last executing test programs:

6m46.357546724s ago: executing program 32 (id=1550):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r2=>0x0})
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000008)
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x80000, 0x2008}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x80)

3m14.498002111s ago: executing program 33 (id=6272):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)

3m14.497103762s ago: executing program 34 (id=6271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x28}}, 0x0)

3m14.481747559s ago: executing program 35 (id=6275):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=')', 0x1}], 0x1, &(0x7f00000006c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xc, 0x208, 0x1, 0x5, 0x6, 0x1, 0x6}}], 0x30, 0x44004}, 0x804)

3m13.484918524s ago: executing program 36 (id=6278):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4)

2m57.589058974s ago: executing program 37 (id=6582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x2, 0xa594, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ff01ff8d00"})

2m57.580033879s ago: executing program 38 (id=6584):
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

2m57.224276065s ago: executing program 39 (id=6586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000)

2m57.221754977s ago: executing program 40 (id=6587):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

2m51.281206785s ago: executing program 3 (id=6585):
r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f0000000400000004000000020002", @ANYRES32=0x1, @ANYBLOB="ad05000000000000000000000000000000008b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5e, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000f80)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001000)=""/154, 0x9a}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f00000010c0)=""/182, 0xb6}, {&(0x7f0000001180)=""/84, 0x54}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/209, 0xd1}, {&(0x7f0000002300)=""/208, 0xd0}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/135, 0x87}], 0x9, &(0x7f0000003580)=""/154, 0x9a}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

2m51.203202644s ago: executing program 4 (id=6610):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e1ff00850000007d00000095"], 0x0, 0x10000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e)

2m50.722090992s ago: executing program 0 (id=6625):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20)

2m50.709308039s ago: executing program 0 (id=6627):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x4040005)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

2m50.671759137s ago: executing program 5 (id=6629):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)

2m50.604242601s ago: executing program 0 (id=6630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000a18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m50.550034608s ago: executing program 4 (id=6631):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000e0000001500000000000000270000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2616}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

2m50.549588048s ago: executing program 0 (id=6632):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x26, 0x1, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)}, 0x40)
perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x10}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

2m50.444098871s ago: executing program 4 (id=6634):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x5, 0x20261, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_bp={0x0, 0x1}, 0x1080a0, 0x40002, 0x0, 0x7, 0x5, 0x3, 0x9}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

2m50.395133445s ago: executing program 5 (id=6635):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

2m50.394495645s ago: executing program 3 (id=6636):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)

2m50.312159716s ago: executing program 3 (id=6637):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000000080), 0x6e, 0x0, 0x0, 0x0, 0x1d}, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x4c00, 0x0}, 0x0)

2m50.311640936s ago: executing program 5 (id=6638):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x03\x00\x00\x00,'}, 0x30)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1401, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xded}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0)

2m50.311396016s ago: executing program 4 (id=6639):
r0 = syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12)
openat$tun(0xffffffffffffff9c, 0x0, 0x18d8c1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x103000, 0x0)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

2m50.299700292s ago: executing program 5 (id=6640):
inotify_init()
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
pipe2$9p(&(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0)

2m50.18223053s ago: executing program 3 (id=6643):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)

2m50.158679513s ago: executing program 5 (id=6644):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)

2m50.150640686s ago: executing program 3 (id=6645):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)

2m49.63807724s ago: executing program 0 (id=6646):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffccf, 0xfffffffffffffffe}, 0x61)

2m49.473329453s ago: executing program 4 (id=6647):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20)

2m48.906092554s ago: executing program 3 (id=6657):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m48.905870454s ago: executing program 41 (id=6657):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m48.866069994s ago: executing program 5 (id=6659):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m48.81332811s ago: executing program 42 (id=6659):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m48.700823816s ago: executing program 0 (id=6661):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m48.539385746s ago: executing program 43 (id=6661):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m47.868148949s ago: executing program 4 (id=6664):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="0f", 0x1}], 0x1}, 0x4)

2m47.836839435s ago: executing program 44 (id=6664):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="0f", 0x1}], 0x1}, 0x4)

51.020200986s ago: executing program 7 (id=11118):
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

50.953853659s ago: executing program 7 (id=11120):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x4b40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6})

50.953680439s ago: executing program 7 (id=11121):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffffd})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
openat$urandom(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

50.909683501s ago: executing program 7 (id=11123):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b7, &(0x7f0000001340)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0xa, &(0x7f0000000000)={0x2f, 0x9, 0x7})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

50.850240621s ago: executing program 7 (id=11124):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

50.717787786s ago: executing program 7 (id=11129):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r5, 0x25, 0x0, @val=@netkit}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x428a4}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20004000)

50.657918966s ago: executing program 45 (id=11129):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r5, 0x25, 0x0, @val=@netkit}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x428a4}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20004000)

1.843904154s ago: executing program 9 (id=12433):
pipe(&(0x7f00000001c0))
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x8c, 0x206, 0x7, 0x55, 0x1, 0x2, 0x1004}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x900)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)

1.607365392s ago: executing program 1 (id=12445):
capset(&(0x7f0000000500)={0x20080522}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3b000000, @mcast1, 0x5}}}, 0x88)

1.559036326s ago: executing program 1 (id=12446):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000)

914.159716ms ago: executing program 9 (id=12457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r3 = socket(0x400000000010, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80)

838.257444ms ago: executing program 9 (id=12461):
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x1ff, 0x7fff, 0x28e9}], 0x1, 0xbff, 0x1e, 0x0, 0x2c, 0x2})
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0), 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

770.418597ms ago: executing program 9 (id=12463):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007740)=[{{&(0x7f0000002540)={0xa, 0x4e22, 0x3, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000004680)=[@dstopts={{0x18, 0x29, 0x3e, {0x8}}}], 0x18}}], 0x1, 0x20004000)

695.620664ms ago: executing program 9 (id=12466):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}}], 0x1, 0x20000001)
r0 = dup(0xffffffffffffffff)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x9, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

620.997461ms ago: executing program 9 (id=12469):
socket(0x10, 0x3, 0xa)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000240), 0x80000dd, 0x10003, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

526.809898ms ago: executing program 1 (id=12473):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

450.794956ms ago: executing program 1 (id=12478):
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

450.687046ms ago: executing program 2 (id=12479):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}}], 0x1, 0x20000001)
r0 = dup(0xffffffffffffffff)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x9, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

390.106666ms ago: executing program 1 (id=12482):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4247c, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="07d78ba5b4b305ffa8003d3ce9ffa739e0663e1417c13e72c5279a4b999c88a472706213954865e31509148053419264d6e4ec3f597efaff912ace951125b3eefd14d39185759d6549fe537e3d3c4d5cca3176840af5baa12c6f9bf000085e9875bf09d5c1b1e68f64b44e689ec52c2df882e0d459003298db32777a378c4ace0a20ae4a3a1b388044d29ef0ffa7adc737b0e171078e04e665b07fb8d05b5ccf37b7c0724193faac2f04266491289d17e88372335d09e151925ff8f7c30ba93bf421dab1b80566c94d8f42330d10a8b53d815ef818852dca140b21658b973a38b98965cf8af56a1be1543a9b5f596880c1911c54fecd5aefde798a5acb8833ad7e20a68b631cd72101baa470ccc24d68bd292b3d37cc4f1c8d103d99360b6b334059b0333f7390ad5959080dfb2e0d59b4ead51540f85b4962365e55c0810ef88297072101e1c8affb8b023d24892888c40da78bf946c60d81cc01f3f4e2a09e2e53f05810508579f8d2b298d0dc464180b160f0084060aeb860184400"/394, @ANYBLOB="94b65231ff72115114ebaa5c989b151934dc050b6a9a2be44298b5d84feb3892838280ec13531d79a890932db7ed059888c314982baa52e77255257748283ef9ebc6291f2ad639cd00274ba3bc494b67fe9b86ea83146429d9b58b5e5a5f4456ac6e3aaa769d671ec3e205be67d6bcb35240da8c3e3927beca9e0cc3e3ab04c4b217462801adae3786ceb99fd69be1bca660570b9cc3b0a6a3", @ANYRES64, @ANYRES16], 0x5, 0x0, &(0x7f0000000000))

367.827357ms ago: executing program 2 (id=12484):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
unshare(0x6020400)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)

361.77749ms ago: executing program 8 (id=12485):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r3 = socket(0x400000000010, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80)

353.232964ms ago: executing program 6 (id=12486):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bffebb42b", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda20200e0ad4319dc3585a18c5217b1fdd7c69bb02dfa21de5b199c2f2134c9d0e3ec856dfae4e0e52500000000ef7d15e6852b88300b766ab76aed3d87788a30bd2ab10ad763a6cb0ce0fb030535837520a57571ae2e7ed0eec5530c9bbe7e", 0x70}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5550e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e80000d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f0000000000)="7066dc66cff6f1d248399b17b59a9412172b8918cac54f2f3d5d4272bc272b61fc173041c5e0c16d9dece067f2d21aeb98b4d0cbededee441eb956deaf4b5c940947829015326d269ecbb0ffdc083bcfa66053bde466865f8d3d27c3dc7ba9c309d90f44c39e342fd69956a9ed", 0x6d}, {&(0x7f0000000900)="9a9e28610f5841d5fad44191e2e9c5cc70dc4301236e1d7903ed6e9b99", 0x1d}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5edb804240484d6e3803875932c00ca77b8a680916c9e01b88f58ca4301fc55eeeee134a3ff0e0888762eb51e08225a15b1aab13dad338d43fcb8651bb7f359c810ded9bc47a11427f09022355425292c41f321b28cee590", 0x65}, {&(0x7f00000009c0)="9190e42e123ee37d19f2a627aec0b3d42e14db4a0954e630a80066086fc2c4f7a3e33e42e0a6d83e3dc38c5edc7741f5e557c64ede71fdf7b721aafa99a009a769092cbb0dd4345178f3b155f1f53d9085595471faa592bbdc3e3f28de545362d4cadcd1b86d3f8c9b8b0bd14e802453e93f", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000280)="01808d8e2707c513ff18766900d2a16406cbd2bf7405b1b3e3ea25b31806f69954d1d5c2b0b9d25f60dd5b5d811bde8c6601fcd8cf8f3f25812a2acf0b5e69e409282d7881044f440cfd74137b08c64b81fdfc83fa9aa4fb8fd661300c82816f37cf4e6c100cc73a1af35b2bb1024d51bc3af740de6b16f736f7ff5500be7c9656", 0x81}, {&(0x7f0000000d00)="987ed064a0f2ad23fbbaa7215ccbfedcd5587c725c02741a2a767b119e0f662893ce028ddac9056398d2236a52d332b4c03c542ff7e2bc0b4e427a168bcf96a84a71857005279c6cf404fa81b2c7e09bc11bcded6c934a346365338296e8ad8b6f0215a4bf190f318c3ea50746cb050db929f2f05e17a619ed12adbd69df1405214c6dd5a781411ba3210685f61b1f3bc306b3167b0bc927bfe0ef1c2ab69943a09bc06a2d0aafdbc82350f00fa6", 0xae}, {&(0x7f0000000dc0)="11b2f2357917d42f98899ebb1bfe1e01a3694356a88dd4", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {&(0x7f00000024c0)="1435c475ff655bd18d564b6fd912016611af9363c8584d1b5418f297560700f7c6ca9902ea932c22210b5344584f1b3be7a37b604e4675a6f5098b0e8a950edeb4d8445e534fb262b950f7512e50efa4e6cb7e7b746053c4a61ade3f37522b6e817345afcacf64d0f696f936d915ead80ef69228d2e363e6e9c22024872dd1f4ab2ac3c579e321aca11b042d1faf574b0809243ac751b2a9000494f4168e81b4912b83841056b56b1396b81dd6e2af37b3c455ed45fdb193bf353f94811aa216a5e268a85bdbc495741a8b6b1239323be4ce258b2e", 0xd5}], 0x2}}], 0x5, 0x400c404)
sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84)

