last executing test programs:

1m20.238329302s ago: executing program 1 (id=1183):
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
syz_open_dev$evdev(0x0, 0x0, 0x20000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r3)

1m19.927818074s ago: executing program 1 (id=1186):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

1m19.573211806s ago: executing program 1 (id=1191):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x1d)

1m19.362376208s ago: executing program 1 (id=1193):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m19.284249139s ago: executing program 1 (id=1195):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x8}, 'port1\x00', 0x22, 0x0, 0xffff, 0x7, 0x598, 0x4000036e, 0x0, 0x0, 0x2, 0x46})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1a0682)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfd}, {0x80}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c)

1m18.532625105s ago: executing program 1 (id=1198):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

1m18.078874798s ago: executing program 32 (id=1198):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

1m12.374936711s ago: executing program 3 (id=1234):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x801)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0)

1m12.260190842s ago: executing program 0 (id=1236):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

1m12.113052403s ago: executing program 3 (id=1238):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3800046, &(0x7f0000000100), 0x1, 0x55e, &(0x7f00000006c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB, @ANYRES32=0x0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000340)=""/160}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250)

1m11.931601765s ago: executing program 0 (id=1240):
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'})
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

1m11.447022619s ago: executing program 0 (id=1245):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x2c, r0, 0x1, 0x0, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x4000000)

1m11.311788459s ago: executing program 0 (id=1246):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

1m11.054899831s ago: executing program 0 (id=1249):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x101)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
close_range(r0, r2, 0x0)

1m10.661069824s ago: executing program 3 (id=1252):
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
close(r0)

1m9.647343712s ago: executing program 0 (id=1254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

1m8.331010272s ago: executing program 33 (id=1254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

1m8.282731312s ago: executing program 3 (id=1258):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

1m8.047633844s ago: executing program 3 (id=1261):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1m7.364964819s ago: executing program 2 (id=1266):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000feffff95"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cca", 0x10, 0x3c, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)

1m7.22110998s ago: executing program 2 (id=1267):
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
close(r0)

1m7.101800031s ago: executing program 2 (id=1268):
syz_emit_ethernet(0x3e, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x50, 0x2, 0x8}}}}}}, 0x0)

1m7.004489282s ago: executing program 2 (id=1269):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

1m6.911717232s ago: executing program 2 (id=1270):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)

1m5.660795642s ago: executing program 3 (id=1273):
r0 = syz_io_uring_setup(0x32a7, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
io_uring_enter(r0, 0x92, 0x1067, 0x0, 0x0, 0x0)

1m5.573124463s ago: executing program 2 (id=1274):
r0 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)=<r1=>0x0)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000d80)={<r2=>0x0, "b9104039a758534f73a1c223f7a4417a"})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001d80)={{r0}, r1, 0x0, @unused=[0x80000000, 0x0, 0x6, 0x4], @devid=r2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601200080010e0bed2ab8bb8b720000000000000000000bbff020000000000000000000000000001860090780100020000000000000000002088885687d5c9a6b6dcfdc236c9d3164ca497ea57ba581f8010d1513b5b2c6da6e61c0a859f708b1c7650a073de90b63f6ebaa5e36cb9bdd99afbc0f80eab608cab417094c9ea2ab8afd0fb225bf771cfd5e5a0834f0d0842d2b9e02afa43"], 0x0)
syz_emit_ethernet(0x93, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r4 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
sendmsg$nl_route(r4, 0x0, 0x20008041)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$bind(&(0x7f0000000580)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000640)='./file0/../file0/../file0/../file0\x00', &(0x7f00000007c0), 0x812044, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
rename(0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)

1m5.270454535s ago: executing program 34 (id=1273):
r0 = syz_io_uring_setup(0x32a7, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
io_uring_enter(r0, 0x92, 0x1067, 0x0, 0x0, 0x0)

1m4.922301168s ago: executing program 35 (id=1274):
r0 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)=<r1=>0x0)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000d80)={<r2=>0x0, "b9104039a758534f73a1c223f7a4417a"})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001d80)={{r0}, r1, 0x0, @unused=[0x80000000, 0x0, 0x6, 0x4], @devid=r2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601200080010e0bed2ab8bb8b720000000000000000000bbff020000000000000000000000000001860090780100020000000000000000002088885687d5c9a6b6dcfdc236c9d3164ca497ea57ba581f8010d1513b5b2c6da6e61c0a859f708b1c7650a073de90b63f6ebaa5e36cb9bdd99afbc0f80eab608cab417094c9ea2ab8afd0fb225bf771cfd5e5a0834f0d0842d2b9e02afa43"], 0x0)
syz_emit_ethernet(0x93, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r4 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
sendmsg$nl_route(r4, 0x0, 0x20008041)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$bind(&(0x7f0000000580)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000640)='./file0/../file0/../file0/../file0\x00', &(0x7f00000007c0), 0x812044, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
rename(0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)

13.730239556s ago: executing program 4 (id=1534):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_read_part_table(0x5c8, &(0x7f0000000600)="$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")

13.322122759s ago: executing program 4 (id=1538):
r0 = socket$inet(0x2, 0x802, 0x1)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x80000003, 0x4)
write(r0, &(0x7f0000000440)="08008edf773c8000", 0x8)
recvmsg$inet_nvme(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10002)

13.061117611s ago: executing program 4 (id=1539):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@errors_remount}]}, 0x1, 0x782, &(0x7f0000002200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xee58, 0x400, 0x1, 0xb35}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

11.198296046s ago: executing program 4 (id=1546):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

11.017298407s ago: executing program 6 (id=1547):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
socket$kcm(0xa, 0x3, 0x73)
socket$packet(0x11, 0x2, 0x300)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c0c8)
syz_emit_ethernet(0xe, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)

10.125764293s ago: executing program 6 (id=1550):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0xfdffffff}, 0x0)

9.725242776s ago: executing program 6 (id=1554):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)
write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38)

9.578322848s ago: executing program 4 (id=1556):
r0 = syz_clone(0x20b20000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000280)='fdinfo\x00')

8.877337093s ago: executing program 4 (id=1563):
r0 = socket$inet(0x2, 0x802, 0x1)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x80000003, 0x4)
write(r0, &(0x7f0000000440)="08008edf773c8000", 0x8)
recvmsg$inet_nvme(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10002)

8.815990693s ago: executing program 7 (id=1564):
io_uring_setup(0x45b2, &(0x7f0000000080)={0x0, 0xfa5f, 0x1000, 0x0, 0x207})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000450000000200"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004400)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xff}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4}, 0x0)

7.651790752s ago: executing program 36 (id=1563):
r0 = socket$inet(0x2, 0x802, 0x1)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x80000003, 0x4)
write(r0, &(0x7f0000000440)="08008edf773c8000", 0x8)
recvmsg$inet_nvme(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10002)

7.632063592s ago: executing program 6 (id=1566):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

7.584325643s ago: executing program 7 (id=1569):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=<r6=>r5, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000712"], 0x30}, 0x0)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0xf0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000f02d4b02bc4be10540d4c1964d37b77b0115a0aeaa1f61b5af332f0d28267163d0dae2c9b5d7429cfb4b7dd69777f46195afc72c07394b8baef480d00c96061e82d2b84ef7f6802d4c97231427f195a8419a6579bf7996ab0babbf2ebf794d02f8b4813152e00dd72d1d3395bcd3adcd42e1c42d042275343cf0d21118767f180474aecdfa9c3adbf452a187827ca1993a3cc7adfd2fcb3d86a98b45c9c1b837c090c5d4be0a01e5757623bb5084ba349218ec17f81d94f7cd89e21f", @ANYRES32=r7, @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
socket$nl_xfrm(0x10, 0x3, 0x6)

7.408259044s ago: executing program 6 (id=1571):
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
close(r0)

7.269187225s ago: executing program 5 (id=1572):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket(0x10, 0x2, 0x6)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3)
bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0)

7.192739716s ago: executing program 7 (id=1573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

7.013316957s ago: executing program 6 (id=1575):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)
write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38)

6.411687212s ago: executing program 37 (id=1575):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)
write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38)

6.401284862s ago: executing program 5 (id=1578):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
socket(0x10, 0x3, 0x9)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0x37}, 0x2c)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
timer_create(0xb, 0x0, &(0x7f00000000c0)=<r4=>0x0)
timer_settime(r4, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x138, 0xa, 0x148, 0x138, 0x10, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x33}, 0x0, 0xd0, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@ah={{0x30}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x350)
timer_gettime(r4, 0x0)
syz_clone(0x45128480, 0x0, 0x0, 0x0, 0x0, 0x0)

6.347365162s ago: executing program 7 (id=1580):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

6.161964624s ago: executing program 7 (id=1581):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@llx}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1c)

4.966752163s ago: executing program 7 (id=1584):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@errors_remount}]}, 0x1, 0x782, &(0x7f0000002200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x3)
r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xee58, 0x400, 0x1, 0xb35}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

4.479283987s ago: executing program 38 (id=1584):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@errors_remount}]}, 0x1, 0x782, &(0x7f0000002200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x3)
r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xee58, 0x400, 0x1, 0xb35}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3.333252545s ago: executing program 5 (id=1587):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2})
keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0)

3.179554676s ago: executing program 5 (id=1588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

2.996489937s ago: executing program 8 (id=1589):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c)
listen(r1, 0x101)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
close_range(r0, r2, 0x0)

2.905203908s ago: executing program 5 (id=1590):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8)
tkill(r1, 0x7)

2.882749769s ago: executing program 8 (id=1591):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000400000000000000000000000850000001000000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$kcm(0xa, 0x3, 0x73)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00009f0200000007"], 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x30, 0x0, 0x2, 0x2}, {0x80000006, 0x0, 0x0, 0x7fff}]}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0xfe1e, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0)
syz_emit_ethernet(0xe6, &(0x7f0000000640)={@random="d0985c15a252", @remote, @val={@void, {0x8100, 0x6, 0x1}}, {@x25={0x805, {0x3, 0x5, 0xfd, "d5480b8ab72db19bbb45137c112bd2baea272bb5a55960a3b46f7807432054f7d45b64636a0c42d99290258ba2ae7f076f098fdbfca15aa0e369c6b690d373b2a00f1eead9749bd4c4b3660d365b6fb40eb4f86fc42c7f199759fe2e33b042e22ff3025a5a46d5c1dd1e9c15d429b850af678579cc5a935fd8ebb7373547849bc9b32f4c6a737d4ea9f65e91c0b69d9ebee23c8096f534fe000502978e9c3ea4179e826cb80f892160e82ae00cdf6b63e7c3a846edef2507a3c15ece3e20e13b34362dcc2910d2d08cc0b6e06650a8e3e8"}}}}, &(0x7f0000000300)={0x0, 0x2, [0x55, 0x63f, 0x11, 0x919]})

