last executing test programs:

10m43.24477096s ago: executing program 32 (id=4563):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

9m9.385557224s ago: executing program 33 (id=8740):
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x9000, 0xa88, 0x8409, 0x7, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x34000}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8m32.824872011s ago: executing program 34 (id=9418):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x20, r1, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x20}}, 0x8000)

7m32.763932905s ago: executing program 35 (id=11125):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x2}, 0x38)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0)

7m29.551736964s ago: executing program 36 (id=11215):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x4}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x22, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @broadcast, @multicast1}}}}}}, 0x2a)

5m10.732035231s ago: executing program 37 (id=15257):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)

5m1.922981338s ago: executing program 38 (id=15413):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

3m48.430839273s ago: executing program 39 (id=17342):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000009, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock2(&(0x7f0000162000/0x2000)=nil, 0x2000, 0x1)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
munlockall()

3m6.11877312s ago: executing program 40 (id=18357):
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0xdba0, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400})
io_uring_enter(r0, 0x847ba, 0x4c86, 0x5, 0x0, 0x0)

2m47.694762827s ago: executing program 41 (id=18791):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2m0.954152469s ago: executing program 42 (id=19854):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0)
semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1)

1m58.834935702s ago: executing program 5 (id=19911):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
r1 = inotify_init()
readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)

1m58.788862742s ago: executing program 5 (id=19913):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0xf8}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

1m58.760695046s ago: executing program 5 (id=19915):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)

1m58.728758649s ago: executing program 5 (id=19916):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0})

1m58.384045305s ago: executing program 5 (id=19922):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x3f, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff4, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}}, 0x0)

1m58.170593579s ago: executing program 5 (id=19924):
clock_adjtime(0x0, &(0x7f0000000040)={0x80000037d8, 0x538d28a0, 0xe9f4, 0x3, 0x100000, 0x1000000081, 0x100000, 0x0, 0xfffffffffffffffc, 0x0, 0x15eb, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x200000000, 0x5, 0xc, 0x0, 0x0, 0x2000, 0x2, 0x141, 0xfffffffffffffffd})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r0, 0x80000001, 0x4)

1m58.115886347s ago: executing program 43 (id=19924):
clock_adjtime(0x0, &(0x7f0000000040)={0x80000037d8, 0x538d28a0, 0xe9f4, 0x3, 0x100000, 0x1000000081, 0x100000, 0x0, 0xfffffffffffffffc, 0x0, 0x15eb, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x200000000, 0x5, 0xc, 0x0, 0x0, 0x2000, 0x2, 0x141, 0xfffffffffffffffd})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r0, 0x80000001, 0x4)

1m38.859564045s ago: executing program 6 (id=20360):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20040400)
socket$nl_rdma(0x10, 0x3, 0x14)

1m38.806403034s ago: executing program 6 (id=20362):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1m37.970879614s ago: executing program 6 (id=20388):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@remote, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x80}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @rand_addr=0x64010102}}}}}}, 0x26)

1m37.880117624s ago: executing program 6 (id=20391):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m37.818827911s ago: executing program 6 (id=20396):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x2)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

1m37.714941628s ago: executing program 6 (id=20399):
r0 = socket(0x2, 0x1, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(r1, r1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r2=>0x0}, &(0x7f0000000300)=0x9)
setreuid(r1, r2)

1m37.714207168s ago: executing program 44 (id=20399):
r0 = socket(0x2, 0x1, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(r1, r1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r2=>0x0}, &(0x7f0000000300)=0x9)
setreuid(r1, r2)

1m23.903905471s ago: executing program 4 (id=20689):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r2, 0xffffffffffffffff, 0x0)

1m23.867266993s ago: executing program 4 (id=20690):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)

1m22.970155329s ago: executing program 4 (id=20711):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1m22.820683017s ago: executing program 4 (id=20718):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m22.774209907s ago: executing program 4 (id=20719):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x3, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x15, &(0x7f0000002840)={@local, @random="0fb16b4fdbdd", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x42, 0x42, "db"}}}}}, 0x0)

1m22.642755979s ago: executing program 4 (id=20724):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

1m22.633670667s ago: executing program 45 (id=20724):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

1m22.266942778s ago: executing program 9 (id=20735):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xfffffefffffffffe]}, 0x0, 0x8)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0xf)
wait4(r0, 0x0, 0x2, 0x0)
tkill(r0, 0x3)

1m22.069670585s ago: executing program 9 (id=20738):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)

1m22.015061573s ago: executing program 9 (id=20739):
r0 = socket$kcm(0x2a, 0x2, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8918, 0x0)
sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)

1m21.822978032s ago: executing program 9 (id=20740):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

1m21.805421998s ago: executing program 9 (id=20741):
r0 = fsopen(&(0x7f00000003c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
r2 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101)
getdents(r2, 0x0, 0x0)

1m21.707460487s ago: executing program 9 (id=20742):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
socket$nl_netfilter(0x10, 0x3, 0xc)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9)

1m21.633829761s ago: executing program 46 (id=20742):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
socket$nl_netfilter(0x10, 0x3, 0xc)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9)

1m0.122661033s ago: executing program 3 (id=21202):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
timer_gettime(r0, 0x0)
sync_file_range(0xffffffffffffffff, 0x7, 0x4, 0x4)

59.684871388s ago: executing program 3 (id=21214):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0)

58.789010725s ago: executing program 3 (id=21220):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x837, &(0x7f00000003c0)={0x0, 0xa846, 0x10, 0x3, 0x179}, &(0x7f0000002380)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

58.654095146s ago: executing program 3 (id=21225):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==")
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x268)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0)

58.511437606s ago: executing program 3 (id=21231):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0)

58.337456288s ago: executing program 3 (id=21235):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

58.288474448s ago: executing program 47 (id=21235):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.522631461s ago: executing program 0 (id=22208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

5.468054469s ago: executing program 0 (id=22211):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x400000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.526502285s ago: executing program 0 (id=22215):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

4.326534543s ago: executing program 0 (id=22222):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@acl}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0xb6c, &(0x7f00000017c0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0)

4.03493271s ago: executing program 0 (id=22226):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0xf23}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

3.554932456s ago: executing program 0 (id=22235):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = eventfd2(0x8, 0x1)
write$eventfd(r1, &(0x7f0000000040)=0xfffffffffffffffd, 0x8)

3.504036326s ago: executing program 48 (id=22235):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = eventfd2(0x8, 0x1)
write$eventfd(r1, &(0x7f0000000040)=0xfffffffffffffffd, 0x8)

3.146911668s ago: executing program 2 (id=22243):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x44c, 0x30, 0x12f, 0x20, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x4, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x9, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x4000011, 0x188, 0x6, 0x5, 0xb, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x8, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x801, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0xae, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x3, 0x2000007, 0x0, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x1000003, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe57, 0x4, 0x2, 0x84, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x1, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x7, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x9, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x100400, 0x5, 0x3, 0x0, 0x797, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x1, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0x0, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x5, 0x6, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xfffffffb, 0x3ff, 0x3f7, 0x4, 0x6, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.065957991s ago: executing program 2 (id=22244):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

2.766101966s ago: executing program 1 (id=22246):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

2.287586083s ago: executing program 1 (id=22249):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4100, 0x1004}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

2.034536278s ago: executing program 2 (id=22251):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000400)={[{@nodots}, {@nodots}, {@dots}, {@fat=@uid}, {@nodots}, {@fat=@tz_utc}, {@dots}, {@fat=@debug}, {@dots}, {@dots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffffd}}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@fat=@nocase}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1fc, &(0x7f0000000200)="$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")
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'wlan1\x00', {'pimreg\x00'}, 0x8})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x10000, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c)

1.99749867s ago: executing program 7 (id=22252):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0)

1.870104523s ago: executing program 7 (id=22254):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb)
r3 = creat(&(0x7f0000000200)='./file0\x00', 0x12c)
splice(r1, 0x0, r3, 0x0, 0x8000, 0x0)

1.85907677s ago: executing program 2 (id=22255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1)

1.849520138s ago: executing program 8 (id=22256):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x400000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.795734867s ago: executing program 1 (id=22257):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00')
setreuid(0xee01, 0xffffffffffffffff)
fchdir(r0)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='stack\x00')
pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007)

1.706891707s ago: executing program 1 (id=22258):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x482, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0xd0)

1.000117305s ago: executing program 7 (id=22259):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x14}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

885.16729ms ago: executing program 8 (id=22260):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000002c80)=@ccm_128={{0x304}, "a0e3de8cfc584341", "3575d52300", "6ce11778", "c5fc9e00bb5de644"}, 0x28)
sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
write$binfmt_aout(r0, 0x0, 0xfdef)

842.934601ms ago: executing program 2 (id=22261):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x4})
fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff})

842.514691ms ago: executing program 8 (id=22262):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x3, 0x2, 0x1, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

818.720596ms ago: executing program 8 (id=22263):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$9p(r0, &(0x7f0000000100)="d5c0e9", 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

674.028395ms ago: executing program 1 (id=22264):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0)

673.492855ms ago: executing program 8 (id=22265):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='7', 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0xdc}, &(0x7f0000000600)=<r1=>0x0, &(0x7f00000005c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8014})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

649.84383ms ago: executing program 7 (id=22266):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

585.670016ms ago: executing program 1 (id=22267):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = inotify_init1(0x80000)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/75, 0x4b}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

579.049764ms ago: executing program 7 (id=22268):
r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_open_dev$usbfs(0x0, 0x1ff, 0x42102)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

495.039376ms ago: executing program 8 (id=22269):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4040)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)