335.953923ms ago: executing program 1 (id=12487):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x120a, &(0x7f0000002d80)="$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")
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
r0 = syz_clone(0x410e180, 0x0, 0x12, 0x0, 0x0, 0x0)
syz_open_procfs(r0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)

322.509759ms ago: executing program 8 (id=12488):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

275.646993ms ago: executing program 2 (id=12489):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

275.472163ms ago: executing program 6 (id=12490):
r0 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x11}, &(0x7f0000000180)=0x8)

275.346703ms ago: executing program 8 (id=12491):
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @loopback, 0xbff}, @ib={0x1b, 0xf, 0xffa, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118)

275.239993ms ago: executing program 2 (id=12492):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f0000000080)="e02742e8680d85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

214.247483ms ago: executing program 6 (id=12493):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

214.036943ms ago: executing program 2 (id=12494):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}}], 0x1, 0x20000001)
r1 = dup(r0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x9, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

213.933233ms ago: executing program 6 (id=12495):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
close(0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x0, 0xc, "97134cb6ce50e935f628"}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "5d7d0438043979a6eef50c"}]}}}}}}}, 0x0)

184.795778ms ago: executing program 8 (id=12496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000002020102000000000000000006000003440002802c00018014000300fe00000000000000000000bb14000400fc0000000000000000000000000000013400018008000100ac1414aa0700"], 0x58}, 0x1, 0x0, 0x0, 0x40840}, 0x4010)

184.427988ms ago: executing program 6 (id=12497):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4247c, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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"/394, @ANYBLOB="94b65231ff72115114ebaa5c989b151934dc050b6a9a2be44298b5d84feb3892838280ec13531d79a890932db7ed059888c314982baa52e77255257748283ef9ebc6291f2ad639cd00274ba3bc494b67fe9b86ea83146429d9b58b5e5a5f4456ac6e3aaa769d671ec3e205be67d6bcb35240da8c3e3927beca9e0cc3e3ab04c4b217462801adae3786ceb99fd69be1bca660570b9cc3b0a6a3", @ANYRES64, @ANYRES16], 0x5, 0x0, &(0x7f0000000000))

66.584786ms ago: executing program 2 (id=12498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000004c0)="800000800000210ee7decd7a0000", 0xe, 0x40054, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

65.032417ms ago: executing program 8 (id=12499):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=0xffffffffffffffff)
sendto$inet(r0, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

15.193642ms ago: executing program 6 (id=12500):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x1, 0x1b9, &(0x7f00000009c0)="$eJzs3TFrE2EYB/An7XkN4tBZHE5cnII6OEelheKBoNygk0J1aUWwy+nUb+Hu4Ffp15FM3SLxDQ2tJyj0etfc77fk4f4Xnue9QN4pb97e+Xiw/+now4+TbzEejyKbxjROR7EdG7EZyXGcM2q8CgBcG6fzefycJ/9w+9MrGAkAaNl/7v8AwBqw/wPA8Nj/AWB4Xr1+8/xJWe68LIpxxOy4ruoqvaZ8d6/ceVD8tr1616yuq82z/GHKi/P5jbi5zB815nncv5fyRfbsRZnyLN1RV1ux3zTwdNTCUwAAAAAAAAAAAAAAAAAAAAAAgKs1Kc40nu8zmeR/yVO1u5cvr1083yeL21lDw7yVZQAAAAAAAAAAAAAAAAAAAMC1dvTl68G7w8P3n/tbzPoxRt+KW398go9Pvt+9zBZbyw5dr3Tdi8Vz7sEYF4oOv5QAAAAAAAAAAAAAAAAAAGCgVj/67XoSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjO6v//2ysWfTa6XigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIP2KwAA//9IGEQA")
memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

0s ago: executing program 8 (id=12501):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

kernel console output (not intermixed with test programs):

