: executing program 3 (id=435):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x90, 0xc8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r6}}, 0x18)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x5}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x30}, 0x40880)
r8 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41)

1m1.810302725s ago: executing program 32 (id=435):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x90, 0xc8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r6}}, 0x18)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x5}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x30}, 0x40880)
r8 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41)

26.535138354s ago: executing program 1 (id=1119):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = io_uring_setup(0x2987, &(0x7f0000000080)={0x0, 0x40000000, 0x800, 0x4, 0x4})
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

26.519614065s ago: executing program 1 (id=1121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7f3e10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

26.502127865s ago: executing program 1 (id=1122):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9690a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="39a7b1", 0x3}], 0x1}}], 0x2, 0x4008440)
close(0x3)

26.483796626s ago: executing program 1 (id=1123):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

26.283559608s ago: executing program 1 (id=1128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xffa8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mlockall(0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

25.971697373s ago: executing program 1 (id=1130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c"], 0x20}}, 0x0)

25.971369223s ago: executing program 33 (id=1130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c"], 0x20}}, 0x0)

12.103009665s ago: executing program 2 (id=1533):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65"], 0xfdef)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x52, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

11.680658861s ago: executing program 2 (id=1543):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)

11.595330833s ago: executing program 2 (id=1545):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

11.487900644s ago: executing program 2 (id=1549):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x20c00, 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[], 0x478)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
fallocate(r0, 0x0, 0x0, 0x1000f4)

11.303966387s ago: executing program 2 (id=1558):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000001140))
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
utime(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
fsetxattr$security_capability(r2, &(0x7f0000000080), &(0x7f0000000340)=@v3={0x3000000, [{0x8, 0x7fffffff}, {0x6, 0x5}]}, 0x18, 0x1)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008011}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r7 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x4800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r10, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r11)
sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r12, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

7.973763428s ago: executing program 2 (id=1669):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

7.973476278s ago: executing program 34 (id=1669):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

3.017351404s ago: executing program 0 (id=1805):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x20, 0x4, 0x0, @empty, @empty}}}})
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r2, 0x2285, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10)
write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xa8)
read$snapshot(r3, 0x0, 0xffffffbf)
read$snapshot(r3, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8c55, &(0x7f0000000600))
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
syz_usbip_server_init(0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='f2fs_background_gc\x00', r3, 0x0, 0x1}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

3.012250754s ago: executing program 6 (id=1806):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2})
keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0)

2.993525534s ago: executing program 6 (id=1808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

2.946179145s ago: executing program 6 (id=1810):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000001140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
utime(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f0000000340)=@v3={0x3000000, [{0x8, 0x7fffffff}, {0x6, 0x5}]}, 0x18, 0x1)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008011}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r6 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x4800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r9, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r10)
sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r11, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

2.61146409s ago: executing program 6 (id=1813):
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.5657639s ago: executing program 6 (id=1814):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40))
gettid()
socket(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0)

2.565340591s ago: executing program 6 (id=1815):
unshare(0x6a040000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff020000000000000000000000000001"], 0xd2)

1.717269914s ago: executing program 7 (id=1839):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.694391994s ago: executing program 7 (id=1840):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc)
sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b0", 0x1}], 0x1}, 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)

1.652223884s ago: executing program 7 (id=1844):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.615833545s ago: executing program 0 (id=1846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x12c, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.478956947s ago: executing program 0 (id=1851):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448e3, 0x0)

1.477914838s ago: executing program 0 (id=1854):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(r2)

1.460236678s ago: executing program 0 (id=1855):
syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, 0x0, &(0x7f00000003c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r2}, 0x20)
close(r3)

1.396847529s ago: executing program 0 (id=1857):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x20, 0x4, 0x0, @empty, @empty}}}})
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r2, 0x2285, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10)
write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xa8)
read$snapshot(r3, 0x0, 0xffffffbf)
read$snapshot(r3, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8c55, &(0x7f0000000600))
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
syz_usbip_server_init(0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='f2fs_background_gc\x00', r3, 0x0, 0x1}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

1.32475346s ago: executing program 5 (id=1859):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x1832b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r1, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

1.232782641s ago: executing program 5 (id=1860):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120050904000001020d000009240600014812987e052400df000d240f0101000000000003000506241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23def66cb3e49bf4cb271a0a8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff507240a050702800c241b01040300050701000209058103ff030604050904010000020d00000904010102020d0000090582020004f102"], 0x0)
ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500))

801.101528ms ago: executing program 7 (id=1861):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0])

763.637888ms ago: executing program 7 (id=1862):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)
add_key(&(0x7f0000000ac0)='id_resolver\x00', &(0x7f0000000b00)={'syz', 0x3}, &(0x7f0000000b40)="1c", 0x1, r0)

748.502228ms ago: executing program 7 (id=1863):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x0, 0x0, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x800004, 0x3, 0x6, 0x7, 0x10, "6b53125f9a9ad93d789521cc1e4f440e921409"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="56960ce5aa0e070c5188e4", 0xb}], 0x1, 0x7, 0xb2)

490.532623ms ago: executing program 5 (id=1865):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

354.969765ms ago: executing program 5 (id=1871):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000002c0)={'batadv0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1})

342.521005ms ago: executing program 4 (id=1872):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

320.208805ms ago: executing program 4 (id=1873):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

303.820375ms ago: executing program 5 (id=1874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x2)
fchdir(r3)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408)

300.522005ms ago: executing program 4 (id=1875):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x502, &(0x7f0000000a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x30)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000f40)="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", 0x7ff}], 0x1, 0x2, 0x647, 0x2)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

289.239946ms ago: executing program 5 (id=1876):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='j', 0x1}], 0x1}, 0x1)
close(r1)

208.161387ms ago: executing program 4 (id=1877):
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000050000000004", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ed04dca361dc5f7b66be55a537896191a8e67d5b88480d9ba4645edf491ec3e400b6d0029a0627913d2da9ff2c232b945631c82982bb3a608989359b7a2347c3bdcd1922e1fde15a34"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20e8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000"], 0x0, 0x2e, 0x0, 0x1, 0x3}, 0x28)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0})
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x9, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000802", @ANYRES32=<r8=>0xffffffffffffffff, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cc2b61b6cac48e9702de0ca936789f2472198d53a519134bfdc1fdf6086a80254b9f197d484bf967e3ca87bfea"], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000080), 0x8, 0x601, &(0x7f0000001440)="$eJzs3c1vFOUfAPDvTF9pfz+3EKPiQZoYA4nS0gKGGBPhTgi+3DxVWghSKKE1WiSxJHgxMV48mHjyIP4XSuLVf8CDF0+GhBjDQQyRNbOdLdPtbunb7pbdzycZ+jwz7DzPNPvtd/bZZ2YC6Fqj2T9pxP6IuJpElArbeiPfOLr8/+7/deNctiRRLr/7ZxI3PkuWivtK8p/D+Yv/LUWSrdzXs7bd+cXrl6ZmZ2eu5fXxhctXx+cXrx++eHnqwsyFmSuTr0+eOH7s+ImJI9s6vrRQPn3rw49LX5x5//tvHyYTP/x2JomT8SjvW3Zcta8d2FbL2e9sNMrLHhTXZ7/XE9vc927xd6n6PnksqV3BrnU+fz/2RcTzUYqewru+FJ+/3dbOAU1VTlZyZBnoNsmWAn9w5zsCtFj1PKD62b7e5+C10maekgAtcu/U8gDAcuz3RUQ1/nuXxwZjsDI2MHQ/WTXOk0TE9kbmlmVt/PLzmVvZEg3G4YDmWLpZHe+rzf9JJTZHYrBSG7qfror/tLBk69/ZYvujNXXxD62zdDMiXsjzf39sKv5HC/H/wRbbF/8AAAAAAACwc+6ciojX6s3/S1fm//TXmf8zHBEnd6D9J3//l97NC8kONAcU3DsV8Wbd+b8rc3xHevLa/yvzAfqS8xdnZ45ExDMRcSj6BrL6RM1+izOED3+575tG7Rfn/2VL1n51LmC+p7u9NRfiTk8tTG33uIGIezcjXqzM/z2Qr1k9/yfL/0md/J/F99UNtrHvldtnG217cvwDzVL+LuJg3fz/+HQ7Wf/+HOOV84Hx6lnBWi99+tWPjdoX/9A+Wf4fWj/+B5Li/XrmN7f//og4uthbbrR9q+f//cl7PdX9Zz6ZWli4NhHRn5xeu35yc32GTlWNh2q8ZPF/6OX1x/9Wzv8LcbgnIpY22OZzj4Z/b7RN/of2yeJ/ev38P7I6/2++MHl75KdG7Z/dUP4/Vsnph/I1xv+gaO39ODYaoG3pLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA85dKI+F8k6dhKOU3HxiKGI+LZGEpn5+YXXj0/99GV6Wxb5fn/afVJv6XlelJ9/v9IoT5ZUz8aEXsj4uuePZX62Lm52el2HzwAAAAAAAAAAAAAAAAAAADsEsOVa/7LA7XX/2f+6Gl374Cm681/infoPr1bfmV5YEc7ArTc1uMfeNo1jv/a9N7X9L4ArdU4/h88LFe0tDtACzn/h+61xfj3dQF0APkfutUGx/QGm90PoB3kfwAAAAAA6Ch7D9z5NYmIpTf2VJZMf77NZH/obGm7OwC0jTm80L1659rdA6BdfMYHkpXSP3Uv9m88+z9pTocAAAAAAAAAAAAAgDUO7nf9P3Sr9a//N7cfOtk61//XC363C4AO0vjRH3I/dDqf8aGrlUsbyPau/wcAAAAAAAAAAACAXWDw+qWp2dmZa/OLT1/hrd3Rjc0VlqZ2RTd2tPCoOXvui4jdcYCtLlRvwdHGbrT57xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDivwAAAP//HW8gzQ==")
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x9, 0x8})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r8, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYBLOB="0100000005000000040000000000000000000000ae100000000000004ee77876e8dcc5b29070aad34ab1546ee293552225394fcf4b21c16e74c3f912ca1b17788955185b35f643a29e00fdec32de1d70ef6b4904a0788972d5285228c771e52cc04b9f524358560c8783443fbfd5d0b073f9715f6191d466158826c92e11bccaf9044f9c59cffd89f467563047c34175b216703b26a64a7bf07c39fb546f3043b1111ae127d075b263ed592da52d59"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0x6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844)

17.87277ms ago: executing program 4 (id=1878):
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_io_uring_setup(0xd0, &(0x7f0000000080)={0x0, 0x8b48, 0x2000, 0x1, 0x3d8}, &(0x7f0000ff0000), 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