448.482756ms ago: executing program 7 (id=22270):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x400000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=22271):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x24002de8)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.2.20450'.
[  716.362771][   T28] audit: type=1400 audit(2000001342.736:16554): avc:  denied  { mount } for  pid=26361 comm="syz.1.20452" name="/" dev="autofs" ino=320710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  716.678561][T15775] tipc: Subscription rejected, illegal request
[  716.683299][T26356] loop9: detected capacity change from 0 to 512
[  716.884105][T26391] loop2: detected capacity change from 0 to 512
[  716.925013][T26391] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.20464: inode has both inline data and extents flags
[  716.964600][T26391] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  716.964888][T26391] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.20464: couldn't read orphan inode 15 (err -117)
[  716.974094][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  716.974122][    C1] EXT4-fs (loop2): initial error at time 2000001343: ext4_orphan_get:1391: inode 15
[  716.974159][    C1] EXT4-fs (loop2): last error at time 2000001343: ext4_orphan_get:1391: inode 15
[  717.028995][T26356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  717.059014][T26391] loop2: lost filesystem error report for type 5 error -117
[  717.060586][T26356] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  717.107820][T26391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  717.173839][T26400] netlink: 'syz.8.20467': attribute type 30 has an invalid length.
[  717.187745][T26400] bond2: option arp_missed_max: invalid value (0)
[  717.194296][T26400] bond2: option arp_missed_max: allowed values 1 - 255
[  717.225799][T26400] bond2 (unregistering): Released all slaves
[  717.236080][T26199] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.247373][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  717.443680][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20474'.
[  717.459249][T26417] tipc: Started in network mode
[  717.465767][T26417] tipc: Node identity ac1414aa, cluster identity 4711
[  717.491411][T26417] tipc: Enabled bearer <udp:syz2>, priority 0
[  717.574698][   T28] audit: type=1326 audit(2000001343.936:16555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.9.20477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2c5c799 code=0x7ffc0000
[  717.608717][   T28] audit: type=1326 audit(2000001343.936:16556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.9.20477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb2d2c5c799 code=0x7ffc0000
[  717.651018][   T28] audit: type=1326 audit(2000001343.936:16557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.9.20477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb2d2c1cfce code=0x7ffc0000
[  717.675852][   T28] audit: type=1326 audit(2000001343.936:16558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.9.20477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2c5c799 code=0x7ffc0000
[  717.725607][   T28] audit: type=1326 audit(2000001343.936:16559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.9.20477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2c5c799 code=0x7ffc0000
[  717.773493][   T28] audit: type=1326 audit(2000001343.936:16560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.9.20477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb2d2c5c799 code=0x7ffc0000
[  717.780474][T26433] netlink: 'syz.1.20482': attribute type 15 has an invalid length.
[  717.797834][   T28] audit: type=1326 audit(2000001343.936:16561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.9.20477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2c5c799 code=0x7ffc0000
[  717.856291][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20483'.
[  717.924083][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20482'.
[  718.036654][T26433] netlink: 'syz.1.20482': attribute type 15 has an invalid length.
[  718.104565][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20482'.
[  718.118621][T26461] netlink: 'syz.2.20493': attribute type 7 has an invalid length.
[  718.139103][T26461] netlink: 'syz.2.20493': attribute type 7 has an invalid length.
[  718.292435][T26477] bond1: entered allmulticast mode
[  718.321097][T26477] 8021q: adding VLAN 0 to HW filter on device bond1
[  718.379859][T26477] xt_TCPMSS: Only works on TCP SYN packets
[  718.488199][T14743] tipc: Node number set to 2886997162
[  718.778138][T26498] loop2: detected capacity change from 0 to 1024
[  718.785018][T26498] EXT4-fs: inline encryption not supported
[  718.790963][T26498] EXT4-fs: Ignoring removed nobh option
[  718.796582][T26498] EXT4-fs: Ignoring removed nobh option
[  718.802244][T26498] EXT4-fs: Ignoring removed bh option
[  718.839638][T26498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  718.875936][T26498] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.20508: Allocating blocks 497-513 which overlap fs metadata
[  718.890686][T26498] EXT4-fs (loop2): pa ffff88810827e1c0: logic 131104, phys. 177, len 21
[  718.899303][T26498] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1
[  718.993932][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.276811][T26539] netlink: 'syz.4.20527': attribute type 20 has an invalid length.
[  719.276965][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  719.276979][   T28] audit: type=1326 audit(2000001601.640:16563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  719.290857][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20527'.
[  719.345712][   T28] audit: type=1326 audit(2000001601.640:16564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  719.374576][   T28] audit: type=1326 audit(2000001601.640:16565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  719.399788][   T28] audit: type=1326 audit(2000001601.660:16566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  719.415347][T26539] netlink: 'syz.4.20527': attribute type 20 has an invalid length.
[  719.430259][   T28] audit: type=1326 audit(2000001601.660:16567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  719.455466][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20527'.
[  719.527746][   T28] audit: type=1326 audit(2000001601.660:16568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  719.556623][   T28] audit: type=1326 audit(2000001601.660:16569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  719.588243][   T28] audit: type=1326 audit(2000001601.660:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b5414e007 code=0x7ffc0000
[  719.612404][   T28] audit: type=1326 audit(2000001601.660:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3b5410cfce code=0x7ffc0000
[  719.646318][   T28] audit: type=1326 audit(2000001601.660:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26542 comm="syz.8.20528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3b5410cfce code=0x7ffc0000
[  719.770623][T26562] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20534'.
[  719.788856][T26568] batadv_slave_1: entered promiscuous mode
[  719.804849][T26558] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20534'.
[  719.808007][T26567] batadv_slave_1: left promiscuous mode
[  720.430639][T26622] dvmrp0: entered allmulticast mode
[  720.488210][T26631] dummy0: entered promiscuous mode
[  720.504401][T26631] bond0: entered promiscuous mode
[  720.526314][T26631] bond_slave_0: entered promiscuous mode
[  720.552947][T26631] bond_slave_1: entered promiscuous mode
[  720.569762][T26631] debugfs: 'hsr1' already exists in 'hsr'
[  720.588111][T26631] Cannot create hsr debugfs directory
[  720.592187][T26638] option changes via remount are deprecated (pid=26637 comm=syz.2.20566)
[  720.602979][T26631] hsr1: entered allmulticast mode
[  720.621609][T26631] dummy0: entered allmulticast mode
[  720.635825][T26631] bond0: entered allmulticast mode
[  720.650957][T26631] bond_slave_0: entered allmulticast mode
[  720.666861][T26631] bond_slave_1: entered allmulticast mode
[  720.684225][T26640] loop2: detected capacity change from 0 to 512
[  720.729083][T26640] EXT4-fs: Ignoring removed nobh option
[  720.785559][T26640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  720.837582][T26640] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  720.861389][T26640] EXT4-fs (loop2): 1 truncate cleaned up
[  720.867817][T26640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  720.934709][T23991] IPVS: starting estimator thread 0...
[  721.049002][T26653] IPVS: using max 2544 ests per chain, 127200 per kthread
[  721.063667][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.178027][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20576'.
[  721.698708][T26686] loop2: detected capacity change from 0 to 128
[  721.762024][T26686] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  721.799826][T26691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20586'.
[  721.818267][T26686] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  721.840593][T26691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20586'.
[  721.880576][T26686] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.20585: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  721.917886][T26689] loop9: detected capacity change from 0 to 8192
[  721.948286][T26686] EXT4-fs (loop2): Remounting filesystem read-only
[  722.045844][T25003] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  722.608298][T26720] batadv_slave_1: entered promiscuous mode
[  722.622856][T26719] batadv_slave_1: left promiscuous mode
[  722.630707][T26724] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  722.666696][T26726] netlink: 'syz.9.20603': attribute type 27 has an invalid length.
[  723.057357][T26726] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.064904][T26726] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.482712][T26726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  723.537161][T26726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  723.565043][T26753] netlink: 'syz.8.20612': attribute type 7 has an invalid length.
[  723.730472][T26726] hsr1: left allmulticast mode
[  723.735523][T26726] dummy0: left allmulticast mode
[  723.742113][T26726] bond0: left allmulticast mode
[  723.747151][T26726] bond_slave_0: left allmulticast mode
[  723.753796][T26726] bond_slave_1: left allmulticast mode
[  723.788979][T26753] netlink: 'syz.8.20612': attribute type 7 has an invalid length.
[  723.824603][T26756] netlink: 28 bytes leftover after parsing attributes in process `syz.9.20613'.
[  723.895363][T26768] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20619'.
[  723.929444][T26768] netlink: 4 bytes leftover after parsing attributes in process `syz.9.20619'.
[  723.966939][T26768] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20619'.
[  723.982011][T26768] netlink: 4 bytes leftover after parsing attributes in process `syz.9.20619'.
[  724.030952][T26782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20625'.
[  724.047432][T26782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20625'.
[  724.175739][T26805] dummy0: entered promiscuous mode
[  724.189210][T26811] loop9: detected capacity change from 0 to 512
[  724.190421][T26805] bond0: entered promiscuous mode
[  724.230130][T26811] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #3: comm syz.9.20638: corrupted inode contents
[  724.239170][T26805] debugfs: 'hsr0' already exists in 'hsr'
[  724.247822][T26805] Cannot create hsr debugfs directory
[  724.255081][T26805] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  724.268002][T26805] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  724.276384][T26811] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  724.279063][T26805] hsr0: entered allmulticast mode
[  724.306294][T26805] dummy0: entered allmulticast mode
[  724.307132][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  724.316405][T26805] bond0: entered allmulticast mode
[  724.318533][    C0] EXT4-fs (loop9): initial error at time 2000001606: ext4_do_update_inode:5569: inode 3
[  724.334982][    C0] EXT4-fs (loop9): last error at time 2000001606: ext4_do_update_inode:5569: inode 3
[  724.385455][T26811] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #3: comm syz.9.20638: mark_inode_dirty error
[  724.397782][T26811] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  724.398673][T26811] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #3: comm syz.9.20638: corrupted inode contents
[  724.407518][T26827] netlink: 'syz.2.20644': attribute type 6 has an invalid length.
[  724.428450][T26827] netlink: 'syz.2.20644': attribute type 6 has an invalid length.
[  724.433345][T26811] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  724.436619][T26811] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.20638: mark_inode_dirty error
[  724.477325][T26811] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  724.477865][T26811] __quota_error: 64 callbacks suppressed
[  724.477882][T26811] Quota error (device loop9): write_blk: dquota write failed
[  724.522217][T26811] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  724.538118][T26811] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.20638: Failed to acquire dquot type 0
[  724.563402][T26811] loop9: lost filesystem error report for type 5 error -117
[  724.563970][T26811] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.20638: corrupted inode contents
[  724.588621][T26811] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  724.588845][T26811] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #16: comm syz.9.20638: mark_inode_dirty error
[  724.615508][T26802] loop4: detected capacity change from 0 to 512
[  724.625740][T26811] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  724.631943][T26811] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.20638: corrupted inode contents
[  724.667331][T26811] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  724.673142][T26811] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.20638: mark_inode_dirty error
[  724.700317][T26811] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  724.703492][T26811] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.20638: corrupted inode contents
[  724.728161][T26811] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  724.728517][T26811] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  724.747382][T26811] loop9: lost filesystem error report for type 5 error -117
[  724.747562][T26811] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.20638: corrupted inode contents
[  724.751935][T26802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.754936][T26811] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  724.755140][T26811] EXT4-fs error (device loop9): ext4_truncate:4587: inode #16: comm syz.9.20638: mark_inode_dirty error
[  724.755303][T26811] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[  724.755322][T26811] loop9: lost filesystem error report for type 5 error -117
[  724.755692][T26811] EXT4-fs (loop9): 1 truncate cleaned up
[  724.769160][T26802] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  724.782308][T26811] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.849181][T26811] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  724.860272][T24812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.871116][T26811] EXT4-fs warning (device loop9): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  724.924840][T26199] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.939024][T26854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26854 comm=syz.2.20653