link_route_socket pid=27869 comm=syz.1.9637
[  423.556279][T27869] netlink: 'syz.1.9637': attribute type 1 has an invalid length.
[  423.603397][  T874] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.632011][T27869] bond5: (slave gretap2): making interface the new active one
[  423.641863][T27869] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  423.651095][T27871] IPVS: using max 2208 ests per chain, 110400 per kthread
[  423.684874][T27878] vlan2: entered allmulticast mode
[  423.690226][T27878] bond5: entered allmulticast mode
[  423.695498][T27878] gretap2: entered allmulticast mode
[  423.712389][T27878] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  423.832684][  T874] bridge_slave_1: left allmulticast mode
[  423.838593][  T874] bridge_slave_1: left promiscuous mode
[  423.844356][  T874] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.893216][  T874] bridge_slave_0: left allmulticast mode
[  423.898962][  T874] bridge_slave_0: left promiscuous mode
[  423.904935][  T874] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.963184][T27889] loop1: detected capacity change from 0 to 128
[  423.991546][   T12] kworker/u8:0: attempt to access beyond end of device
[  423.991546][   T12] loop1: rw=1, sector=145, nr_sectors = 33 limit=128
[  424.017577][T27891] loop2: detected capacity change from 0 to 7
[  424.089841][  T874] bond1 (unregistering): (slave gretap1): Releasing active interface
[  424.177255][  T874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.205712][  T874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.233285][  T874] bond0 (unregistering): Released all slaves
[  424.257593][  T874] bond1 (unregistering): Released all slaves
[  424.267826][  T874] bond2 (unregistering): Released all slaves
[  424.399113][  T874] hsr_slave_0: left promiscuous mode
[  424.418112][  T874] hsr_slave_1: left promiscuous mode
[  424.428201][  T874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.435845][  T874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.454223][  T874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.461648][  T874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.527444][  T874] veth1_macvtap: left promiscuous mode
[  424.540157][  T874] veth1_vlan: left promiscuous mode
[  424.550343][  T874] veth0_vlan: left promiscuous mode
[  424.657765][  T874] team0 (unregistering): Port device vlan0 removed
[  424.687755][  T874] team0 (unregistering): Port device team_slave_1 removed
[  424.697698][  T874] team0 (unregistering): Port device team_slave_0 removed
[  424.765403][T27954] loop1: detected capacity change from 0 to 2048
[  424.807260][T27822] chnl_net:caif_netlink_parms(): no params data found
[  424.816392][T27954] Alternate GPT is invalid, using primary GPT.
[  424.822926][T27954]  loop1: p2 p3 p7
[  425.006852][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  425.025022][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  425.028101][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  425.061351][T27822] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.068500][T27822] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.092908][T27822] bridge_slave_0: entered allmulticast mode
[  425.100284][T27822] bridge_slave_0: entered promiscuous mode
[  425.148455][T27822] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.155821][T27822] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.173151][T27822] bridge_slave_1: entered allmulticast mode
[  425.180207][T27822] bridge_slave_1: entered promiscuous mode
[  425.270018][T27822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.300790][T27822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.344019][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.353565][T27822] team0: Port device team_slave_0 added
[  425.382871][ T5119] IPVS: starting estimator thread 0...
[  425.388969][T27995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27995 comm=syz.7.9691
[  425.402538][T27998] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  425.418827][T27822] team0: Port device team_slave_1 added
[  425.446988][T27822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.454027][T27822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.480417][T27822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.483775][T27997] IPVS: using max 2208 ests per chain, 110400 per kthread
[  425.493114][T27822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.505297][T27822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.531499][T27822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.599738][T27822] hsr_slave_0: entered promiscuous mode
[  425.615734][T27822] hsr_slave_1: entered promiscuous mode
[  425.637335][T27822] debugfs: 'hsr0' already exists in 'hsr'
[  425.643149][T27822] Cannot create hsr debugfs directory
[  425.698172][T28012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9697'.
[  426.031044][T27822] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  426.040628][T27822] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  426.050495][T27822] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  426.059866][T27822] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  426.151268][T27822] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.170395][T27822] 8021q: adding VLAN 0 to HW filter on device team0
[  426.181061][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.188214][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.204087][T28025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28025 comm=syz.1.9700
[  426.257919][T22430] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.265152][T22430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.434473][T28044] loop1: detected capacity change from 0 to 128
[  426.492044][T27822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.499032][   T29] audit: type=1400 audit(2000000294.495:563): avc:  denied  { write } for  pid=28046 comm="syz.2.9709" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  426.775735][T27822] veth0_vlan: entered promiscuous mode
[  426.786924][T27822] veth1_vlan: entered promiscuous mode
[  426.802485][T28078] netlink: 'syz.1.9715': attribute type 13 has an invalid length.
[  426.810433][T28078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9715'.
[  426.848592][T27822] veth0_macvtap: entered promiscuous mode
[  426.851201][T28085] loop6: detected capacity change from 0 to 128
[  426.865643][T27822] veth1_macvtap: entered promiscuous mode
[  426.880457][T27822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.924592][T27822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.943812][T27141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.959285][T27141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.972071][T27141] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.996762][T27141] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.067917][T28098] loop8: detected capacity change from 0 to 128
[  427.137874][T28102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28102 comm=syz.6.9725
[  427.332397][T28128] netlink: 'syz.7.9734': attribute type 1 has an invalid length.
[  427.529356][T28145] loop2: detected capacity change from 0 to 7
[  427.599897][T28108] chnl_net:caif_netlink_parms(): no params data found
[  427.622107][T28155] loop7: detected capacity change from 0 to 128
[  427.724607][T28108] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.731932][T28108] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.743765][T28108] bridge_slave_0: entered allmulticast mode
[  427.750657][T28108] bridge_slave_0: entered promiscuous mode
[  427.759774][T28108] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.760588][T28166] loop2: detected capacity change from 0 to 128
[  427.767195][T28108] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.790371][T28108] bridge_slave_1: entered allmulticast mode
[  427.797842][T28108] bridge_slave_1: entered promiscuous mode
[  427.842493][T28108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.861072][T28108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.888346][T28108] team0: Port device team_slave_0 added
[  427.910354][T28108] team0: Port device team_slave_1 added
[  427.954885][T28108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.961888][T28108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.987938][T28108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.017664][T28108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.024724][T28108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.050789][T28108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.082449][T28178] loop7: detected capacity change from 0 to 128
[  428.098123][T28108] hsr_slave_0: entered promiscuous mode
[  428.105006][T28178] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  428.115334][T28108] hsr_slave_1: entered promiscuous mode
[  428.129749][T28108] debugfs: 'hsr0' already exists in 'hsr'
[  428.135681][T28108] Cannot create hsr debugfs directory
[  428.166318][T28178] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  428.189315][   T52] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  428.235297][   T52] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  428.259269][T28187] netlink: 'syz.6.9757': attribute type 1 has an invalid length.
[  428.361519][T28108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.377923][T28194] loop2: detected capacity change from 0 to 1764
[  428.434737][T28108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.453120][T28203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28203 comm=syz.2.9764
[  428.466187][T28201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28201 comm=syz.7.9762
[  428.526065][T28108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.600686][T28108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.696789][T28108] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  428.726912][T28108] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  428.744593][T28108] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  428.769430][T28108] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  428.896190][T28236] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  428.942083][T28108] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.957154][T28108] 8021q: adding VLAN 0 to HW filter on device team0
[  428.967130][T27154] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.974222][T27154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.987854][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.995005][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.020872][T28244] loop8: detected capacity change from 0 to 128
[  429.110190][T28108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.197945][T28108] veth0_vlan: entered promiscuous mode
[  429.206899][T28108] veth1_vlan: entered promiscuous mode
[  429.221428][T28259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28259 comm=syz.6.9782
[  429.235061][T28259] netlink: 'syz.6.9782': attribute type 1 has an invalid length.
[  429.279650][T28259] vlan2: entered allmulticast mode
[  429.284955][T28259] bond1: entered allmulticast mode
[  429.305189][T28108] veth0_macvtap: entered promiscuous mode
[  429.313689][T28108] veth1_macvtap: entered promiscuous mode
[  429.333971][T28108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.345023][T28108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.661383][T27154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.676896][T27154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.688444][T27154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.698366][T27154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.864800][T28277] loop6: detected capacity change from 0 to 128
[  429.961291][T28283] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9790'.
[  430.055061][T28294] rock: directory entry would overflow storage
[  430.061271][T28294] rock: sig=0x4f50, size=4, remaining=3
[  430.067010][T28294] iso9660: Corrupted directory entry in block 6 of inode 1792
[  430.172520][T28274] chnl_net:caif_netlink_parms(): no params data found
[  430.239428][T28307] lo: entered allmulticast mode
[  430.268379][T28307] lo: entered promiscuous mode
[  430.315641][T28304] lo: left promiscuous mode
[  430.320425][T28304] lo: left allmulticast mode
[  430.326380][T28274] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.333527][T28274] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.347760][T28274] bridge_slave_0: entered allmulticast mode
[  430.354491][T28274] bridge_slave_0: entered promiscuous mode
[  430.363427][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9800'.
[  430.375957][T28274] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.383183][T28274] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.397741][T28274] bridge_slave_1: entered allmulticast mode
[  430.404628][T28274] bridge_slave_1: entered promiscuous mode
[  430.515568][T28274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.535434][T28274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.581151][T28274] team0: Port device team_slave_0 added
[  430.603635][T28328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9806'.
[  430.643581][T28274] team0: Port device team_slave_1 added
[  430.706734][T28274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.713907][T28274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.740205][T28274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.801787][T28274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.808807][T28274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.834883][T28274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.874997][T28274] hsr_slave_0: entered promiscuous mode
[  430.881148][T28274] hsr_slave_1: entered promiscuous mode
[  430.888019][T28274] debugfs: 'hsr0' already exists in 'hsr'
[  430.893772][T28274] Cannot create hsr debugfs directory
[  430.957769][T28342] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9812'.
[  431.085402][T28274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.135627][T28349] Alternate GPT is invalid, using primary GPT.
[  431.142017][T28349]  loop8: p2 p3 p7
[  431.156935][T28274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.180805][   T29] audit: type=1400 audit(2000000299.195:564): avc:  denied  { watch watch_reads } for  pid=28350 comm="syz.6.9817" path="/67/file1/file2" dev="loop6" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  431.258943][T28274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.334267][T28359] lo: entered allmulticast mode
[  431.339500][T28359] lo: entered promiscuous mode
[  431.345398][T28358] lo: left promiscuous mode
[  431.350062][T28358] lo: left allmulticast mode
[  431.373458][T28274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.488479][T28274] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  431.508999][T28274] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  431.526708][T28274] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  431.537783][T28369] set_capacity_and_notify: 5 callbacks suppressed
[  431.537798][T28369] loop6: detected capacity change from 0 to 128
[  431.548710][T28274] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  431.581020][T22420] kworker/u8:16: attempt to access beyond end of device
[  431.581020][T22420] loop6: rw=1, sector=145, nr_sectors = 33 limit=128
[  431.682499][T28274] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.706582][T28274] 8021q: adding VLAN 0 to HW filter on device team0
[  431.731179][T28263] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.738315][T28263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.822437][T28263] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.829633][T28263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.906139][T28274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  431.975902][ T3004] Alternate GPT is invalid, using primary GPT.
[  431.982355][ T3004]  loop8: p2 p3 p7
[  432.044402][T25684] udevd[25684]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory
[  432.059984][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  432.072311][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  432.110631][T28274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.163138][T28400] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9834'.
[  432.191423][T28400] netlink: 91 bytes leftover after parsing attributes in process `syz.7.9834'.
[  432.249788][T28410] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  432.295570][T28274] veth0_vlan: entered promiscuous mode
[  432.315318][T28274] veth1_vlan: entered promiscuous mode
[  432.343376][T28274] veth0_macvtap: entered promiscuous mode
[  432.351942][T28274] veth1_macvtap: entered promiscuous mode
[  432.376616][T28274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.391771][T28274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.404366][T18180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.420051][T18180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.436831][T18180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.457268][T18180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.486651][   T29] audit: type=1400 audit(2000000300.505:565): avc:  denied  { remount } for  pid=28420 comm="syz.2.9784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  432.525473][   T29] audit: type=1400 audit(2000000300.535:566): avc:  denied  { unmount } for  pid=28274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  433.011896][T28443] loop2: detected capacity change from 0 to 7
[  433.029638][T28445] team0: entered promiscuous mode