0s ago: executing program 4 (id=1879):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r2 = accept4$unix(r0, 0x0, 0x0, 0x800)
recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x102, 0x0, 0x0)

kernel console output (not intermixed with test programs):

uld not happen!! Data will be lost
[   92.736965][ T5730] 
[   92.746748][ T5730] EXT4-fs (loop2): Total free blocks count 0
[   92.752941][ T5730] EXT4-fs (loop2): Free/Dirty block details
[   92.758983][ T5730] EXT4-fs (loop2): free_blocks=2415919104
[   92.764777][ T5730] EXT4-fs (loop2): dirty_blocks=1856
[   92.770099][ T5730] EXT4-fs (loop2): Block reservation details
[   92.776167][ T5730] EXT4-fs (loop2): i_reserved_data_blocks=116
[   92.827657][  T568] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[   92.937357][ T5751] loop1: detected capacity change from 0 to 1024
[   92.947390][ T5751] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   92.960166][ T5751] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   92.972023][ T5771] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[   92.979746][ T5771] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'.
[   92.982788][ T5751] EXT4-fs (loop1): invalid journal inode
[   92.997509][ T5776] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   93.028431][ T5776] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.046605][ T5751] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   93.064109][ T5776] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.100085][ T5788] netlink: 96 bytes leftover after parsing attributes in process `syz.1.766'.
[   93.138059][ T5791] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[   93.144698][ T5791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   93.152554][ T5791] vhci_hcd vhci_hcd.0: Device attached
[   93.160202][ T5776] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.225128][ T5776] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.474118][ T3839] vhci_hcd: vhci_device speed not set
[   93.547362][ T3839] usb 5-1: new full-speed USB device number 7 using vhci_hcd
[   93.593498][ T5817] vhci_hcd: invalid port number 11
[   93.598666][ T5817] vhci_hcd: default hub control req: 6031 v0000 i000b l2
[   93.623106][ T5791] Set syz1 is full, maxelem 65536 reached
[   93.623975][ T5808] lo speed is unknown, defaulting to 1000
[   93.656166][ T5815] loop5: detected capacity change from 0 to 1024
[   93.666381][ T5815] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   93.676561][ T5815] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   93.692395][ T5815] EXT4-fs (loop5): invalid journal inode
[   93.713488][ T5815] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   93.734264][ T5820] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   93.744075][ T5822] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   93.789682][ T5820] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.854253][ T5820] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.895367][ T5792] vhci_hcd: connection reset by peer
[   93.901523][  T568] vhci_hcd: stop threads
[   93.903380][ T5837] sd 0:0:1:0: device reset
[   93.905833][  T568] vhci_hcd: release socket
[   93.914707][  T568] vhci_hcd: disconnect device
[   93.925146][ T5820] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.994051][ T5820] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.045082][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.786'.
[   94.257966][ T5856] syzkaller1: entered promiscuous mode
[   94.263533][ T5856] syzkaller1: entered allmulticast mode
[   94.410678][ T5866] loop5: detected capacity change from 0 to 512
[   94.424063][ T5866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.437077][ T5866] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.492318][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'.
[   94.508116][ T5776] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.525371][ T5776] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.536998][ T5776] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.549123][ T5776] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.577003][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.618348][ T5878] loop9: detected capacity change from 0 to 7
[   94.632477][ T5878] Buffer I/O error on dev loop9, logical block 0, async page read
[   94.662414][ T5878] Buffer I/O error on dev loop9, logical block 0, async page read
[   94.670290][ T5878]  loop9: unable to read partition table
[   94.711969][ T5878] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   94.711969][ T5878] 
) failed (rc=-5)
[   94.771958][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.804'.
[   94.875043][ T5896] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   94.886710][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'.
[   94.899753][ T5896] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.953184][ T5903] serio: Serial port ptm0
[   94.959304][ T5896] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.034039][ T5896] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.086811][ T5914] loop2: detected capacity change from 0 to 1024
[   95.093997][ T5914] EXT4-fs: Ignoring removed nobh option
[   95.099588][ T5914] EXT4-fs: Ignoring removed bh option
[   95.121703][ T5914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.137096][ T5896] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.184618][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.210495][ T5896] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.226659][ T5924] loop0: detected capacity change from 0 to 128
[   95.228719][ T5896] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.252996][ T5896] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.265816][ T5896] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.319145][ T5922] lo speed is unknown, defaulting to 1000
[   95.403539][ T5926] loop2: detected capacity change from 0 to 8192
[   95.674063][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   95.674081][   T29] audit: type=1326 audit(1752177663.033:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[   95.703449][   T29] audit: type=1326 audit(1752177663.033:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[   95.726748][   T29] audit: type=1326 audit(1752177663.033:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[   95.749902][   T29] audit: type=1326 audit(1752177663.033:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[   95.773327][   T29] audit: type=1326 audit(1752177663.033:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[   95.796709][   T29] audit: type=1326 audit(1752177663.033:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[   95.819960][   T29] audit: type=1326 audit(1752177663.033:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[   95.853449][   T29] audit: type=1400 audit(1752177663.223:828): avc:  denied  { read } for  pid=5943 comm="syz.4.830" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   95.877564][   T29] audit: type=1400 audit(1752177663.223:829): avc:  denied  { open } for  pid=5943 comm="syz.4.830" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   95.902076][   T29] audit: type=1400 audit(1752177663.223:830): avc:  denied  { ioctl } for  pid=5943 comm="syz.4.830" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   96.319508][ T5955] loop2: detected capacity change from 0 to 512
[   96.346462][ T5955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.367189][ T5930] syz.0.824 (5930) used greatest stack depth: 7160 bytes left
[   96.376725][ T5955] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.393061][ T5953] loop4: detected capacity change from 0 to 1024
[   96.421975][ T5953] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   96.443437][ T5953] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   96.463761][ T5953] EXT4-fs (loop4): invalid journal inode
[   96.478326][ T5820] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.499522][ T5820] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.531049][ T5953] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   96.544991][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.555410][ T5820] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.579388][ T5820] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.605995][ T5965] loop5: detected capacity change from 0 to 1024
[   96.640849][ T5965] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   96.654356][ T5976] x_tables: unsorted underflow at hook 2
[   96.661677][ T5965] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   96.685626][ T5965] EXT4-fs (loop5): invalid journal inode
[   96.707239][ T5980] loop4: detected capacity change from 0 to 2048
[   96.718054][ T5965] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   96.742117][ T5980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   96.763764][ T5990] IPv6: Can't replace route, no match found
[   96.779813][ T5995] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   96.799539][ T5995] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.833851][ T5980] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   96.848834][ T5980] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1666 with error 28
[   96.861317][ T5980] EXT4-fs (loop4): This should not happen!! Data will be lost
[   96.861317][ T5980] 
[   96.871079][ T5980] EXT4-fs (loop4): Total free blocks count 0
[   96.877101][ T5980] EXT4-fs (loop4): Free/Dirty block details
[   96.883084][ T5980] EXT4-fs (loop4): free_blocks=2415919104
[   96.888825][ T5980] EXT4-fs (loop4): dirty_blocks=1680
[   96.894189][ T5980] EXT4-fs (loop4): Block reservation details
[   96.900194][ T5980] EXT4-fs (loop4): i_reserved_data_blocks=105
[   96.940102][ T6006] Cannot find del_set index 4 as target
[   96.946868][ T5995] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.969282][ T6007] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[   96.976015][ T6007] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   96.983841][ T6007] vhci_hcd vhci_hcd.0: Device attached
[   97.003395][ T5995] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.022497][ T6011] netlink: 'syz.5.855': attribute type 3 has an invalid length.
[   97.054454][   T51] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[   97.068555][ T5995] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.090427][ T6015] loop4: detected capacity change from 0 to 164
[   97.099654][ T6015] bio_check_eod: 12034 callbacks suppressed
[   97.099670][ T6015] syz.4.857: attempt to access beyond end of device
[   97.099670][ T6015] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   97.121130][ T6015] syz.4.857: attempt to access beyond end of device
[   97.121130][ T6015] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   97.166117][ T6023] batman_adv: batadv0: Adding interface: ipvlan2
[   97.172596][ T6023] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.198015][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.208491][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.218845][ T6023] batman_adv: batadv0: Interface activated: ipvlan2
[   97.235998][ T6021] loop4: detected capacity change from 0 to 1024
[   97.247314][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.256042][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.264780][ T6021] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   97.279789][ T6021] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   97.298624][ T6021] EXT4-fs (loop4): invalid journal inode
[   97.322547][ T6021] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   97.419629][ T6032] lo speed is unknown, defaulting to 1000
[   97.469651][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'.
[   97.478661][ T6035] IPVS: Error joining to the multicast group
[   97.698278][ T6009] vhci_hcd: connection closed
[   97.698668][   T12] vhci_hcd: stop threads
[   97.707747][   T12] vhci_hcd: release socket
[   97.712171][   T12] vhci_hcd: disconnect device
[   97.858696][ T6051] loop5: detected capacity change from 0 to 1024
[   97.871617][ T6051] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   97.882381][ T6051] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   97.898394][ T6051] EXT4-fs (loop5): invalid journal inode
[   97.921626][ T6057] sd 0:0:1:0: device reset
[   97.934090][ T6051] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   97.961505][ T6061] loop5: detected capacity change from 0 to 512
[   97.968656][ T6061] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   97.980359][ T6059] loop0: detected capacity change from 0 to 8192
[   97.981041][ T6061] EXT4-fs (loop5): 1 truncate cleaned up
[   97.992976][ T6061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.006112][ T6061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.110772][ T6072] loop5: detected capacity change from 0 to 512
[   98.117800][ T6072] EXT4-fs: Ignoring removed nobh option
[   98.126223][ T6072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.883: bg 0: block 393: padding at end of block bitmap is not set
[   98.141627][ T6072] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   98.150813][ T6072] EXT4-fs (loop5): 2 truncates cleaned up
[   98.157069][ T6072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.184238][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.228429][ T6077] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   98.277103][ T6077] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.344274][ T6077] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.404490][ T6077] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.464115][ T6077] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.477181][ T6081] loop2: detected capacity change from 0 to 1024
[   98.490873][ T6081] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   98.501611][ T6081] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   98.516329][ T6081] EXT4-fs (loop2): invalid journal inode
[   98.541735][ T6081] syz!: rxe_newlink: already configured on team_slave_0
[   98.562351][ T3839] usb 5-1: enqueue for inactive port 0
[   98.567965][ T3839] usb 5-1: enqueue for inactive port 0
[   98.652318][ T3839] vhci_hcd: vhci_device speed not set
[   98.660043][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[   98.668964][ T6093] netlink: 312 bytes leftover after parsing attributes in process `syz.2.891'.
[   98.677993][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[   98.996015][ T6119] netlink: 'syz.2.903': attribute type 3 has an invalid length.
[   99.019042][ T6125] futex_wake_op: syz.0.906 tries to shift op by -1; fix this program
[   99.142530][ T6137] netlink: 96 bytes leftover after parsing attributes in process `syz.2.911'.
[   99.180986][ T3399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   99.189030][ T3399] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   99.204440][ T6135] loop4: detected capacity change from 0 to 8192