[  724.991740][T26861] loop4: detected capacity change from 0 to 512
[  725.017701][T26861] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.20657: inode has both inline data and extents flags
[  725.033511][T26861] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.20657: couldn't read orphan inode 15 (err -117)
[  725.045569][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  725.045593][    C0] EXT4-fs (loop4): initial error at time 2000001607: ext4_orphan_get:1391: inode 15
[  725.045633][    C0] EXT4-fs (loop4): last error at time 2000001607: ext4_orphan_get:1391: inode 15
[  725.074199][T26861] loop4: lost filesystem error report for type 5 error -117
[  725.074872][T26861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  725.098852][T26861] tipc: Started in network mode
[  725.103859][T26861] tipc: Node identity ac14140f, cluster identity 4711
[  725.111106][T26861] tipc: New replicast peer: 255.255.255.255
[  725.117356][T26861] tipc: Enabled bearer <udp:syz2>, priority 0
[  725.156555][T24812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  725.880864][T26913] blktrace: Concurrent blktraces are not allowed on loop8
[  725.951668][T26906] loop9: detected capacity change from 0 to 4096
[  725.982826][T26906] EXT4-fs: test_dummy_encryption option not supported
[  726.228766][   T10] tipc: Node number set to 2886997007
[  726.500718][T26950] __nla_validate_parse: 8 callbacks suppressed
[  726.500772][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20704'.
[  726.532541][T26952] loop2: detected capacity change from 0 to 512
[  726.565863][   T28] audit: type=1326 audit(2000001608.930:16637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26954 comm="syz.8.20695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x0
[  726.590364][T26952] EXT4-fs (loop2): 1 truncate cleaned up
[  726.600078][T26952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  726.634907][T26952] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20694: invalid indirect mapped block 234881024 (level 0)
[  726.652786][T26952] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.20694: bg 0: block 465: padding at end of block bitmap is not set
[  726.667931][T26952] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 62 with error 28
[  726.680661][T26952] EXT4-fs (loop2): This should not happen!! Data will be lost
[  726.680661][T26952] 
[  726.690794][T26952] EXT4-fs (loop2): Total free blocks count 0
[  726.696879][T26952] EXT4-fs (loop2): Free/Dirty block details
[  726.703318][T26952] EXT4-fs (loop2): free_blocks=0
[  726.711363][T26952] EXT4-fs (loop2): dirty_blocks=62
[  726.716693][T26952] EXT4-fs (loop2): Block reservation details
[  726.722884][T26952] EXT4-fs (loop2): i_reserved_data_blocks=62
[  726.744761][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.756743][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20684'.
[  726.774512][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20684'.
[  726.880449][T26972] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  727.264795][T27003] veth0: entered promiscuous mode
[  727.270578][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20713'.
[  727.669262][T15767] bond1 (unregistering): (slave gretap1): Releasing active interface
[  727.740428][T15767] bond0 (unregistering): Released all slaves
[  727.751883][T15767] bond1 (unregistering): Released all slaves
[  727.770100][T27028] ip6gre1: entered promiscuous mode
[  727.775407][T27028] ip6gre1: entered allmulticast mode
[  727.784391][T10357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  727.813115][T23989] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  727.821438][T10357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  727.846864][T23989] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  727.870369][T15767] tipc: Disabling bearer <udp:syz2>
[  727.889131][T15767] tipc: Left network mode
[  727.925057][T15767] hsr_slave_0: left promiscuous mode
[  727.948262][T15767] hsr_slave_1: left promiscuous mode
[  727.966229][T15767] veth1_macvtap: left promiscuous mode
[  727.979330][T15767] veth0_macvtap: left promiscuous mode
[  727.987944][T27060] loop2: detected capacity change from 0 to 1024
[  727.991478][T15767] veth1_vlan: left promiscuous mode
[  728.008281][T15767] veth0_vlan: left promiscuous mode
[  728.031516][T27060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  728.074842][T27060] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  728.329005][T23989] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  728.371510][T27029] chnl_net:caif_netlink_parms(): no params data found
[  728.490119][T27029] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.497365][T27029] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.504704][T27029] bridge_slave_0: entered allmulticast mode
[  728.512212][T27029] bridge_slave_0: entered promiscuous mode
[  728.534298][T15767] IPVS: stop unused estimator thread 0...
[  728.540812][T27029] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.561727][T27029] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.588253][T27029] bridge_slave_1: entered allmulticast mode
[  728.605147][T27029] bridge_slave_1: entered promiscuous mode
[  728.667793][T27029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  728.709074][T27029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  728.770842][T27029] team0: Port device team_slave_0 added
[  728.802026][T27029] team0: Port device team_slave_1 added
[  728.844511][T15767] bridge_slave_1: left allmulticast mode
[  728.862298][T15767] bridge_slave_1: left promiscuous mode
[  728.869205][T15767] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.878770][T15767] bridge_slave_0: left allmulticast mode
[  728.886598][T15767] bridge_slave_0: left promiscuous mode
[  728.898916][T15767] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.965594][T15767] dvmrp0 (unregistering): left allmulticast mode
[  728.967622][T15775] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:15: lblock 0 mapped to illegal pblock 0 (length 6)
[  728.994611][T15775] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  729.007194][T15775] EXT4-fs (loop2): This should not happen!! Data will be lost
[  729.007194][T15775] 
[  729.020971][T10357] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8)
[  729.035423][T15767] bond0 (unregistering): left promiscuous mode
[  729.036671][T10357] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  729.041742][T15767] bond_slave_0: left promiscuous mode
[  729.055383][T10357] EXT4-fs (loop2): This should not happen!! Data will be lost
[  729.055383][T10357] 
[  729.078881][T15767] bond_slave_1: left promiscuous mode
[  729.089180][T15767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  729.108791][T15767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  729.127959][T15767] bond0 (unregistering): Released all slaves
[  729.142288][T27029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.157676][T27029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.218032][T27029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.235899][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  729.239817][T27029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  729.265366][T27029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.292544][T27029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  729.304352][T15767] tipc: Disabling bearer <udp:syz2>
[  729.309806][T15767] tipc: Left network mode
[  729.350813][T27029] hsr_slave_0: entered promiscuous mode
[  729.362425][T27029] hsr_slave_1: entered promiscuous mode
[  729.370041][T27029] debugfs: 'hsr0' already exists in 'hsr'
[  729.375878][T27029] Cannot create hsr debugfs directory
[  729.389018][T15767] dummy0: left promiscuous mode
[  729.404478][T15767] hsr_slave_0: left promiscuous mode
[  729.411465][T15767] hsr_slave_1: left promiscuous mode
[  729.417186][T15767] batman_adv: batadv0: Removing interface: batadv_slave_0
[  729.425398][T15767] batman_adv: batadv0: Removing interface: batadv_slave_1
[  729.464536][T15767] team0 (unregistering): Port device team_slave_1 removed
[  729.475763][T15767] team0 (unregistering): Port device team_slave_0 removed
[  729.653841][T27082] chnl_net:caif_netlink_parms(): no params data found
[  729.701338][T27029] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.717525][T27029] 8021q: adding VLAN 0 to HW filter on device team0
[  729.740548][T15771] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.747788][T15771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.764499][T15769] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.771687][T15769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  729.788163][T27082] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.795246][T27082] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.804042][T27082] bridge_slave_0: entered allmulticast mode
[  729.811614][T27082] bridge_slave_0: entered promiscuous mode
[  729.826368][T27082] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.833840][T27082] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.841561][T27082] bridge_slave_1: entered allmulticast mode
[  729.848764][T27082] bridge_slave_1: entered promiscuous mode
[  729.861510][T27029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  729.872054][T27029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  729.909063][T27082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  729.939346][T27082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  729.961688][T27082] team0: Port device team_slave_0 added
[  729.977478][T27082] team0: Port device team_slave_1 added
[  730.001268][T27029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  730.020470][T27082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  730.027438][T27082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  730.064521][T27082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  730.077117][T27082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  730.084373][T27082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  730.111115][T27082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  730.143684][T27082] hsr_slave_0: entered promiscuous mode
[  730.150469][T27082] hsr_slave_1: entered promiscuous mode
[  730.156459][T27082] debugfs: 'hsr0' already exists in 'hsr'
[  730.163125][T27082] Cannot create hsr debugfs directory
[  730.276030][T27029] veth0_vlan: entered promiscuous mode
[  730.288001][T27029] veth1_vlan: entered promiscuous mode
[  730.316669][T27029] veth0_macvtap: entered promiscuous mode
[  730.332430][T27029] veth1_macvtap: entered promiscuous mode
[  730.346481][T27082] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.364440][T27029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  730.373819][T27082] 8021q: adding VLAN 0 to HW filter on device team0
[  730.383522][T15775] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.390959][T15775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  730.403565][T15769] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.410660][T15769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.422768][T27029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  730.558534][T27082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  730.776844][T15775] tipc: Subscription rejected, illegal request
[  730.795308][T27082] veth0_vlan: entered promiscuous mode
[  730.816484][T27082] veth1_vlan: entered promiscuous mode
[  730.837479][T27082] veth0_macvtap: entered promiscuous mode
[  730.864496][T27082] veth1_macvtap: entered promiscuous mode
[  730.894952][T27082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  730.915344][T27082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  731.272269][T27210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20769'.
[  731.744552][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20786'.
[  731.824907][T27255] loop0: detected capacity change from 0 to 512
[  731.848837][T27255] EXT4-fs: Ignoring removed oldalloc option
[  731.897917][T27267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=27267 comm=syz.3.20794
[  731.899649][T27255] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.20789: invalid block
[  731.933730][T27255] fserror_report: 2 callbacks suppressed
[  731.933793][T27255] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  731.948093][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  731.948641][T27255] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.20789: invalid indirect mapped block 4294967295 (level 1)
[  731.957305][    C0] EXT4-fs (loop0): initial error at time 2000000000: ext4_get_branch:178
[  731.967909][T27255] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  731.977771][    C0] : inode 11: block 4294967295
[  731.977804][    C0] EXT4-fs (loop0): last error at time 2000000000: ext4_get_branch:178: inode 11: block 4294967295
[  732.108963][T27255] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.20789: invalid indirect mapped block 4294967295 (level 1)
[  732.134600][T27255] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  732.137946][T27255] EXT4-fs (loop0): 2 truncates cleaned up
[  732.153627][T27255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  732.215047][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.305239][   T28] audit: type=1326 audit(2000000001.260:16638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27287 comm="syz.3.20798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d52c799 code=0x7fc00000
[  732.914485][T27387] loop0: detected capacity change from 0 to 1024
[  732.936323][T27387] EXT4-fs: Ignoring removed bh option
[  732.943405][T27387] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  732.956557][T27387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  732.967680][T27387] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.20812: lblock 2 mapped to illegal pblock 2 (length 1)
[  732.982279][T27387] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  732.986866][T27387] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  732.995984][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  732.996018][    C1] EXT4-fs (loop0): initial error at time 2000000001: ext4_map_blocks:776: inode 3: block 2
[  732.996058][    C1] EXT4-fs (loop0): last error at time 2000000001: ext4_map_blocks:776: inode 3: block 2
[  733.030747][T27387] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.20812: lblock 0 mapped to illegal pblock 48 (length 1)
[  733.045045][T27387] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  733.048117][T27387] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  733.066134][T27387] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.20812: Failed to acquire dquot type 0
[  733.077571][T27387] loop0: lost filesystem error report for type 5 error -117
[  733.085185][T27387] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  733.094646][T27387] loop0: lost filesystem error report for type 5 error -117
[  733.095814][T27387] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.20812: mark_inode_dirty error
[  733.115612][T27387] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  733.115731][T27387] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  733.135194][T27387] EXT4-fs (loop0): 1 orphan inode deleted