[  433.034903][T28445] team_slave_0: entered promiscuous mode
[  433.040717][T28445] team_slave_1: entered promiscuous mode
[  433.074537][T28445] lo: entered promiscuous mode
[  433.087967][T28450] loop8: detected capacity change from 0 to 512
[  433.117756][T28444] lo: left promiscuous mode
[  433.122401][T28444] team0: left promiscuous mode
[  433.127251][T28444] team_slave_0: left promiscuous mode
[  433.132736][T28444] team_slave_1: left promiscuous mode
[  433.357298][T28475] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9863'.
[  433.526296][T28485] mmap: syz.6.9869 (28485) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  434.106744][T28506] syzkaller0: entered promiscuous mode
[  434.112354][T28506] syzkaller0: entered allmulticast mode
[  434.287875][T28515] loop1: detected capacity change from 0 to 512
[  434.372695][T28522] loop2: detected capacity change from 0 to 256
[  434.486126][T28530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28530 comm=syz.1.9887
[  435.291329][T28573] loop7: detected capacity change from 0 to 128
[  435.519208][T28597] syzkaller0: entered promiscuous mode
[  435.524883][T28597] syzkaller0: entered allmulticast mode
[  435.603572][T28604] loop7: detected capacity change from 0 to 128
[  435.664772][T28608] loop1: detected capacity change from 0 to 2048
[  435.801508][T28618] loop1: detected capacity change from 0 to 128
[  435.811846][T28618] vfat: Unknown parameter 'ÿÿÿÿÿÿªªªªª'
[  436.162843][T28654] loop2: detected capacity change from 0 to 256
[  436.195702][T28657] team0: entered promiscuous mode
[  436.200810][T28657] team_slave_0: entered promiscuous mode
[  436.206724][T28657] team_slave_1: entered promiscuous mode
[  436.258340][T28656] team0: left promiscuous mode
[  436.263235][T28656] team_slave_0: left promiscuous mode
[  436.268772][T28656] team_slave_1: left promiscuous mode
[  436.363643][T28672] netlink: 'syz.6.9948': attribute type 1 has an invalid length.
[  436.391163][T28672] 8021q: adding VLAN 0 to HW filter on device bond2
[  436.409055][T28672] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  436.420552][T28672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28672 comm=syz.6.9948
[  436.548327][T28691] loop6: detected capacity change from 0 to 256
[  436.609284][T28693] team0: entered promiscuous mode
[  436.614470][T28693] team_slave_0: entered promiscuous mode
[  436.620249][T28693] team_slave_1: entered promiscuous mode
[  436.629908][T28692] team0: left promiscuous mode
[  436.634752][T28692] team_slave_0: left promiscuous mode
[  436.640393][T28692] team_slave_1: left promiscuous mode
[  436.687902][T28697] loop6: detected capacity change from 0 to 1764
[  436.834726][T28714] ip6tnl1: entered allmulticast mode
[  436.902619][T28723] team0: entered promiscuous mode
[  436.907824][T28723] team_slave_0: entered promiscuous mode
[  436.913600][T28723] team_slave_1: entered promiscuous mode
[  436.928489][T28723] lo: entered promiscuous mode
[  436.944843][T28722] lo: left promiscuous mode
[  436.949544][T28722] team0: left promiscuous mode
[  436.954381][T28722] team_slave_0: left promiscuous mode
[  436.959937][T28722] team_slave_1: left promiscuous mode
[  437.208321][T28750] netlink: 'syz.7.9984': attribute type 1 has an invalid length.
[  437.234439][T28750] 8021q: adding VLAN 0 to HW filter on device bond2
[  437.266368][T28750] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  437.290881][T28750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28750 comm=syz.7.9984
[  437.433025][   T29] audit: type=1400 audit(2000000305.435:567): avc:  denied  { watch watch_reads } for  pid=28764 comm="syz.1.9991" path="/38/file1" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  437.496666][T28773] loop1: detected capacity change from 0 to 136
[  437.518306][T28773] iso9660: Corrupted directory entry in block 2 of inode 1472
[  437.587124][T28780] loop2: detected capacity change from 0 to 7
[  437.673790][T28789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10004'.
[  437.862741][T28816] loop2: detected capacity change from 0 to 7
[  438.174245][T28832] loop1: detected capacity change from 0 to 8192
[  438.248685][   T29] audit: type=1400 audit(2000000306.255:568): avc:  denied  { setopt } for  pid=28837 comm="syz.1.10026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  438.418204][   T29] audit: type=1400 audit(2000000306.425:569): avc:  denied  { remount } for  pid=28856 comm="syz.1.10035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  438.482543][T28868] syzkaller0: entered promiscuous mode
[  438.488279][T28868] syzkaller0: entered allmulticast mode
[  438.634961][T28885] netlink: 'syz.7.10048': attribute type 1 has an invalid length.
[  438.713795][T28894] netlink: 'syz.2.10052': attribute type 1 has an invalid length.
[  438.736058][T28894] 8021q: adding VLAN 0 to HW filter on device bond1
[  438.771614][T28894] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  438.851017][T28894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28894 comm=syz.2.10052
[  438.925632][T28920] loop2: detected capacity change from 0 to 7
[  439.130003][T28943] loop1: detected capacity change from 0 to 256
[  439.315872][T28963] loop8: detected capacity change from 0 to 8192
[  439.373083][T28971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.439736][T28983] loop7: detected capacity change from 0 to 128
[  439.504361][T28988] netlink: 'syz.7.10096': attribute type 1 has an invalid length.
[  439.520233][T28991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10097'.
[  439.575361][T28991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28991 comm=syz.8.10097
[  440.069594][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10113'.
[  440.079678][T29026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29026 comm=syz.2.10113
[  440.197746][T29032] ªªªªªª: renamed from vlan0 (while UP)
[  440.212708][T29034] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10117'.
[  440.523324][T29054] ªªªªªª: renamed from vlan0 (while UP)
[  440.610072][T29061] netlink: 'syz.1.10132': attribute type 1 has an invalid length.
[  440.767135][T29064] syzkaller0: entered promiscuous mode
[  440.772668][T29064] syzkaller0: entered allmulticast mode
[  441.066495][T29101] lo: entered allmulticast mode
[  441.078029][T29101] lo: entered promiscuous mode
[  441.091864][T29100] lo: left promiscuous mode
[  441.096723][T29100] lo: left allmulticast mode
[  441.191468][   T29] audit: type=1400 audit(2000000309.205:570): avc:  denied  { watch watch_reads } for  pid=29106 comm="syz.1.10152" path="/proc/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1
[  441.344472][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  441.609047][T29124] set_capacity_and_notify: 9 callbacks suppressed
[  441.609069][T29124] loop1: detected capacity change from 0 to 8192
[  441.810530][T29136] loop7: detected capacity change from 0 to 128
[  442.136188][T29151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10171'.
[  442.150638][T29151] netlink: 91 bytes leftover after parsing attributes in process `syz.1.10171'.
[  442.346863][T29169] loop6: detected capacity change from 0 to 512
[  442.398834][T29174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29174 comm=syz.7.10179
[  442.413601][T29174] netlink: 'syz.7.10179': attribute type 1 has an invalid length.
[  442.426535][T29170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10178'.
[  442.502451][T29181] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10182'.
[  442.535774][T29181] netlink: 91 bytes leftover after parsing attributes in process `syz.7.10182'.
[  442.639421][T29199] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10190'.
[  442.762425][T29219] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  442.915904][T29236] loop6: detected capacity change from 0 to 8192
[  442.932542][T29243] loop2: detected capacity change from 0 to 256
[  442.948047][T29244] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10210'.
[  442.991840][T29248] loop2: detected capacity change from 0 to 7
[  443.031012][T29252] loop6: detected capacity change from 0 to 256
[  443.197506][T29258] loop7: detected capacity change from 0 to 8192
[  443.212771][T29258] syz.7.10217: attempt to access beyond end of device
[  443.212771][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.226978][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.237125][T29258] syz.7.10217: attempt to access beyond end of device
[  443.237125][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.251412][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.263088][T29258] syz.7.10217: attempt to access beyond end of device
[  443.263088][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.277758][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.287256][T29258] syz.7.10217: attempt to access beyond end of device
[  443.287256][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.301490][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.309879][T29258] syz.7.10217: attempt to access beyond end of device
[  443.309879][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.323951][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.332220][T29258] syz.7.10217: attempt to access beyond end of device
[  443.332220][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.346409][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.354729][T29258] syz.7.10217: attempt to access beyond end of device
[  443.354729][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.368879][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.377478][T29266] syz.7.10217: attempt to access beyond end of device
[  443.377478][T29266] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.391764][T29266] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.415487][T29258] syz.7.10217: attempt to access beyond end of device
[  443.415487][T29258] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.429629][T29258] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.443932][T29266] syz.7.10217: attempt to access beyond end of device
[  443.443932][T29266] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  443.458026][T29266] Buffer I/O error on dev loop7, logical block 57847, async page read
[  443.778786][T29270] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10222'.
[  443.847246][T29272] loop8: detected capacity change from 0 to 256
[  443.885240][T29274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10224'.
[  443.960582][T29276] loop2: detected capacity change from 0 to 256
[  444.109554][T29286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29286 comm=syz.8.10230
[  444.284692][   T29] audit: type=1326 audit(2000000312.305:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.6.10239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  444.346943][   T29] audit: type=1326 audit(2000000312.325:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.6.10239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  444.370782][   T29] audit: type=1326 audit(2000000312.325:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.6.10239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  444.394714][   T29] audit: type=1326 audit(2000000312.325:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.6.10239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  444.418444][   T29] audit: type=1326 audit(2000000312.345:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.6.10239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  444.441949][   T29] audit: type=1326 audit(2000000312.345:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.6.10239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  444.465550][   T29] audit: type=1326 audit(2000000312.345:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.6.10239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  444.596434][T29329] syzkaller0: entered promiscuous mode
[  444.601961][T29329] syzkaller0: entered allmulticast mode
[  444.713049][T29338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10251'.
[  445.115581][T29381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29381 comm=syz.2.10268
[  445.285071][T29398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10275'.
[  445.406597][T29411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10281'.
[  445.617210][T29433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10292'.
[  445.890369][T29465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10303'.
[  445.966158][T29473] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10307'.
[  446.255412][   T29] audit: type=1326 audit(2000000314.275:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29501 comm="syz.6.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  446.372558][   T29] audit: type=1326 audit(2000000314.275:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29501 comm="syz.6.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  446.396181][   T29] audit: type=1326 audit(2000000314.295:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29501 comm="syz.6.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fbf82c7f749 code=0x7ffc0000
[  446.535455][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10326'.
[  446.575114][T29524] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29524 comm=syz.7.10326
[  446.679813][T29536] set_capacity_and_notify: 4 callbacks suppressed
[  446.679834][T29536] loop7: detected capacity change from 0 to 256
[  446.901002][T29561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29561 comm=syz.2.10344
[  446.940459][T29566] loop7: detected capacity change from 0 to 256
[  447.190665][T29592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29592 comm=syz.2.10359
[  447.357063][T29614] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  447.453639][T29616] loop1: detected capacity change from 0 to 8192
[  447.700998][T29644] netlink: 'syz.1.10380': attribute type 1 has an invalid length.
[  447.736214][T29644] bond2: entered promiscuous mode
[  447.741691][T29644] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.759948][T29648] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29648 comm=syz.2.10381
[  447.963821][T29671] loop1: detected capacity change from 0 to 256
[  448.008676][T29675] syzkaller0: entered promiscuous mode
[  448.014323][T29675] syzkaller0: entered allmulticast mode
[  448.117734][T29687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29687 comm=syz.8.10399
[  448.146097][T29687] __nla_validate_parse: 9 callbacks suppressed
[  448.146114][T29687] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10399'.
[  448.323553][T29706] loop8: detected capacity change from 0 to 136
[  448.334653][T29706] Attempt to read inode for relocated directory
[  448.587104][T29731] loop8: detected capacity change from 0 to 128
[  448.598881][T29731] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  448.611367][T29731] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  448.624322][T22420] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  448.657288][T22420] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  448.724999][T29739] loop6: detected capacity change from 0 to 7
[  448.737240][T29739]  loop6:
[  448.752413][T29743] loop2: detected capacity change from 0 to 128
[  448.928957][T29768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29768 comm=syz.1.10436
[  448.943701][T29768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10436'.
[  448.978089][T29773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10439'.
[  449.134059][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  449.178379][T29802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10452'.
[  449.352917][T29821] loop6: detected capacity change from 0 to 7
[  449.456201][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  449.456219][   T29] audit: type=1400 audit(2000000317.475:590): avc:  denied  { read } for  pid=29830 comm="syz.2.10467" name="file0" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  449.519432][T29827] loop7: detected capacity change from 0 to 8192
[  449.527826][T29827] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  449.614656][T29842] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10472'.
[  449.661973][T29845] syzkaller0: entered promiscuous mode
[  449.667905][T29845] syzkaller0: entered allmulticast mode
[  449.824074][ T5119] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  449.915058][T29827] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  449.923973][T29827] FAT-fs (loop7): Filesystem has been set read-only
[  449.940703][T29827] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  449.978639][T29827] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  449.987756][T22416] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  450.036018][T29876] syzkaller0: entered promiscuous mode
[  450.041639][T29876] syzkaller0: entered allmulticast mode
[  450.216284][T26883] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  450.255081][T29888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29888 comm=syz.2.10493
[  450.274758][T29888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10493'.
[  450.608800][T29922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10507'.
[  450.911046][T29940] netlink: 43 bytes leftover after parsing attributes in process `syz.6.10518'.
[  451.044448][T27154] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  451.052458][T27154] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  451.266539][T29982] raw_sendmsg: syz.1.10538 forgot to set AF_INET. Fix it!