2.773612949s ago: executing program 8 (id=1592):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

2.68096321s ago: executing program 5 (id=1593):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@delalloc}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x5, 0x80000000000b, 0x7, &(0x7f000000b000)={0x77359400}, 0x0, 0x4)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
acct(0x0)
syz_clone(0x40005080, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x204011}, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000"], 0x1c}}, 0x0)

1.399194909s ago: executing program 8 (id=1594):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x61500, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x3)

1.31164119s ago: executing program 8 (id=1595):
creat(&(0x7f0000000240)='./bus\x00', 0xc2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
getpgrp(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x80, 0x800)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x39}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[], 0xfd, 0x6b1, &(0x7f0000001f80)="$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")
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000)

0s ago: executing program 8 (id=1596):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000)

kernel console output (not intermixed with test programs):

h=c000003e syscall=202 compat=0 ip=0x7f71e958d169 code=0x7ffc0000
[  227.575252][   T27] audit: type=1326 audit(1742231199.005:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71e958f087 code=0x7ffc0000
[  227.623947][ T7270] loop4: detected capacity change from 0 to 512
[  227.661311][   T27] audit: type=1326 audit(1742231199.005:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e958d169 code=0x7ffc0000
[  227.705440][ T7270] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  227.766880][ T7270] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  227.839131][ T7270] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  227.850537][ T7270] EXT4-fs (loop4): 1 truncate cleaned up
[  227.877724][ T7270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  227.994912][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  228.126093][ T7289] netlink: 96 bytes leftover after parsing attributes in process `syz.4.937'.
[  228.501909][ T7302] loop3: detected capacity change from 0 to 128
[  230.610785][ T7319] loop4: detected capacity change from 0 to 512
[  230.627525][ T7322] netlink: 96 bytes leftover after parsing attributes in process `syz.3.950'.
[  230.746284][ T7319] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  230.768054][ T7319] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  230.881910][ T7319] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  230.922801][ T7319] EXT4-fs (loop4): 1 truncate cleaned up
[  230.928520][ T7319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  230.940150][ T7329] 8021q: adding VLAN 0 to HW filter on device bond1
[  231.532185][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  231.540615][ T7344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.961'.
[  231.590791][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'.
[  231.859594][ T7355] netlink: 96 bytes leftover after parsing attributes in process `syz.2.963'.
[  231.996084][ T7359] loop1: detected capacity change from 0 to 512
[  232.076568][ T7361] 8021q: adding VLAN 0 to HW filter on device bond2
[  232.116426][ T7359] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  232.135278][ T7359] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  232.161396][ T7359] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  232.172246][ T7359] EXT4-fs (loop1): 1 truncate cleaned up
[  232.177955][ T7359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  232.230001][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  232.583243][ T7382] tipc: Started in network mode
[  232.594961][ T7382] tipc: Node identity ac14140f, cluster identity 4711
[  232.621943][ T7382] tipc: New replicast peer: 255.0.0.255
[  232.628009][ T7382] tipc: Enabled bearer <udp:s>, priority 10
[  232.721450][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'.
[  233.112883][   T27] kauditd_printk_skb: 391 callbacks suppressed
[  233.112902][   T27] audit: type=1326 audit(1742231204.895:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.201742][   T27] audit: type=1326 audit(1742231204.895:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.264391][   T27] audit: type=1326 audit(1742231204.905:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.356727][   T27] audit: type=1326 audit(1742231204.905:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.453921][   T27] audit: type=1326 audit(1742231204.905:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.551253][   T27] audit: type=1326 audit(1742231204.905:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.617007][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'.
[  233.617221][   T27] audit: type=1326 audit(1742231204.905:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.729847][   T27] audit: type=1326 audit(1742231204.905:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  233.753616][ T4795] tipc: Node number set to 2886997007
[  233.831232][   T27] audit: type=1326 audit(1742231204.945:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f689298f087 code=0x7ffc0000
[  233.931253][   T27] audit: type=1326 audit(1742231204.945:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689298d169 code=0x7ffc0000
[  234.192399][ T7411] team0 (unregistering): Port device team_slave_0 removed
[  234.214318][ T7411] team0 (unregistering): Port device team_slave_1 removed
[  234.903744][ T7436] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  235.108881][ T7443] loop3: detected capacity change from 0 to 128
[  235.765551][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'.
[  235.772263][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1006'.
[  235.808187][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1006'.
[  235.820970][ T7453] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  235.836368][ T7453] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  236.524107][ T7465] loop0: detected capacity change from 0 to 2048
[  236.560948][ T7465] EXT4-fs: Ignoring removed mblk_io_submit option
[  236.618147][ T7465] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  236.752902][ T7477] loop2: detected capacity change from 0 to 512
[  236.829349][ T7477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  236.869587][ T7477] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  236.918121][ T7477] EXT4-fs (loop2): unmounting filesystem.
[  237.031251][ T7388] Set syz1 is full, maxelem 65536 reached
[  237.054501][ T7477] loop2: detected capacity change from 0 to 164
[  237.387262][ T4260] EXT4-fs (loop0): unmounting filesystem.
[  237.554903][ T7499] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1028'.
[  237.594194][ T7477] infiniband syz0: set active
[  237.607007][ T7477] infiniband syz0: added bond0
[  237.618366][ T7477] rdma_rxe: unable to create cq
[  237.629196][ T7477] infiniband syz0: Couldn't create ib_mad CQ
[  237.636668][ T7477] infiniband syz0: Couldn't open port 1
[  237.730168][ T7477] RDS/IB: syz0: added
[  237.777748][ T7477] smc: adding ib device syz0 with port count 1
[  237.800855][ T7477] smc:    ib device syz0 port 1 has pnetid 
[  237.845143][ T7509] loop0: detected capacity change from 0 to 512
[  237.931669][ T7509] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  237.940300][ T7509] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  237.951210][ T7509] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  237.963176][ T7509] EXT4-fs (loop0): 1 truncate cleaned up
[  237.968908][ T7509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  238.046761][ T4260] EXT4-fs (loop0): unmounting filesystem.
[  238.064141][ T7518] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  238.155086][   T27] kauditd_printk_skb: 271 callbacks suppressed
[  238.155104][   T27] audit: type=1326 audit(1742231209.945:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.281203][   T27] audit: type=1326 audit(1742231209.975:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.336214][   T27] audit: type=1326 audit(1742231209.975:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.397603][ T7525] loop4: detected capacity change from 0 to 512
[  238.412474][ T7525] EXT4-fs: Ignoring removed nobh option
[  238.420350][   T27] audit: type=1326 audit(1742231209.975:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.448114][ T7525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  238.479488][   T27] audit: type=1326 audit(1742231209.975:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.507358][   T27] audit: type=1326 audit(1742231209.975:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.535402][   T27] audit: type=1326 audit(1742231209.975:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.561791][   T27] audit: type=1326 audit(1742231209.995:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.586713][   T27] audit: type=1326 audit(1742231209.995:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.598231][ T7525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  238.609690][   T27] audit: type=1326 audit(1742231209.995:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61978d169 code=0x7ffc0000
[  238.648955][ T7525] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.890702][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  239.737394][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1054'.
[  239.756935][ T7565] device gretap0 entered promiscuous mode
[  239.769711][ T7565] device gretap0 left promiscuous mode
[  240.379240][ T7572] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  240.407792][ T7572] bond0: (slave sit0): Error -95 calling set_mac_address
[  240.615692][ T7574] xt_CT: No such helper "pptp"
[  241.204636][ T4302] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[  241.231200][ T4302] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[  241.248963][ T4302] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[  241.278859][ T4302] hid-generic 0000:0004:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  241.347012][ T7599] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  241.540621][ T7606] loop2: detected capacity change from 0 to 128
[  241.568775][ T7607] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1068'.
[  241.592479][ T7606] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  241.642511][ T7606] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  241.798647][ T7613] loop1: detected capacity change from 0 to 512
[  241.851357][ T7613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  241.860643][ T7613] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.983530][ T7613] device geneve2 entered promiscuous mode
[  242.036111][ T7625] RDS: rds_bind could not find a transport for ::ffff:138.1.1.2, load rds_tcp or rds_rdma?
[  242.088121][ T7627] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1074'.
[  242.291489][ T4302] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  242.461260][ T4302] usb 5-1: device descriptor read/64, error -71
[  242.530237][ T4876] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  242.548604][ T4876] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  242.567174][ T4876] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  242.603685][ T4876] hid-generic 0000:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  242.763550][ T4302] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  242.923499][ T4302] usb 5-1: device descriptor read/64, error -71
[  243.075131][ T4302] usb usb5-port1: attempt power cycle
[  243.141841][ T7645] loop0: detected capacity change from 0 to 1024
[  243.198508][ T7645] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.260189][ T7645] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f000c0ac, mo2=0002]
[  243.276104][ T7645] System zones: 0-1, 3-36
[  243.287682][ T7645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  243.501381][ T4302] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  243.556795][ T4302] usb 5-1: device descriptor read/8, error -71
[  243.859513][ T4302] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  243.916802][ T4302] usb 5-1: device descriptor read/8, error -71
[  244.063476][ T4302] usb usb5-port1: unable to enumerate USB device
[  244.071851][ T7624] usb usb5: usbfs: process 7624 (syz.1.1071) did not claim interface 0 before use
[  244.169086][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  245.682820][ T7647] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1083'.
[  245.982225][   T27] kauditd_printk_skb: 169 callbacks suppressed
[  245.982242][   T27] audit: type=1326 audit(1742231217.775:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  246.010907][    C1] vkms_vblank_simulate: vblank timer overrun
[  246.063326][ T4876] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  246.081266][   T27] audit: type=1326 audit(1742231217.775:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  246.089121][ T4876] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  246.143930][   T27] audit: type=1326 audit(1742231217.805:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e958d169 code=0x7ffc0000
[  246.151310][ T4876] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  246.211602][ T4876] hid-generic 0000:0004:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  246.213442][   T27] audit: type=1326 audit(1742231217.805:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e958d169 code=0x7ffc0000
[  246.243571][    C1] vkms_vblank_simulate: vblank timer overrun
[  246.354956][   T27] audit: type=1326 audit(1742231217.805:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  246.377357][    C1] vkms_vblank_simulate: vblank timer overrun
[  246.428146][   T27] audit: type=1326 audit(1742231217.805:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  246.461303][   T27] audit: type=1326 audit(1742231217.805:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  246.525551][   T27] audit: type=1326 audit(1742231217.805:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  246.547914][    C1] vkms_vblank_simulate: vblank timer overrun
[  246.613828][   T27] audit: type=1326 audit(1742231217.805:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e958d169 code=0x7ffc0000
[  246.671793][ T7682] loop3: detected capacity change from 0 to 512
[  246.678255][   T27] audit: type=1326 audit(1742231217.805:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e958d169 code=0x7ffc0000
[  246.754318][ T7682] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13
[  246.765373][ T7682] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  246.778379][ T7682] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  246.790302][ T7682] EXT4-fs (loop3): 1 truncate cleaned up
[  246.802386][ T7682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  246.806430][ T7688] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1099'.
[  247.006460][ T7690] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1100'.