[  733.176454][T15775] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1)
[  733.207355][T15775] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  733.207550][T15775] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  733.227595][T27387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  733.240200][T15775] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 0
[  733.318097][   T28] audit: type=1326 audit(2000000002.270:16639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27287 comm="syz.3.20798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f713d526517 code=0x7fc00000
[  733.358118][   T28] audit: type=1326 audit(2000000002.270:16640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27287 comm="syz.3.20798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f713d4cdb19 code=0x7fc00000
[  733.398120][   T28] audit: type=1326 audit(2000000002.270:16641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27287 comm="syz.3.20798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f713d4cdbdd code=0x7fc00000
[  733.454297][   T28] audit: type=1326 audit(2000000002.270:16642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27287 comm="syz.3.20798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f713d52c799 code=0x7fc00000
[  733.539466][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  733.548953][T27082] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  733.564101][T27082] loop0: lost filesystem error report for type 5 error -117
[  733.564203][T27082] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  733.598002][T27082] loop0: lost filesystem error report for type 5 error -117
[  733.598168][T27082] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  733.676758][T27082] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  733.777777][   T28] audit: type=1400 audit(2000000002.730:16643): avc:  denied  { lock } for  pid=27419 comm="syz.0.20817" path="socket:[323286]" dev="sockfs" ino=323286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  734.090766][   T28] audit: type=1400 audit(2000000003.050:16644): avc:  denied  { setopt } for  pid=27432 comm="syz.0.20822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  734.264123][T27449] tipc: Started in network mode
[  734.273737][T27449] tipc: Node identity ac1414aa, cluster identity 4711
[  734.287359][T27449] tipc: Enabled bearer <udp:syz2>, priority 0
[  734.337950][T27455] netlink: 'syz.3.20830': attribute type 3 has an invalid length.
[  734.538490][T27465] loop3: detected capacity change from 0 to 1024
[  734.545585][T27465] EXT4-fs: inline encryption not supported
[  734.551625][T27465] EXT4-fs: Ignoring removed nobh option
[  734.557383][T27465] EXT4-fs: Ignoring removed nobh option
[  734.563562][T27465] EXT4-fs: Ignoring removed bh option
[  734.590792][T27465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  734.733093][T27461] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.20834: Allocating blocks 497-513 which overlap fs metadata
[  734.760364][T27461] EXT4-fs (loop3): pa ffff888106947460: logic 131104, phys. 177, len 21
[  734.769914][T27461] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1
[  734.894882][T27029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  735.398117][T14744] tipc: Node number set to 2886997162
[  735.604026][T27507] loop0: detected capacity change from 0 to 128
[  735.898690][T27513] dvmrp0: entered allmulticast mode
[  736.351248][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20868'.
[  736.380990][T27549] chnl_net:caif_netlink_parms(): no params data found
[  736.419727][T15775] Bluetooth: hci0: Frame reassembly failed (-84)
[  737.201602][T27601] atomic_op ffff888121376528 conn xmit_atomic 0000000000000000
[  737.313019][T27612] dvmrp0: entered allmulticast mode
[  737.430364][T27621] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004
[  737.750993][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20907'.
[  738.405026][T27711] loop0: detected capacity change from 0 to 2048
[  738.434650][T27711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  738.448399][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  738.486222][T10357] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  738.501378][T10357] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 101 with error 28
[  738.518676][T10357] EXT4-fs (loop0): This should not happen!! Data will be lost
[  738.518676][T10357] 
[  738.528863][T10357] EXT4-fs (loop0): Total free blocks count 0
[  738.535019][T10357] EXT4-fs (loop0): Free/Dirty block details
[  738.541179][T10357] EXT4-fs (loop0): free_blocks=2415919504
[  738.546950][T10357] EXT4-fs (loop0): dirty_blocks=112
[  738.552473][T10357] EXT4-fs (loop0): Block reservation details
[  738.558973][T10357] EXT4-fs (loop0): i_reserved_data_blocks=7
[  738.566835][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.599267][   T28] audit: type=1326 audit(2000000007.560:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.651011][   T28] audit: type=1326 audit(2000000007.560:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.684036][   T28] audit: type=1326 audit(2000000007.560:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.759583][   T28] audit: type=1326 audit(2000000007.560:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.793039][   T28] audit: type=1326 audit(2000000007.560:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.836108][T27749] netlink: 'syz.1.20949': attribute type 21 has an invalid length.
[  738.844317][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20949'.
[  738.854362][   T28] audit: type=1326 audit(2000000007.560:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.867178][T27749] netlink: 'syz.1.20949': attribute type 21 has an invalid length.
[  738.880648][   T28] audit: type=1326 audit(2000000007.580:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.919248][   T28] audit: type=1326 audit(2000000007.580:16652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.942942][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20949'.
[  738.943196][   T28] audit: type=1326 audit(2000000007.580:16653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  738.997922][   T28] audit: type=1326 audit(2000000007.580:16654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27722 comm="syz.8.20941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  739.621564][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20966'.
[  739.637733][T27792] netlink: 'syz.2.20966': attribute type 20 has an invalid length.
[  739.656044][T27792] netlink: 'syz.2.20966': attribute type 21 has an invalid length.
[  739.778288][T27814] netlink: 'syz.0.20977': attribute type 1 has an invalid length.
[  739.827283][T27814] 8021q: adding VLAN 0 to HW filter on device bond1
[  740.904118][T27870] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.20998'.
[  741.682969][T27919] netlink: 'syz.2.21020': attribute type 1 has an invalid length.
[  741.717199][T27919] 8021q: adding VLAN 0 to HW filter on device bond2
[  742.169429][T27939] loop2: detected capacity change from 0 to 128
[  742.199105][T27939] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  742.215807][T27939] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  742.279159][T10357] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  742.662739][T27966] batadv_slave_1: entered promiscuous mode
[  742.733454][T27965] batadv_slave_1: left promiscuous mode
[  742.857233][T27983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27983 comm=syz.1.21047
[  743.004068][T27972] loop0: detected capacity change from 0 to 512
[  743.125439][T27972] EXT4-fs: Ignoring removed nobh option
[  743.188272][T27972] EXT4-fs: Ignoring removed orlov option
[  743.237048][T27972] EXT4-fs error (device loop0): __ext4_iget:5378: inode #11: block 1: comm syz.0.21042: invalid block
[  743.266614][T27972] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  743.268113][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  743.278128][T27972] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.21042: couldn't read orphan inode 11 (err -117)
[  743.283813][    C0] EXT4-fs (loop0): initial error at time 2000000012: __ext4_iget:5378: inode 11: block 1
[  743.283874][    C0] EXT4-fs (loop0): last error at time 2000000012: __ext4_iget:5378: inode 11: block 1
[  743.386947][T27972] loop0: lost filesystem error report for type 5 error -117
[  743.397433][T27972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  743.510498][T27972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.525639][T27972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.596704][T28025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21062'.
[  743.781735][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21067'.
[  743.871860][T28037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21067'.
[  744.063334][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.416921][   T28] kauditd_printk_skb: 160 callbacks suppressed
[  745.416968][   T28] audit: type=1400 audit(2000000014.370:16815): avc:  denied  { read } for  pid=28094 comm="syz.1.21088" name="file0" dev="tmpfs" ino=4038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  745.493103][T28101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21090'.
[  745.514396][T28101] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21090'.
[  745.526040][T28101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21090'.
[  745.535354][T28101] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21090'.
[  745.606642][T28109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21097'.
[  745.617777][T28111] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21098'.
[  745.651409][T28111] bond2: entered promiscuous mode
[  745.656681][T28111] 8021q: adding VLAN 0 to HW filter on device bond2
[  745.681845][T28111] 8021q: adding VLAN 0 to HW filter on device bond2
[  745.690201][T28111] bond2: (slave ip6tnl6): The slave device specified does not support setting the MAC address
[  745.702221][T28111] bond2: (slave ip6tnl6): Error -95 calling set_mac_address
[  745.837181][T28119] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  745.847020][T28119] SELinux: failed to load policy
[  746.102235][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21116'.
[  746.177916][   T28] audit: type=1326 audit(2000000015.130:16816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.3.21119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713d52c799 code=0x0
[  746.758716][T28196] sctp: [Deprecated]: syz.1.21132 (pid 28196) Use of struct sctp_assoc_value in delayed_ack socket option.
[  746.758716][T28196] Use struct sctp_sack_info instead
[  747.112591][T28215] netlink: 'syz.3.21141': attribute type 10 has an invalid length.
[  747.162838][T28215] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.204264][T28215] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  747.249528][T28219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  747.285693][T28219] batman_adv: batadv0: Removing interface: batadv_slave_0
[  747.298481][T28219] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  747.316176][T28219] batman_adv: batadv0: Removing interface: batadv_slave_1
[  747.343400][T28219] bond0: (slave batadv0): Releasing backup interface
[  747.615688][T28251] IPVS: stopping master sync thread 28253 ...
[  747.621928][T28253] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  747.765527][T28249] loop2: detected capacity change from 0 to 512
[  747.815346][T28249] EXT4-fs: Ignoring removed nobh option
[  747.826791][T28249] EXT4-fs: Ignoring removed orlov option
[  747.870257][T28249] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 1: comm syz.2.21154: invalid block
[  747.913280][T28249] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  747.917329][T28249] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.21154: couldn't read orphan inode 11 (err -117)
[  747.927687][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  747.928037][    C1] EXT4-fs (loop2): initial error at time 2000000016: __ext4_iget:5378: inode 11: block 1
[  747.928182][    C1] EXT4-fs (loop2): last error at time 2000000016: __ext4_iget:5378: inode 11: block 1
[  747.973615][T28249] loop2: lost filesystem error report for type 5 error -117
[  748.003805][T28249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  748.096560][T28249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.142935][T28249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.392655][T28296] netlink: 'syz.3.21173': attribute type 4 has an invalid length.
[  748.433414][T28296] netlink: 'syz.3.21173': attribute type 4 has an invalid length.
[  748.513127][T28300] 8021q: adding VLAN 0 to HW filter on device bond1
[  748.815353][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  749.238386][   T28] audit: type=1326 audit(2000000018.190:16817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.8.21190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  749.317351][   T28] audit: type=1326 audit(2000000018.190:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.8.21190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  749.416757][   T28] audit: type=1326 audit(2000000018.190:16819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.8.21190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  749.478279][   T28] audit: type=1326 audit(2000000018.190:16820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.8.21190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  749.548638][   T28] audit: type=1326 audit(2000000018.190:16821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.8.21190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  749.639938][   T28] audit: type=1326 audit(2000000018.190:16822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.8.21190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  749.678125][   T28] audit: type=1326 audit(2000000018.190:16823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.8.21190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  749.807636][T28368] sit3: entered promiscuous mode
[  750.211147][   T28] audit: type=1400 audit(2000000019.170:16824): avc:  denied  { append } for  pid=28387 comm="syz.2.21204" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  750.303881][T28390] netlink: 'syz.0.21205': attribute type 1 has an invalid length.
[  750.396511][T28396] __nla_validate_parse: 3 callbacks suppressed
[  750.396537][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21201'.
[  750.449634][T28403] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.21210'.
[  750.449903][T28381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21201'.
[  751.581108][T28442] loop3: detected capacity change from 0 to 512
[  751.604614][T28442] EXT4-fs: Ignoring removed nobh option
[  751.611600][T28442] EXT4-fs: Ignoring removed bh option
[  751.628703][T28442] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  751.659149][T28442] EXT4-fs (loop3): 1 truncate cleaned up
[  751.665288][T28442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  751.720205][T27029] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[  751.736255][T27029] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  751.754855][T27029] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  751.798187][T28276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.894155][T15771] bridge_slave_1: left allmulticast mode