[   99.237582][ T6077] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.295949][ T6077] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.319349][ T6077] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.340333][ T6077] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.349938][ T6146] netlink: 'syz.0.914': attribute type 3 has an invalid length.
[   99.469641][ T6150] loop0: detected capacity change from 0 to 512
[   99.584640][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'.
[   99.593489][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'.
[   99.612811][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.681514][ T6150] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.728211][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.962845][ T6166] loop5: detected capacity change from 0 to 1024
[   99.982964][ T6166] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  100.002555][ T6166] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  100.027682][ T6166] EXT4-fs (loop5): invalid journal inode
[  100.066998][ T6166] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  100.130395][ T6171] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  100.151008][ T6171] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.188924][ T5995] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.203203][ T5995] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.212016][ T6174] loop0: detected capacity change from 0 to 512
[  100.219445][ T6174] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.228243][ T6174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.230217][ T5995] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.239242][ T6174] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  100.263370][ T6174] EXT4-fs (loop0): 1 truncate cleaned up
[  100.269299][ T6174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.286809][ T5995] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.296482][ T6171] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.345964][ T6171] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.359054][ T6178] lo speed is unknown, defaulting to 1000
[  100.366980][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.381903][ T6184] loop4: detected capacity change from 0 to 512
[  100.389117][ T6184] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  100.401116][ T6171] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.401151][ T6184] EXT4-fs (loop4): 1 truncate cleaned up
[  100.401704][ T6184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.468486][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.499368][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[  100.584159][ T6211] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  100.606001][ T6211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.661747][ T6219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.671553][ T6219] tipc: Disabling bearer <eth:syzkaller0>
[  100.704237][ T6211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.729456][   T29] kauditd_printk_skb: 48 callbacks suppressed
[  100.729469][   T29] audit: type=1400 audit(1752177668.103:879): avc:  denied  { append } for  pid=6229 comm="syz.1.948" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  100.739734][ T6230] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  100.766961][ T6230] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125
[  100.804238][ T6211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.821874][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'.
[  100.854354][ T6211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.880794][   T29] audit: type=1400 audit(1752177668.253:880): avc:  denied  { write } for  pid=6242 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  100.943210][ T6211] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.958163][ T6211] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.970614][ T6252] loop0: detected capacity change from 0 to 512
[  100.971158][ T6211] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.978834][ T6252] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.990060][ T6211] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.998294][ T6252] EXT4-fs (loop0): 1 truncate cleaned up
[  101.009840][ T6252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.054382][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.124444][ T6266] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  101.151476][ T6270] rdma_op ffff8881188acd80 conn xmit_rdma 0000000000000000
[  101.175170][ T6266] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.226051][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'.
[  101.236964][ T6266] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.266259][ T6283] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  101.289813][ T6283] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.305335][ T6266] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.333984][ T6283] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.487416][ T6266] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.514895][ T6283] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.528685][ T6296] netlink: 'syz.1.976': attribute type 1 has an invalid length.
[  101.551923][ T6300] loop4: detected capacity change from 0 to 2048
[  101.593190][ T6300]  loop4: p1 < > p4
[  101.597622][ T6300] loop4: p4 size 8388608 extends beyond EOD, truncated
[  101.598381][ T6283] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.618851][   T29] audit: type=1400 audit(1752177669.003:881): avc:  denied  { create } for  pid=6299 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  101.642996][   T29] audit: type=1400 audit(1752177669.023:882): avc:  denied  { getopt } for  pid=6299 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  101.663208][   T29] audit: type=1400 audit(1752177669.023:883): avc:  denied  { read write } for  pid=6299 comm="syz.4.977" name="loop4p4" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  101.686434][   T29] audit: type=1400 audit(1752177669.023:884): avc:  denied  { open } for  pid=6299 comm="syz.4.977" path="/dev/loop4p4" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  101.715452][ T6283] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.723882][ T6306] loop4: detected capacity change from 0 to 512
[  101.727858][ T6283] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.730443][ T6306] EXT4-fs: Ignoring removed bh option
[  101.743679][ T6283] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.747019][ T6283] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.760282][ T6306] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  101.769417][ T6306] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  101.779303][ T6306] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  101.788662][ T6306] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  101.798625][ T6306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.825097][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.970557][ T6322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  101.977376][ T6322] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  101.985053][ T6322] vhci_hcd vhci_hcd.0: Device attached
[  102.172283][   T36] vhci_hcd: vhci_device speed not set
[  102.234611][   T36] usb 9-1: new full-speed USB device number 5 using vhci_hcd
[  102.322739][ T6322] Set syz1 is full, maxelem 65536 reached
[  102.409336][   T29] audit: type=1404 audit(1752177669.783:885): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  102.424382][   T29] audit: type=1400 audit(1752177669.783:886): avc:  denied  { read } for  pid=6303 comm="syz.1.979" path="socket:[22244]" dev="sockfs" ino=22244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  102.448947][   T29] audit: type=1404 audit(1752177669.813:887): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  102.468139][   T29] audit: type=1400 audit(1752177669.833:888): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  102.485115][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.500843][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.617085][ T6336] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  102.634970][ T6336] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.683558][ T6336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.733391][ T6336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.744865][ T6323] vhci_hcd: connection reset by peer
[  102.750634][   T51] vhci_hcd: stop threads
[  102.754959][   T51] vhci_hcd: release socket
[  102.759435][   T51] vhci_hcd: disconnect device
[  102.783872][ T6336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.030850][ T6339] loop8: detected capacity change from 0 to 16385
[  103.255100][ T3386] kernel write not supported for file /281/loginuid (pid: 3386 comm: kworker/1:3)
[  103.336794][ T6350] loop4: detected capacity change from 0 to 512
[  103.343497][ T6350] EXT4-fs: inline encryption not supported
[  103.349529][ T6350] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  103.384304][ T6355] loop1: detected capacity change from 0 to 512
[  103.395151][ T6355] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  103.411630][ T6355] EXT4-fs (loop1): mount failed
[  103.439734][ T6364] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  103.463889][ T6171] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.477590][ T6171] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.493680][ T6366] pim6reg: entered allmulticast mode
[  103.504025][ T6171] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.512742][ T6366] pim6reg: left allmulticast mode
[  103.523981][ T6171] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.555832][ T6371] __nla_validate_parse: 1 callbacks suppressed
[  103.555845][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1004'.
[  103.685471][ T6390] loop1: detected capacity change from 0 to 2048
[  103.707212][ T6390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.728007][ T6396] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  103.736974][ T6390] EXT4-fs (loop1): shut down requested (0)
[  103.749456][ T6396] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.762682][ T6390] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=12
[  103.771631][ T6390] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=12
[  103.781553][ T6390] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=12
[  103.804613][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.815996][ T6396] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.853969][ T6396] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.904086][ T6396] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.945457][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'.
[  103.959486][ T6413] team1: entered promiscuous mode
[  103.964658][ T6413] team1: entered allmulticast mode
[  104.377892][ T6417] syz.4.1021: attempt to access beyond end of device
[  104.377892][ T6417] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  104.627055][ T6266] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.638418][ T6266] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.650061][ T6266] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.661598][ T6266] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.695798][ T6423] loop4: detected capacity change from 0 to 512
[  104.713788][ T6423] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  104.728898][ T6423] EXT4-fs (loop4): mount failed
[  104.750254][ T6429] $Hÿ: renamed from bond0
[  104.756516][ T6429] $Hÿ: entered promiscuous mode
[  104.761572][ T6429] bond_slave_0: entered promiscuous mode
[  104.767380][ T6429] bond_slave_1: entered promiscuous mode
[  104.805243][ T6433] loop9: detected capacity change from 0 to 7
[  104.943414][ T6437] loop1: detected capacity change from 0 to 1024
[  104.973554][ T6437] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  104.987557][ T6437] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  105.001443][ T6437] EXT4-fs (loop1): invalid journal inode
[  105.037006][ T6437] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  105.120915][ T6462] loop1: detected capacity change from 0 to 1024
[  105.133431][ T6462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.147049][ T6462] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.159530][ T6462] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  105.184802][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.200604][ T6467] loop2: detected capacity change from 0 to 512
[  105.223665][ T6467] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  105.238836][ T6467] EXT4-fs (loop2): mount failed
[  105.321632][ T6481] loop2: detected capacity change from 0 to 512
[  105.343973][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.356724][ T6481] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.405169][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.445786][ T6493] capability: warning: `syz.2.1057' uses 32-bit capabilities (legacy support in use)
[  105.461567][ T6336] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.477452][ T6336] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.490863][ T6336] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.506425][ T6336] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.512019][ T6498] loop1: detected capacity change from 0 to 1024
[  105.526730][ T6498] EXT4-fs: inline encryption not supported
[  105.533000][ T6498] EXT4-fs: Ignoring removed bh option
[  105.544512][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.558201][ T6504] bond_slave_0: entered promiscuous mode
[  105.563917][ T6504] bond_slave_1: entered promiscuous mode
[  105.570286][ T6496] SELinux: failed to load policy
[  105.575444][ T6504] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  105.584221][ T6504] bond_slave_0: left promiscuous mode
[  105.589707][ T6504] bond_slave_1: left promiscuous mode
[  105.616148][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.664804][ T6512] loop0: detected capacity change from 0 to 128
[  105.703603][ T6512] syz.0.1064: attempt to access beyond end of device
[  105.703603][ T6512] loop0: rw=0, sector=121, nr_sectors = 920 limit=128
[  105.746134][ T6518] loop1: detected capacity change from 0 to 128
[  105.766415][   T29] kauditd_printk_skb: 111 callbacks suppressed
[  105.766430][   T29] audit: type=1400 audit(1752177673.143:997): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  105.830553][   T29] audit: type=1326 audit(1752177673.203:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590919e929 code=0x7ffc0000
[  105.854934][ T6526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[  105.864201][ T6520] loop1: detected capacity change from 0 to 8192
[  105.864219][ T6526] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1071'.
[  105.864715][   T29] audit: type=1326 audit(1752177673.203:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f590919e929 code=0x7ffc0000
[  105.903139][   T29] audit: type=1326 audit(1752177673.203:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590919e929 code=0x7ffc0000