[  247.022671][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  247.509732][  T127] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  247.528632][  T127] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  247.551235][  T127] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  247.579813][  T127] hid-generic 0000:0004:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  247.599686][ T7704] loop1: detected capacity change from 0 to 2048
[  247.657272][ T7680] loop4: detected capacity change from 0 to 40427
[  247.695776][ T7704]  loop1: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[  247.703183][ T7680] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  247.818574][ T7680] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  247.833043][ T7680] F2FS-fs (loop4): invalid crc value
[  247.863633][ T7680] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  247.890093][ T7680] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  247.915660][ T7714] siw: device registration error -23
[  247.978965][ T7680] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  247.991398][ T7680] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  248.600816][ T4260] EXT4-fs (loop0): unmounting filesystem.
[  248.819086][ T7719] hub 9-0:1.0: USB hub found
[  248.824380][ T7719] hub 9-0:1.0: 1 port detected
[  249.675118][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[  249.675195][ T7721] udevd[7721]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory
[  249.688945][ T7725] udevd[7725]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  249.708166][ T7726] udevd[7726]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory
[  249.708330][ T7724] udevd[7724]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory
[  249.721848][ T4410] udevd[4410]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory
[  249.735046][ T7727] udevd[7727]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory
[  249.766542][ T7728] udevd[7728]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory
[  249.767407][ T5519] udevd[5519]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory
[  249.788411][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory
[  249.971535][ T4302] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  250.001925][ T4302] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  250.009393][ T4302] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  250.102038][ T4302] hid-generic 0000:0004:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  250.322589][ T7754] loop2: detected capacity change from 0 to 512
[  250.380429][ T7754] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  250.422564][ T7754] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  250.465132][ T7754] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  250.477222][ T7754] EXT4-fs (loop2): 1 truncate cleaned up
[  250.483080][ T7754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  250.670857][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  250.859685][ T7773] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  251.053281][   T27] kauditd_printk_skb: 315 callbacks suppressed
[  251.053300][   T27] audit: type=1326 audit(1742231222.845:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.185319][   T27] audit: type=1326 audit(1742231222.845:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.257866][   T27] audit: type=1326 audit(1742231222.845:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.439025][   T27] audit: type=1326 audit(1742231222.845:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.494967][ T4876] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  251.516858][   T27] audit: type=1326 audit(1742231222.845:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.517259][ T4876] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  251.599594][   T27] audit: type=1326 audit(1742231222.845:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.680819][   T27] audit: type=1326 audit(1742231222.845:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.709793][ T4876] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  251.750412][ T4876] hid-generic 0000:0004:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  251.759653][   T27] audit: type=1326 audit(1742231222.845:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.870400][   T27] audit: type=1326 audit(1742231222.845:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  251.954235][   T27] audit: type=1326 audit(1742231222.845:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  252.050679][ T7801] device bridge0 entered promiscuous mode
[  252.072470][ T7801] bridge0: port 3(macsec1) entered blocking state
[  252.099665][ T7801] bridge0: port 3(macsec1) entered disabled state
[  252.149355][ T7801] device bridge0 left promiscuous mode
[  252.557045][ T7813] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[  252.557045][ T7813]    program syz.4.1149 not setting count and/or reply_len properly
[  252.869482][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1153'.
[  252.920145][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1153'.
[  252.985935][ T7828] loop3: detected capacity change from 0 to 512
[  253.028932][ T7828] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13
[  253.106623][ T7828] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  253.135515][ T7828] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  253.204045][ T7828] EXT4-fs (loop3): 1 truncate cleaned up
[  253.209768][ T7828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  253.383713][ T7842] dccp_invalid_packet: P.Data Offset(100) too large
[  253.430607][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  253.647461][ T7853] syz.1.1164[7853] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  253.647572][ T7853] syz.1.1164[7853] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  254.273199][ T7869] loop4: detected capacity change from 0 to 1024
[  254.291939][ T7869] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.354761][ T7870] loop2: detected capacity change from 0 to 512
[  254.404905][ T7869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f000c0ac, mo2=0002]
[  254.413332][ T7869] System zones: 0-1, 3-36
[  254.422471][ T7869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  254.519441][ T7870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  254.635667][ T7870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  254.678985][ T7870] EXT4-fs (loop2): orphan cleanup on readonly fs
[  254.729634][ T7870] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  254.775463][ T7870] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  254.805102][ T7870] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  254.874942][ T7870] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1169: couldn't read orphan inode 13 (err -117)
[  254.926312][ T7870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  255.077558][ T7868] EXT4-fs (loop2): shut down requested (1)
[  255.663607][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.669997][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.906729][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  255.976259][ T7870] infiniband syz!: set active
[  256.022890][ T7870] infiniband syz!: added team_slave_0
[  256.046110][  T127] kernel write not supported for file /588/attr/exec (pid: 127 comm: kworker/1:2)
[  256.058013][ T7870] rdma_rxe: unable to create cq
[  256.099750][ T7870] infiniband syz!: Couldn't create ib_mad CQ
[  256.111371][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'.
[  256.141384][ T7870] infiniband syz!: Couldn't open port 1
[  256.195675][ T7895] mmap: +}[@ (7895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  256.209627][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'.
[  256.220006][ T7870] RDS/IB: syz!: added
[  256.233827][ T7870] smc: adding ib device syz! with port count 1
[  256.253798][ T7870] smc:    ib device syz! port 1 has pnetid 
[  256.330511][ T7898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.837589][ T7915] loop4: detected capacity change from 0 to 164
[  257.113926][ T7920] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1184'.
[  257.567165][ T7937] loop4: detected capacity change from 0 to 1024
[  257.640375][ T7937] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  257.682435][ T7937] EXT4-fs (loop4): orphan cleanup on readonly fs
[  257.712572][ T7937] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  257.793525][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  257.800204][ T7937] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.1188: mark_inode_dirty error
[  257.846686][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  257.873481][ T7937] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1188: Invalid block bitmap block 3 in block_group 0
[  257.940749][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  257.978589][ T7937] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  258.013036][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.019621][ T7937] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.1188: mark_inode_dirty error
[  258.091634][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.099453][ T7937] __quota_error: 148 callbacks suppressed
[  258.099471][ T7937] Quota error (device loop4): write_blk: dquota write failed
[  258.136674][ T7937] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm syz.4.1188: lblock 6 mapped to illegal pblock 1 (length 1)
[  258.251499][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.269072][ T7937] Quota error (device loop4): write_blk: dquota write failed
[  258.299547][ T7937] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  258.341295][ T7937] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.1188: lblock 0 mapped to illegal pblock 48 (length 1)
[  258.372827][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.379403][ T7937] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  258.426849][ T7937] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.1188: Failed to acquire dquot type 0
[  258.462030][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.491372][ T7937] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 49: comm syz.4.1188: lblock 1 mapped to illegal pblock 49 (length 1)
[  258.515449][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.535956][ T7937] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1
[  258.559166][ T7937] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  258.584369][ T7937] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.1188: Failed to acquire dquot type 0
[  258.634812][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.654610][ T7937] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  258.684306][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.690942][ T7937] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.1188: mark_inode_dirty error
[  258.743849][ T7937] EXT4-fs (loop4): Remounting filesystem read-only
[  258.750445][ T7937] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  258.787447][ T7937] EXT4-fs (loop4): 1 orphan inode deleted
[  258.804788][ T7937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  259.240021][ T7966] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1200'.
[  259.410396][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  259.808742][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.819723][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.828515][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.840831][ T4253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.856430][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  259.868539][ T4253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  260.068298][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1209'.
[  260.099906][ T7984] device bond0 entered promiscuous mode
[  260.108176][ T7984] device bond_slave_0 entered promiscuous mode
[  260.122694][ T7984] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  260.166771][ T7984] device bond0 left promiscuous mode
[  260.172532][ T7984] device bond_slave_0 left promiscuous mode
[  260.392932][ T4372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.556010][ T7992] loop2: detected capacity change from 0 to 512
[  260.556093][ T4372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.600227][ T7992] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  260.727675][ T7992] EXT4-fs (loop2): 1 truncate cleaned up
[  260.734739][ T7992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  260.775901][ T4372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.918040][ T4255] EXT4-fs (loop2): unmounting filesystem.
[  261.053222][ T4372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.370209][   T27] audit: type=1326 audit(1742231233.155:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  261.409052][ T7977] chnl_net:caif_netlink_parms(): no params data found
[  261.428511][ T8004] loop3: detected capacity change from 0 to 512
[  261.446292][   T27] audit: type=1326 audit(1742231233.205:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  261.512954][   T27] audit: type=1326 audit(1742231233.205:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  261.569939][   T27] audit: type=1326 audit(1742231233.205:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba298d169 code=0x7ffc0000
[  261.672029][ T8004] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13
[  261.740929][ T8004] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  261.797006][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.799133][ T8004] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  261.816296][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.839530][ T7977] device bridge_slave_0 entered promiscuous mode
[  261.848268][ T8004] EXT4-fs (loop3): 1 truncate cleaned up
[  261.869930][ T8004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  261.905005][ T4253] Bluetooth: hci1: command 0x0409 tx timeout
[  262.096568][ T4372] bond1: (slave ip6gretap1): Releasing active interface
[  262.107769][ T4372] device ip6gretap1 left promiscuous mode
[  262.123545][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  262.133852][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.145313][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.173951][ T7977] device bridge_slave_1 entered promiscuous mode
[  263.296671][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.385945][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.644516][ T7977] team0: Port device team_slave_0 added
[  263.689442][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  264.007392][ T4253] Bluetooth: hci1: command 0x041b tx timeout
[  264.152698][ T7977] team0: Port device team_slave_1 added
[  264.262150][ T8054] loop4: detected capacity change from 0 to 512
[  264.330682][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.338282][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.371551][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.398692][ T8054] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  264.466089][ T8054] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  264.484854][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.492027][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.520272][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.541794][ T8054] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  264.611606][ T8054] EXT4-fs (loop4): 1 truncate cleaned up