[  751.907160][T15771] bridge_slave_1: left promiscuous mode
[  751.920628][T15771] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.942855][T15771] bridge_slave_0: left allmulticast mode
[  751.948956][T15771] bridge_slave_0: left promiscuous mode
[  751.954880][T15771] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.060653][T15771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  752.070807][T15771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  752.080786][T15771] bond0 (unregistering): Released all slaves
[  752.089580][T15771] bond1 (unregistering): Released all slaves
[  752.140956][T15771] tipc: Disabling bearer <udp:syz2>
[  752.149862][T15771] tipc: Left network mode
[  752.159479][T15771] hsr_slave_0: left promiscuous mode
[  752.167883][T28481] loop0: detected capacity change from 0 to 128
[  752.177441][T15771] hsr_slave_1: left promiscuous mode
[  752.190741][T28481] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  752.204508][T15771] veth1_macvtap: left promiscuous mode
[  752.209002][T28481] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  752.210107][T15771] veth0_macvtap: left promiscuous mode
[  752.226252][T15771] veth1_vlan: left promiscuous mode
[  752.231753][T15771] veth0_vlan: left promiscuous mode
[  752.239292][T27082] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  752.314757][T15771] team0 (unregistering): Port device team_slave_1 removed
[  752.325327][T15771] team0 (unregistering): Port device team_slave_0 removed
[  752.429657][T28467] chnl_net:caif_netlink_parms(): no params data found
[  752.476697][T28467] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.484079][T28467] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.491632][T28467] bridge_slave_0: entered allmulticast mode
[  752.498697][T28467] bridge_slave_0: entered promiscuous mode
[  752.505804][T28467] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.513489][T28467] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.521053][T28467] bridge_slave_1: entered allmulticast mode
[  752.527753][T28467] bridge_slave_1: entered promiscuous mode
[  752.556816][T28467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  752.568046][T28467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  752.571215][T28495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21242'.
[  752.586367][T28495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21242'.
[  752.613157][T28467] team0: Port device team_slave_0 added
[  752.620377][T28467] team0: Port device team_slave_1 added
[  752.637836][T28467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  752.645117][T28467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.678954][T28467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  752.698971][T28467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  752.706108][T28467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.745173][T28467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  752.786156][T28499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21243'.
[  752.790016][T28467] hsr_slave_0: entered promiscuous mode
[  752.803561][T28467] hsr_slave_1: entered promiscuous mode
[  752.819036][T28467] debugfs: 'hsr0' already exists in 'hsr'
[  752.826353][T28467] Cannot create hsr debugfs directory
[  753.745532][T28424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  753.804675][   T28] audit: type=1326 audit(2000000022.760:16825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  753.843431][   T28] audit: type=1326 audit(2000000022.790:16826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  753.868024][   T28] audit: type=1326 audit(2000000022.790:16827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  753.896570][T28552] TCP: TCP_TX_DELAY enabled
[  753.897014][   T28] audit: type=1326 audit(2000000022.790:16828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  753.936283][T28467] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.946819][   T28] audit: type=1326 audit(2000000022.790:16829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  753.972526][T28467] 8021q: adding VLAN 0 to HW filter on device team0
[  753.979815][   T28] audit: type=1326 audit(2000000022.790:16830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  754.012106][T15767] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.018147][   T28] audit: type=1326 audit(2000000022.790:16831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  754.019191][T15767] bridge0: port 1(bridge_slave_0) entered forwarding state
[  754.062406][T15767] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.069556][T15767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  754.073311][   T28] audit: type=1326 audit(2000000022.790:16832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  754.104385][T28467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  754.117089][T28467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  754.129866][   T28] audit: type=1326 audit(2000000022.790:16833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  754.129891][T28556] team0: No ports can be present during mode change
[  754.172825][   T28] audit: type=1326 audit(2000000022.790:16834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.1.21255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  754.262965][T28467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  754.367437][T28558] loop0: detected capacity change from 0 to 512
[  754.461452][T28558] EXT4-fs (loop0): orphan cleanup on readonly fs
[  754.507007][T28467] veth0_vlan: entered promiscuous mode
[  754.519504][T28467] veth1_vlan: entered promiscuous mode
[  754.539902][T28467] veth0_macvtap: entered promiscuous mode
[  754.548293][T28467] veth1_macvtap: entered promiscuous mode
[  754.570897][T28467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.583591][T28467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.634732][T28558] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.21260: corrupted inode contents
[  754.687465][T28558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  754.689525][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  754.707945][    C0] EXT4-fs (loop0): initial error at time 2000000023: ext4_do_update_inode:5569: inode 16
[  754.719845][    C0] EXT4-fs (loop0): last error at time 2000000023: ext4_do_update_inode:5569: inode 16
[  754.755404][T28558] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.21260: mark_inode_dirty error
[  754.768701][T28558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  754.771320][T28558] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.21260: corrupted inode contents
[  754.805942][T28558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  754.810095][T28558] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.21260: mark_inode_dirty error
[  754.862324][T28558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  754.872122][T28558] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.21260: corrupted inode contents
[  754.917407][T28558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  754.925774][T28558] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  754.970125][T28558] loop0: lost filesystem error report for type 5 error -117
[  754.972475][T28558] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.21260: corrupted inode contents
[  754.994500][T28558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  754.996512][T28558] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.21260: mark_inode_dirty error
[  755.143093][T28558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  755.161651][T28558] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  755.204869][T28558] loop0: lost filesystem error report for type 5 error -117
[  755.211625][T28558] EXT4-fs (loop0): 1 truncate cleaned up
[  755.242302][T15775] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 1
[  755.254095][T15775] loop0: lost filesystem error report for type 5 error -117
[  755.282251][T28558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  755.337057][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  755.389253][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21267'.
[  755.462812][T28606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21269'.
[  755.472088][T28606] netlink: 'syz.1.21269': attribute type 26 has an invalid length.
[  755.480070][T28606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21269'.
[  755.494660][T28606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21269'.
[  755.504153][T28606] netlink: 'syz.1.21269': attribute type 26 has an invalid length.
[  755.512693][T28606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21269'.
[  755.542686][T28609] netlink: 'syz.1.21270': attribute type 1 has an invalid length.
[  755.559053][T28609] 8021q: adding VLAN 0 to HW filter on device bond4
[  755.919980][T28637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21285'.
[  755.934591][T28637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21285'.
[  757.093004][T28659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21294'.
[  757.123070][T28659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21294'.
[  757.165925][T28655] loop7: detected capacity change from 0 to 512
[  757.179764][T28655] EXT4-fs: Ignoring removed nobh option
[  757.187126][T28655] EXT4-fs: Ignoring removed orlov option
[  757.199712][T28655] EXT4-fs error (device loop7): __ext4_iget:5378: inode #11: block 1: comm syz.7.21290: invalid block
[  757.211994][T28669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21297'.
[  757.227691][T28655] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  757.227907][T28655] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.21290: couldn't read orphan inode 11 (err -117)
[  757.237214][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  757.237236][    C1] EXT4-fs (loop7): initial error at time 2000000026: __ext4_iget:5378: inode 11: block 1
[  757.237276][    C1] EXT4-fs (loop7): last error at time 2000000026: __ext4_iget:5378: inode 11: block 1
[  757.282283][T28673] loop2: detected capacity change from 0 to 256
[  757.290182][T28673] FAT-fs (loop2): Directory bread(block 1285) failed
[  757.296934][T28673] FAT-fs (loop2): Directory bread(block 1286) failed
[  757.303899][T28673] FAT-fs (loop2): Directory bread(block 1287) failed
[  757.311095][T28673] FAT-fs (loop2): Directory bread(block 1288) failed
[  757.321765][T28673] FAT-fs (loop2): Directory bread(block 1285) failed
[  757.328852][T28673] FAT-fs (loop2): Directory bread(block 1286) failed
[  757.335868][T28673] FAT-fs (loop2): Directory bread(block 1287) failed
[  757.343198][T28673] FAT-fs (loop2): Directory bread(block 1288) failed
[  757.361758][T28655] loop7: lost filesystem error report for type 5 error -117
[  757.369973][T28655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.419926][T28679] netlink: 'syz.1.21303': attribute type 1 has an invalid length.
[  757.428499][T28655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.436890][T28679] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.21303'.
[  757.446604][T28655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.868866][T28731] loop0: detected capacity change from 0 to 256
[  757.985539][T28467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.290317][T28777] netlink: 'syz.0.21339': attribute type 83 has an invalid length.
[  758.341489][T28766] loop2: detected capacity change from 0 to 512
[  758.366903][T28779] loop0: detected capacity change from 0 to 128
[  758.422043][T28779] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  758.438115][T28766] EXT4-fs (loop2): orphan cleanup on readonly fs
[  758.467743][T28779] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  758.496872][T28766] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21334: corrupted inode contents
[  758.510564][T28766] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  758.511859][T28766] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.21334: mark_inode_dirty error
[  758.521538][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  758.521729][    C1] EXT4-fs (loop2): initial error at time 2000000027: ext4_do_update_inode:5569: inode 16
[  758.522180][    C1] EXT4-fs (loop2): last error at time 2000000027: ext4_do_update_inode:5569: inode 16
[  758.583888][T28766] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  758.584281][T27082] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  758.595779][T28766] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21334: corrupted inode contents
[  758.659746][T28766] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.21334: mark_inode_dirty error
[  758.714548][T28801] loop7: detected capacity change from 0 to 128
[  758.749956][T28766] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21334: corrupted inode contents
[  758.752224][T28801] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  758.764441][T28766] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  758.803840][T28801] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  758.859495][T28766] loop2: lost filesystem error report for type 5 error -117
[  758.868962][T28766] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21334: corrupted inode contents
[  758.895886][T28766] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.21334: mark_inode_dirty error
[  758.897614][T28467] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  758.934748][T28766] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  758.954571][T28766] loop2: lost filesystem error report for type 5 error -117
[  758.968890][T28766] EXT4-fs (loop2): 1 truncate cleaned up
[  758.994017][T10357] __quota_error: 20 callbacks suppressed
[  758.994036][T10357] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  759.022237][T28809] loop0: detected capacity change from 0 to 8192
[  759.038807][T10357] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1
[  759.052166][T10357] loop2: lost filesystem error report for type 5 error -117
[  759.077466][T28766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  759.326345][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.404623][T28844] geneve2: entered promiscuous mode
[  759.416225][T28844] geneve2: entered allmulticast mode
[  759.523348][T28859] loop0: detected capacity change from 0 to 512
[  759.600215][T28859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  759.655116][T28859] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.762570][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  760.246811][   T28] audit: type=1326 audit(2000000029.200:16854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.1.21404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  760.272607][   T28] audit: type=1326 audit(2000000029.240:16855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.1.21404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  760.297338][   T28] audit: type=1326 audit(2000000029.240:16856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.1.21404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f43fe90b607 code=0x7ffc0000