[  106.009054][   T29] audit: type=1400 audit(1752177673.383:1001): avc:  denied  { create } for  pid=6531 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  106.080728][   T29] audit: type=1400 audit(1752177673.453:1002): avc:  denied  { read } for  pid=6531 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  106.717551][ T6540] loop0: detected capacity change from 0 to 1024
[  106.733878][ T6540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  106.746252][ T6540] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.753256][ T6545] bond_slave_0: entered promiscuous mode
[  106.759646][   T29] audit: type=1400 audit(1752177674.143:1003): avc:  denied  { write } for  pid=6539 comm="syz.0.1085" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.762342][ T6545] bond_slave_1: entered promiscuous mode
[  106.784522][   T29] audit: type=1400 audit(1752177674.143:1004): avc:  denied  { open } for  pid=6539 comm="syz.0.1085" path="/242/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.793202][ T6545] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  106.821569][ T6540] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.1085: lblock 1 mapped to illegal pblock 1 (length 4)
[  106.821987][ T6545] bond_slave_0: left promiscuous mode
[  106.837126][ T6540] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117
[  106.841032][ T6545] bond_slave_1: left promiscuous mode
[  106.853321][ T6540] EXT4-fs (loop0): This should not happen!! Data will be lost
[  106.853321][ T6540] 
[  106.938743][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  106.991057][ T6551] loop0: detected capacity change from 0 to 512
[  107.010030][ T6547] loop4: detected capacity change from 0 to 1024
[  107.024045][ T6547] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  107.037565][ T6547] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  107.056142][ T6549] loop1: detected capacity change from 0 to 1024
[  107.059015][ T6547] EXT4-fs (loop4): invalid journal inode
[  107.070915][ T6551] EXT4-fs (loop0): 1 orphan inode deleted
[  107.071394][ T6551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.080577][ T6549] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  107.089641][   T37] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  107.089678][   T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  107.101772][ T6551] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.111366][ T6549] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  107.156743][ T6547] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  107.172823][ T6549] EXT4-fs (loop1): invalid journal inode
[  107.194060][ T6549] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  107.253678][ T6561] loop4: detected capacity change from 0 to 164
[  107.260148][ T6562] netlink: 'syz.1.1081': attribute type 2 has an invalid length.
[  107.269063][ T6561] Unable to read rock-ridge attributes
[  107.275603][   T29] audit: type=1400 audit(1752177674.663:1005): avc:  denied  { mount } for  pid=6560 comm="syz.4.1082" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  107.302641][ T6561] SELinux: syz.4.1082 (6561) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  107.316342][   T36] usb 9-1: enqueue for inactive port 0
[  107.321855][   T36] usb 9-1: enqueue for inactive port 0
[  107.376914][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.392280][   T36] vhci_hcd: vhci_device speed not set
[  107.408400][ T6569] loop9: detected capacity change from 0 to 7
[  107.414757][ T6568] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  107.421366][ T6568] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  107.429063][ T6568] vhci_hcd vhci_hcd.0: Device attached
[  107.434727][ T6569] Buffer I/O error on dev loop9, logical block 0, async page read
[  107.442942][ T6569] Buffer I/O error on dev loop9, logical block 0, async page read
[  107.450874][ T6569]  loop9: unable to read partition table
[  107.451647][ T6575] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.458186][ T6569] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  107.458186][ T6569] 
) failed (rc=-5)
[  107.517414][ T6579] vhci_hcd: invalid port number 65
[  107.522685][ T6579] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  107.548501][ T6581] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  107.619825][ T6396] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.631686][ T6396] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.655173][ T6396] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.666202][ T6396] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.692303][   T36] vhci_hcd: vhci_device speed not set
[  107.770415][ T6601] SELinux: ebitmap: truncated map
[  107.776396][ T6601] SELinux: failed to load policy
[  107.805479][ T6605] loop5: detected capacity change from 0 to 1764
[  107.829901][ T6608] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  107.856620][ T6610] loop5: detected capacity change from 0 to 512
[  107.863846][ T6610] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  107.875279][ T6610] EXT4-fs (loop5): 1 truncate cleaned up
[  107.881342][ T6610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.966886][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.117883][ T6620] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  108.138153][ T6620] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.178648][ T6570] vhci_hcd: connection reset by peer
[  108.184671][   T12] vhci_hcd: stop threads
[  108.189005][   T12] vhci_hcd: release socket
[  108.193469][   T12] vhci_hcd: disconnect device
[  108.201375][ T6620] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.273915][ T6620] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.334948][ T6620] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.738984][ T6641] syzkaller1: entered promiscuous mode
[  108.744517][ T6641] syzkaller1: entered allmulticast mode
[  108.964987][ T6657] loop1: detected capacity change from 0 to 128
[  108.974637][ T6657] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.987663][ T6657] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.077936][ T6668] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  109.112490][ T6657] loop1: detected capacity change from 128 to 64
[  109.119321][ T6666] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Out of memory
[  109.130524][ T6666] EXT4-fs error (device loop1): ext4_rmdir:3193: inode #12: comm syz.1.1123: mark_inode_dirty error
[  109.158909][ T3304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Out of memory
[  109.169407][ T3304] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error
[  109.332768][ T3304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Out of memory
[  109.345360][ T3304] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #12: comm syz-executor: mark_inode_dirty error
[  109.357166][ T3304] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[  109.369653][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.541670][ T6680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'.
[  109.571524][ T6684] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  109.598057][ T6684] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.647110][ T6684] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.690181][ T6686] lo speed is unknown, defaulting to 1000
[  109.715424][ T6684] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.729879][ T6677] lo speed is unknown, defaulting to 1000
[  109.765550][ T6684] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.785708][ T6695] loop4: detected capacity change from 0 to 2048
[  109.825231][ T6677] chnl_net:caif_netlink_parms(): no params data found
[  109.837159][ T6695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.865408][ T6684] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.924925][ T6684] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.942716][ T6684] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.954304][ T6684] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.956278][ T6695] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  109.979056][ T6695] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1610 with error 28
[  109.991621][ T6695] EXT4-fs (loop4): This should not happen!! Data will be lost
[  109.991621][ T6695] 
[  110.001325][ T6695] EXT4-fs (loop4): Total free blocks count 0
[  110.007412][ T6695] EXT4-fs (loop4): Free/Dirty block details
[  110.008727][  T150] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4b
[  110.013322][ T6695] EXT4-fs (loop4): free_blocks=2415919104
[  110.013340][ T6695] EXT4-fs (loop4): dirty_blocks=1616
[  110.013352][ T6695] EXT4-fs (loop4): Block reservation details
[  110.013362][ T6695] EXT4-fs (loop4): i_reserved_data_blocks=101
[  110.064968][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.072079][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.079414][ T6677] bridge_slave_0: entered allmulticast mode
[  110.087612][ T6677] bridge_slave_0: entered promiscuous mode
[  110.094522][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.101587][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.110066][ T6677] bridge_slave_1: entered allmulticast mode
[  110.116555][ T6677] bridge_slave_1: entered promiscuous mode
[  110.135703][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.147716][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.167985][ T6677] team0: Port device team_slave_0 added
[  110.176745][ T6677] team0: Port device team_slave_1 added
[  110.194150][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.201190][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.227276][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.253600][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.260571][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.286582][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.316727][ T6677] hsr_slave_0: entered promiscuous mode
[  110.323757][ T6677] hsr_slave_1: entered promiscuous mode
[  110.332131][ T6677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.342462][ T6677] Cannot create hsr debugfs directory
[  110.385155][   T51] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1610 with error 28
[  110.464656][ T6724] loop2: detected capacity change from 0 to 1024
[  110.475987][ T6724] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  110.487194][ T6724] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  110.504179][ T6724] EXT4-fs (loop2): invalid journal inode
[  110.522730][ T6724] syz!: rxe_newlink: already configured on team_slave_0
[  110.640290][ T6731] loop4: detected capacity change from 0 to 1024
[  110.651130][ T6731] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  110.661116][ T6731] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  110.674483][ T6731] EXT4-fs (loop4): invalid journal inode
[  110.693287][ T6731] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  110.750460][ T6677] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  110.769117][ T6677] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  110.781446][ T6677] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  110.796320][ T6739] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  110.804456][ T6737] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  110.804456][ T6737]    program syz.0.1149 not setting count and/or reply_len properly
[  110.806705][ T6677] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  110.853154][ T6739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.895488][ T6739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.931101][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.945237][ T6739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.957112][ T6677] 8021q: adding VLAN 0 to HW filter on device team0
[  110.966979][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.974086][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.985518][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.992654][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.003297][ T6739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.039358][ T6763] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  111.081530][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.190394][ T6677] veth0_vlan: entered promiscuous mode
[  111.198190][ T6677] veth1_vlan: entered promiscuous mode
[  111.214733][ T6677] veth0_macvtap: entered promiscuous mode
[  111.222475][ T6677] veth1_macvtap: entered promiscuous mode
[  111.234001][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.245660][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.255073][ T6677] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.263871][ T6677] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.272669][ T6677] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.281370][ T6677] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.301888][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  111.301903][   T29] audit: type=1400 audit(1752177678.673:1036): avc:  denied  { mounton } for  pid=6677 comm="syz-executor" path="/root/syzkaller.LtoKAJ/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  111.332953][   T29] audit: type=1400 audit(1752177678.683:1037): avc:  denied  { mounton } for  pid=6677 comm="syz-executor" path="/root/syzkaller.LtoKAJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  111.359783][   T29] audit: type=1400 audit(1752177678.683:1038): avc:  denied  { mounton } for  pid=6677 comm="syz-executor" path="/root/syzkaller.LtoKAJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  111.388017][   T29] audit: type=1400 audit(1752177678.713:1039): avc:  denied  { mounton } for  pid=6677 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  111.410938][   T29] audit: type=1400 audit(1752177678.713:1040): avc:  denied  { mount } for  pid=6677 comm="syz-executor" name="/" dev="gadgetfs" ino=4154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  111.472276][ T6787] SELinux: failed to load policy
[  111.583700][   T29] audit: type=1400 audit(1752177678.963:1041): avc:  denied  { create } for  pid=6794 comm="syz.6.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  111.603775][   T29] audit: type=1400 audit(1752177678.963:1042): avc:  denied  { write } for  pid=6794 comm="syz.6.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  111.676642][   T29] audit: type=1400 audit(1752177679.053:1043): avc:  denied  { setopt } for  pid=6798 comm="syz.6.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  111.745153][ T6803] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  111.746714][   T29] audit: type=1400 audit(1752177679.123:1044): avc:  denied  { mac_admin } for  pid=6802 comm="syz.0.1165" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  111.779005][   T29] audit: type=1400 audit(1752177679.143:1045): avc:  denied  { relabelto } for  pid=6802 comm="syz.0.1165" name="260" dev="tmpfs" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  111.823296][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1168'.
[  111.851510][ T6813] 9pnet: Could not find request transport: tcffective_cpus