[  264.617414][ T8054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  264.681754][ T4372] IPVS: stopping master sync thread 7518 ...
[  264.763443][ T7977] device hsr_slave_0 entered promiscuous mode
[  264.796165][ T7977] device hsr_slave_1 entered promiscuous mode
[  264.811818][ T7977] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  264.835692][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  264.851428][ T7977] Cannot create hsr debugfs directory
[  265.112618][ T8083] loop3: detected capacity change from 0 to 1024
[  265.205758][ T8083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  265.661512][ T8107] siw: device registration error -23
[  265.682544][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1244'.
[  266.061683][ T4253] Bluetooth: hci1: command 0x040f tx timeout
[  266.124001][ T8118] rdma_rxe: rxe_register_device failed with error -23
[  266.130924][ T8118] rdma_rxe: failed to add bond0
[  266.453086][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  267.579466][ T4372] device hsr_slave_0 left promiscuous mode
[  268.421197][ T4253] Bluetooth: hci1: command 0x0419 tx timeout
[  268.581207][ T4372] device hsr_slave_1 left promiscuous mode
[  268.668134][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.691453][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.733460][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.740956][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.809678][ T4372] device bridge_slave_1 left promiscuous mode
[  268.832758][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.952134][ T4372] device bridge_slave_0 left promiscuous mode
[  268.958454][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.129410][ T4372] device bond1 left promiscuous mode
[  269.250267][ T4372] device veth1_macvtap left promiscuous mode
[  269.291857][ T4372] device veth0_macvtap left promiscuous mode
[  269.298039][ T4372] device veth1_vlan left promiscuous mode
[  269.351606][ T4372] device veth0_vlan left promiscuous mode
[  269.430421][ T8163] loop2: detected capacity change from 0 to 2048
[  269.457571][ T8163] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 64
[  269.509831][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  269.520834][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  269.529584][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  269.537831][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  269.547065][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  269.563344][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  269.804080][ T4372] bond1 (unregistering): Released all slaves
[  270.392828][ T4372] team0 (unregistering): Port device team_slave_1 removed
[  270.439978][ T4372] team0 (unregistering): Port device team_slave_0 removed
[  270.481243][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.530537][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.015415][ T4372] bond0 (unregistering): Released all slaves
[  271.162249][ T8161] netlink: 'syz.4.1264': attribute type 1 has an invalid length.
[  271.180856][ T8161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1264'.
[  271.262634][ T7977] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  271.278716][ T7977] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  271.319738][ T7977] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  271.357053][ T7977] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  271.661579][ T4253] Bluetooth: hci3: command 0x0409 tx timeout
[  271.851732][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.906327][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  271.925881][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.955950][ T7977] 8021q: adding VLAN 0 to HW filter on device team0
[  271.993407][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  272.012026][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  272.041998][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.049176][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.102326][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  272.141041][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  272.180414][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  272.215489][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.222713][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.254417][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  272.291056][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  272.335417][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  272.367284][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  272.444092][   T27] kauditd_printk_skb: 201 callbacks suppressed
[  272.444109][   T27] audit: type=1326 audit(1742231244.235:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.459332][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  272.490038][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  272.500718][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  272.508882][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  272.516798][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  272.525863][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  272.533834][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  272.542379][   T27] audit: type=1326 audit(1742231244.265:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.566089][   T27] audit: type=1326 audit(1742231244.265:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.582196][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  272.588938][   T27] audit: type=1326 audit(1742231244.265:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.619211][   T27] audit: type=1326 audit(1742231244.265:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.648505][   T27] audit: type=1326 audit(1742231244.265:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.681167][   T27] audit: type=1326 audit(1742231244.265:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.712505][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  272.732594][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  272.740989][   T27] audit: type=1326 audit(1742231244.265:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.759678][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  272.789811][   T27] audit: type=1326 audit(1742231244.265:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.820021][ T7977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.843298][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  272.862953][   T27] audit: type=1326 audit(1742231244.265:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  272.894901][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  272.915588][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  273.125490][ T4253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  273.136395][ T4253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  273.144896][ T4253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  273.156474][ T4253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  273.164965][ T4253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  273.172739][ T4253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  273.340799][ T4372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.516193][ T8213] loop4: detected capacity change from 0 to 1024
[  273.535179][ T4372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.598544][ T8213] EXT4-fs: Ignoring removed mblk_io_submit option
[  273.631025][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.660319][ T8165] chnl_net:caif_netlink_parms(): no params data found
[  273.673335][ T8213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f000c0ac, mo2=0002]
[  273.687947][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  273.695534][ T8213] System zones: 0-1, 3-36
[  273.703391][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  273.739681][ T4372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.748299][ T8213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  273.759007][ T4267] Bluetooth: hci3: command 0x041b tx timeout
[  273.918263][ T4372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.218999][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.229033][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.248819][ T8165] device bridge_slave_0 entered promiscuous mode
[  274.336526][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.344980][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.384879][ T8165] device bridge_slave_1 entered promiscuous mode
[  274.593542][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.621290][ T4267] Bluetooth: hci2: command 0x0409 tx timeout
[  274.644689][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.682685][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  274.716765][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  274.816124][ T4372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.889661][ T8195] chnl_net:caif_netlink_parms(): no params data found
[  274.925884][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  274.938124][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  275.042905][ T4372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.083507][ T8165] team0: Port device team_slave_0 added
[  275.093034][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  275.100997][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  275.119614][ T8165] team0: Port device team_slave_1 added
[  275.202773][ T4372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.216069][ T7977] device veth0_vlan entered promiscuous mode
[  275.263620][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.266341][ T4267] Bluetooth: hci4: command 0x0409 tx timeout
[  275.270707][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.303593][ T8165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.320357][ T7977] device veth1_vlan entered promiscuous mode
[  275.385051][ T4372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.402666][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.409693][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.436830][ T8165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.486533][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.500256][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.509668][ T8195] device bridge_slave_0 entered promiscuous mode
[  275.556593][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.571493][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.579710][ T8195] device bridge_slave_1 entered promiscuous mode
[  275.611192][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  275.620989][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  275.635898][ T8206] chnl_net:caif_netlink_parms(): no params data found
[  275.708511][ T7977] device veth0_macvtap entered promiscuous mode
[  275.739258][ T8165] device hsr_slave_0 entered promiscuous mode
[  275.753443][ T8165] device hsr_slave_1 entered promiscuous mode
[  275.760232][ T8165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.777406][ T8165] Cannot create hsr debugfs directory
[  275.809234][ T8195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.821251][ T4267] Bluetooth: hci3: command 0x040f tx timeout
[  275.877240][ T7977] device veth1_macvtap entered promiscuous mode
[  275.894342][ T8195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.970380][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.981414][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.991295][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.001931][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.022995][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.108350][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  276.142664][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  276.174004][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  276.199442][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  276.302315][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.321154][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.331013][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.361938][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.373877][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.383927][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  276.402827][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  276.434535][ T8195] team0: Port device team_slave_0 added
[  276.463119][ T7977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.482841][ T7977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.501167][ T7977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.509930][ T7977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.590474][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.601358][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.609467][ T8206] device bridge_slave_0 entered promiscuous mode
[  276.630883][ T8195] team0: Port device team_slave_1 added
[  276.684037][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.701190][ T4267] Bluetooth: hci2: command 0x041b tx timeout
[  276.705878][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.717296][ T8206] device bridge_slave_1 entered promiscuous mode
[  276.864437][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.872588][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.903097][ T8195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.979294][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.992310][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.018784][ T8195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.044376][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.120364][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  277.154819][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.239346][ T8195] device hsr_slave_0 entered promiscuous mode
[  277.246613][ T8195] device hsr_slave_1 entered promiscuous mode
[  277.254416][ T8195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.262447][ T8195] Cannot create hsr debugfs directory
[  277.285345][ T8206] team0: Port device team_slave_0 added
[  277.295573][ T8206] team0: Port device team_slave_1 added
[  277.343484][ T4267] Bluetooth: hci4: command 0x041b tx timeout
[  277.344691][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.419954][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.557359][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  277.572262][ T8265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.579468][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.586908][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.614167][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.626695][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.633711][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.659851][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.690224][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.707029][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.724915][ T8264] tipc: Resetting bearer <eth:syzkaller0>