[  760.323598][   T28] audit: type=1326 audit(2000000029.240:16857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.1.21404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  760.354202][   T28] audit: type=1326 audit(2000000029.240:16858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.1.21404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  760.378577][   T28] audit: type=1326 audit(2000000029.240:16859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.1.21404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  760.402724][   T28] audit: type=1326 audit(2000000029.240:16860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.1.21404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  760.610697][   T28] audit: type=1400 audit(2000000029.570:16861): avc:  denied  { mounton } for  pid=28954 comm="syz.2.21413" path="/298/cgroup" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  760.838652][   T28] audit: type=1400 audit(2000000029.790:16862): avc:  denied  { write } for  pid=28978 comm="syz.0.21431" path="socket:[327382]" dev="sockfs" ino=327382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  761.467273][T29009] loop7: detected capacity change from 0 to 512
[  761.533361][T29009] EXT4-fs (loop7): orphan cleanup on readonly fs
[  761.606451][T29009] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.21433: corrupted inode contents
[  761.620189][T29009] fserror_report: 5 callbacks suppressed
[  761.620207][T29009] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  761.628078][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  761.631749][T29009] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #16: comm syz.7.21433: mark_inode_dirty error
[  761.637330][    C1] EXT4-fs (loop7): initial error at time 2000000030: ext4_do_update_inode:5569: inode 16
[  761.637395][    C1] EXT4-fs (loop7): last error at time 2000000030: ext4_do_update_inode:5569: inode 16
[  761.722702][T29009] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  761.725741][T29009] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.21433: corrupted inode contents
[  761.779423][T29009] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  761.781773][T29009] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.21433: mark_inode_dirty error
[  761.797632][T29038] loop2: detected capacity change from 0 to 1024
[  761.806688][T29009] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  761.818384][T29038] EXT4-fs: Ignoring removed nobh option
[  761.844692][T29038] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.21445: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  761.844739][T29038] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  761.844886][T29038] EXT4-fs (loop2): get root inode failed
[  761.844902][T29038] EXT4-fs (loop2): mount failed
[  761.927815][T29009] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.21433: corrupted inode contents
[  761.941641][T29009] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  761.943581][T29009] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  762.026405][T29009] loop7: lost filesystem error report for type 5 error -117
[  762.050011][T29009] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.21433: corrupted inode contents
[  762.091567][T29045] batadv1: entered promiscuous mode
[  762.108551][T29045] 8021q: adding VLAN 0 to HW filter on device batadv1
[  762.146104][T29009] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  762.149948][T29009] EXT4-fs error (device loop7): ext4_truncate:4587: inode #16: comm syz.7.21433: mark_inode_dirty error
[  762.222860][T29009] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  762.224477][T29009] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  762.271222][T29009] loop7: lost filesystem error report for type 5 error -117
[  762.276315][T29009] EXT4-fs (loop7): 1 truncate cleaned up
[  762.300692][T15775] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 1
[  762.315881][T15775] loop7: lost filesystem error report for type 5 error -117
[  762.326912][T29009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  762.546103][T28467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.669298][T29218] netlink: 'syz.0.21518': attribute type 4 has an invalid length.
[  764.804970][T29218] netlink: 'syz.0.21518': attribute type 4 has an invalid length.
[  764.926122][T29235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29235 comm=syz.8.21525
[  764.967029][T29214] loop2: detected capacity change from 0 to 512
[  765.061561][T29214] EXT4-fs (loop2): orphan cleanup on readonly fs
[  765.143731][T29214] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21516: corrupted inode contents
[  765.156750][T29214] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  765.158103][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  765.175684][    C1] EXT4-fs (loop2): initial error at time 2000000034: ext4_do_update_inode:5569: inode 16
[  765.188238][    C1] EXT4-fs (loop2): last error at time 2000000034: ext4_do_update_inode:5569: inode 16
[  765.200586][T29214] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.21516: mark_inode_dirty error
[  765.212947][T29214] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  765.215239][T29214] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21516: corrupted inode contents
[  765.241884][T29214] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.21516: mark_inode_dirty error
[  765.306290][T29214] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21516: corrupted inode contents
[  765.332160][T29233] batadv1: entered promiscuous mode
[  765.339021][T29214] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  765.349337][T29214] loop2: lost filesystem error report for type 5 error -117
[  765.351398][T29214] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21516: corrupted inode contents
[  765.392354][T29233] 8021q: adding VLAN 0 to HW filter on device batadv1
[  765.404006][T29214] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.21516: mark_inode_dirty error
[  765.406379][T29214] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  765.406458][T29214] loop2: lost filesystem error report for type 5 error -117
[  765.411560][T29214] EXT4-fs (loop2): 1 truncate cleaned up
[  765.459625][T15771] __quota_error: 505 callbacks suppressed
[  765.459670][T15771] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  765.475617][T15771] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1
[  765.488803][T15771] loop2: lost filesystem error report for type 5 error -117
[  765.507167][T29214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  765.529489][T29250] bond0: Device is already in use.
[  765.605156][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  765.882934][T29276] batadv1: entered promiscuous mode
[  765.952953][T29276] 8021q: adding VLAN 0 to HW filter on device batadv1
[  766.011605][   T28] audit: type=1326 audit(2000000034.960:17367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29284 comm="syz.8.21548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  766.058129][   T28] audit: type=1326 audit(2000000034.960:17368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29284 comm="syz.8.21548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  766.103103][   T28] audit: type=1326 audit(2000000034.960:17369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29284 comm="syz.8.21548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  766.103513][T29291] netlink: 'syz.7.21550': attribute type 5 has an invalid length.
[  766.127846][   T28] audit: type=1326 audit(2000000035.060:17370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29288 comm="syz.1.21551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  766.159051][T29292] __nla_validate_parse: 16 callbacks suppressed
[  766.159068][T29292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21550'.
[  766.163159][T29283] loop2: detected capacity change from 0 to 512
[  766.174817][   T28] audit: type=1326 audit(2000000035.060:17371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29288 comm="syz.1.21551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  766.174851][   T28] audit: type=1326 audit(2000000035.060:17372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29288 comm="syz.1.21551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  766.174912][   T28] audit: type=1326 audit(2000000035.060:17373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29288 comm="syz.1.21551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  766.174939][   T28] audit: type=1326 audit(2000000035.060:17374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29288 comm="syz.1.21551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  766.175009][   T28] audit: type=1326 audit(2000000035.060:17375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29288 comm="syz.1.21551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43fe90c799 code=0x7ffc0000
[  766.180006][T29294] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21552'.
[  766.265044][T29283] EXT4-fs (loop2): orphan cleanup on readonly fs
[  766.380112][T29283] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21547: corrupted inode contents
[  766.409690][T29283] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.21547: mark_inode_dirty error
[  766.422193][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  766.422313][    C1] EXT4-fs (loop2): initial error at time 2000000035: ext4_do_update_inode:5569: inode 16
[  766.422581][    C1] EXT4-fs (loop2): last error at time 2000000035: ext4_do_update_inode:5569: inode 16
[  766.457145][T29283] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21547: corrupted inode contents
[  766.497535][T29310] netlink: 'syz.7.21558': attribute type 12 has an invalid length.
[  766.569905][T29283] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.21547: mark_inode_dirty error
[  766.602942][T29283] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21547: corrupted inode contents
[  766.621646][T29283] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  766.632711][T29283] loop2: lost filesystem error report for type 5 error -117
[  766.634105][T29283] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.21547: corrupted inode contents
[  766.675571][T29283] fserror_report: 10 callbacks suppressed
[  766.675625][T29283] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  766.686136][T29283] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.21547: mark_inode_dirty error
[  766.740095][T29283] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  766.740968][T29283] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  766.761802][T29283] loop2: lost filesystem error report for type 5 error -117
[  766.782383][T29283] EXT4-fs (loop2): 1 truncate cleaned up
[  766.809136][T10357] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1
[  766.822147][T10357] loop2: lost filesystem error report for type 5 error -117
[  766.837347][T29283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  766.951178][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.122942][T29340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21570'.
[  767.164581][T29344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21572'.
[  767.175585][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21572'.
[  767.249362][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  767.258384][T29344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21572'.
[  767.276259][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21572'.
[  767.689429][T29383] loop0: detected capacity change from 0 to 512
[  767.724648][T29383] EXT4-fs: Ignoring removed nobh option
[  767.738379][T29383] EXT4-fs: Ignoring removed bh option
[  767.748849][T29388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21586'.
[  767.765473][T29383] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  767.793770][T29383] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.21584: invalid indirect mapped block 256 (level 1)
[  767.837855][T29383] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  767.838081][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  767.853696][    C1] EXT4-fs (loop0): initial error at time 2000000036: ext4_free_branches:1023: inode 13
[  767.863391][    C1] EXT4-fs (loop0): last error at time 2000000036: ext4_free_branches:1023: inode 13
[  767.882363][T29383] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.21584: invalid indirect mapped block 2683928664 (level 1)
[  767.908772][T29383] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  767.919563][T29383] EXT4-fs (loop0): 1 truncate cleaned up
[  767.950114][T29383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  768.002918][T29383] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  768.018194][T29383] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring
[  768.067292][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.703698][T29479] batadv1: entered promiscuous mode
[  769.722903][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21622'.
[  769.750589][T29479] 8021q: adding VLAN 0 to HW filter on device batadv1
[  769.847587][T29499] loop0: detected capacity change from 0 to 256
[  769.847713][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21622'.
[  769.879344][T29499] FAT-fs (loop0): Directory bread(block 1285) failed
[  769.919923][T29499] FAT-fs (loop0): Directory bread(block 1286) failed
[  769.927111][T29499] FAT-fs (loop0): Directory bread(block 1287) failed
[  769.936107][T29499] FAT-fs (loop0): Directory bread(block 1288) failed
[  769.998630][T29499] FAT-fs (loop0): Directory bread(block 1285) failed
[  770.005603][T29499] FAT-fs (loop0): Directory bread(block 1286) failed
[  770.019592][T29499] FAT-fs (loop0): Directory bread(block 1287) failed
[  770.041494][T29499] FAT-fs (loop0): Directory bread(block 1288) failed
[  770.650949][T29518] loop7: detected capacity change from 0 to 128
[  770.708661][T29518] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  770.744837][T29518] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  770.813233][T28467] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  770.978225][T29525] loop0: detected capacity change from 0 to 8192
[  771.001609][T29525] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  771.022220][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.050744][T29525] FAT-fs (loop0): Filesystem has been set read-only
[  771.057497][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.108793][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.148130][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.212383][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.222993][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.257667][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.312765][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.338231][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  771.367730][T29525] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  773.690372][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  773.690397][   T28] audit: type=1400 audit(2000000042.650:17394): avc:  denied  { unmount } for  pid=25003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  775.223291][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21650'.
[  775.311536][T29550] batadv1: entered promiscuous mode
[  775.334250][T29550] 8021q: adding VLAN 0 to HW filter on device batadv1
[  775.367443][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21650'.
[  775.760374][T29585] netlink: 'syz.7.21655': attribute type 3 has an invalid length.
[  775.768423][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21655'.
[  775.831467][T29589] netlink: 'syz.7.21658': attribute type 1 has an invalid length.