[  111.871635][ T6818] ALSA: seq fatal error: cannot create timer (-22)
[  111.931493][ T6821] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  111.940060][ T6821] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  111.945148][ T6620] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.983728][ T6620] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.997708][ T6620] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.012565][ T6620] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.060925][ T6836] can0: slcan on ttyS3.
[  112.120794][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'.
[  112.130189][ T6836] can0 (unregistered): slcan off ttyS3.
[  112.136494][ T6836] Falling back ldisc for ttyS3.
[  112.152803][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1183'.
[  112.162598][ T6844] netem: change failed
[  112.180210][ T6847] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1184'.
[  112.276893][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1192'.
[  112.345422][ T6866] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  112.360028][ T6860] loop5: detected capacity change from 0 to 1024
[  112.369765][ T6860] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  112.383790][ T6860] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  112.398785][ T6860] EXT4-fs (loop5): invalid journal inode
[  112.422531][ T6860] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  112.533712][ T6889] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  112.570754][ T6889] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.593032][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1208'.
[  112.615839][ T6889] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.635177][ T6901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6901 comm=syz.0.1211
[  112.647707][ T6901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6901 comm=syz.0.1211
[  112.684052][ T6889] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.733615][ T6899] loop6: detected capacity change from 0 to 1024
[  112.734668][ T6889] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.751916][ T6899] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  112.762866][ T6899] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  112.779454][ T6899] EXT4-fs (loop6): invalid journal inode
[  112.810046][ T6899] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  112.856298][ T6913] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1217'.
[  112.885003][   T36] usb 9-1: enqueue for inactive port 0
[  112.888475][ T6916] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  112.890679][   T36] usb 9-1: enqueue for inactive port 0
[  112.947964][ T6918] syzkaller0: entered promiscuous mode
[  112.953652][ T6918] syzkaller0: entered allmulticast mode
[  112.984109][   T36] vhci_hcd: vhci_device speed not set
[  113.407123][ T6960] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11)
[  113.413781][ T6960] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  113.421472][ T6960] vhci_hcd vhci_hcd.0: Device attached
[  113.641926][ T3412] vhci_hcd: vhci_device speed not set
[  113.708154][ T6966] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  113.739422][ T3412] usb 13-1: new full-speed USB device number 2 using vhci_hcd
[  113.748021][ T6966] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.767023][ T6739] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.783531][ T6739] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.797833][ T6739] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.808447][ T6960] Set syz1 is full, maxelem 65536 reached
[  113.810384][ T6739] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.834561][ T6966] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.884416][ T6966] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.934415][ T6966] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.987828][ T6966] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.998921][ T6966] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.010002][ T6966] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.021114][ T6966] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.178601][ T6961] vhci_hcd: connection reset by peer
[  114.184781][  T150] vhci_hcd: stop threads
[  114.189056][  T150] vhci_hcd: release socket
[  114.193610][  T150] vhci_hcd: disconnect device
[  114.811487][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1251'.
[  114.845094][ T6998] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1252'.
[  114.990821][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'.
[  115.011362][ T7008] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[  115.043842][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'.
[  115.115059][ T7021] loop2: detected capacity change from 0 to 512
[  115.121706][ T7021] EXT4-fs: Ignoring removed nobh option
[  115.129566][ T7021] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1263: bg 0: block 393: padding at end of block bitmap is not set
[  115.145541][ T7021] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  115.154695][ T7021] EXT4-fs (loop2): 2 truncates cleaned up
[  115.159014][ T7026] xt_hashlimit: max too large, truncated to 1048576
[  115.161052][ T7021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.198670][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.252101][ T7034] loop2: detected capacity change from 0 to 2048
[  115.263758][ T7034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.277767][ T7034] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  115.304580][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.502979][ T7065] loop4: detected capacity change from 0 to 1024
[  115.503065][ T3413] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  115.503863][ T3413] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  115.520684][ T7065] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  115.538791][ T7065] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  115.552114][ T7065] EXT4-fs (loop4): invalid journal inode
[  115.571630][ T7065] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  115.612528][ T7079] loop4: detected capacity change from 0 to 256
[  115.642136][ T7083] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1291'.
[  115.695255][ T7091] netlink: 'syz.4.1295': attribute type 1 has an invalid length.
[  115.823153][ T7097] loop2: detected capacity change from 0 to 1024
[  115.832586][ T7097] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  115.842778][ T7097] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  115.856574][ T7097] EXT4-fs (loop2): invalid journal inode
[  115.873580][ T7097] syz!: rxe_newlink: already configured on team_slave_0
[  115.911748][ T7103] loop2: detected capacity change from 0 to 128
[  115.920918][ T7103] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  115.936874][ T7103] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  115.962788][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.964085][ T6889] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.994514][ T6889] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.013010][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'.
[  116.027668][ T6889] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.037260][ T7112] loop4: detected capacity change from 0 to 2048
[  116.053843][ T6889] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.083197][ T7112]  loop4: p1 < > p4
[  116.089316][ T7112] loop4: p4 size 8388608 extends beyond EOD, truncated
[  116.172424][ T7134] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  116.172424][ T7134]    program syz.5.1316 not setting count and/or reply_len properly
[  116.322415][   T29] kauditd_printk_skb: 93 callbacks suppressed
[  116.322429][   T29] audit: type=1400 audit(1752177683.693:1139): avc:  denied  { shutdown } for  pid=7162 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  116.348425][   T29] audit: type=1400 audit(1752177683.693:1140): avc:  denied  { getopt } for  pid=7162 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  116.367968][   T29] audit: type=1400 audit(1752177683.693:1141): avc:  denied  { name_connect } for  pid=7162 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  116.430003][ T7161] lo speed is unknown, defaulting to 1000
[  116.481354][   T29] audit: type=1400 audit(1752177683.853:1142): avc:  denied  { create } for  pid=7173 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  116.501178][   T29] audit: type=1400 audit(1752177683.853:1143): avc:  denied  { ioctl } for  pid=7173 comm="syz.0.1330" path="socket:[27152]" dev="sockfs" ino=27152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  116.673053][ T7194] program syz.6.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.720780][ T7200] netlink: 87 bytes leftover after parsing attributes in process `syz.6.1339'.
[  116.855276][ T7211] loop6: detected capacity change from 0 to 512
[  116.869329][ T7211] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  116.880763][   T29] audit: type=1400 audit(1752177684.243:1144): avc:  denied  { sqpoll } for  pid=7212 comm="syz.0.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  116.902291][ T7210] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  116.909035][ T7210] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  116.916675][ T7210] vhci_hcd vhci_hcd.0: Device attached
[  116.934233][ T7211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.957753][ T7211] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.007290][   T29] audit: type=1400 audit(1752177684.383:1145): avc:  denied  { setattr } for  pid=7209 comm="syz.6.1344" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.064427][ T7223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  117.071076][ T7223] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  117.078878][ T7223] vhci_hcd vhci_hcd.0: Device attached
[  117.088534][   T29] audit: type=1400 audit(1752177684.473:1146): avc:  denied  { unlink } for  pid=7209 comm="syz.6.1344" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.110980][ T3763] vhci_hcd: vhci_device speed not set
[  117.161642][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.172341][ T3763] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  117.181656][ T7229] loop2: detected capacity change from 0 to 2048
[  117.261929][ T7229]  loop2: p1 < > p4
[  117.265854][ T1039] vhci_hcd: vhci_device speed not set
[  117.275887][ T7229] loop2: p4 size 8388608 extends beyond EOD, truncated
[  117.331439][ T1039] usb 1-1: new full-speed USB device number 7 using vhci_hcd
[  117.387863][ T7237] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.1350'.
[  117.533235][ T7247] bond1: entered promiscuous mode
[  117.538357][ T7247] bond1: entered allmulticast mode
[  117.547870][ T7247] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.606136][ T7247] bond1 (unregistering): Released all slaves
[  117.632380][ T7217] vhci_hcd: connection reset by peer
[  117.636938][ T7210] Set syz1 is full, maxelem 65536 reached
[  117.638030][   T31] vhci_hcd: stop threads
[  117.647745][   T31] vhci_hcd: release socket
[  117.652228][   T31] vhci_hcd: disconnect device
[  117.677462][   T29] audit: type=1400 audit(1752177685.053:1147): avc:  denied  { ioctl } for  pid=7256 comm="syz.2.1359" path="socket:[27291]" dev="sockfs" ino=27291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  117.755227][   T29] audit: type=1400 audit(1752177685.133:1148): avc:  denied  { write } for  pid=7258 comm="syz.6.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  117.804456][ T7224] vhci_hcd: connection reset by peer
[  117.853707][   T31] vhci_hcd: stop threads
[  117.857871][ T7223] Set syz1 is full, maxelem 65536 reached
[  117.857998][   T31] vhci_hcd: release socket
[  117.868193][   T31] vhci_hcd: disconnect device
[  117.976491][ T7269] loop2: detected capacity change from 0 to 1024
[  117.988673][ T7269] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  117.999324][ T7269] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  118.016954][ T7269] EXT4-fs (loop2): invalid journal inode
[  118.040987][ T7269] syz!: rxe_newlink: already configured on team_slave_0
[  118.164397][ T7295] loop6: detected capacity change from 0 to 1024
[  118.176782][ T7295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.213980][ T7301] loop4: detected capacity change from 0 to 128
[  118.223364][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.286134][ T7313] loop6: detected capacity change from 0 to 128
[  118.294588][ T7313] EXT4-fs: Ignoring removed nobh option
[  118.301636][ T7313] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.327901][ T7313] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.375313][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.383845][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.423828][ T6677] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.465216][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'.
[  118.492051][ T7331] erspan0: entered promiscuous mode
[  118.498958][ T7335] loop6: detected capacity change from 0 to 128
[  118.502395][ T7331] macvtap1: entered promiscuous mode
[  118.510755][ T7331] macvtap1: entered allmulticast mode
[  118.516178][ T7331] erspan0: entered allmulticast mode
[  118.599778][ T7329] lo speed is unknown, defaulting to 1000
[  118.802552][ T3412] usb 13-1: enqueue for inactive port 0
[  118.808210][ T3412] usb 13-1: enqueue for inactive port 0
[  118.833999][ T7355] netlink: 'syz.2.1398': attribute type 3 has an invalid length.
[  118.882317][ T3412] vhci_hcd: vhci_device speed not set
[  118.922515][ T7360] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  118.941024][ T7360] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.970127][ T7363] loop4: detected capacity change from 0 to 8192
[  118.996911][ T7360] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.007212][ T7363]  loop4: p1 p3 p4
[  119.011025][ T7363] loop4: p1 size 8390912 extends beyond EOD, truncated
[  119.024079][ T7363] loop4: p3 size 589824 extends beyond EOD, truncated
[  119.077513][ T7360] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.141670][ T7379] geneve2: entered promiscuous mode
[  119.177209][ T7360] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.237725][ T7360] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.282239][ T7360] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.305297][ T7360] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.331921][ T7360] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.417912][ T7411] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  119.445949][ T7413] loop2: detected capacity change from 0 to 164
[  119.454545][ T7413] Unable to read rock-ridge attributes
[  119.462470][ T7413] Unable to read rock-ridge attributes
[  119.481360][ T7411] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.517461][ T7420] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1431'.