[  277.915822][ T4267] Bluetooth: hci3: command 0x0419 tx timeout
[  278.795235][ T4267] Bluetooth: hci2: command 0x040f tx timeout
[  279.433791][ T4267] Bluetooth: hci4: command 0x040f tx timeout
[  279.818559][ T8264] tipc: Disabling bearer <eth:syzkaller0>
[  279.873291][ T8206] device hsr_slave_0 entered promiscuous mode
[  279.880355][ T8206] device hsr_slave_1 entered promiscuous mode
[  279.888229][ T8206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.897378][ T8206] Cannot create hsr debugfs directory
[  279.903375][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  279.939522][ T8165] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  280.041607][ T8165] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  280.138273][ T4372] tipc: Disabling bearer <udp:s>
[  280.162215][ T4372] tipc: Left network mode
[  280.168990][ T8165] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  280.185296][ T8165] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  280.665551][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  280.665568][   T27] audit: type=1326 audit(1742231252.455:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  280.724180][   T27] audit: type=1326 audit(1742231252.495:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  280.795127][   T27] audit: type=1326 audit(1742231252.495:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  280.849540][   T27] audit: type=1326 audit(1742231252.495:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  280.872222][ T4267] Bluetooth: hci2: command 0x0419 tx timeout
[  280.894843][   T27] audit: type=1326 audit(1742231252.495:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  280.918691][   T27] audit: type=1326 audit(1742231252.495:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  280.942232][   T27] audit: type=1326 audit(1742231252.495:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  281.009803][ T8295] loop5: detected capacity change from 0 to 512
[  281.142811][ T8295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  281.197810][ T8295] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  281.231788][ T8295] EXT4-fs (loop5): unmounting filesystem.
[  281.237704][   T27] audit: type=1326 audit(1742231253.025:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  281.318154][   T27] audit: type=1326 audit(1742231253.025:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  281.377520][ T8295] rdma_rxe: rxe_register_device failed with error -23
[  281.407218][ T8295] rdma_rxe: failed to add bond0
[  281.427771][   T27] audit: type=1326 audit(1742231253.025:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  281.481679][ T8304] loop4: detected capacity change from 0 to 8192
[  281.501360][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[  281.989351][ T8316] loop4: detected capacity change from 0 to 128
[  282.034498][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.148936][ T8195] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  282.173807][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  282.185384][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  282.207110][ T8195] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  282.229180][ T8165] 8021q: adding VLAN 0 to HW filter on device team0
[  282.264670][ T8321] capability: warning: `syz.4.1294' uses 32-bit capabilities (legacy support in use)
[  282.371928][ T8195] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  282.449565][ T8195] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  282.643014][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  282.680017][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  282.689923][ T4644] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.697133][ T4644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.714337][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  282.729988][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  282.746118][ T4644] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.753341][ T4644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.770075][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  282.780438][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  282.800256][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  282.870442][ T8343] loop4: detected capacity change from 0 to 1024
[  282.946884][ T8346] loop5: detected capacity change from 0 to 2048
[  282.948881][ T8343] EXT4-fs: Ignoring removed nobh option
[  282.959581][ T8343] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  283.005646][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  283.024523][ T8343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  283.042215][ T8346] Alternate GPT is invalid, using primary GPT.
[  283.048527][ T8346]  loop5: p1 p2 p3
[  283.060142][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  283.271009][ T8343] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.1300: Allocating blocks 497-513 which overlap fs metadata
[  283.309040][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  283.322915][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  283.343394][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  283.353064][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  283.362969][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  283.380543][ T8206] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  283.389046][ T8343] EXT4-fs (loop4): pa ffff8880745d9460: logic 256, phys. 385, len 8
[  283.397611][ T8343] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[  283.433817][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  283.454054][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  283.489805][ T8206] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  283.530146][ T8206] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  283.594212][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  283.606046][ T4410] udevd[4410]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  283.619529][ T7725] udevd[7725]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  283.637861][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  283.649461][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  283.814333][ T8206] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  283.920111][ T8195] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.092519][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.110834][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.144850][ T8195] 8021q: adding VLAN 0 to HW filter on device team0
[  284.184344][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.208200][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.230834][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.238110][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.272844][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  284.501685][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.521507][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.562264][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.569451][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.654583][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  284.666649][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  284.698292][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  284.732479][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  284.763267][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  284.786785][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  284.807216][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  284.819674][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  284.839054][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  284.878797][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.140061][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.150417][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  285.252732][ T8195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.286305][ T8195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  285.310364][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  285.322819][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  285.632159][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.689152][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  285.733214][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  285.758994][ T8206] 8021q: adding VLAN 0 to HW filter on device team0
[  285.804843][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  285.829227][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  285.871955][ T4644] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.879190][ T4644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.938675][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.992616][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  286.030739][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  286.061566][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.068749][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.130943][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  286.157516][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  286.177174][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  286.212924][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  286.267013][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  286.292521][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  286.322323][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  286.346732][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  286.377261][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.422056][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.474809][ T8206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.494201][ T8206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.536479][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.558400][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.578245][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.588433][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.597670][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.641314][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  286.671869][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  286.736660][ T8195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.772273][ T8165] device veth0_vlan entered promiscuous mode
[  286.779256][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  286.799529][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  286.853014][ T8165] device veth1_vlan entered promiscuous mode
[  286.880456][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1318'.
[  286.950124][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  287.002466][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  287.032319][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  287.061676][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  287.094600][ T8165] device veth0_macvtap entered promiscuous mode
[  287.203308][ T8165] device veth1_macvtap entered promiscuous mode
[  287.345740][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.389198][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.433684][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.481311][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.511198][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.531175][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.552959][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.577481][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  287.602938][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  287.626912][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  287.663311][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  287.708575][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.729156][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.748343][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.766594][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.776854][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.792465][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.806019][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.818700][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.839133][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.862597][ T4372] device hsr_slave_0 left promiscuous mode
[  287.869688][ T4372] device hsr_slave_1 left promiscuous mode
[  287.883367][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.890951][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.922068][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.929557][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.962980][ T4372] device bridge_slave_1 left promiscuous mode
[  287.971131][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.992679][ T4372] device bridge_slave_0 left promiscuous mode
[  287.998958][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.034687][ T4372] device hsr_slave_0 left promiscuous mode
[  288.048544][ T4372] device hsr_slave_1 left promiscuous mode
[  288.057299][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.066075][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.074397][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.091545][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.107246][ T4372] device bridge_slave_1 left promiscuous mode
[  288.115123][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.133072][ T4372] device bridge_slave_0 left promiscuous mode
[  288.140825][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.163804][ T4372] device hsr_slave_0 left promiscuous mode
[  288.170516][ T4372] device hsr_slave_1 left promiscuous mode
[  288.184899][ T4372] device bridge_slave_1 left promiscuous mode
[  288.209547][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.219050][ T4372] device bridge_slave_0 left promiscuous mode
[  288.232990][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.751393][ T4372] device veth1_macvtap left promiscuous mode
[  288.813175][ T4372] device veth0_macvtap left promiscuous mode
[  288.932011][ T4372] device veth1_vlan left promiscuous mode
[  288.937888][ T4372] device veth0_vlan left promiscuous mode
[  288.976945][ T4372] device veth1_macvtap left promiscuous mode
[  288.991704][ T4372] device veth0_macvtap left promiscuous mode
[  289.011874][ T4372] device veth1_vlan left promiscuous mode
[  289.017687][ T4372] device veth0_vlan left promiscuous mode
[  289.129657][ T4372] infiniband syz!: set down
[  289.174737][ T4372] infiniband syz0: set down
[  289.314904][ T8478] hub 9-0:1.0: USB hub found
[  289.331447][ T8478] hub 9-0:1.0: 1 port detected
[  289.764641][ T4372] team0 (unregistering): Port device team_slave_1 removed
[  289.820647][ T4372] team0 (unregistering): Port device team_slave_0 removed
[  289.844549][ T4554] smc: removing ib device syz!
[  289.886303][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.407644][ T4644] smc: removing ib device syz0
[  290.407646][ T4372] bond0 (unregistering): Released all slaves
[  290.618472][ T4372] bond2 (unregistering): Released all slaves