[  775.891352][T29589] bond1: (slave geneve2): making interface the new active one
[  775.935212][T29589] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  776.136036][T29609] batadv_slave_1: entered promiscuous mode
[  776.145561][T29609] batadv_slave_0: entered promiscuous mode
[  776.152117][T29608] batadv_slave_0: left promiscuous mode
[  776.161875][T29608] batadv_slave_1: left promiscuous mode
[  776.471035][ T3415] kernel read not supported for file /157/coredump_filter (pid: 3415 comm: kworker/1:6)
[  777.180848][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21699'.
[  777.219283][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21699'.
[  777.318694][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21699'.
[  777.327698][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21699'.
[  777.984262][T29707] loop0: detected capacity change from 0 to 512
[  778.038831][T29707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  778.057265][T29709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21706'.
[  778.069438][T29709] geneve3: entered promiscuous mode
[  778.120078][T29707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  778.151442][T29707] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  778.197799][T29707] EXT4-fs (loop0): shut down requested (0)
[  778.237571][T29707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  778.280544][T29707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  778.298219][T29707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  778.307116][T29707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  778.328188][T29707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  778.337285][   T28] audit: type=1400 audit(2000000047.290:17395): avc:  denied  { add_name } for  pid=29706 comm="syz.0.21704" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  778.395599][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.446004][   T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  778.467464][   T10] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  778.501491][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21721'.
[  778.526286][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21721'.
[  779.551113][T29767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29767 comm=syz.2.21728
[  780.258762][T29832] __nla_validate_parse: 1 callbacks suppressed
[  780.258782][T29832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21755'.
[  780.278357][T29822] loop7: detected capacity change from 0 to 1024
[  780.306650][T29832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21755'.
[  780.333666][T29822] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal
[  781.246874][T29899] netlink: 80 bytes leftover after parsing attributes in process `syz.8.21780'.
[  781.256237][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.270368][T29899] netlink: 80 bytes leftover after parsing attributes in process `syz.8.21780'.
[  781.359351][T29903] batadv2: entered promiscuous mode
[  781.379988][T29903] 8021q: adding VLAN 0 to HW filter on device batadv2
[  782.023234][T29931] gretap1: entered promiscuous mode
[  782.279381][T29935] loop2: detected capacity change from 0 to 2048
[  782.324555][T29935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  782.361749][T29935] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.21791: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  782.475720][T29940] batadv3: entered promiscuous mode
[  782.499434][T29940] 8021q: adding VLAN 0 to HW filter on device batadv3
[  782.531490][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  782.746574][T29958] loop7: detected capacity change from 0 to 8192
[  782.755186][T29958] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  782.768642][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.777589][T29958] FAT-fs (loop7): Filesystem has been set read-only
[  782.810287][T29969] loop2: detected capacity change from 0 to 512
[  782.834208][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21806'.
[  782.843523][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.868128][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21806'.
[  782.877371][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21806'.
[  782.893715][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.906460][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.917300][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21806'.
[  782.926665][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.937734][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.947593][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.956870][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.966197][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  782.976941][T29958] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  783.075156][   T28] audit: type=1400 audit(2000000052.030:17396): avc:  denied  { remount } for  pid=29978 comm="syz.1.21812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  783.209142][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21816'.
[  783.390921][T30002] loop0: detected capacity change from 0 to 1024
[  783.397739][T30002] EXT4-fs: Ignoring removed orlov option
[  783.448307][T30002] EXT4-fs: Ignoring removed nobh option
[  783.530799][T30002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  783.753660][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  783.821927][   T28] audit: type=1400 audit(2000000052.780:17397): avc:  denied  { map } for  pid=30025 comm="syz.0.21832" path="socket:[332274]" dev="sockfs" ino=332274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  784.839483][T30040] syzkaller0: entered promiscuous mode
[  784.846081][T30040] syzkaller0: entered allmulticast mode
[  785.013348][T30056] netlink: 'syz.7.21844': attribute type 1 has an invalid length.
[  785.038222][   T28] audit: type=1326 audit(2000000053.990:17398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30043 comm="syz.1.21839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fe90c799 code=0x7fc00000
[  785.087367][T30056] bond2: entered promiscuous mode
[  785.107633][T30056] 8021q: adding VLAN 0 to HW filter on device bond2
[  785.144696][T30072] netlink: 52 bytes leftover after parsing attributes in process `syz.0.21848'.
[  785.160441][T30072] ip6gre1: entered promiscuous mode
[  785.165976][T30072] ip6gre1: entered allmulticast mode
[  785.176949][   T28] audit: type=1400 audit(2000000054.140:17399): avc:  denied  { dac_override } for  pid=30075 comm="syz.8.21849" capability=1  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  785.210149][   T28] audit: type=1400 audit(2000000054.140:17400): avc:  denied  { remount } for  pid=30073 comm="syz.8.21849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  785.362764][T30089] batadv4: entered promiscuous mode
[  785.376441][T30089] 8021q: adding VLAN 0 to HW filter on device batadv4
[  785.404830][T30091] netlink: 'syz.2.21856': attribute type 1 has an invalid length.
[  785.703553][   T28] audit: type=1326 audit(2000000054.660:17401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30043 comm="syz.1.21839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43fe8adb19 code=0x7fc00000
[  785.908314][T30169] batadv5: entered promiscuous mode
[  785.934208][T30169] 8021q: adding VLAN 0 to HW filter on device batadv5
[  786.140772][T30207] loop0: detected capacity change from 0 to 512
[  786.179064][T30207] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  786.187450][T30207] EXT4-fs (loop0): orphan cleanup on readonly fs
[  786.209144][T30207] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.21872: corrupted inode contents
[  786.223204][T30207] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  786.223449][T30207] EXT4-fs (loop0): Remounting filesystem read-only
[  786.232610][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  786.232630][    C0] EXT4-fs (loop0): initial error at time 2000000055: ext4_do_update_inode:5569: inode 16
[  786.232685][    C0] EXT4-fs (loop0): last error at time 2000000055: ext4_do_update_inode:5569: inode 16
[  786.265898][T30207] EXT4-fs (loop0): 1 truncate cleaned up
[  786.288226][ T1679] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  786.317287][ T1679] Quota error (device loop0): write_blk: dquota write failed
[  786.340550][ T1679] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  786.378011][ T1679] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  786.421518][ T1679] Quota error (device loop0): write_blk: dquota write failed
[  786.429568][ T1679] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  786.448858][ T1679] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  786.460057][T30207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  786.577448][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.590696][T30257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  786.597970][T30257] IPv6: NLM_F_CREATE should be set when creating new route
[  786.666285][T30263] geneve3: entered promiscuous mode
[  786.684833][T30263] geneve3: entered allmulticast mode
[  786.776049][T30273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30273 comm=syz.1.21890
[  786.981016][T30291] netlink: 'syz.7.21895': attribute type 2 has an invalid length.
[  786.989172][T30291] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21895'.
[  787.038011][T30295] loop0: detected capacity change from 0 to 512
[  787.077050][T30298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21899'.
[  787.087164][T30298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21899'.
[  787.144367][T30305] loop7: detected capacity change from 0 to 128
[  787.195727][T30311] loop7: detected capacity change from 0 to 512
[  787.225234][T30311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  787.237943][T30311] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  787.337140][T28467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  787.922682][T30348] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  787.930394][T30348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  787.956673][T30348] netlink: 14 bytes leftover after parsing attributes in process `syz.8.21919'.
[  790.074220][T30381] ipip2: entered promiscuous mode
[  790.084157][T30381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  790.333064][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21936'.
[  790.648961][T30421] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21946'.
[  790.660585][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  790.660645][   T28] audit: type=1400 audit(2000000059.620:17402): avc:  denied  { setopt } for  pid=30422 comm="syz.2.21947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  791.408643][T30454] loop7: detected capacity change from 0 to 32768
[  791.459652][T30454]  loop7: p1 p3 < >
[  791.992219][T30474] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  792.020871][T30474] SELinux: failed to load policy
[  792.915588][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21994'.
[  793.735918][   T28] audit: type=1326 audit(2000000062.690:17403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30574 comm="syz.2.22006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  793.769903][   T28] audit: type=1326 audit(2000000062.690:17404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30574 comm="syz.2.22006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  793.795048][   T28] audit: type=1326 audit(2000000062.730:17405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30574 comm="syz.2.22006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  793.820815][   T28] audit: type=1326 audit(2000000062.730:17406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30574 comm="syz.2.22006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2b717c799 code=0x0
[  793.975399][T30583] sch_fq: defrate 7 ignored.
[  794.181587][T30592] bridge_slave_0: left allmulticast mode
[  794.207591][T30592] bridge_slave_0: left promiscuous mode
[  794.216281][T30592] bridge0: port 1(bridge_slave_0) entered disabled state
[  794.233350][T30592] bridge_slave_1: left allmulticast mode
[  794.252298][T30592] bridge_slave_1: left promiscuous mode
[  794.259834][T30592] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.273686][T30592] bond0: (slave bond_slave_0): Releasing backup interface
[  794.303028][T30592] bond0: (slave bond_slave_1): Releasing backup interface
[  794.340281][T30592] team0: Port device team_slave_0 removed
[  794.354954][T30592] team0: Port device team_slave_1 removed
[  794.372120][T30592] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  794.379710][T30592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  794.388802][T30592] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  794.396428][T30592] batman_adv: batadv0: Removing interface: batadv_slave_1
[  794.406659][T30592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  794.611398][T30619] netlink: 'syz.0.22023': attribute type 10 has an invalid length.
[  794.646038][T30619] 8021q: adding VLAN 0 to HW filter on device team0
[  794.698753][T30619] bond0: (slave team0): Enslaving as an active interface with an up link
[  795.195953][T30670] loop0: detected capacity change from 0 to 8192
[  795.226950][T27082] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  795.255128][T27082] FAT-fs (loop0): Filesystem has been set read-only
[  796.138467][T30660] tipc: Resetting bearer <eth:xfrm0>
[  796.456010][T30699] loop0: detected capacity change from 0 to 1024
[  796.628748][T30699] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  797.251507][T30694] Invalid option length (1042149) for dns_resolver key
[  797.364880][   T28] audit: type=1400 audit(2000000066.290:17407): avc:  denied  { module_load } for  pid=30717 comm="syz.7.22065" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=343465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1
[  797.610006][T30718] Invalid ELF header magic: != ELF
[  797.921993][T30741] loop0: detected capacity change from 0 to 512
[  797.973725][T30741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  798.029064][T30741] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  798.684323][T27082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.070185][T30784] cgroup: noprefix used incorrectly
[  799.727941][T30835] netlink: 'syz.1.22095': attribute type 1 has an invalid length.
[  799.758201][T30835] netlink: 'syz.1.22095': attribute type 4 has an invalid length.
[  799.790711][T30835] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.22095'.
[  799.968461][T30847] loop2: detected capacity change from 0 to 4096
[  799.980363][T30859] netlink: 7 bytes leftover after parsing attributes in process `syz.7.22101'.
[  800.017802][T30847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  800.073786][T30866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22102'.
[  800.119426][T30866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22102'.
[  800.323697][T30899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22106'.
[  800.380175][T25003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  800.550361][T30918] loop0: detected capacity change from 0 to 128
[  800.587046][T30918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  800.618204][T30918] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  800.719602][T27082] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  800.745385][T30931] netlink: 24 bytes leftover after parsing attributes in process `syz.7.22120'.