[  119.534429][ T7411] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.550453][ T7398] lo speed is unknown, defaulting to 1000
[  119.609519][ T7411] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.684423][ T7411] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.704758][ T7437] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  119.733842][ T7411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.748797][ T7411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.760919][ T7437] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.797118][ T7411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.811272][ T7432] loop5: detected capacity change from 0 to 1024
[  119.830257][ T7411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.840113][ T7437] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.853059][ T7432] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  119.880095][ T7432] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  119.900148][ T7432] EXT4-fs (loop5): invalid journal inode
[  119.915406][ T7456] futex_wake_op: syz.0.1446 tries to shift op by -1; fix this program
[  119.925499][ T7437] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.937052][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1444'.
[  119.946069][ T7452] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1444'.
[  119.959064][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'.
[  120.007129][ T7462] loop5: detected capacity change from 0 to 128
[  120.028138][ T7437] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.040100][ T7462] EXT4-fs: Ignoring removed nobh option
[  120.049435][ T7462] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.061799][ T7462] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.091491][ T4721] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.184202][ T7474] loop5: detected capacity change from 0 to 512
[  120.195008][ T7475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1453'.
[  120.234064][ T7474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  120.268261][ T7474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[  120.271254][ T7471] lo speed is unknown, defaulting to 1000
[  120.284007][ T7474] System zones: 1-12
[  120.289654][ T7474] EXT4-fs (loop5): 1 truncate cleaned up
[  120.296069][ T7474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.322877][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.419275][ T7493] loop6: detected capacity change from 0 to 164
[  120.426316][ T7493] ISOFS: unable to read i-node block
[  120.431632][ T7493] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  120.468311][ T7501] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1463'.
[  120.487863][ T7503] loop5: detected capacity change from 0 to 256
[  120.500680][ T7503] FAT-fs (loop5): Directory bread(block 64) failed
[  120.508172][ T7503] FAT-fs (loop5): Directory bread(block 65) failed
[  120.514899][ T7503] FAT-fs (loop5): Directory bread(block 66) failed
[  120.521520][ T7503] FAT-fs (loop5): Directory bread(block 67) failed
[  120.528242][ T7503] FAT-fs (loop5): Directory bread(block 68) failed
[  120.535070][ T7503] FAT-fs (loop5): Directory bread(block 69) failed
[  120.541828][ T7503] FAT-fs (loop5): Directory bread(block 70) failed
[  120.548624][ T7503] FAT-fs (loop5): Directory bread(block 71) failed
[  120.555345][ T7503] FAT-fs (loop5): Directory bread(block 72) failed
[  120.562013][ T7503] FAT-fs (loop5): Directory bread(block 73) failed
[  120.578656][ T7503] syz.5.1464: attempt to access beyond end of device
[  120.578656][ T7503] loop5: rw=524288, sector=1192, nr_sectors = 4 limit=256
[  120.594358][ T7503] syz.5.1464: attempt to access beyond end of device
[  120.594358][ T7503] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256
[  120.651692][ T7515] loop5: detected capacity change from 0 to 1024
[  120.673524][ T7515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.685695][ T7515] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.699760][ T7515] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  120.714810][ T7515] EXT4-fs (loop5): Remounting filesystem read-only
[  120.731192][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.156391][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1476'.
[  121.176807][ T7535] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  121.231009][ T7544] Illegal XDP return value 4294967274 on prog  (id 1024) dev syz_tun, expect packet loss!
[  121.309256][ T7550] syzkaller1: entered promiscuous mode
[  121.314926][ T7550] syzkaller1: entered allmulticast mode
[  121.462843][   T29] kauditd_printk_skb: 94 callbacks suppressed
[  121.462857][   T29] audit: type=1400 audit(1752177688.843:1243): avc:  denied  { write } for  pid=7559 comm="syz.6.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  121.520303][ T7567] loop5: detected capacity change from 0 to 512
[  121.534304][ T7567] EXT4-fs (loop5): too many log groups per flexible block group
[  121.542011][ T7567] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  121.549096][ T7567] EXT4-fs (loop5): mount failed
[  121.583074][ T7571] netlink: 'syz.5.1495': attribute type 1 has an invalid length.
[  121.591015][ T7571] netlink: 'syz.5.1495': attribute type 2 has an invalid length.
[  121.598937][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1495'.
[  121.614047][ T7565] loop6: detected capacity change from 0 to 1024
[  121.624581][ T7565] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  121.635355][ T7565] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  121.648769][ T7565] EXT4-fs (loop6): invalid journal inode
[  121.668898][ T7565] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  121.719248][ T7577] loop6: detected capacity change from 0 to 128
[  121.728561][ T7577] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.740781][ T7577] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.761226][   T29] audit: type=1400 audit(1752177689.133:1244): avc:  denied  { create } for  pid=7576 comm="syz.6.1498" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  121.804918][ T6677] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.848237][ T7585] netlink: 'syz.5.1501': attribute type 12 has an invalid length.
[  121.856230][ T7585] netlink: 'syz.5.1501': attribute type 29 has an invalid length.
[  121.864142][ T7585] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1501'.
[  121.876564][ T7587] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  121.889048][ T7587] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  121.901026][ T7587] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  121.980447][ T7589] loop5: detected capacity change from 0 to 1024
[  121.988898][ T7593] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  121.999009][ T7589] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  122.014809][ T7589] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  122.028839][ T7589] EXT4-fs (loop5): invalid journal inode
[  122.096561][ T7601] netlink: 2052 bytes leftover after parsing attributes in process `syz.6.1507'.
[  122.105909][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1507'.
[  122.231842][ T7613] SELinux: failed to load policy
[  122.242659][ T3763] usb 11-1: enqueue for inactive port 0
[  122.256217][ T3763] usb 11-1: enqueue for inactive port 0
[  122.322800][ T3763] vhci_hcd: vhci_device speed not set
[  122.405234][ T1039] usb 1-1: enqueue for inactive port 0
[  122.410763][ T1039] usb 1-1: enqueue for inactive port 0
[  122.424314][ T7622] loop5: detected capacity change from 0 to 1024
[  122.435022][ T7622] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  122.445375][ T7622] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  122.457271][ T7622] EXT4-fs (loop5): invalid journal inode
[  122.474411][ T7622] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  122.484032][ T1039] vhci_hcd: vhci_device speed not set
[  122.911969][ T7641] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  122.935639][ T7641] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.975540][ T7641] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.038516][ T7437] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.050267][ T7437] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.062076][ T7437] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.075792][ T7437] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.087088][ T7641] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.126945][ T7641] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.137601][ T7650] loop5: detected capacity change from 0 to 1024
[  123.147531][ T7654] loop2: detected capacity change from 0 to 128
[  123.154896][ T7654] EXT4-fs: Ignoring removed nobh option
[  123.156432][ T7650] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  123.171528][ T7653] netlink: 'syz.4.1531': attribute type 4 has an invalid length.
[  123.171838][ T7654] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.181024][ T7653] netlink: 'syz.4.1531': attribute type 4 has an invalid length.
[  123.193522][ T7654] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.200787][ T7650] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  123.225416][ T7650] EXT4-fs (loop5): invalid journal inode
[  123.233154][ T7641] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.245176][ T7641] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.252030][   T29] audit: type=1400 audit(1752177690.623:1245): avc:  denied  { rename } for  pid=7652 comm="syz.2.1530" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  123.260827][ T7650] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  123.320782][ T7641] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.340414][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.340638][ T7641] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.373921][ T7661] syzkaller1: entered promiscuous mode
[  123.379575][ T7661] syzkaller1: entered allmulticast mode
[  123.447253][ T7667] loop4: detected capacity change from 0 to 128
[  123.453819][   T29] audit: type=1326 audit(1752177690.823:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[  123.477323][   T29] audit: type=1326 audit(1752177690.823:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[  123.500872][   T29] audit: type=1326 audit(1752177690.823:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[  123.524417][   T29] audit: type=1326 audit(1752177690.823:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[  123.528279][ T7667] FAT-fs (loop4): Directory bread(block 162) failed
[  123.547877][   T29] audit: type=1326 audit(1752177690.823:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc9556fe929 code=0x7ffc0000
[  123.557570][ T7667] FAT-fs (loop4): Directory bread(block 163) failed
[  123.577881][   T29] audit: type=1326 audit(1752177690.823:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc9556fe963 code=0x7ffc0000
[  123.577910][   T29] audit: type=1326 audit(1752177690.823:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9556fd3df code=0x7ffc0000
[  123.585737][ T7667] FAT-fs (loop4): Directory bread(block 164) failed
[  123.637939][ T7667] FAT-fs (loop4): Directory bread(block 165) failed
[  123.653298][ T7667] FAT-fs (loop4): Directory bread(block 166) failed
[  123.680150][ T7667] FAT-fs (loop4): Directory bread(block 167) failed
[  123.687324][ T7667] FAT-fs (loop4): Directory bread(block 168) failed
[  123.694010][ T7667] FAT-fs (loop4): Directory bread(block 169) failed
[  123.710446][ T7677] netlink: 'syz.5.1541': attribute type 5 has an invalid length.
[  123.744056][ T7667] FAT-fs (loop4): Directory bread(block 162) failed
[  123.760628][ T7667] FAT-fs (loop4): Directory bread(block 163) failed
[  123.772336][ T3412] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  123.772825][ T7667] syz.4.1536: attempt to access beyond end of device
[  123.772825][ T7667] loop4: rw=3, sector=226, nr_sectors = 6 limit=128
[  123.793021][ T3412] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  123.794774][ T7667] syz.4.1536: attempt to access beyond end of device
[  123.794774][ T7667] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128
[  123.819627][ T7667] syz.4.1536: attempt to access beyond end of device
[  123.819627][ T7667] loop4: rw=3, sector=234, nr_sectors = 6 limit=128
[  123.832900][ T7667] syz.4.1536: attempt to access beyond end of device
[  123.832900][ T7667] loop4: rw=2051, sector=240, nr_sectors = 2 limit=128
[  123.852100][ T7686] netlink: 'syz.2.1545': attribute type 10 has an invalid length.
[  123.869912][ T7686] team0: Port device dummy0 added
[  123.889398][ T7686] netlink: 'syz.2.1545': attribute type 10 has an invalid length.
[  123.900042][ T7686] team0: Port device dummy0 removed
[  123.909214][ T7686] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  123.967964][ T7696] loop2: detected capacity change from 0 to 256
[  123.990944][ T7696] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152)
[  123.998878][ T7696] FAT-fs (loop2): Filesystem has been set read-only
[  124.031539][ T7688] loop5: detected capacity change from 0 to 1024
[  124.039146][ T7699] pim6reg1: entered promiscuous mode
[  124.044652][ T7699] pim6reg1: entered allmulticast mode
[  124.052252][ T7696] loop2: detected capacity change from 256 to 0
[  124.062793][ T7696] syz.2.1549: attempt to access beyond end of device
[  124.062793][ T7696] loop2: rw=0, sector=4, nr_sectors = 4 limit=0
[  124.067377][ T7688] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  124.088127][ T7696] FAT-fs (loop2): FAT read failed (blocknr 1)
[  124.090689][ T7688] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  124.137442][ T3317] syz-executor: attempt to access beyond end of device
[  124.137442][ T3317] loop2: rw=0, sector=12, nr_sectors = 4 limit=0
[  124.177768][ T3317] FAT-fs (loop2): Directory bread(block 3) failed
[  124.186228][ T7688] EXT4-fs (loop5): invalid journal inode
[  124.195361][ T7716] netlink: 'syz.6.1560': attribute type 2 has an invalid length.
[  124.340306][ T7733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=7733 comm=syz.5.1568
[  124.359435][ T7739] loop4: detected capacity change from 0 to 512
[  124.377368][ T7739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.392064][ T7739] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.474865][ T7752] pim6reg1: entered promiscuous mode
[  124.480275][ T7752] pim6reg1: entered allmulticast mode
[  124.515025][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.559518][ T7763] loop6: detected capacity change from 0 to 512
[  124.576834][ T7763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  124.585377][ T7763] System zones: 1-12
[  124.586042][ T7765] pim6reg1: entered promiscuous mode
[  124.594789][ T7765] pim6reg1: entered allmulticast mode
[  124.594947][ T7763] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1580: error while reading EA inode 32 err=-116
[  124.615078][ T7763] EXT4-fs (loop6): Remounting filesystem read-only
[  124.621637][ T7763] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  124.631888][ T7763] EXT4-fs (loop6): 1 orphan inode deleted