[  290.768188][ T4372] bond1 (unregistering): Released all slaves
[  291.180241][ T4372] team0 (unregistering): Port device team_slave_1 removed
[  291.234800][ T4372] team0 (unregistering): Port device team_slave_0 removed
[  291.281649][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.332232][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.821945][ T4372] bond0 (unregistering): Released all slaves
[  292.474188][ T4372] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.484619][ T4372] device bond_slave_0 left promiscuous mode
[  292.837615][ T4372] $Hÿ (unregistering): Released all slaves
[  292.921534][ T8206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.929553][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  292.938936][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  292.960785][ T8165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.980011][ T8165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.989222][ T8165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.998597][ T8165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.025459][   T14] bond0 speed is unknown, defaulting to 1000
[  293.032851][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'.
[  293.065854][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  293.106745][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  293.274782][ T8195] device veth0_vlan entered promiscuous mode
[  293.308512][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  293.350581][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  293.457232][ T8195] device veth1_vlan entered promiscuous mode
[  293.492014][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  293.500740][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  293.536101][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  293.780253][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  293.815350][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  293.859598][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  293.886702][ T8195] device veth0_macvtap entered promiscuous mode
[  293.922771][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.926502][ T8195] device veth1_macvtap entered promiscuous mode
[  293.939825][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.033467][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  294.070011][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  294.086888][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  294.195650][ T8195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.240366][ T8195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.281156][ T8195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.301259][ T8195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.365044][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.425015][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  294.442102][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.475318][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  294.503056][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  294.532386][ T8195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.541689][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.552556][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.601142][ T8195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.641211][ T8195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.655983][ T8195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.682767][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.698238][ T8206] device veth0_vlan entered promiscuous mode
[  294.752407][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  294.783675][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  294.838022][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  294.861707][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  294.872376][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  294.897770][ T8195] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.922035][ T8195] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.946661][ T8195] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.972502][ T8195] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.031913][ T8206] device veth1_vlan entered promiscuous mode
[  295.103865][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  295.118396][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  295.127285][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  295.262250][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  295.312752][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  295.345677][ T8206] device veth0_macvtap entered promiscuous mode
[  295.383612][ T8206] device veth1_macvtap entered promiscuous mode
[  295.517811][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.538882][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.568773][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.580989][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.612655][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.627009][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.652665][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.666661][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.680366][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.695182][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.706822][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.722932][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.736950][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.759291][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.775660][ T8206] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.787344][ T8206] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.799082][ T8206] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.825861][ T8206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.280267][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  296.371320][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  296.516558][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  296.535350][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  296.562401][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.618070][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  296.706811][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.741247][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.772368][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  296.808280][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.816256][ T8530] loop4: detected capacity change from 0 to 1024
[  296.875125][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.891169][ T8530] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  296.905151][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  296.952223][ T8530] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  296.983576][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.018850][ T8530] JBD2: no valid journal superblock found
[  297.028895][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.057234][ T8530] EXT4-fs (loop4): error loading journal
[  297.076599][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  297.153203][ T4644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.200921][ T4644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.276369][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  298.301307][   T27] kauditd_printk_skb: 52 callbacks suppressed
[  298.301325][   T27] audit: type=1326 audit(1742231270.085:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  299.088509][   T27] audit: type=1326 audit(1742231270.085:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  299.288552][   T27] audit: type=1326 audit(1742231270.085:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  299.408101][   T27] audit: type=1326 audit(1742231270.085:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  299.476445][ T8598] loop4: detected capacity change from 0 to 512
[  299.536079][   T27] audit: type=1326 audit(1742231270.085:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5194d84127 code=0x7ffc0000
[  299.626814][   T27] audit: type=1326 audit(1742231270.085:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5194d29359 code=0x7ffc0000
[  299.653711][ T8598] EXT4-fs (loop4): 1 orphan inode deleted
[  299.677561][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1353'.
[  299.688917][ T4554] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  299.705212][ T8608] xt_recent: hitcount (16385) is larger than allowed maximum (255)
[  299.727918][ T8598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  299.741431][ T4554] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:12: Failed to release dquot type 1
[  299.815632][ T8598] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.828743][   T27] audit: type=1326 audit(1742231270.085:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194d8d169 code=0x7ffc0000
[  299.931127][   T27] audit: type=1326 audit(1742231270.085:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5194d8bad0 code=0x7ffc0000
[  300.044703][   T27] audit: type=1326 audit(1742231270.085:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5194d8e997 code=0x7ffc0000
[  300.164978][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  300.198347][ T8626] loop8: detected capacity change from 0 to 2048
[  300.309651][ T8626] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  300.935998][ T8206] EXT4-fs (loop8): unmounting filesystem.
[  301.084041][ T8661] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1370'.
[  301.147526][ T8664] loop5: detected capacity change from 0 to 512
[  301.240634][ T8664] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  301.281254][ T8664] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  301.302743][ T8664] EXT4-fs (loop5): unmounting filesystem.
[  301.449707][ T8664] loop5: detected capacity change from 0 to 164
[  301.461322][ T8673] loop8: detected capacity change from 0 to 512
[  301.519784][ T8673] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  301.566340][ T8673] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.706983][ T8685] loop4: detected capacity change from 0 to 512
[  301.716562][ T8673] EXT4-fs error (device loop8): ext4_acquire_dquot:6795: comm syz.8.1373: Failed to acquire dquot type 0
[  301.747672][ T8685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  301.809081][ T8685] EXT4-fs (loop4): 1 orphan inode deleted
[  301.833841][ T8685] EXT4-fs (loop4): 1 truncate cleaned up
[  301.839616][ T8685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  301.859991][ T8206] EXT4-fs (loop8): unmounting filesystem.
[  301.860675][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1377'.
[  301.872847][ T8685] syz.4.1379[8685] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  301.875856][ T8685] syz.4.1379[8685] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  301.899033][ T8685] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.4.1379: path (unknown): bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  301.987259][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  302.000633][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.036476][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.101700][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.121023][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.169859][ T8664] infiniband syz0: set active
[  302.176117][ T8664] infiniband syz0: added bond0
[  302.186811][ T8664] rdma_rxe: unable to create cq
[  302.193894][ T8664] infiniband syz0: Couldn't create ib_mad CQ
[  302.208695][ T8664] infiniband syz0: Couldn't open port 1
[  302.335716][ T8664] RDS/IB: syz0: added
[  302.351211][ T8664] smc: adding ib device syz0 with port count 1
[  302.369633][ T8664] smc:    ib device syz0 port 1 has pnetid 
[  305.036390][ T8768] usb usb5: usbfs: process 8768 (syz.4.1403) did not claim interface 0 before use
[  305.606300][ T8785] loop8: detected capacity change from 0 to 128
[  305.672144][ T8785] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  305.713264][ T8785] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  305.717390][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1410'.
[  306.358949][ T8814] loop7: detected capacity change from 0 to 512
[  306.761562][ T8814] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13
[  306.903626][ T8814] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  307.123336][ T8814] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  307.207521][ T8814] EXT4-fs (loop7): 1 truncate cleaned up
[  307.270781][ T8814] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  307.378237][ T8833] loop8: detected capacity change from 0 to 512
[  307.527045][ T8195] EXT4-fs (loop7): unmounting filesystem.
[  307.535378][ T8833] EXT4-fs error (device loop8): ext4_quota_enable:6986: comm syz.8.1423: inode #33554432: comm syz.8.1423: iget: illegal inode #
[  307.619727][   T27] kauditd_printk_skb: 64 callbacks suppressed
[  307.619744][   T27] audit: type=1326 audit(1742231279.405:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  307.634822][ T8833] EXT4-fs error (device loop8): ext4_quota_enable:6989: comm syz.8.1423: Bad quota inode: 33554432, type: 2
[  307.742040][ T8833] EXT4-fs warning (device loop8): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix.
[  307.752271][   T27] audit: type=1326 audit(1742231279.455:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  307.806798][ T8833] EXT4-fs (loop8): mount failed
[  307.883449][   T27] audit: type=1326 audit(1742231279.455:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  308.017587][   T27] audit: type=1326 audit(1742231279.455:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  308.109912][   T27] audit: type=1326 audit(1742231279.455:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  308.114663][ T8855] loop4: detected capacity change from 0 to 512
[  308.228075][ T8855] EXT4-fs: Ignoring removed nobh option
[  308.276750][   T27] audit: type=1326 audit(1742231279.455:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  308.366648][ T8855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  308.439200][ T8858] loop5: detected capacity change from 0 to 8192
[  308.452790][   T27] audit: type=1326 audit(1742231279.455:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  308.538321][   T27] audit: type=1326 audit(1742231279.455:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  308.695100][   T27] audit: type=1326 audit(1742231279.455:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  308.811897][ T8855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  309.009891][ T8855] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.207039][   T27] audit: type=1326 audit(1742231279.455:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.7.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  309.308082][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  309.439416][ T8877] loop6: detected capacity change from 0 to 512
[  309.493657][ T8877] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  309.510041][ T8877] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  309.592566][ T8877] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  309.617763][ T8877] EXT4-fs (loop6): 1 truncate cleaned up