[  451.274217][T29984] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  451.465503][T30008] netlink: 43 bytes leftover after parsing attributes in process `syz.8.10550'.
[  451.504418][T30010] syzkaller0: entered promiscuous mode
[  451.509990][T30010] syzkaller0: entered allmulticast mode
[  451.744183][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  451.772973][T30038] set_capacity_and_notify: 1 callbacks suppressed
[  451.772990][T30038] loop6: detected capacity change from 0 to 7
[  451.822161][T30036] loop1: detected capacity change from 0 to 8192
[  451.922796][T30046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30046 comm=syz.1.10570
[  451.966177][T30046] vlan0: entered allmulticast mode
[  451.971463][T30046] bond3: entered allmulticast mode
[  452.345091][T30061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=30061 comm=syz.8.10573
[  452.423904][T30069] netlink: 'syz.7.10581': attribute type 1 has an invalid length.
[  452.466019][T30076] netlink: 'syz.8.10583': attribute type 1 has an invalid length.
[  452.477223][T30069] bond5: entered promiscuous mode
[  452.482464][T30069] 8021q: adding VLAN 0 to HW filter on device bond5
[  452.508824][T30079] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10584'.
[  452.540368][T30076] 8021q: adding VLAN 0 to HW filter on device bond2
[  452.588966][T30077] bond5: (slave syz_tun): making interface the new active one
[  452.596623][T30077] syz_tun: entered promiscuous mode
[  452.613696][T30077] bond5: (slave syz_tun): Enslaving as an active interface with an up link
[  452.632980][T30076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30076 comm=syz.8.10583
[  452.862542][T30102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=30102 comm=syz.7.10594
[  453.091778][T30107] loop8: detected capacity change from 0 to 8192
[  453.215812][T30128] loop2: detected capacity change from 0 to 128
[  453.369549][T30148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30148 comm=syz.8.10616
[  453.449146][T30146] loop2: detected capacity change from 0 to 8192
[  453.464283][   T29] audit: type=1400 audit(2000000321.485:591): avc:  denied  { execute } for  pid=30152 comm="syz.1.10620" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=106038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  453.528093][T30158] vlan2: entered allmulticast mode
[  453.533270][T30158] bond3: entered allmulticast mode
[  453.732484][T30183] netlink: 'syz.2.10633': attribute type 1 has an invalid length.
[  453.740773][T30181] loop7: detected capacity change from 0 to 128
[  453.759873][T30183] 8021q: adding VLAN 0 to HW filter on device bond2
[  453.804104][T30183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30183 comm=syz.2.10633
[  453.817322][T30181] bio_check_eod: 5368 callbacks suppressed
[  453.817341][T30181] syz.7.10632: attempt to access beyond end of device
[  453.817341][T30181] loop7: rw=0, sector=121, nr_sectors = 8 limit=128
[  453.872501][T30192] loop8: detected capacity change from 0 to 128
[  454.008658][T30206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=30206 comm=syz.2.10644
[  454.041643][T30208] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10645'.
[  454.189568][T30220] loop1: detected capacity change from 0 to 2048
[  454.234712][T30220]  loop1: p1 p3 p4
[  454.244399][T30220] loop1: p4 size 589824 extends beyond EOD, truncated
[  454.325417][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  454.325514][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  454.339375][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  454.391660][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  454.530836][T30242] loop6: detected capacity change from 0 to 128
[  454.539126][T30242] msdos: Unknown parameter 'Ìàv67B '
[  454.580736][T30245] netlink: 43 bytes leftover after parsing attributes in process `syz.6.10662'.
[  454.609147][T30249] loop7: detected capacity change from 0 to 512
[  454.784115][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  454.871568][T30283] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10681'.
[  454.916074][T30288] netlink: 'syz.7.10683': attribute type 1 has an invalid length.
[  454.943218][T30288] 8021q: adding VLAN 0 to HW filter on device bond6
[  454.953678][T30288] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30288 comm=syz.7.10683
[  455.026674][T30302] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10690'.
[  455.051787][T30304] netlink: 'syz.8.10692': attribute type 9 has an invalid length.
[  455.175120][T30322] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10699'.
[  455.185051][T30323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.192316][T30323] IPv6: NLM_F_CREATE should be set when creating new route
[  455.252177][T30330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10705'.
[  455.297157][T30338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30338 comm=syz.1.10709
[  455.310265][T30338] netlink: 'syz.1.10709': attribute type 1 has an invalid length.
[  455.365820][T30338] vlan0: entered allmulticast mode
[  455.365939][T30347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10711'.
[  455.371013][T30338] bond4: entered allmulticast mode
[  455.503811][T30363] netlink: 'syz.2.10720': attribute type 9 has an invalid length.
[  455.561293][   T29] audit: type=1326 audit(2000000323.575:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.2.10725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  455.588075][   T29] audit: type=1326 audit(2000000323.575:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.2.10725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  455.611906][   T29] audit: type=1326 audit(2000000323.585:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.2.10725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  455.635610][   T29] audit: type=1326 audit(2000000323.585:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.2.10725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  455.659220][   T29] audit: type=1326 audit(2000000323.585:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.2.10725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  455.722130][   T29] audit: type=1326 audit(2000000323.635:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.1.10726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  455.745727][   T29] audit: type=1326 audit(2000000323.635:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.1.10726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  455.769148][   T29] audit: type=1326 audit(2000000323.635:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.1.10726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  455.792808][   T29] audit: type=1326 audit(2000000323.635:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.1.10726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  455.816364][   T29] audit: type=1326 audit(2000000323.635:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.1.10726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  456.004723][T30397] netlink: 52 bytes leftover after parsing attributes in process `syz.8.10737'.
[  456.518674][T30411] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  456.621037][T30411] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  456.629981][T30411] FAT-fs (loop2): Filesystem has been set read-only
[  456.644598][T30411] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  456.653822][T30411] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  456.770450][T28274] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  456.819464][T30430] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10752'.
[  456.983464][T30448] set_capacity_and_notify: 4 callbacks suppressed
[  456.983484][T30448] loop6: detected capacity change from 0 to 7
[  457.017708][T30452] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10762'.
[  457.133163][T30466] loop6: detected capacity change from 0 to 2048
[  457.315181][T30488] loop1: detected capacity change from 0 to 128
[  457.527476][T30517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30517 comm=syz.2.10793
[  457.581844][T30519] loop6: detected capacity change from 0 to 7
[  457.736712][T30492] loop6: detected capacity change from 0 to 32768
[  457.843011][T30548] netlink: 'syz.8.10808': attribute type 1 has an invalid length.
[  457.860015][T30550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30550 comm=syz.2.10809
[  457.904361][T30492]  loop6: p1 p3 < >
[  458.125011][T30563] loop6: detected capacity change from 0 to 2048
[  458.194559][T30563]  loop6: p1 p3 p4
[  458.206272][T30563] loop6: p4 size 589824 extends beyond EOD, truncated
[  458.358035][T30590] loop8: detected capacity change from 0 to 128
[  458.493612][T30608] loop2: detected capacity change from 0 to 2048
[  458.534358][ T3004]  loop2: p1 p3 p4
[  458.539358][ T3004] loop2: p4 size 589824 extends beyond EOD, truncated
[  458.549210][T30608]  loop2: p1 p3 p4
[  458.554627][T30608] loop2: p4 size 589824 extends beyond EOD, truncated
[  458.702741][T30625] loop2: detected capacity change from 0 to 8192
[  458.723619][T30635] loop7: detected capacity change from 0 to 128
[  458.789028][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  458.871204][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  458.970062][T24050] udevd[24050]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  458.970661][T24098] udevd[24098]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  458.980732][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  459.081370][T25684] udevd[25684]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  459.869032][T30720] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  459.936176][T30728] __nla_validate_parse: 1 callbacks suppressed
[  459.936196][T30728] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10893'.
[  459.979987][T30728] bond5: (slave syz_tun): Releasing backup interface
[  460.004117][T30728] syz_tun: left promiscuous mode
[  460.156790][T30741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30741 comm=syz.8.10899
[  460.184484][T30741] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10899'.
[  460.268750][T30745] netlink: 'syz.7.10901': attribute type 1 has an invalid length.
[  460.319912][T30749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30749 comm=syz.7.10901
[  460.353810][T30745] 8021q: adding VLAN 0 to HW filter on device bond7
[  460.428419][T30720] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  460.437297][T30720] FAT-fs (loop6): Filesystem has been set read-only
[  460.451910][T30720] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  460.461236][T30720] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  460.565376][T27288] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  460.652327][T30769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10906'.
[  460.698515][T30775] netlink: 'syz.1.10914': attribute type 1 has an invalid length.
[  460.753055][T30775] 8021q: adding VLAN 0 to HW filter on device bond5
[  460.778743][T30775] bond5: (slave gretap2): making interface the new active one
[  460.787703][T30775] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  460.801585][T30775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30775 comm=syz.1.10914
[  460.904143][T24100]  loop1: p1 p3 p4
[  460.910367][T24100] loop1: p4 size 589824 extends beyond EOD, truncated
[  460.920931][T30786]  loop1: p1 p3 p4
[  460.929736][T30786] loop1: p4 size 589824 extends beyond EOD, truncated
[  460.977878][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  460.990329][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  460.996741][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  461.018404][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  461.032238][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  461.043659][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  461.114963][T30802] netlink: 140 bytes leftover after parsing attributes in process `syz.8.10926'.
[  461.143302][T30802] EXT4-fs: Ignoring removed oldalloc option
[  461.149444][T30802] EXT4-fs: Ignoring removed bh option
[  461.174559][T30802] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal
[  461.234361][T30819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10933'.
[  461.246627][T30819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10933'.
[  461.356259][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  461.356274][   T29] audit: type=1400 audit(2000000329.375:638): avc:  denied  { append } for  pid=30833 comm="syz.7.10939" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  461.386889][T30834] usb usb5: usbfs: process 30834 (syz.7.10939) did not claim interface 1 before use
[  461.532973][T30848] netlink: 'syz.1.10946': attribute type 1 has an invalid length.
[  461.548618][T30848] 8021q: adding VLAN 0 to HW filter on device bond6
[  461.559300][T30848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30848 comm=syz.1.10946
[  461.661898][   T29] audit: type=1400 audit(2000000329.675:639): avc:  denied  { create } for  pid=30859 comm="syz.1.10951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  461.791399][T30866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.825361][T30873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30873 comm=syz.7.10957
[  461.840744][T30873] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10957'.
[  461.912707][T30871] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  462.082375][T30890] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  462.094868][T30890] EXT4-fs (loop1): This should not happen!! Data will be lost
[  462.094868][T30890] 
[  462.104617][T30890] EXT4-fs (loop1): Total free blocks count 0
[  462.110871][T30890] EXT4-fs (loop1): Free/Dirty block details
[  462.116852][T30890] EXT4-fs (loop1): free_blocks=68451041280
[  462.123324][T30890] EXT4-fs (loop1): dirty_blocks=16
[  462.128492][T30890] EXT4-fs (loop1): Block reservation details
[  462.134620][T30890] EXT4-fs (loop1): i_reserved_data_blocks=1
[  462.148133][   T29] audit: type=1400 audit(2000000330.075:640): avc:  denied  { setattr } for  pid=30865 comm="syz.1.10955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  462.463938][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  462.969106][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.875289][T30939] set_capacity_and_notify: 9 callbacks suppressed
[  463.875327][T30939] loop2: detected capacity change from 0 to 1024
[  463.921254][T30939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  463.972316][   T29] audit: type=1400 audit(2000000331.985:641): avc:  denied  { watch } for  pid=30938 comm="syz.2.10982" path="/251/file2" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  464.046034][T28274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.068736][T30949] loop1: detected capacity change from 0 to 1024
[  464.084417][T30949] EXT4-fs: Ignoring removed orlov option
[  464.132210][T30949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.166688][   T29] audit: type=1400 audit(2000000332.185:642): avc:  denied  { append } for  pid=30948 comm="syz.1.10985" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  464.213706][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.305057][T30962] loop2: detected capacity change from 0 to 128
[  464.358758][T30964] loop1: detected capacity change from 0 to 1024
[  464.450747][T30964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.479639][T30964] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.10991: inode #33554656: comm syz.1.10991: iget: illegal inode #
[  464.509239][T30964] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.10991: error while reading EA inode 33554656 err=-117
[  464.583005][T30971] loop2: detected capacity change from 0 to 8192
[  464.590390][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.685868][T30984] loop1: detected capacity change from 0 to 128
[  464.725588][T30984] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  464.744217][T30984] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  464.798833][T30993] netlink: 'syz.8.11003': attribute type 1 has an invalid length.
[  464.818025][T30993] 8021q: adding VLAN 0 to HW filter on device bond4
[  464.855448][T30993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30993 comm=syz.8.11003
[  464.908958][T28108] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  465.003246][T31012] loop8: detected capacity change from 0 to 2048
[  465.064236][T26611]  loop8: p1 p3 p4
[  465.069842][T26611] loop8: p4 size 589824 extends beyond EOD, truncated
[  465.093595][T31013] syzkaller0: entered promiscuous mode
[  465.094177][ T5137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  465.099263][T31013] syzkaller0: entered allmulticast mode
[  465.117423][T31012]  loop8: p1 p3 p4
[  465.129954][T31012] loop8: p4 size 589824 extends beyond EOD, truncated
[  465.177894][T31025] loop6: detected capacity change from 0 to 128