[  124.638234][ T7763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.670316][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.694904][ T7768] loop4: detected capacity change from 0 to 1024
[  124.715863][ T7768] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  124.731824][ T7768] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  124.753400][ T7768] EXT4-fs (loop4): invalid journal inode
[  124.775191][ T7768] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  125.053927][ T7795] loop4: detected capacity change from 0 to 1024
[  125.075163][ T7795] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  125.101034][ T7795] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  125.128518][ T7795] EXT4-fs (loop4): invalid journal inode
[  125.135855][ T7813] sd 0:0:1:0: device reset
[  125.158131][ T7804] loop5: detected capacity change from 0 to 1024
[  125.181076][ T7804] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  125.197290][ T7804] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  125.237606][ T7804] EXT4-fs (loop5): invalid journal inode
[  125.251538][ T7821] bridge0: entered promiscuous mode
[  125.268701][ T7821] macsec1: entered promiscuous mode
[  125.278236][ T7821] bridge0: port 3(macsec1) entered blocking state
[  125.285047][ T7821] bridge0: port 3(macsec1) entered disabled state
[  125.287303][ T7804] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  125.293929][ T7821] macsec1: entered allmulticast mode
[  125.303621][ T7821] bridge0: entered allmulticast mode
[  125.338502][ T7821] macsec1: left allmulticast mode
[  125.343605][ T7821] bridge0: left allmulticast mode
[  125.349403][ T7821] bridge0: left promiscuous mode
[  125.386955][ T7836] loop5: detected capacity change from 0 to 128
[  125.395334][ T7836] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  125.403288][ T7836] FAT-fs (loop5): Filesystem has been set read-only
[  125.411166][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.411166][ T7836] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  125.426270][ T7836] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  125.434197][ T7836] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  125.444294][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.444294][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.467414][ T7838] loop4: detected capacity change from 0 to 1764
[  125.504846][ T7838] iso9660: Corrupted directory entry in block 0 of inode 1792
[  125.542864][ T7843] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  125.584995][ T7836] bio_check_eod: 2708 callbacks suppressed
[  125.585065][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.585065][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.606197][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.606197][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.620330][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.620330][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.638641][ T7845] pimreg: entered allmulticast mode
[  125.642312][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.642312][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.644835][ T7845] pimreg: left allmulticast mode
[  125.657638][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.657638][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.677410][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.677410][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.692737][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.692737][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.706045][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.706045][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.719807][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.719807][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.735704][ T7836] syz.5.1614: attempt to access beyond end of device
[  125.735704][ T7836] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  125.969649][ T7856] loop6: detected capacity change from 0 to 1024
[  125.981837][ T7866] __nla_validate_parse: 4 callbacks suppressed
[  125.981853][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1628'.
[  125.997054][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1628'.
[  126.006039][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1628'.
[  126.017170][ T7856] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  126.017370][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1628'.
[  126.054221][ T7856] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  126.077432][ T7872] tipc: Enabled bearer <udp:s>, priority 10
[  126.081065][ T7856] EXT4-fs (loop6): invalid journal inode
[  126.106426][ T7856] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  126.210140][ T7876] lo speed is unknown, defaulting to 1000
[  126.261439][ T7886] sd 0:0:1:0: device reset
[  126.334984][ T7888] loop5: detected capacity change from 0 to 8192
[  126.427276][ T7891] lo speed is unknown, defaulting to 1000
[  126.525719][ T7896] netlink: 664 bytes leftover after parsing attributes in process `syz.6.1640'.
[  126.573251][   T29] kauditd_printk_skb: 499 callbacks suppressed
[  126.573264][   T29] audit: type=1400 audit(1752177693.943:1752): avc:  denied  { cmd } for  pid=7899 comm="syz.5.1641" path="socket:[30715]" dev="sockfs" ino=30715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  126.606509][ T7898] SELinux: ebitmap start bit (132096) is beyond the end of the bitmap (1472)
[  126.610973][   T29] audit: type=1326 audit(1752177693.983:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.638815][   T29] audit: type=1326 audit(1752177693.983:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.640826][ T7898] SELinux: failed to load policy
[  126.666708][   T29] audit: type=1326 audit(1752177694.043:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.691044][   T29] audit: type=1326 audit(1752177694.043:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.714542][   T29] audit: type=1326 audit(1752177694.043:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.738052][   T29] audit: type=1326 audit(1752177694.043:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.761669][   T29] audit: type=1326 audit(1752177694.043:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.785145][   T29] audit: type=1326 audit(1752177694.043:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  126.808797][   T29] audit: type=1326 audit(1752177694.043:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  126.836137][ T7904] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1644'.
[  126.845174][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1644'.
[  126.859995][ T7906] loop6: detected capacity change from 0 to 128
[  126.868346][ T7906] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  126.880745][ T7906] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  126.950801][ T6677] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.997761][ T7922] ALSA: seq fatal error: cannot create timer (-19)
[  127.025244][ T7927] loop6: detected capacity change from 0 to 512
[  127.031896][ T7927] EXT4-fs: Ignoring removed mblk_io_submit option
[  127.038404][ T7927] EXT4-fs: inline encryption not supported
[  127.044459][ T7927] EXT4-fs: test_dummy_encryption option not supported
[  127.053849][ T7927] loop6: detected capacity change from 0 to 128
[  127.060655][ T7927] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  127.075119][ T7927] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  127.134776][ T7937] loop6: detected capacity change from 0 to 512
[  127.164696][ T7937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.180763][ T7944] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  127.205840][ T7937] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  127.217310][ T7929] loop5: detected capacity change from 0 to 1024
[  127.252873][ T7929] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  127.269363][ T7929] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  127.271519][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.291351][ T7929] EXT4-fs (loop5): invalid journal inode
[  127.307875][ T7950] random: crng reseeded on system resumption
[  127.336340][ T7954] IPv4: Oversized IP packet from 127.202.26.0
[  127.358104][ T7956] loop6: detected capacity change from 0 to 256
[  127.434771][   T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.564162][   T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.613901][ T7979] netlink: 'syz.5.1674': attribute type 10 has an invalid length.
[  127.623089][   T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.651055][ T7979] team0: Port device dummy0 added
[  127.658402][ T7966] lo speed is unknown, defaulting to 1000
[  127.665625][ T7982] loop6: detected capacity change from 0 to 512
[  127.672880][ T7979] netlink: 'syz.5.1674': attribute type 10 has an invalid length.
[  127.676090][ T7982] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1676: iget: bad extended attribute block 1
[  127.694158][   T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.694991][ T7982] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1676: couldn't read orphan inode 15 (err -117)
[  127.717688][ T7982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.731980][ T7982] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.741425][ T7979] team0: Port device dummy0 removed
[  127.749194][ T7979] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  127.842175][   T37] bridge_slave_1: left allmulticast mode
[  127.847988][   T37] bridge_slave_1: left promiscuous mode
[  127.853725][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.869446][   T37] bridge_slave_0: left allmulticast mode
[  127.875301][   T37] bridge_slave_0: left promiscuous mode
[  127.881015][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.005898][   T37] erspan0 (unregistering): left allmulticast mode
[  128.103658][ T8003] loop5: detected capacity change from 0 to 256
[  128.116597][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.157169][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.171186][   T37] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  128.186724][   T37] bond0 (unregistering): Released all slaves
[  128.206127][ T7966] chnl_net:caif_netlink_parms(): no params data found
[  128.288021][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.295153][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.305005][ T7966] bridge_slave_0: entered allmulticast mode
[  128.318355][ T7966] bridge_slave_0: entered promiscuous mode
[  128.330995][ T7996] lo speed is unknown, defaulting to 1000
[  128.340047][ T8017] bridge0: entered promiscuous mode
[  128.347818][ T8017] macsec1: entered promiscuous mode
[  128.354147][ T8017] bridge0: port 3(macsec1) entered blocking state
[  128.360612][ T8017] bridge0: port 3(macsec1) entered disabled state
[  128.368339][ T8017] macsec1: entered allmulticast mode
[  128.373744][ T8017] bridge0: entered allmulticast mode
[  128.379784][ T8017] macsec1: left allmulticast mode
[  128.384964][ T8017] bridge0: left allmulticast mode
[  128.390612][ T8017] bridge0: left promiscuous mode
[  128.400365][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.407489][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.414813][ T7966] bridge_slave_1: entered allmulticast mode
[  128.421446][ T7966] bridge_slave_1: entered promiscuous mode
[  128.439306][ T7993] lo speed is unknown, defaulting to 1000
[  128.458718][ T8019] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  128.465344][ T8019] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  128.472947][ T8019] vhci_hcd vhci_hcd.0: Device attached
[  128.484883][   T37] hsr_slave_0: left promiscuous mode
[  128.490521][   T37] 0·: left promiscuous mode
[  128.496738][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.504241][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.511824][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.519336][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.529130][   T37] veth1_macvtap: left promiscuous mode
[  128.534724][   T37] veth0_macvtap: left promiscuous mode
[  128.652285][ T3413] vhci_hcd: vhci_device speed not set
[  128.691425][   T37] team0 (unregistering): Port device team_slave_1 removed
[  128.711555][   T37] team0 (unregistering): Port device team_slave_0 removed
[  128.718790][ T3413] usb 11-1: new full-speed USB device number 3 using vhci_hcd
[  128.728451][  T150] smc: removing ib device syz!
[  128.785762][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.894981][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.929248][ T8025] Set syz1 is full, maxelem 65536 reached
[  129.016003][ T7966] team0: Port device team_slave_0 added
[  129.058451][ T7966] team0: Port device team_slave_1 added
[  129.097577][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.104696][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.130850][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.149097][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.156147][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.182142][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.196306][ T8022] vhci_hcd: connection reset by peer
[  129.202157][  T150] vhci_hcd: stop threads
[  129.206556][  T150] vhci_hcd: release socket
[  129.211012][  T150] vhci_hcd: disconnect device
[  129.234661][ T7966] hsr_slave_0: entered promiscuous mode
[  129.241094][ T7966] hsr_slave_1: entered promiscuous mode
[  129.247334][ T7966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.255200][ T7966] Cannot create hsr debugfs directory
[  129.349467][ T7966] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  129.358816][ T7966] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  129.371654][ T7966] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  129.382149][ T7966] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  129.419567][ T7966] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.433869][ T7966] 8021q: adding VLAN 0 to HW filter on device team0
[  129.444894][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.451980][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.464704][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.471778][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.489512][ T7966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  129.499962][ T7966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.556509][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.676317][ T7966] veth0_vlan: entered promiscuous mode
[  129.687438][ T7966] veth1_vlan: entered promiscuous mode
[  129.706455][ T7966] veth0_macvtap: entered promiscuous mode
[  129.724334][ T7966] veth1_macvtap: entered promiscuous mode