[  309.635025][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'.
[  309.641482][ T8877] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  309.813345][ T8165] EXT4-fs (loop6): unmounting filesystem.
[  310.275964][ T8907] loop5: detected capacity change from 0 to 8192
[  311.497916][ T8918] block device autoloading is deprecated and will be removed.
[  311.558204][ T8918] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  311.576855][ T8925] loop8: detected capacity change from 0 to 2048
[  311.658973][ T8925] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  312.118869][ T8925] EXT4-fs error (device loop8): ext4_find_extent:936: inode #2: comm syz.8.1452: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  312.219675][ T8925] EXT4-fs error (device loop8): ext4_find_extent:936: inode #2: comm syz.8.1452: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  312.634883][ T8206] EXT4-fs (loop8): unmounting filesystem.
[  313.208359][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  313.208376][   T27] audit: type=1326 audit(1742231284.995:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  314.007726][   T27] audit: type=1326 audit(1742231284.995:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  314.171378][   T27] audit: type=1326 audit(1742231285.125:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  314.291268][   T27] audit: type=1326 audit(1742231285.125:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  314.361227][   T27] audit: type=1326 audit(1742231285.135:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  314.610842][ T8987] loop6: detected capacity change from 0 to 128
[  314.721404][ T8987] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  314.804733][ T8987] FAT-fs (loop6): error, invalid access to FAT (entry 0x0affffff)
[  314.864527][ T8987] FAT-fs (loop6): Filesystem has been set read-only
[  314.946898][   T27] audit: type=1326 audit(1742231286.735:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.7.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  315.045888][   T27] audit: type=1326 audit(1742231286.755:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.7.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  315.124420][ T9009] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1476'.
[  315.139921][   T27] audit: type=1326 audit(1742231286.765:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.7.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  315.257372][   T27] audit: type=1326 audit(1742231286.765:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.7.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  315.329284][   T27] audit: type=1326 audit(1742231286.765:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.7.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0958d169 code=0x7ffc0000
[  315.454060][ T9019] loop5: detected capacity change from 0 to 512
[  315.551360][ T9019] EXT4-fs error (device loop5): ext4_quota_enable:6986: comm syz.5.1480: inode #33554432: comm syz.5.1480: iget: illegal inode #
[  315.613966][ T9019] EXT4-fs error (device loop5): ext4_quota_enable:6989: comm syz.5.1480: Bad quota inode: 33554432, type: 2
[  315.637576][ T9019] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix.
[  315.639555][ T9023] loop6: detected capacity change from 0 to 2048
[  315.672574][ T9019] EXT4-fs (loop5): mount failed
[  315.704457][ T9023] Alternate GPT is invalid, using primary GPT.
[  315.718103][ T9023]  loop6: p1 p2 p3
[  316.003452][ T8481] udevd[8481]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  316.055501][ T8487] udevd[8487]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  316.076910][ T8488] udevd[8488]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  316.100640][ T9042] loop5: detected capacity change from 0 to 512
[  316.181010][ T9042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  316.255374][ T9042] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.274855][ T9042] EXT4-fs (loop5): unmounting filesystem.
[  316.312028][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.327291][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.345961][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.364492][ T9049] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  316.421854][ T9042] loop5: detected capacity change from 0 to 164
[  316.457720][ T9049] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  316.490619][ T9042] rdma_rxe: already configured on bond0
[  316.592615][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.615231][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.666674][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.714777][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.746131][ T9049] hsr0 speed is unknown, defaulting to 1000
[  316.861711][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1495'.
[  316.945359][ T9067] device bond0 entered promiscuous mode
[  316.950969][ T9067] device bond_slave_0 entered promiscuous mode
[  317.043667][ T9067] device bond_slave_1 entered promiscuous mode
[  317.064960][ T9079] loop5: detected capacity change from 0 to 512
[  317.070073][ T9077] loop4: detected capacity change from 0 to 2048
[  317.104385][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.107163][ T9067] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  317.110708][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.138268][ T9067] device bond0 left promiscuous mode
[  317.145505][ T9079] EXT4-fs (loop5): failed to initialize system zone (-117)
[  317.154600][ T9069] loop7: detected capacity change from 0 to 8192
[  317.159674][ T9067] device bond_slave_0 left promiscuous mode
[  317.166011][ T9079] EXT4-fs (loop5): mount failed
[  317.172898][ T9067] device bond_slave_1 left promiscuous mode
[  317.177973][ T9077] Alternate GPT is invalid, using primary GPT.
[  317.195832][ T9077]  loop4: p1 p2 p3
[  317.221309][ T9069] syz.7.1496: attempt to access beyond end of device
[  317.221309][ T9069] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  317.289528][ T9069] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  317.300971][ T9069] FAT-fs (loop7): Filesystem has been set read-only
[  317.320880][ T9069] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  317.345839][ T9069] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  317.569394][ T8481] udevd[8481]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  317.592736][ T8487] udevd[8487]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  317.597805][ T8488] udevd[8488]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  317.719342][ T8488] udevd[8488]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  317.786670][ T9088] loop8: detected capacity change from 0 to 512
[  317.864050][ T9088] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13
[  317.887452][ T9088] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  317.903161][ T9088] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  317.925210][ T9088] EXT4-fs (loop8): 1 truncate cleaned up
[  317.931029][ T9088] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  317.967466][ T9096] loop5: detected capacity change from 0 to 512
[  318.319332][ T9103] loop6: detected capacity change from 0 to 1024
[  318.332482][ T9103] EXT4-fs: Ignoring removed mblk_io_submit option
[  318.513961][ T9096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  318.587921][ T9103] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f000c0ac, mo2=0002]
[  318.596681][ T9103] System zones: 0-1, 3-36
[  318.620342][ T9103] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  318.916661][ T9096] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.965300][ T8206] EXT4-fs (loop8): unmounting filesystem.
[  319.025238][ T9096] EXT4-fs (loop5): unmounting filesystem.
[  319.296013][ T9110] netlink: 'syz.7.1507': attribute type 10 has an invalid length.
[  319.379821][ T9110] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1507'.
[  319.755048][ T9110] team0: Port device geneve0 added
[  320.094537][ T9108] hsr0 speed is unknown, defaulting to 1000
[  320.144099][ T9096] loop5: detected capacity change from 0 to 164
[  320.172617][ T8165] EXT4-fs (loop6): unmounting filesystem.
[  320.232125][ T9096] rdma_rxe: already configured on bond0
[  320.265164][ T9133] dccp_close: ABORT with 132 bytes unread
[  320.515591][   T27] kauditd_printk_skb: 37 callbacks suppressed
[  320.515609][   T27] audit: type=1326 audit(1742231292.305:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  320.621509][   T27] audit: type=1326 audit(1742231292.355:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  320.709499][   T27] audit: type=1326 audit(1742231292.365:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  320.866700][   T27] audit: type=1326 audit(1742231292.365:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  320.918184][   T27] audit: type=1326 audit(1742231292.365:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  320.997302][ T9158] loop5: detected capacity change from 0 to 128
[  321.017677][   T27] audit: type=1326 audit(1742231292.375:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  321.079157][ T9158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  321.141251][ T9158] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  321.151541][   T27] audit: type=1326 audit(1742231292.375:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  321.227650][ T9158] syz.5.1519[9158] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  321.227763][ T9158] syz.5.1519[9158] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  321.267397][   T27] audit: type=1326 audit(1742231292.375:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  321.315208][ T9169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'.
[  321.353221][ T9166] loop8: detected capacity change from 0 to 2048
[  321.412708][   T27] audit: type=1326 audit(1742231292.375:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  321.484956][   T27] audit: type=1326 audit(1742231292.375:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625b98d169 code=0x7ffc0000
[  321.609718][ T9166] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  321.621329][ T9166] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.872206][ T9183] loop6: detected capacity change from 0 to 736
[  322.024088][ T7977] EXT4-fs (loop5): unmounting filesystem.
[  322.041973][ T9190] syz.4.1525[9190] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  322.042065][ T9190] syz.4.1525[9190] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  322.052665][ T9183] ISOFS: unable to read i-node block
[  322.256254][ T9194] serio: Serial port ptm0
[  322.289752][ T4644] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 345: padding at end of block bitmap is not set
[  322.366893][ T4644] EXT4-fs (loop8): Remounting filesystem read-only
[  322.469314][ T8206] EXT4-fs (loop8): unmounting filesystem.
[  323.444193][ T9214] syz.6.1531 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  323.546543][ T9216] loop4: detected capacity change from 0 to 2048
[  323.611575][ T9216] Alternate GPT is invalid, using primary GPT.
[  323.620162][ T9219] loop8: detected capacity change from 0 to 512
[  323.641263][ T9216]  loop4: p1 p2 p3
[  323.687994][ T9219] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  323.762222][ T9219] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  323.791620][ T9219] EXT4-fs (loop8): unmounting filesystem.
[  323.898440][ T8487] udevd[8487]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  323.913441][ T8489] udevd[8489]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  323.920093][ T8481] udevd[8481]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  323.937677][ T9219] loop8: detected capacity change from 0 to 164
[  323.977044][ T9219] rdma_rxe: rxe_register_device failed with error -23
[  324.005931][ T9219] rdma_rxe: failed to add bond0
[  324.065663][ T9232] loop4: detected capacity change from 0 to 2048
[  324.097529][ T9232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  324.110871][ T9232] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.917240][ T6080] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:18: bg 0: block 345: padding at end of block bitmap is not set
[  326.031128][ T6080] EXT4-fs (loop4): Remounting filesystem read-only
[  326.983067][ T4249] EXT4-fs (loop4): unmounting filesystem.
[  327.076891][ T9276] loop8: detected capacity change from 0 to 256
[  327.143198][   T27] kauditd_printk_skb: 74 callbacks suppressed
[  327.143217][   T27] audit: type=1804 audit(1742231298.935:4461): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1551" name="/newroot/47/file0/file0" dev="loop8" ino=1048619 res=1 errno=0
[  327.334126][ T9283] loop5: detected capacity change from 0 to 512
[  327.398424][ T9283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  327.469019][ T9283] EXT4-fs (loop5): 1 truncate cleaned up
[  327.482371][ T9283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  327.571202][ T9291] netlink: 180900 bytes leftover after parsing attributes in process `syz.7.1557'.
[  327.608108][ T9291] openvswitch: netlink: Flow actions attr not present in new flow.
[  327.669568][ T7977] EXT4-fs (loop5): unmounting filesystem.
[  328.201346][   T27] audit: type=1107 audit(1742231299.965:4462): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  329.235057][ T4554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.463403][ T4554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.564513][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1569'.
[  329.713423][ T4554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.019840][ T4554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.078641][ T9334] netlink: 'syz.5.1572': attribute type 7 has an invalid length.
[  330.101423][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'.
[  330.273801][ T9343] syz.8.1576[9343] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  330.273910][ T9343] syz.8.1576[9343] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  330.465535][ T4554] tipc: Left network mode
[  330.485141][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.497818][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.511381][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.519402][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.537231][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  330.545399][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.633637][ T9361] xt_CT: No such helper "syz0"
[  331.841928][   T27] audit: type=1326 audit(1742231303.635:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  331.934618][   T27] audit: type=1326 audit(1742231303.665:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.017313][   T27] audit: type=1326 audit(1742231303.665:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.045663][ T9346] hsr0 speed is unknown, defaulting to 1000
[  332.123072][ T9363] hsr0 speed is unknown, defaulting to 1000