[  465.202493][T31025] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  465.226628][T31025] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  465.260769][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  465.267181][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  465.287617][T31030] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  465.293519][T31031] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  465.305205][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  465.318881][   T29] audit: type=1400 audit(2000000333.305:643): avc:  denied  { mount } for  pid=31027 comm="syz.8.11016" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  465.341753][   T29] audit: type=1400 audit(2000000333.305:644): avc:  denied  { remount } for  pid=31027 comm="syz.8.11016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  465.362073][   T29] audit: type=1400 audit(2000000333.335:645): avc:  denied  { unmount } for  pid=27822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  465.410362][   T29] audit: type=1400 audit(2000000333.365:646): avc:  denied  { bind } for  pid=31024 comm="syz.6.11015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  465.430340][   T29] audit: type=1400 audit(2000000333.365:647): avc:  denied  { write } for  pid=31024 comm="syz.6.11015" path="socket:[108703]" dev="sockfs" ino=108703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  465.457373][T31034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.498884][T27288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  465.527235][T31034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.542133][T29593] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  465.567349][T31044] vlan0: entered promiscuous mode
[  465.572499][T31044] bridge0: entered promiscuous mode
[  465.856003][T31051] loop6: detected capacity change from 0 to 2048
[  465.944731][T24100]  loop6: p1 p3 p4
[  466.004760][T31054] loop7: detected capacity change from 0 to 8192
[  466.035133][T24100] loop6: p4 size 589824 extends beyond EOD, truncated
[  466.065900][T31051]  loop6: p1 p3 p4
[  466.073735][T31051] loop6: p4 size 589824 extends beyond EOD, truncated
[  466.221460][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  466.232831][T25684] udevd[25684]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  466.275777][T24050] udevd[24050]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  466.446372][T31101] netlink: 'syz.1.11048': attribute type 1 has an invalid length.
[  466.465870][T31101] 8021q: adding VLAN 0 to HW filter on device bond7
[  466.477001][T31101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31101 comm=syz.1.11048
[  466.491133][T24100]  loop2: p1 p3 p4
[  466.509916][T24100] loop2: p4 size 589824 extends beyond EOD, truncated
[  466.550092][T31099]  loop2: p1 p3 p4
[  466.558227][T31099] loop2: p4 size 589824 extends beyond EOD, truncated
[  466.605716][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  466.609296][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  466.627587][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  466.706869][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  466.710879][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  466.730172][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  466.824806][T31140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.833529][T31140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.924193][T24100]  loop1: p1 p3 p4
[  466.929481][T24100] loop1: p4 size 589824 extends beyond EOD, truncated
[  466.945179][T31138]  loop1: p1 p3 p4
[  466.950410][T31138] loop1: p4 size 589824 extends beyond EOD, truncated
[  466.987613][T31145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.014903][T31145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.116881][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  467.508055][T31169] netlink: 'syz.6.11078': attribute type 1 has an invalid length.
[  467.521730][T31169] bond3: entered promiscuous mode
[  467.527147][T31169] 8021q: adding VLAN 0 to HW filter on device bond3
[  467.544119][T24100]  loop8: p1 p3 p4
[  467.549990][T24100] loop8: p4 size 589824 extends beyond EOD, truncated
[  467.570063][T31167]  loop8: p1 p3 p4
[  467.575631][T31167] loop8: p4 size 589824 extends beyond EOD, truncated
[  467.673555][T31184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.709391][T31184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.961808][T31214] EXT4-fs: Ignoring removed i_version option
[  467.967951][T31214] EXT4-fs: Ignoring removed bh option
[  467.992642][T31214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.006515][T31214] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  468.045723][T28274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.084684][T31219] netlink: 'syz.2.11097': attribute type 1 has an invalid length.
[  468.106010][T31219] 8021q: adding VLAN 0 to HW filter on device bond3
[  468.117309][T31219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31219 comm=syz.2.11097
[  468.236672][T31228] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  468.479804][T31251] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  468.580448][T31263] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  468.657418][T31273] netlink: 'syz.8.11122': attribute type 1 has an invalid length.
[  468.686886][T31275] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  468.700753][T31273] 8021q: adding VLAN 0 to HW filter on device bond5
[  468.718418][T31273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31273 comm=syz.8.11122
[  468.742630][T26883] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  468.752900][T26883] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  468.994036][T31302] set_capacity_and_notify: 8 callbacks suppressed
[  468.994061][T31302] loop8: detected capacity change from 0 to 1024
[  469.017072][T31302] EXT4-fs: Ignoring removed nobh option
[  469.029359][T31302] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  469.040519][T31302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e0ac, mo2=0000]
[  469.049033][T31302] System zones: 0-1, 3-12
[  469.054985][T31302] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #3: block 5: comm syz.8.11136: lblock 5 mapped to illegal pblock 5 (length 1)
[  469.069402][T31302] EXT4-fs (loop8): Remounting filesystem read-only
[  469.076004][T31302] Quota error (device loop8): write_blk: dquota write failed
[  469.083551][T31302] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  469.093634][T31302] EXT4-fs (loop8): 1 orphan inode deleted
[  469.099858][T31302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.130586][T27822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.154277][T31312] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  469.193804][T31313] loop8: detected capacity change from 0 to 2048
[  469.243408][T31318] syzkaller0: entered promiscuous mode
[  469.248989][T31318] syzkaller0: entered allmulticast mode
[  469.255987][T31313]  loop8: p1 < > p4
[  469.261001][T31313] loop8: p4 size 8388608 extends beyond EOD, truncated
[  469.279413][   T29] audit: type=1400 audit(2000000337.295:648): avc:  denied  { append } for  pid=31311 comm="syz.8.11137" name="loop8p4" dev="devtmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  469.337390][   T29] audit: type=1400 audit(2000000337.355:649): avc:  denied  { setattr } for  pid=31323 comm="syz.8.11143" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  469.462707][T31299] chnl_net:caif_netlink_parms(): no params data found
[  469.570135][T31299] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.577408][T31299] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.586315][T31299] bridge_slave_0: entered allmulticast mode
[  469.593606][T31299] bridge_slave_0: entered promiscuous mode
[  469.598393][T31352] loop2: detected capacity change from 0 to 128
[  469.609532][T31299] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.616880][T31299] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.627613][T31299] bridge_slave_1: entered allmulticast mode
[  469.637627][T31299] bridge_slave_1: entered promiscuous mode
[  469.670554][T31299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.691398][T31299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.712600][T31356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.722922][T31356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.723490][T31299] team0: Port device team_slave_0 added
[  469.738489][T31299] team0: Port device team_slave_1 added
[  469.766037][T31299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.773189][T31299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.799626][T31299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.811940][T31299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.819064][T31299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.845302][T31299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.885414][T31299] hsr_slave_0: entered promiscuous mode
[  469.892098][T31299] hsr_slave_1: entered promiscuous mode
[  469.898674][T31299] debugfs: 'hsr0' already exists in 'hsr'
[  469.904520][T31299] Cannot create hsr debugfs directory
[  470.216346][T31299] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  470.228250][T31299] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  470.240264][T31299] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  470.254596][T31299] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  470.361192][   T29] audit: type=1400 audit(2000000338.375:650): avc:  denied  { ioctl } for  pid=31394 comm="syz.1.11171" path="socket:[109377]" dev="sockfs" ino=109377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  470.415329][T31299] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.459708][T31299] 8021q: adding VLAN 0 to HW filter on device team0
[  470.468801][ T3665] kernel write not supported for file /register (pid: 3665 comm: kworker/1:10)
[  470.490411][T27154] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.497705][T27154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.510991][T27154] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.518130][T27154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.542273][T31408] loop6: detected capacity change from 0 to 7
[  470.559676][T31401] loop1: detected capacity change from 0 to 8192
[  470.743738][T31420] loop2: detected capacity change from 0 to 8192
[  470.788069][T31299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.835628][T31427] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22
[  470.898209][T31433] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11178'.
[  470.929547][   T29] audit: type=1400 audit(2000000338.935:651): avc:  denied  { getopt } for  pid=31431 comm="syz.2.11184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  471.000840][T31436] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11185'.
[  471.447441][T31299] veth0_vlan: entered promiscuous mode
[  471.463606][T31299] veth1_vlan: entered promiscuous mode
[  471.495069][T31299] veth0_macvtap: entered promiscuous mode
[  471.539571][T31474] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11198'.
[  471.544911][T31299] veth1_macvtap: entered promiscuous mode
[  471.579673][T31299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.601529][T31475] loop1: detected capacity change from 0 to 1024
[  471.612218][T31479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.618907][T31299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.633471][T31479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.647917][T31475] EXT4-fs (loop1): inodes count not valid: 1 vs 32
[  471.679509][T30574] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.689456][T31481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.719961][T30574] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.733409][T31481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.736397][T31483] loop1: detected capacity change from 0 to 1024
[  471.750501][T27343] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.765402][T27343] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.775359][T31483] EXT4-fs: Ignoring removed bh option
[  471.802561][T31483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.864933][T31483] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.11202: Allocating blocks 497-513 which overlap fs metadata
[  471.972093][T31482] EXT4-fs (loop1): pa ffff8881079d67e0: logic 32, phys. 177, len 21
[  471.980257][T31482] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  472.017346][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.080915][   T29] audit: type=1400 audit(2000000340.095:652): avc:  denied  { bind } for  pid=31500 comm="syz.1.11207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  472.100632][   T29] audit: type=1400 audit(2000000340.095:653): avc:  denied  { listen } for  pid=31500 comm="syz.1.11207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  472.152651][T31506] netlink: 64 bytes leftover after parsing attributes in process `syz.9.11209'.
[  472.266896][T31524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.286979][T31524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.308473][T31528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.337596][T31528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.529925][   T29] audit: type=1400 audit(2000000340.545:654): avc:  denied  { setcheckreqprot } for  pid=31542 comm="syz.9.11223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  472.554015][T31545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.603045][T31545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.620142][T31547] loop9: detected capacity change from 0 to 8192
[  472.628293][T31547] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  472.777128][T31558] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF
[  472.785878][T31558] FAT-fs (loop9): Filesystem has been set read-only
[  472.831390][T31562] loop1: detected capacity change from 0 to 512
[  472.839441][T31562] EXT4-fs: Ignoring removed oldalloc option
[  472.870165][T31562] EXT4-fs (loop1): 1 truncate cleaned up
[  472.881645][T31562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.898853][T31562] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.11232: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  472.927731][T31562] EXT4-fs (loop1): Remounting filesystem read-only
[  472.953513][T31566] EXT4-fs (loop8): 1 truncate cleaned up
[  472.986320][T31566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.023212][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.040416][   T29] audit: type=1400 audit(2000000341.055:655): avc:  denied  { rename } for  pid=31565 comm="syz.8.11234" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  473.064834][T31566] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.11234: invalid indirect mapped block 234881024 (level 0)
[  473.092290][T27822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.259388][T31590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  473.290193][T31590] EXT4-fs (loop2): 1 truncate cleaned up
[  473.303082][T31590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.336350][T31589] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  473.659122][T31597] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  473.667954][T31597] FAT-fs (loop1): Filesystem has been set read-only
[  473.679897][T31593] SELinux:  Context : is not valid (left unmapped).
[  474.017963][T31608] set_capacity_and_notify: 3 callbacks suppressed
[  474.017992][T31608] loop1: detected capacity change from 0 to 128
[  474.045921][T31608] EXT4-fs: Ignoring removed nobh option
[  474.062553][T31610] loop6: detected capacity change from 0 to 128
[  474.130332][T28274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.152981][T31608] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  474.174814][T31608] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  474.309434][T31623] loop8: detected capacity change from 0 to 512
[  474.365405][T31623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.449165][T31634] loop9: detected capacity change from 0 to 1024
[  474.455716][T31623] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.500197][T31634] EXT4-fs: Ignoring removed orlov option
[  474.530669][T28108] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  474.550694][T31621] EXT4-fs (loop8): shut down requested (2)
[  474.572200][T31634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.624690][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  474.641865][T31646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.654992][T31646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.674199][T27822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.683611][T31647] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  474.694338][T31647] __quota_error: 3 callbacks suppressed
[  474.694353][T31647] Quota error (device loop8): write_blk: dquota write failed
[  474.707661][T31647] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries
[  474.717813][T31647] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  474.728587][T31647] Quota error (device loop8): write_blk: dquota write failed
[  474.736027][T31647] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list
[  474.747609][T31647] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  474.757917][T31647] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  474.774327][T31299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.799173][T31654] loop2: detected capacity change from 0 to 1024
[  474.814147][T31656] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11267'.
[  474.968289][T31654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.010146][T28274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.126190][   T29] audit: type=1400 audit(2000000343.145:659): avc:  denied  { ioctl } for  pid=31659 comm="syz.9.11265" path="socket:[111734]" dev="sockfs" ino=111734 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  475.246681][T31676] loop8: detected capacity change from 0 to 512
[  475.268690][T31676] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  475.325747][T31678] loop6: detected capacity change from 0 to 7
[  475.384221][T31676] EXT4-fs (loop8): 1 truncate cleaned up