[  129.731096][ T8083] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  129.737009][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.760682][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.771405][ T7966] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.780250][ T7966] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.789027][ T7966] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.797833][ T7966] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.903526][ T8101] vhci_hcd: invalid port number 65
[  129.908763][ T8101] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  129.983844][ T8111] netem: incorrect gi model size
[  129.988926][ T8111] netem: change failed
[  130.005526][ T8109] loop6: detected capacity change from 0 to 8192
[  130.027595][ T8109] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  130.036608][ T8109] FAT-fs (loop6): Filesystem has been set read-only
[  130.204439][ T8131] netlink: 20 bytes leftover after parsing attributes in process `+}[@'.
[  130.222284][ T8131] netlink: 56 bytes leftover after parsing attributes in process `+}[@'.
[  130.282069][ T8128] loop4: detected capacity change from 0 to 8192
[  130.332620][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'.
[  130.362315][ T8144] random: crng reseeded on system resumption
[  130.530960][ T8147] loop7: detected capacity change from 0 to 1024
[  130.546781][ T8147] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  130.572167][ T8147] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  130.586322][ T8147] EXT4-fs (loop7): invalid journal inode
[  130.735495][ T8174] random: crng reseeded on system resumption
[  130.893320][ T8188] loop6: detected capacity change from 0 to 2048
[  130.965836][ T8147] infiniband syz!: set active
[  130.971087][ T8147] infiniband syz!: added team_slave_0
[  131.015393][ T8147] RDS/IB: syz!: added
[  131.019832][ T8147] smc: adding ib device syz! with port count 1
[  131.027223][ T8147] smc:    ib device syz! port 1 has pnetid 
[  131.141786][ T8201] loop6: detected capacity change from 0 to 8192
[  131.250747][ T8214] loop5: detected capacity change from 0 to 1024
[  131.265232][ T8214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.370236][ T8214] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1762: Allocating blocks 497-513 which overlap fs metadata
[  131.502322][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.505163][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.522098][ T8224] bridge_slave_1 (unregistering): left allmulticast mode
[  131.529388][ T8224] bridge_slave_1 (unregistering): left promiscuous mode
[  131.536417][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.577286][ T8233] loop6: detected capacity change from 0 to 1024
[  131.584969][ T8233] EXT4-fs: Ignoring removed nobh option
[  131.590573][ T8233] EXT4-fs: Ignoring removed bh option
[  131.604802][ T8233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.637766][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  131.637780][   T29] audit: type=1400 audit(1752177699.013:1778): avc:  denied  { execute } for  pid=8232 comm="syz.6.1769" path="/178/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  131.670417][ T8233] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1769: Allocating blocks 481-513 which overlap fs metadata
[  131.733425][ T8241] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1772'.
[  131.743161][ T8190] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  131.806097][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.815258][ T8243] loop5: detected capacity change from 0 to 8192
[  131.822160][   T29] audit: type=1400 audit(1752177699.193:1779): avc:  denied  { cpu } for  pid=8246 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  131.903593][ T4721] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  131.911517][ T4721] FAT-fs (loop5): Filesystem has been set read-only
[  132.044599][ T8270] bridge: RTM_NEWNEIGH with invalid ether address
[  132.090208][   T29] audit: type=1400 audit(1752177699.463:1780): avc:  denied  { lock } for  pid=8275 comm="syz.6.1789" path="socket:[31548]" dev="sockfs" ino=31548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  132.140879][   T29] audit: type=1400 audit(1752177699.513:1781): avc:  denied  { shutdown } for  pid=8280 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  132.278288][   T29] audit: type=1400 audit(1752177699.653:1782): avc:  denied  { bind } for  pid=8293 comm="syz.6.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  132.387659][ T8308] tipc: Started in network mode
[  132.392583][ T8308] tipc: Node identity ac14140f, cluster identity 4711
[  132.399483][ T8308] tipc: New replicast peer: 255.255.255.255
[  132.405633][ T8308] tipc: Enabled bearer <udp:syz2>, priority 10
[  132.472288][ T8320] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  132.494854][ T8320] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.506376][ T8321] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  132.512985][ T8321] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  132.520582][ T8321] vhci_hcd vhci_hcd.0: Device attached
[  132.584017][ T8320] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.634509][ T8320] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.703191][ T3386] vhci_hcd: vhci_device speed not set
[  132.710050][ T8320] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.759029][ T8320] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.767445][ T3386] usb 1-1: new full-speed USB device number 8 using vhci_hcd
[  132.778582][ T8320] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.790160][ T8320] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.801710][ T8320] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.889934][ T8335] lo speed is unknown, defaulting to 1000
[  132.961329][ T8342] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  133.011660][   T29] audit: type=1326 audit(1752177700.383:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.5.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  133.036664][   T29] audit: type=1326 audit(1752177700.383:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.5.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  133.060259][   T29] audit: type=1326 audit(1752177700.383:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.5.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  133.083752][   T29] audit: type=1326 audit(1752177700.393:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.5.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  133.107312][   T29] audit: type=1326 audit(1752177700.393:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.5.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10d99be929 code=0x7ffc0000
[  133.180841][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1824'.
[  133.190434][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1824'.
[  133.260904][ T8322] vhci_hcd: connection reset by peer
[  133.266880][   T31] vhci_hcd: stop threads
[  133.271146][   T31] vhci_hcd: release socket
[  133.275592][   T31] vhci_hcd: disconnect device
[  133.488595][ T8368] loop4: detected capacity change from 0 to 1024
[  133.495874][ T8368] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  133.508048][ T8368] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  133.516165][ T8368] EXT4-fs (loop4): orphan cleanup on readonly fs
[  133.522677][  T804] tipc: Node number set to 2886997007
[  133.529873][ T8368] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1830: bg 0: block 10: padding at end of block bitmap is not set
[  133.545124][ T8368] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1830: Failed to acquire dquot type 0
[  133.560965][ T8368] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1830: Failed to acquire dquot type 0
[  133.589468][ T8368] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1830: Freeing blocks not in datazone - block = 0, count = 4096
[  133.618707][ T8368] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1830: Failed to acquire dquot type 0
[  133.638738][ T8368] EXT4-fs (loop4): 1 orphan inode deleted
[  133.657451][ T8368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.697051][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.772825][ T3413] usb 11-1: enqueue for inactive port 0
[  133.780357][ T3413] usb 11-1: enqueue for inactive port 0
[  133.803199][ T8397] loop7: detected capacity change from 0 to 128
[  133.814086][ T8397] EXT4-fs: Ignoring removed nobh option
[  133.823937][ T8397] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.840127][ T8397] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.870355][ T3413] vhci_hcd: vhci_device speed not set
[  133.874711][ T3763] kernel write not supported for file /622/clear_refs (pid: 3763 comm: kworker/0:5)
[  133.927143][ T8411] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  134.057621][ T8428] loop4: detected capacity change from 0 to 512
[  134.074149][ T8428] EXT4-fs (loop4): 1 orphan inode deleted
[  134.080238][ T8428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.094369][  T568] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  134.105960][ T8428] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.121709][ T8431] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  134.128405][ T8431] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  134.136037][ T8431] vhci_hcd vhci_hcd.0: Device attached
[  134.495433][ T8431] Set syz1 is full, maxelem 65536 reached
[  134.640688][ T7966] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.659534][ T8444] program syz.7.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  134.883202][ T8434] vhci_hcd: connection closed
[  134.883474][   T12] vhci_hcd: stop threads
[  134.892485][   T12] vhci_hcd: release socket
[  134.897052][   T12] vhci_hcd: disconnect device
[  134.904771][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.931488][ T8453] loop4: detected capacity change from 0 to 2048
[  134.974025][ T8453]  loop4: p1 < > p4
[  134.978479][ T8453] loop4: p4 size 8388608 extends beyond EOD, truncated
[  135.102819][ T8467] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  135.149196][ T8473] loop4: detected capacity change from 0 to 512
[  135.164024][ T8473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.176877][ T8473] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.193403][ T8473] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1875: corrupted inode contents
[  135.206499][ T8473] EXT4-fs (loop4): Remounting filesystem read-only
[  135.213496][ T8473] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30)
[  135.232917][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.361497][ T8480] loop4: detected capacity change from 0 to 1024
[  135.372119][ T8480] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  135.382676][ T8480] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  135.394993][ T8480] EXT4-fs (loop4): invalid journal inode
[  135.442363][   T37] ==================================================================
[  135.450492][   T37] BUG: KCSAN: data-race in batadv_bla_purge_backbone_gw / batadv_bla_tx
[  135.458831][   T37] 
[  135.461166][   T37] write to 0xffff88811d442a20 of 8 bytes by interrupt on cpu 1:
[  135.468799][   T37]  batadv_bla_tx+0x7a6/0xc30
[  135.473398][   T37]  batadv_interface_tx+0x35c/0xb30
[  135.478534][   T37]  dev_hard_start_xmit+0x125/0x3e0
[  135.483665][   T37]  __dev_queue_xmit+0x10b9/0x1fb0
[  135.488703][   T37]  ip6_finish_output2+0xa3c/0xd30
[  135.493742][   T37]  ip6_finish_output+0x3a2/0x530
[  135.498691][   T37]  ip6_output+0xfd/0x240
[  135.502942][   T37]  ndisc_send_skb+0x4da/0x700
[  135.507626][   T37]  ndisc_send_rs+0x2e7/0x360
[  135.512232][   T37]  addrconf_rs_timer+0x1e5/0x310
[  135.517182][   T37]  call_timer_fn+0x38/0x2c0
[  135.521693][   T37]  __run_timer_base+0x415/0x610
[  135.526567][   T37]  run_timer_softirq+0x31/0x70
[  135.531349][   T37]  handle_softirqs+0xb7/0x290
[  135.536040][   T37]  __irq_exit_rcu+0x3a/0xc0
[  135.540549][   T37]  sysvec_apic_timer_interrupt+0x74/0x80
[  135.546192][   T37]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.552176][   T37]  pv_native_safe_halt+0x13/0x20
[  135.557142][   T37]  default_idle+0x13/0x20
[  135.561487][   T37]  default_idle_call+0x3d/0x70
[  135.566276][   T37]  do_idle+0xcb/0x240
[  135.570281][   T37]  cpu_startup_entry+0x25/0x30
[  135.575066][   T37]  start_secondary+0x95/0xa0
[  135.579672][   T37]  common_startup_64+0x13e/0x147
[  135.584633][   T37] 
[  135.586964][   T37] read to 0xffff88811d442a20 of 8 bytes by task 37 on cpu 0:
[  135.594342][   T37]  batadv_bla_purge_backbone_gw+0x129/0x2d0
[  135.600248][   T37]  batadv_bla_periodic_work+0x103/0x580
[  135.605803][   T37]  process_scheduled_works+0x4cb/0x9d0
[  135.611289][   T37]  worker_thread+0x582/0x770
[  135.615904][   T37]  kthread+0x489/0x510
[  135.619983][   T37]  ret_from_fork+0xda/0x150
[  135.624502][   T37]  ret_from_fork_asm+0x1a/0x30
[  135.629277][   T37] 
[  135.631607][   T37] value changed: 0x00000000ffffbb82 -> 0x00000000ffffbf80
[  135.638719][   T37] 
[  135.641048][   T37] Reported by Kernel Concurrency Sanitizer on:
[  135.647222][   T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) 
[  135.659648][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.669717][   T37] Workqueue: bat_events batadv_bla_periodic_work
[  135.676059][   T37] ==================================================================
[  136.004127][   T37] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.063749][   T37] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.143363][   T37] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.193795][   T37] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.254656][   T37] bridge_slave_1: left allmulticast mode
[  136.260359][   T37] bridge_slave_1: left promiscuous mode
[  136.266135][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.273891][   T37] bridge_slave_0: left allmulticast mode
[  136.279535][   T37] bridge_slave_0: left promiscuous mode
[  136.285181][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.364527][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.373982][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.383470][   T37] bond0 (unregistering): Released all slaves
[  136.440311][   T37] hsr_slave_0: left promiscuous mode
[  136.445995][   T37] hsr_slave_1: left promiscuous mode
[  136.451592][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.459028][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.466658][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.474119][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.484194][   T37] veth1_macvtap: left promiscuous mode
[  136.489696][   T37] veth0_macvtap: left promiscuous mode
[  136.495287][   T37] veth1_vlan: left promiscuous mode
[  136.500502][   T37] veth0_vlan: left promiscuous mode
[  136.557021][   T37] team0 (unregistering): Port device team_slave_1 removed
[  136.566869][   T37] team0 (unregistering): Port device team_slave_0 removed
[  137.842277][ T3386] usb 1-1: enqueue for inactive port 0
[  137.847843][ T3386] usb 1-1: enqueue for inactive port 0
[  137.922473][ T3386] vhci_hcd: vhci_device speed not set