[  332.129721][   T27] audit: type=1326 audit(1742231303.665:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.152429][   T27] audit: type=1326 audit(1742231303.665:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.201280][   T27] audit: type=1326 audit(1742231303.665:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.226239][   T27] audit: type=1326 audit(1742231303.665:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.326976][   T27] audit: type=1326 audit(1742231303.675:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.397428][   T27] audit: type=1326 audit(1742231303.675:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.452660][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  332.461220][   T27] audit: type=1326 audit(1742231303.675:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.484584][ T4253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  332.494885][ T4253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  332.503164][ T4253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  332.510767][ T4253] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  332.519126][ T4253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  332.581724][   T27] audit: type=1326 audit(1742231303.675:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.605302][   T27] audit: type=1326 audit(1742231303.675:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.627719][   T48] Bluetooth: hci0: command 0x0409 tx timeout
[  332.634032][   T27] audit: type=1326 audit(1742231303.675:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.656806][   T27] audit: type=1326 audit(1742231303.685:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f496238d169 code=0x7ffc0000
[  332.867372][ T9375] hsr0 speed is unknown, defaulting to 1000
[  333.135164][ T9346] chnl_net:caif_netlink_parms(): no params data found
[  333.249398][ T4253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  333.260010][ T4253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  333.270147][ T4253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  333.285721][ T4253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  333.293429][ T4253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  333.311248][ T4253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  333.530916][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.538611][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.547053][ T9346] device bridge_slave_0 entered promiscuous mode
[  333.556739][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.564121][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.574895][ T9346] device bridge_slave_1 entered promiscuous mode
[  333.714702][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.740713][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.871597][ T9385] hsr0 speed is unknown, defaulting to 1000
[  333.931736][ T4554] device hsr_slave_0 left promiscuous mode
[  333.939927][ T4554] device hsr_slave_1 left promiscuous mode
[  333.947239][ T4554] device bridge_slave_1 left promiscuous mode
[  333.953981][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.965920][ T4554] device bridge_slave_0 left promiscuous mode
[  333.972897][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.022101][ T4554] device veth1_macvtap left promiscuous mode
[  334.028204][ T4554] device veth0_macvtap left promiscuous mode
[  334.038461][ T4554] device veth1_vlan left promiscuous mode
[  334.062020][ T4554] device veth0_vlan left promiscuous mode
[  334.238903][ T9405] siw: device registration error -23
[  334.425755][ T9410] loop5: detected capacity change from 0 to 512
[  334.447750][ T9410] EXT4-fs: Ignoring removed i_version option
[  334.456311][ T9410] EXT4-fs: Ignoring removed mblk_io_submit option
[  334.481645][ T9410] ext4: Unknown parameter 'seclabel'
[  334.542742][   T48] Bluetooth: hci2: command 0x0409 tx timeout
[  334.745196][ T4253] Bluetooth: hci0: command 0x041b tx timeout
[  335.605581][ T4253] Bluetooth: hci3: command 0x0409 tx timeout
[  335.794865][ T9417] loop8: detected capacity change from 0 to 512
[  335.849222][ T9417] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  335.878204][ T9417] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  335.896152][ T9417] EXT4-fs (loop8): unmounting filesystem.
[  336.086583][ T9421] loop8: detected capacity change from 0 to 164
[  336.107163][ T9421] rdma_rxe: rxe_register_device failed with error -23
[  336.114389][ T9421] rdma_rxe: failed to add bond0
[  336.136715][ T4554] team0 (unregistering): Port device team_slave_1 removed
[  336.192147][ T4554] team0 (unregistering): Port device team_slave_0 removed
[  336.240475][ T4554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.297056][ T4554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.631467][ T4253] Bluetooth: hci2: command 0x041b tx timeout
[  336.783240][ T4253] Bluetooth: hci0: command 0x040f tx timeout
[  336.858376][ T4554] bond0 (unregistering): Released all slaves
[  336.950540][ T9346] team0: Port device team_slave_0 added
[  336.975111][   T22] hsr0 speed is unknown, defaulting to 1000
[  337.062472][   T22] ==================================================================
[  337.070594][   T22] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430
[  337.077854][   T22] Read of size 4 at addr ffff8880285a60e0 by task kworker/1:0/22
[  337.085774][   T22] 
[  337.088138][   T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.131-syzkaller #0
[  337.096138][   T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  337.106219][   T22] Workqueue: infiniband ib_cache_event_task
[  337.112154][   T22] Call Trace:
[  337.115452][   T22]  <TASK>
[  337.118404][   T22]  dump_stack_lvl+0x1e3/0x2cb
[  337.123112][   T22]  ? nf_tcp_handle_invalid+0x647/0x647
[  337.128602][   T22]  ? panic+0x764/0x764
[  337.132712][   T22]  ? _printk+0xd1/0x111
[  337.136894][   T22]  ? __virt_addr_valid+0x17f/0x530
[  337.142036][   T22]  ? __virt_addr_valid+0x17f/0x530
[  337.147177][   T22]  print_report+0x15f/0x4f0
[  337.151709][   T22]  ? __virt_addr_valid+0x17f/0x530
[  337.156875][   T22]  ? __virt_addr_valid+0x17f/0x530
[  337.162051][   T22]  ? __virt_addr_valid+0x45b/0x530
[  337.167185][   T22]  ? __phys_addr+0xb6/0x170
[  337.171695][   T22]  ? siw_query_port+0x342/0x430
[  337.176550][   T22]  kasan_report+0x136/0x160
[  337.181058][   T22]  ? siw_query_port+0x342/0x430
[  337.185953][   T22]  siw_query_port+0x342/0x430
[  337.190634][   T22]  ? ib_query_port+0x344/0x7c0
[  337.195405][   T22]  ib_cache_update+0x1a8/0xaf0
[  337.200181][   T22]  ? ib_cache_setup_one+0x5b0/0x5b0
[  337.205389][   T22]  ? read_lock_is_recursive+0x10/0x10
[  337.210775][   T22]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  337.216781][   T22]  ? print_irqtrace_events+0x210/0x210
[  337.222257][   T22]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  337.228156][   T22]  ib_cache_event_task+0xef/0x1e0
[  337.233292][   T22]  ? process_one_work+0x806/0x1260
[  337.238428][   T22]  process_one_work+0x917/0x1260
[  337.243404][   T22]  ? worker_detach_from_pool+0x260/0x260
[  337.249047][   T22]  ? _raw_spin_lock_irqsave+0x120/0x120
[  337.254601][   T22]  ? kthread_data+0x4e/0xc0
[  337.259117][   T22]  ? wq_worker_running+0x97/0x190
[  337.264143][   T22]  worker_thread+0xa47/0x1200
[  337.268837][   T22]  kthread+0x28d/0x320
[  337.272905][   T22]  ? worker_clr_flags+0x190/0x190
[  337.277932][   T22]  ? kthread_blkcg+0xd0/0xd0
[  337.282523][   T22]  ret_from_fork+0x1f/0x30
[  337.286951][   T22]  </TASK>
[  337.289968][   T22] 
[  337.292291][   T22] Allocated by task 4249:
[  337.296610][   T22]  kasan_set_track+0x4b/0x70
[  337.301201][   T22]  __kasan_kmalloc+0x97/0xb0
[  337.305878][   T22]  __kmalloc_node+0xb3/0x230
[  337.310468][   T22]  kvmalloc_node+0x6e/0x180
[  337.314972][   T22]  alloc_netdev_mqs+0x85/0xef0
[  337.319734][   T22]  rtnl_create_link+0x2e9/0xaa0
[  337.324581][   T22]  rtnl_newlink+0x140d/0x2060
[  337.329270][   T22]  rtnetlink_rcv_msg+0x822/0x1000
[  337.334309][   T22]  netlink_rcv_skb+0x1cd/0x410
[  337.339609][   T22]  netlink_unicast+0x7e2/0x970
[  337.344376][   T22]  netlink_sendmsg+0xa26/0xd60
[  337.349142][   T22]  __sys_sendto+0x480/0x600
[  337.353647][   T22]  __x64_sys_sendto+0xda/0xf0
[  337.358321][   T22]  do_syscall_64+0x3b/0xb0
[  337.362736][   T22]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.368632][   T22] 
[  337.370951][   T22] Freed by task 4554:
[  337.374926][   T22]  kasan_set_track+0x4b/0x70
[  337.379523][   T22]  kasan_save_free_info+0x27/0x40
[  337.384549][   T22]  ____kasan_slab_free+0xd6/0x120
[  337.389572][   T22]  __kmem_cache_free+0x25c/0x3c0
[  337.394515][   T22]  device_release+0x91/0x1c0
[  337.399544][   T22]  kobject_put+0x224/0x460
[  337.403991][   T22]  netdev_run_todo+0xe19/0xf20
[  337.408768][   T22]  default_device_exit_batch+0x992/0xa20
[  337.414404][   T22]  cleanup_net+0x886/0xd20
[  337.418823][   T22]  process_one_work+0x917/0x1260
[  337.423764][   T22]  worker_thread+0xa47/0x1200
[  337.428466][   T22]  kthread+0x28d/0x320
[  337.432536][   T22]  ret_from_fork+0x1f/0x30
[  337.437069][   T22] 
[  337.439390][   T22] The buggy address belongs to the object at ffff8880285a6000
[  337.439390][   T22]  which belongs to the cache kmalloc-cg-4k of size 4096
[  337.454054][   T22] The buggy address is located 224 bytes inside of
[  337.454054][   T22]  4096-byte region [ffff8880285a6000, ffff8880285a7000)
[  337.467417][   T22] 
[  337.469742][   T22] The buggy address belongs to the physical page:
[  337.476245][   T22] page:ffffea0000a16800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x285a0
[  337.486412][   T22] head:ffffea0000a16800 order:3 compound_mapcount:0 compound_pincount:0
[  337.494743][   T22] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  337.502742][   T22] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c4c280
[  337.511326][   T22] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  337.519911][   T22] page dumped because: kasan: bad access detected
[  337.526680][   T22] page_owner tracks the page as allocated
[  337.532401][   T22] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4251, tgid 4251 (syz-executor), ts 72757536407, free_ts 72754234144
[  337.554479][   T22]  post_alloc_hook+0x18d/0x1b0
[  337.559257][   T22]  get_page_from_freelist+0x3731/0x38d0
[  337.564806][   T22]  __alloc_pages+0x28d/0x770
[  337.569401][   T22]  alloc_slab_page+0x6a/0x150
[  337.574086][   T22]  new_slab+0x84/0x2d0
[  337.578509][   T22]  ___slab_alloc+0xc20/0x1270
[  337.583214][   T22]  __kmem_cache_alloc_node+0x19f/0x260
[  337.588681][   T22]  __kmalloc_node_track_caller+0xa0/0x220
[  337.594408][   T22]  kmemdup+0x26/0x60
[  337.598479][   T22]  __devinet_sysctl_register+0xac/0x2a0
[  337.604027][   T22]  devinet_sysctl_register+0x155/0x1c0
[  337.609506][   T22]  inetdev_init+0x2b4/0x4e0
[  337.614008][   T22]  inetdev_event+0x27f/0x1480
[  337.618777][   T22]  raw_notifier_call_chain+0xd0/0x170
[  337.624156][   T22]  register_netdevice+0x1630/0x1ab0
[  337.629355][   T22]  hsr_dev_finalize+0x41d/0x6a0
[  337.634205][   T22] page last free stack trace:
[  337.638877][   T22]  free_unref_page_prepare+0x12a6/0x15b0
[  337.644513][   T22]  free_unref_page+0x33/0x3e0
[  337.649192][   T22]  __unfreeze_partials+0x1b7/0x210
[  337.654314][   T22]  put_cpu_partial+0x17b/0x250
[  337.659083][   T22]  qlist_free_all+0x76/0xe0
[  337.663592][   T22]  kasan_quarantine_reduce+0x156/0x170
[  337.669057][   T22]  __kasan_slab_alloc+0x1f/0x70
[  337.673907][   T22]  slab_post_alloc_hook+0x52/0x3a0
[  337.679027][   T22]  __kmem_cache_alloc_node+0x137/0x260
[  337.684508][   T22]  kmalloc_trace+0x26/0xe0
[  337.689190][   T22]  kobject_uevent_env+0x281/0x8c0
[  337.694224][   T22]  __kobject_del+0xd3/0x310
[  337.698732][   T22]  kobject_put+0x238/0x460
[  337.703154][   T22]  net_rx_queue_update_kobjects+0x44f/0x4c0
[  337.709057][   T22]  netif_set_real_num_rx_queues+0xfc/0x1e0
[  337.714865][   T22]  veth_init_queues+0x10a/0x180
[  337.719724][   T22] 
[  337.722049][   T22] Memory state around the buggy address:
[  337.727707][   T22]  ffff8880285a5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  337.735792][   T22]  ffff8880285a6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  337.743856][   T22] >ffff8880285a6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  337.751915][   T22]                                                        ^
[  337.759106][   T22]  ffff8880285a6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  337.767166][   T22]  ffff8880285a6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  337.775242][   T22] ==================================================================
[  337.792047][ T4253] Bluetooth: hci3: command 0x041b tx timeout
[  337.798841][ T9346] team0: Port device team_slave_1 added
[  337.830504][   T22] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  337.837750][   T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.131-syzkaller #0
[  337.845757][   T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  337.856010][   T22] Workqueue: infiniband ib_cache_event_task
[  337.861957][   T22] Call Trace:
[  337.865258][   T22]  <TASK>
[  337.868211][   T22]  dump_stack_lvl+0x1e3/0x2cb
[  337.873065][   T22]  ? nf_tcp_handle_invalid+0x647/0x647
[  337.878646][   T22]  ? panic+0x764/0x764
[  337.882749][   T22]  ? preempt_schedule_common+0xa6/0xd0
[  337.888250][   T22]  ? vscnprintf+0x59/0x80
[  337.892618][   T22]  panic+0x318/0x764
[  337.896636][   T22]  ? check_panic_on_warn+0x1d/0xa0
[  337.901798][   T22]  ? memcpy_page_flushcache+0xfc/0xfc
[  337.907292][   T22]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  337.913302][   T22]  ? _raw_spin_unlock+0x40/0x40
[  337.918178][   T22]  ? print_report+0x4a3/0x4f0
[  337.922921][   T22]  check_panic_on_warn+0x7e/0xa0
[  337.927895][   T22]  ? siw_query_port+0x342/0x430
[  337.932949][   T22]  end_report+0x66/0x110
[  337.937668][   T22]  kasan_report+0x143/0x160
[  337.942204][   T22]  ? siw_query_port+0x342/0x430
[  337.947096][   T22]  siw_query_port+0x342/0x430
[  337.951805][   T22]  ? ib_query_port+0x344/0x7c0
[  337.956604][   T22]  ib_cache_update+0x1a8/0xaf0
[  337.961427][   T22]  ? ib_cache_setup_one+0x5b0/0x5b0
[  337.966659][   T22]  ? read_lock_is_recursive+0x10/0x10
[  337.972069][   T22]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  337.978525][   T22]  ? print_irqtrace_events+0x210/0x210
[  337.984025][   T22]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  337.989958][   T22]  ib_cache_event_task+0xef/0x1e0
[  337.995028][   T22]  ? process_one_work+0x806/0x1260
[  338.000175][   T22]  process_one_work+0x917/0x1260
[  338.005157][   T22]  ? worker_detach_from_pool+0x260/0x260
[  338.010826][   T22]  ? _raw_spin_lock_irqsave+0x120/0x120
[  338.016396][   T22]  ? kthread_data+0x4e/0xc0
[  338.020942][   T22]  ? wq_worker_running+0x97/0x190
[  338.025997][   T22]  worker_thread+0xa47/0x1200
[  338.030813][   T22]  kthread+0x28d/0x320
[  338.034905][   T22]  ? worker_clr_flags+0x190/0x190
[  338.039951][   T22]  ? kthread_blkcg+0xd0/0xd0
[  338.044569][   T22]  ret_from_fork+0x1f/0x30
[  338.049030][   T22]  </TASK>
[  338.052394][   T22] Kernel Offset: disabled
[  338.056719][   T22] Rebooting in 86400 seconds..