[  800.800377][T30935] netlink: 'syz.1.22118': attribute type 27 has an invalid length.
[  801.765243][T30935] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.772585][T30935] bridge0: port 2(bridge_slave_1) entered listening state
[  801.779955][T30935] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.787354][T30935] bridge0: port 1(bridge_slave_0) entered listening state
[  801.824722][T30935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  802.051887][T30976] syzkaller0: entered promiscuous mode
[  802.145664][T30992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22143'.
[  802.165895][T30992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22143'.
[  802.176240][T30992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22143'.
[  802.196149][T30992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22143'.
[  802.205969][T30996] smc: net device hsr0 applied user defined pnetid SYZ2
[  802.214015][T30996] smc: net device hsr0 erased user defined pnetid SYZ2
[  802.259659][T31007] loop0: detected capacity change from 0 to 256
[  802.278784][T31007] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  802.304775][   T28] audit: type=1326 audit(2000000071.260:17408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31010 comm="syz.2.22152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  802.340429][   T28] audit: type=1326 audit(2000000071.300:17409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31010 comm="syz.2.22152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  802.353325][T31006] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  802.375910][   T28] audit: type=1326 audit(2000000071.300:17410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31010 comm="syz.2.22152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  802.396744][T31006] FAT-fs (loop0): Filesystem has been set read-only
[  802.402896][   T28] audit: type=1326 audit(2000000071.300:17411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31010 comm="syz.2.22152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  802.409046][T31006] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  802.431645][   T28] audit: type=1326 audit(2000000071.300:17412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31010 comm="syz.2.22152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  802.441519][T31006] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  802.463558][   T28] audit: type=1326 audit(2000000071.300:17413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31010 comm="syz.2.22152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b717c799 code=0x7ffc0000
[  802.475472][T31006] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  802.502911][   T28] audit: type=1326 audit(2000000071.300:17414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.7.22154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d08b6c799 code=0x7ffc0000
[  802.545729][   T28] audit: type=1326 audit(2000000071.300:17415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.7.22154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d08b6c799 code=0x7ffc0000
[  802.570965][   T28] audit: type=1326 audit(2000000071.330:17416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.7.22154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6d08b6c799 code=0x7ffc0000
[  802.595323][   T28] audit: type=1326 audit(2000000071.330:17417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.7.22154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d08b6c502 code=0x7ffc0000
[  802.624645][   T28] audit: type=1326 audit(2000000071.330:17418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.7.22154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d08b6c502 code=0x7ffc0000
[  802.649516][   T28] audit: type=1326 audit(2000000071.330:17419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.7.22154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d08b6c799 code=0x7ffc0000
[  802.972458][T31055] loop0: detected capacity change from 0 to 256
[  803.525938][T31075] dvmrp0: entered allmulticast mode
[  803.533709][T31075] dvmrp0: left allmulticast mode
[  803.792481][T31090] loop7: detected capacity change from 0 to 16384
[  803.886342][T31092] VFS: Mount too revealing
[  804.680439][T31141] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  805.747406][T31170] netlink: 'syz.0.22215': attribute type 1 has an invalid length.
[  805.799855][T31170] netlink: 'syz.0.22215': attribute type 4 has an invalid length.
[  805.841355][T31170] __nla_validate_parse: 6 callbacks suppressed
[  805.841374][T31170] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.22215'.
[  805.990358][T31180] loop0: detected capacity change from 0 to 4096
[  806.011370][T31180] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002]
[  806.029096][T31180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  806.188192][T31196] netlink: 52 bytes leftover after parsing attributes in process `syz.7.22227'.
[  806.200493][T31196] ip6gre1: entered promiscuous mode
[  806.205724][T31196] ip6gre1: entered allmulticast mode
[  806.430593][T23990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.435458][T31207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.22232'.
[  806.468696][T31209] netlink: 'syz.2.22231': attribute type 27 has an invalid length.
[  806.485730][T29376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.535409][T31209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  806.559134][T23990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.688507][T15771] bridge_slave_1: left allmulticast mode
[  806.694532][T15771] bridge_slave_1: left promiscuous mode
[  806.702765][T15771] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.726066][T15771] bridge_slave_0: left allmulticast mode
[  806.732586][T15771] bridge_slave_0: left promiscuous mode
[  806.738746][T15771] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.971403][T15771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  806.986430][T15771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  807.005549][T15771] bond0 (unregistering): (slave team0): Releasing backup interface
[  807.023561][T15771] bond0 (unregistering): Released all slaves
[  807.041100][T15771] bond1 (unregistering): Released all slaves
[  807.108152][T15771] hsr_slave_0: left promiscuous mode
[  807.123975][T15771] hsr_slave_1: left promiscuous mode
[  807.138419][T15771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  807.154480][T15771] batman_adv: batadv0: Removing interface: batadv_slave_0
[  807.191761][T15771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  807.199488][T15771] batman_adv: batadv0: Removing interface: batadv_slave_1
[  807.234155][T15771] veth1_macvtap: left promiscuous mode
[  807.239885][T15771] veth0_macvtap: left promiscuous mode
[  807.303487][T15771] team0 (unregistering): Port device team_slave_1 removed
[  807.314821][T15771] team0 (unregistering): Port device team_slave_0 removed
[  807.421680][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  807.421697][   T28] audit: type=1326 audit(2000000076.370:17446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.490649][   T28] audit: type=1326 audit(2000000076.370:17447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.528818][   T28] audit: type=1326 audit(2000000076.380:17448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.553554][   T28] audit: type=1326 audit(2000000076.380:17449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b5414c502 code=0x7ffc0000
[  807.624160][   T28] audit: type=1326 audit(2000000076.380:17450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b5414c502 code=0x7ffc0000
[  807.648781][   T28] audit: type=1326 audit(2000000076.380:17451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.672757][   T28] audit: type=1326 audit(2000000076.380:17452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.698975][   T28] audit: type=1326 audit(2000000076.410:17453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.723792][   T28] audit: type=1326 audit(2000000076.410:17454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.751203][   T28] audit: type=1326 audit(2000000076.410:17455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.8.22245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5414c799 code=0x7ffc0000
[  807.845867][T31257] netlink: 'syz.8.22248': attribute type 27 has an invalid length.
[  808.159086][T23988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.164828][T31257] syz_tun: left promiscuous mode
[  808.210476][T31257] bridge0: left promiscuous mode
[  808.217375][T31257] 8021q: adding VLAN 0 to HW filter on device team0
[  808.235732][T31257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  808.261769][T31271] loop2: detected capacity change from 0 to 256
[  808.309474][T31271] msdos: Bad value for 'dmask'
[  808.443354][T31278] syzkaller0: entered promiscuous mode
[  808.450007][T31278] syzkaller0: entered allmulticast mode
[  808.939211][T23988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.406318][T31286] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.413544][T31286] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.459320][T31286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  809.469923][T31286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  809.544965][T31288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22259'.
[  809.557545][T31218] chnl_net:caif_netlink_parms(): no params data found
[  809.609633][T31306] netlink: 'syz.7.22266': attribute type 83 has an invalid length.
[  809.696423][T31218] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.722436][T31218] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.762030][T31218] bridge_slave_0: entered allmulticast mode
[  809.780871][T31218] bridge_slave_0: entered promiscuous mode
[  809.792776][T31218] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.800507][T31218] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.808632][T31218] bridge_slave_1: entered allmulticast mode
[  809.818227][T31218] bridge_slave_1: entered promiscuous mode
[  810.050613][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.262228][T31322] loop7: detected capacity change from 0 to 16384
[  810.612783][T31321] ==================================================================
[  810.620921][T31321] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked
[  810.628403][T31321] 
[  810.630754][T31321] read-write to 0xffff8881428ab900 of 8 bytes by interrupt on cpu 0:
[  810.638840][T31321]  __xa_clear_mark+0xf5/0x1e0
[  810.643540][T31321]  __folio_end_writeback+0xf4/0x360
[  810.648852][T31321]  folio_end_writeback_no_dropbehind+0x6d/0x1d0
[  810.655117][T31321]  folio_end_writeback+0x1c/0x70
[  810.660165][T31321]  end_buffer_async_write+0x156/0x1f0
[  810.665577][T31321]  end_bio_bh_io_sync+0x79/0xa0
[  810.670471][T31321]  bio_endio+0x38a/0x420
[  810.674746][T31321]  blk_update_request+0x338/0x740
[  810.679805][T31321]  blk_mq_end_request+0x26/0x50
[  810.684679][T31321]  lo_complete_rq+0x98/0x140
[  810.689294][T31321]  blk_done_softirq+0x77/0xb0
[  810.694193][T31321]  handle_softirqs+0xb9/0x2a0
[  810.698890][T31321]  run_ksoftirqd+0x1c/0x30
[  810.703343][T31321]  smpboot_thread_fn+0x32a/0x510
[  810.708307][T31321]  kthread+0x22a/0x280
[  810.712394][T31321]  ret_from_fork+0x150/0x360
[  810.717014][T31321]  ret_from_fork_asm+0x1a/0x30
[  810.721888][T31321] 
[  810.724244][T31321] read to 0xffff8881428ab900 of 8 bytes by task 31321 on cpu 1:
[  810.732093][T31321]  xas_find_marked+0x213/0x620
[  810.736895][T31321]  filemap_get_folios_tag+0xfa/0x510
[  810.742302][T31321]  filemap_write_and_wait_range+0x1f5/0x370
[  810.748495][T31321]  bdev_release+0xeb/0x3d0
[  810.752936][T31321]  blkdev_release+0x15/0x20
[  810.757459][T31321]  __fput+0x29b/0x650
[  810.761466][T31321]  ____fput+0x1c/0x30
[  810.765476][T31321]  task_work_run+0x130/0x1a0
[  810.770176][T31321]  exit_to_user_mode_loop+0x1f4/0x6f0
[  810.775652][T31321]  do_syscall_64+0x249/0x370
[  810.780257][T31321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.786258][T31321] 
[  810.788590][T31321] value changed: 0xffc0000000000000 -> 0x8000000000000000
[  810.795900][T31321] 
[  810.798261][T31321] Reported by Kernel Concurrency Sanitizer on:
[  810.804426][T31321] CPU: 1 UID: 0 PID: 31321 Comm: syz.2.22271 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  810.815478][T31321] Tainted: [W]=WARN
[  810.819378][T31321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  810.829624][T31321] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  811.303240][T15771] bridge_slave_1: left allmulticast mode
[  811.308971][T15771] bridge_slave_1: left promiscuous mode
[  811.314747][T15771] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.329763][T15771] bridge_slave_0: left allmulticast mode
[  811.335436][T15771] bridge_slave_0: left promiscuous mode
[  811.348387][T15771] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.357031][T15771] bridge_slave_1: left allmulticast mode
[  811.368149][T15771] bridge_slave_1: left promiscuous mode
[  811.373912][T15771] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.401575][T15771] bridge_slave_0: left allmulticast mode
[  811.407348][T15771] bridge_slave_0: left promiscuous mode
[  811.418308][T15771] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.479543][T15771] bond0 (unregistering): Released all slaves
[  811.526143][T15771] bond2 (unregistering): (slave gretap2): Releasing active interface
[  811.540536][T15771] dvmrp0 (unregistering): left allmulticast mode
[  811.629781][T15771] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  811.637968][T15771] bridge2 (unregistering): left promiscuous mode
[  811.729975][T15771] bond0 (unregistering): left promiscuous mode
[  811.736310][T15771] bond_slave_0: left promiscuous mode
[  811.741889][T15771] bond_slave_1: left promiscuous mode
[  811.749362][T15771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  811.758753][T15771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  811.767903][T15771] bond0 (unregistering): Released all slaves
[  811.775655][T15771] bond1 (unregistering): Released all slaves
[  811.783731][T15771] bond2 (unregistering): Released all slaves
[  811.792141][T15771] bond3 (unregistering): Released all slaves
[  811.800663][T15771] bond4 (unregistering): Released all slaves
[  811.848540][T15771] hsr_slave_0: left promiscuous mode
[  811.854122][T15771] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.862137][T15771] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.952196][T15771] team0 (unregistering): Port device team_slave_1 removed
[  811.962518][T15771] team0 (unregistering): Port device team_slave_0 removed
[  812.442512][T15771] IPVS: stop unused estimator thread 0...
[  812.529285][T15771] tipc: Disabling bearer <eth:xfrm0>
[  812.608280][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.742389][T15771] bond0 (unregistering): left promiscuous mode
[  812.748953][T15771] bond0 (unregistering): Released all slaves
[  812.757159][T15771] bond1 (unregistering): Released all slaves
[  812.765481][T15771] bond2 (unregistering): Released all slaves
[  812.811546][T15771] tipc: Disabling bearer <udp:syz2>
[  812.817052][T15771] tipc: Left network mode
[  812.823450][T15771] dummy0: left promiscuous mode
[  813.333438][T15771] IPVS: stop unused estimator thread 0...