[  475.396240][T31676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.512693][T27822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.548681][T31689] loop8: detected capacity change from 0 to 512
[  475.556289][T31689] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  475.570462][T31689] EXT4-fs (loop8): 1 truncate cleaned up
[  475.578310][T31689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.607819][T31689] EXT4-fs error (device loop8): ext4_lookup:1785: inode #16: comm syz.8.11278: iget: bad i_size value: 5497558147880
[  475.620668][T31689] EXT4-fs (loop8): Remounting filesystem read-only
[  475.646354][T31696] loop1: detected capacity change from 0 to 512
[  475.653199][T31696] EXT4-fs: Ignoring removed mblk_io_submit option
[  475.696759][T27822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.715936][T31696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.729845][T31696] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  475.873442][T31714] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11287'.
[  475.961564][T31723] loop2: detected capacity change from 0 to 256
[  476.205385][T31743] pimreg: entered allmulticast mode
[  476.211267][T31743] pimreg: left allmulticast mode
[  476.283766][   T29] audit: type=1400 audit(2000000344.295:660): avc:  denied  { name_bind } for  pid=31744 comm="syz.2.11302" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  476.307566][   T29] audit: type=1400 audit(2000000344.295:661): avc:  denied  { node_bind } for  pid=31744 comm="syz.2.11302" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  476.345637][   T29] audit: type=1400 audit(2000000344.365:662): avc:  denied  { unmount } for  pid=28274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  476.373549][T31749] EXT4-fs: test_dummy_encryption option not supported
[  476.505187][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.536972][T31754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.607048][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.843748][T31762] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.929051][T31762] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.018314][T31770] syz.1.11311: attempt to access beyond end of device
[  477.018314][T31770] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  477.043949][T31770] syz.1.11311: attempt to access beyond end of device
[  477.043949][T31770] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  477.089045][T31778] syz.1.11311: attempt to access beyond end of device
[  477.089045][T31778] loop1: rw=2049, sector=313, nr_sectors = 1 limit=128
[  477.091424][T31770] syz.1.11311: attempt to access beyond end of device
[  477.091424][T31770] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  477.118745][T31778] syz.1.11311: attempt to access beyond end of device
[  477.118745][T31778] loop1: rw=8912896, sector=313, nr_sectors = 1 limit=128
[  477.134119][T31779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.143083][T31779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.151325][T31778] syz.1.11311: attempt to access beyond end of device
[  477.151325][T31778] loop1: rw=8388608, sector=313, nr_sectors = 1 limit=128
[  477.164008][T31770] syz.1.11311: attempt to access beyond end of device
[  477.164008][T31770] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  477.165916][T31778] syz.1.11311: attempt to access beyond end of device
[  477.165916][T31778] loop1: rw=8388608, sector=313, nr_sectors = 1 limit=128
[  477.200824][T31779] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11309: bg 0: block 345: padding at end of block bitmap is not set
[  477.217103][T31778] syz.1.11311: attempt to access beyond end of device
[  477.217103][T31778] loop1: rw=8388608, sector=313, nr_sectors = 1 limit=128
[  477.228157][T31779] EXT4-fs (loop8): Remounting filesystem read-only
[  477.244764][T31770] syz.1.11311: attempt to access beyond end of device
[  477.244764][T31770] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  477.258756][T30907] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:4984: inode #15: block 9: len 7: ext4_ext_map_blocks returned -30
[  477.366730][T31783] EXT4-fs (loop9): 1 orphan inode deleted
[  477.380573][T31783] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.394855][T30907] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  477.404820][T30907] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 1
[  477.407888][T31789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.425814][T31783] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.442880][T31789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.456956][T31299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.868304][T31805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.881757][T31805] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  477.897782][T27822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.928050][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.963415][T31811] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[  477.971463][T31811] FAT-fs (loop1): Filesystem has been set read-only
[  478.093267][T31822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.124419][T31822] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[  478.151670][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.289521][T31831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.320570][T31831] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.385937][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.463920][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  479.562029][T31895] netlink: 176 bytes leftover after parsing attributes in process `syz.8.11359'.
[  479.617756][T31899] set_capacity_and_notify: 9 callbacks suppressed
[  479.617776][T31899] loop6: detected capacity change from 0 to 128
[  479.641483][T31899] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  479.653985][T31901] loop2: detected capacity change from 0 to 512
[  479.660457][T31899] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  479.679627][T31901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  479.731122][T31901] EXT4-fs (loop2): 1 truncate cleaned up
[  479.737476][T31901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.758983][T27288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  479.838090][T31910] loop6: detected capacity change from 0 to 128
[  479.886414][T31910] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  479.911896][T31910] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  479.932645][T28274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.990784][T27288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  480.048264][T31923] loop1: detected capacity change from 0 to 2048
[  480.067225][T31923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.130304][T31935] loop2: detected capacity change from 0 to 128
[  480.159244][T31935] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  480.181562][T31935] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  480.219930][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  480.219947][   T29] audit: type=1400 audit(2000000348.235:665): avc:  denied  { mounton } for  pid=31934 comm="syz.2.11376" path="/372/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  480.244152][T31935] nfs: Unknown parameter 'nonumtail'
[  480.255487][T31940] loop6: detected capacity change from 0 to 128
[  480.267191][T31940] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  480.307984][T31940] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.344537][T27288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  480.386509][T31948] loop8: detected capacity change from 0 to 2048
[  480.509592][   T29] audit: type=1400 audit(2000000348.525:666): avc:  denied  { setopt } for  pid=31963 comm="syz.8.11389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  480.549866][T31966] loop2: detected capacity change from 0 to 512
[  480.581231][T31974] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  480.589003][T31966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  480.609626][   T29] audit: type=1400 audit(2000000348.625:667): avc:  denied  { ioctl } for  pid=31973 comm="syz.8.11393" path="socket:[112120]" dev="sockfs" ino=112120 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  480.639947][T31966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  480.654289][T31966] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.667211][T31966] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  480.678431][T31966] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  480.688645][T31966] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.11391: Failed to acquire dquot type 0
[  480.739958][T28274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  480.953946][T31999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11402'.
[  480.963163][T31999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11402'.
[  480.974842][T28108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.999676][T32003] loop9: detected capacity change from 0 to 128
[  481.015217][T31999] bridge1: entered promiscuous mode
[  481.020477][T31999] bridge1: entered allmulticast mode
[  481.044473][T32003] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  481.092955][T32003] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  481.109327][T32008] loop2: detected capacity change from 0 to 128
[  481.122054][T32010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11406'.
[  481.177212][T31299] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  481.232103][T32012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  481.269992][T32012] EXT4-fs (loop2): 1 truncate cleaned up
[  481.439600][   T29] audit: type=1400 audit(2000000349.455:668): avc:  denied  { mounton } for  pid=32022 comm="syz.1.11413" path="/373/file0" dev="tmpfs" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  481.542225][T32029] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  481.614660][T32033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.626206][T32033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.689077][T32035] cgroup: Unknown subsys name 'cpuset'
[  482.002824][T32054] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  482.015523][T32054] EXT4-fs (loop8): 1 truncate cleaned up
[  482.582089][T32076] bio_check_eod: 17654 callbacks suppressed
[  482.582108][T32076] syz.6.11436: attempt to access beyond end of device
[  482.582108][T32076] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128
[  482.602773][T32076] syz.6.11436: attempt to access beyond end of device
[  482.602773][T32076] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128
[  482.653604][T32076] syz.6.11436: attempt to access beyond end of device
[  482.653604][T32076] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128
[  482.676100][T32076] syz.6.11436: attempt to access beyond end of device
[  482.676100][T32076] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128
[  482.690409][T32076] syz.6.11436: attempt to access beyond end of device
[  482.690409][T32076] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128
[  482.705414][T32076] syz.6.11436: attempt to access beyond end of device
[  482.705414][T32076] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128
[  482.719215][T32076] syz.6.11436: attempt to access beyond end of device
[  482.719215][T32076] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128
[  482.735930][T32076] syz.6.11436: attempt to access beyond end of device
[  482.735930][T32076] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128
[  482.753355][T32076] syz.6.11436: attempt to access beyond end of device
[  482.753355][T32076] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128
[  482.786197][T32076] syz.6.11436: attempt to access beyond end of device
[  482.786197][T32076] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128
[  482.957450][T26606]  loop8: p1 < > p4
[  482.968194][T26606] loop8: p4 size 8388608 extends beyond EOD, truncated
[  482.985795][T32098]  loop8: p1 < > p4
[  482.994390][T32098] loop8: p4 size 8388608 extends beyond EOD, truncated
[  483.116590][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  483.117309][T26611] udevd[26611]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  483.202424][T26606] udevd[26606]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  483.212605][T24100] udevd[24100]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  483.244029][   T29] audit: type=1326 audit(2000000351.255:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.1.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  483.267937][   T29] audit: type=1326 audit(2000000351.255:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.1.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  483.291647][   T29] audit: type=1326 audit(2000000351.255:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.1.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  483.315297][   T29] audit: type=1326 audit(2000000351.255:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32121 comm="syz.1.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9dfa80f749 code=0x7ffc0000
[  484.832896][T32206] set_capacity_and_notify: 10 callbacks suppressed
[  484.832919][T32206] loop1: detected capacity change from 0 to 2048
[  485.383787][   T29] kauditd_printk_skb: 41 callbacks suppressed
[  485.390037][   T29] audit: type=1400 audit(2000000353.395:714): avc:  denied  { setattr } for  pid=32228 comm="syz.6.11506" name="ns" dev="proc" ino=112906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  485.452113][   T29] audit: type=1326 audit(2000000353.465:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.510381][   T29] audit: type=1326 audit(2000000353.495:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.534050][   T29] audit: type=1326 audit(2000000353.495:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.558192][   T29] audit: type=1326 audit(2000000353.495:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.581728][   T29] audit: type=1326 audit(2000000353.495:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.605427][   T29] audit: type=1326 audit(2000000353.495:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.629308][   T29] audit: type=1326 audit(2000000353.495:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.652846][   T29] audit: type=1326 audit(2000000353.495:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  485.676575][   T29] audit: type=1326 audit(2000000353.495:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32231 comm="syz.2.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e359f749 code=0x7ffc0000
[  486.157868][T32266] loop8: detected capacity change from 0 to 128
[  487.390502][T32311] io-wq is not configured for unbound workers
[  489.099985][T32384] netlink: 'syz.2.11569': attribute type 11 has an invalid length.
[  491.027322][T32498] loop6: detected capacity change from 0 to 7
[  492.521419][T32598] loop6: detected capacity change from 0 to 7
[  493.649780][T32651] netlink: 'syz.2.11680': attribute type 11 has an invalid length.
[  494.396309][T32760] syz.9.11729 (32760) used greatest stack depth: 8792 bytes left
[  494.703289][  T311] loop2: detected capacity change from 0 to 128
[  494.783182][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  494.783199][   T29] audit: type=1400 audit(2000000362.795:746): avc:  denied  { associate } for  pid=315 comm="syz.2.11738" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  495.038829][  T341] loop8: detected capacity change from 0 to 128
[  496.347206][  T411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=411 comm=syz.1.11772
[  496.819690][  T443] loop6: detected capacity change from 0 to 7
[  498.727613][  T608] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11857'.
[  499.006441][  T627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11866'.
[  500.748646][  T712] loop6: detected capacity change from 0 to 7
[  501.065085][  T727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11912'.
[  501.350711][  T756] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11925'.
[  501.374918][  T760] netlink: 25 bytes leftover after parsing attributes in process `syz.9.11926'.
[  501.416216][  T760] netlink: 'syz.9.11926': attribute type 4 has an invalid length.
[  501.472006][  T767] loop6: detected capacity change from 0 to 7
[  501.581874][  T780] ip6gretap1: entered promiscuous mode
[  501.587608][  T780] ip6gretap1: entered allmulticast mode
[  501.607137][  T783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11937'.
[  502.053748][  T812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11949'.
[  502.540731][  T845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11964'.
[  502.805708][  T879] netlink: 'syz.2.11979': attribute type 4 has an invalid length.
[  503.072944][  T916] loop2: detected capacity change from 0 to 128
[  503.095239][  T916] vfat: Unknown parameter 'shortnale'
[  503.265979][  T942] loop6: detected capacity change from 0 to 7
[  503.304929][  T946] loop6: detected capacity change from 0 to 128
[  503.370802][  T952] loop6: detected capacity change from 0 to 256
[  503.527839][  T972] loop9: detected capacity change from 0 to 512
[  503.748321][  T994] loop9: detected capacity change from 0 to 128
[  503.795279][  T994] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000)
[  503.803210][  T994] FAT-fs (loop9): Filesystem has been set read-only
[  503.934231][ T1006] netlink: 25 bytes leftover after parsing attributes in process `syz.9.12039'.
[  503.956355][ T1006] netlink: 'syz.9.12039': attribute type 4 has an invalid length.
[  503.975375][ T1008] ip6gretap2: entered promiscuous mode
[  503.980971][ T1008] ip6gretap2: entered allmulticast mode
[  504.151296][ T1030] loop2: detected capacity change from 0 to 256
[  504.201435][   T29] audit: type=1400 audit(2000000372.215:747): avc:  denied  { watch } for  pid=1029 comm="syz.2.12050" path="/527/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  504.250996][ T1037] bond0: (slave bond_slave_1): Releasing backup interface
[  504.557273][ T1062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12065'.
[  504.627898][ T1068] netlink: 25 bytes leftover after parsing attributes in process `syz.9.12067'.
[  504.681423][ T1073] netlink: 'syz.9.12067': attribute type 4 has an invalid length.
[  504.751070][ T1081] loop9: detected capacity change from 0 to 256
[  504.921981][ T1105] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12084'.
[  504.955203][ T1110] loop1: detected capacity change from 0 to 128
[  504.980519][ T1113] loop9: detected capacity change from 0 to 128
[  505.206688][ T1137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12098'.
[  505.586833][ T1170] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  505.696580][ T1170] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  505.895670][ T1181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12118'.
[  505.985151][ T1184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12120'.
[  506.225268][ T1221] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12134'.
[  506.278137][ T1226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12138'.
[  506.301689][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12140'.
[  506.627695][ T1260] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.635028][ T1260] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.677712][ T1260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.688514][ T1260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.727647][T22425] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.736963][T22425] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.746185][T22425] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.755672][T22425] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.910333][ T1282] blktrace: Concurrent blktraces are not allowed on loop2
[  507.174331][ T1308] batadv_slave_0: entered promiscuous mode
[  507.185171][ T1307] batadv_slave_0: left promiscuous mode
[  507.355625][ T1328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  507.707471][ T1359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  508.099903][ T1398] set_capacity_and_notify: 12 callbacks suppressed
[  508.106526][ T1398] loop9: detected capacity change from 0 to 128
[  508.808630][ T1425] loop6: detected capacity change from 0 to 7
[  508.908422][ T1437] loop1: detected capacity change from 0 to 512
[  509.040651][ T1453] __nla_validate_parse: 9 callbacks suppressed
[  509.040667][ T1453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12236'.
[  509.055984][ T1453] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12236'.
[  509.119282][ T1463] loop9: detected capacity change from 0 to 512
[  509.120364][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12240'.
[  509.168752][ T1466] loop9: detected capacity change from 0 to 256
[  509.195217][ T1468] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12243'.
[  509.585173][ T1490] loop2: detected capacity change from 0 to 512
[  510.189865][ T1517] loop9: detected capacity change from 0 to 256
[  510.375728][ T1537] ip6gretap2: entered promiscuous mode
[  510.381333][ T1537] ip6gretap2: entered allmulticast mode
[  510.473977][T27154] .`: left allmulticast mode
[  510.478662][T27154] bond_slave_0: left allmulticast mode
[  510.484183][T27154] bond_slave_1: left allmulticast mode
[  510.489699][T27154] .`: left promiscuous mode
[  510.494240][T27154] bond_slave_0: left promiscuous mode
[  510.499753][T27154] bond_slave_1: left promiscuous mode
[  510.505339][T27154] bridge0: port 3(.`) entered disabled state
[  510.607929][ T1558] loop2: detected capacity change from 0 to 128
[  510.622464][T27154] bridge_slave_1: left allmulticast mode
[  510.628434][T27154] bridge_slave_1: left promiscuous mode
[  510.634219][T27154] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.666954][T27154] bridge_slave_0: left allmulticast mode
[  510.672680][T27154] bridge_slave_0: left promiscuous mode
[  510.678739][T27154] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.842992][T27154] bond0 (unregistering): (slave gretap1): Releasing active interface
[  510.853958][T27154] bond5 (unregistering): (slave gretap2): Releasing active interface
[  510.862230][T27154] gretap2 (unregistering): left allmulticast mode
[  511.010006][T27154] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.020005][T27154] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.030051][T27154] .` (unregistering): Released all slaves
[  511.042311][T27154] bond0 (unregistering): Released all slaves
[  511.052036][T27154] bond1 (unregistering): Released all slaves
[  511.061434][T27154] bond2 (unregistering): Released all slaves
[  511.071431][T27154] bond3 (unregistering): Released all slaves
[  511.081176][T27154] bond4 (unregistering): Released all slaves
[  511.091204][T27154] bond5 (unregistering): Released all slaves
[  511.105018][ T1560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12277'.
[  511.248128][ T1578] syzkaller0: entered promiscuous mode
[  511.253676][ T1578] syzkaller0: entered allmulticast mode
[  511.286920][ T1578] syzkaller0: Caught tx_queue_len zero misconfig
[  511.313559][T27154] hsr_slave_0: left promiscuous mode
[  511.319748][T27154] hsr_slave_1: left promiscuous mode
[  511.325703][T27154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.333130][T27154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.343312][T27154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.350791][T27154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.401558][T27154] veth1_macvtap: left promiscuous mode
[  511.416665][T27154] veth1_vlan: left promiscuous mode
[  511.429854][T27154] veth0_vlan: left promiscuous mode
[  511.550519][ T1602] netlink: 25 bytes leftover after parsing attributes in process `syz.8.12289'.
[  511.607669][ T1605] netlink: 'syz.8.12289': attribute type 4 has an invalid length.
[  511.626660][T27154] team0 (unregistering): Port device team_slave_1 removed
[  511.648585][T27154] team0 (unregistering): Port device team_slave_0 removed
[  511.937478][T27154] IPVS: stop unused estimator thread 0...
[  512.267183][ T1628] chnl_net:caif_netlink_parms(): no params data found
[  512.363338][ T1628] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.370588][ T1628] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.378285][ T1628] bridge_slave_0: entered allmulticast mode
[  512.386399][ T1628] bridge_slave_0: entered promiscuous mode
[  512.393285][ T1628] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.400506][ T1628] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.409165][ T1628] bridge_slave_1: entered allmulticast mode
[  512.416027][ T1628] bridge_slave_1: entered promiscuous mode
[  512.475166][ T1628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.513758][ T1628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.541131][ T1628] team0: Port device team_slave_0 added
[  512.555997][ T1628] team0: Port device team_slave_1 added
[  512.575673][ T1628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.582699][ T1628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.608800][ T1628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.655557][ T1628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.662662][ T1628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.688852][ T1628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.734061][ T1628] hsr_slave_0: entered promiscuous mode
[  512.747592][ T1628] hsr_slave_1: entered promiscuous mode
[  512.754301][ T1628] debugfs: 'hsr0' already exists in 'hsr'
[  512.760094][ T1628] Cannot create hsr debugfs directory
[  512.775800][ T1680] loop8: detected capacity change from 0 to 512
[  512.882567][ T1691] syzkaller0: Caught tx_queue_len zero misconfig
[  513.122227][ T1628] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  513.131531][ T1628] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  513.141069][ T1628] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  513.150502][ T1628] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  513.167121][ T1628] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.174442][ T1628] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.181924][ T1628] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.189042][ T1628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.197600][T27318] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.206175][T27318] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.238680][ T1628] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.251851][ T1628] 8021q: adding VLAN 0 to HW filter on device team0
[  513.261643][T27154] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.268733][T27154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.280658][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.287799][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.372194][ T1628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.380396][ T1719] loop6: detected capacity change from 0 to 256
[  513.434477][T27318] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[  513.442448][T27318] FAT-fs (loop6): Filesystem has been set read-only
[  513.449737][T27318] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[  513.457973][T27318] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[  513.466329][T27318] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[  513.482945][ T1628] veth0_vlan: entered promiscuous mode
[  513.491535][ T1628] veth1_vlan: entered promiscuous mode
[  513.522370][ T1628] veth0_macvtap: entered promiscuous mode
[  513.541226][ T1628] veth1_macvtap: entered promiscuous mode
[  513.555872][ T1628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.572997][ T1628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.588195][   T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.600274][   T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.622137][   T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.640999][T22416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.305912][ T1830] netlink: 25 bytes leftover after parsing attributes in process `syz.6.12378'.
[  515.317153][ T1830] netlink: 'syz.6.12378': attribute type 4 has an invalid length.
[  515.368480][ T1834] loop6: detected capacity change from 0 to 128
[  515.515537][ T1842] loop9: detected capacity change from 0 to 256
[  515.587275][  T340] bridge_slave_1: left allmulticast mode
[  515.593005][  T340] bridge_slave_1: left promiscuous mode
[  515.599640][  T340] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.611763][   T12] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152)
[  515.619735][   T12] FAT-fs (loop9): Filesystem has been set read-only
[  515.627101][   T12] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152)
[  515.636023][  T340] bridge_slave_0: left allmulticast mode
[  515.641731][  T340] bridge_slave_0: left promiscuous mode
[  515.647596][  T340] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.656268][   T12] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152)
[  515.666508][   T12] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152)
[  515.768242][  T340] bond1 (unregistering): (slave gretap1): Releasing active interface
[  515.782932][ T1850] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12389'.
[  515.794260][  T340] bond3 (unregistering): (slave gretap2): Releasing active interface
[  515.803541][  T340] gretap2 (unregistering): left allmulticast mode
[  515.878181][  T340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  515.896604][  T340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  515.916121][  T340] bond0 (unregistering): Released all slaves
[  515.934987][  T340] bond1 (unregistering): Released all slaves
[  515.956693][  T340] bond2 (unregistering): Released all slaves
[  515.973427][  T340] bond3 (unregistering): Released all slaves
[  515.979812][   T29] audit: type=1326 audit(2000000383.995:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1807 comm="syz.8.12369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec181bf749 code=0x7fc00000
[  516.004044][ T1859] loop2: detected capacity change from 0 to 8192
[  516.077927][  T340] hsr_slave_0: left promiscuous mode
[  516.109469][  T340] hsr_slave_1: left promiscuous mode
[  516.123082][  T340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.130742][  T340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.141876][  T340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.149412][  T340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.159495][  T340] veth1_macvtap: left promiscuous mode
[  516.165209][  T340] veth1_vlan: left promiscuous mode
[  516.170823][  T340] veth0_vlan: left promiscuous mode
[  516.282009][ T5119] kernel write not supported for file bpf-prog (pid: 5119 comm: kworker/0:13)
[  516.283449][ T1874] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  516.298745][ T1874] FAT-fs (loop2): Filesystem has been set read-only
[  516.305723][  T340] team0 (unregistering): Port device team_slave_1 removed
[  516.322223][  T340] team0 (unregistering): Port device team_slave_0 removed
[  516.627928][  T340] IPVS: stop unused estimator thread 0...
[  516.688078][  T340] bridge_slave_1: left allmulticast mode
[  516.693784][  T340] bridge_slave_1: left promiscuous mode
[  516.699632][  T340] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.733075][  T340] bridge_slave_0: left allmulticast mode
[  516.739112][  T340] bridge_slave_0: left promiscuous mode
[  516.745194][  T340] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.837870][  T340] bond1 (unregistering): (slave gretap1): Releasing active interface
[  516.929440][  T340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.955270][  T340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.965188][  T340] bond0 (unregistering): Released all slaves
[  516.975783][  T340] bond1 (unregistering): Released all slaves
[  516.987432][  T340] bond2 (unregistering): Released all slaves
[  516.998712][  T340] bond3 (unregistering): Released all slaves
[  517.020583][  T340] bond4 (unregistering): Released all slaves
[  517.035380][  T340] bond5 (unregistering): Released all slaves
[  517.072692][  T340] hsr_slave_0: left promiscuous mode
[  517.094170][  T340] hsr_slave_1: left promiscuous mode
[  517.100427][  T340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  517.107914][  T340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  517.116715][  T340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  517.124350][  T340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.155157][ T1933] loop2: detected capacity change from 0 to 736
[  517.161612][  T340] veth1_macvtap: left promiscuous mode
[  517.174054][  T340] veth1_vlan: left promiscuous mode
[  517.197546][  T340] veth0_vlan: left promiscuous mode
[  517.329550][ T1937] netlink: 'syz.8.12424': attribute type 4 has an invalid length.
[  517.385664][  T340] team0 (unregistering): Port device team_slave_1 removed
[  517.415020][  T340] team0 (unregistering): Port device team_slave_0 removed
[  517.878280][ T1971] netlink: 'syz.8.12439': attribute type 4 has an invalid length.
[  517.959650][ T1981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12444'.
[  518.083134][ T1989] loop8: detected capacity change from 0 to 736
[  518.218976][ T1994] netlink: 'syz.8.12450': attribute type 4 has an invalid length.
[  518.460972][ T2004] syzkaller0: entered promiscuous mode
[  518.466672][ T2004] syzkaller0: entered allmulticast mode
[  518.649652][ T2009] loop2: detected capacity change from 0 to 512
[  518.772688][ T2018] netlink: 'syz.9.12461': attribute type 4 has an invalid length.
[  518.851999][ T2025] syzkaller0: entered promiscuous mode
[  518.857678][ T2025] syzkaller0: entered allmulticast mode
[  518.928640][ T2032] loop6: detected capacity change from 0 to 256
[  518.992969][ T2034] loop6: detected capacity change from 0 to 256
[  519.168581][ T2059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12480'.
[  519.204514][ T2061] loop1: detected capacity change from 0 to 256
[  519.429418][ T2077] loop1: detected capacity change from 0 to 8192
[  519.431877][ T2090] loop6: detected capacity change from 0 to 256
[  519.442429][ T2091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12496'.
[  519.452946][ T2077] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  519.544910][ T2096] syzkaller0: entered promiscuous mode
[  519.550527][ T2096] syzkaller0: entered allmulticast mode
[  519.599496][ T2099] loop6: detected capacity change from 0 to 256
[  519.628039][ T2095] ==================================================================
[  519.636179][ T2095] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[  519.643338][ T2095] 
[  519.645682][ T2095] write to 0xffff88811d47274a of 2 bytes by task 2092 on cpu 0:
[  519.653334][ T2095]  fat16_ent_put+0x28/0x60
[  519.657784][ T2095]  fat_ent_write+0x6c/0xe0
[  519.662240][ T2095]  fat_chain_add+0x15d/0x440
[  519.666869][ T2095]  fat_get_block+0x46c/0x5e0
[  519.671588][ T2095]  __block_write_begin_int+0x400/0xf90
[  519.677095][ T2095]  cont_write_begin+0x5ff/0x970
[  519.682007][ T2095]  fat_write_begin+0x4f/0xe0
[  519.686714][ T2095]  generic_perform_write+0x184/0x490
[  519.692045][ T2095]  __generic_file_write_iter+0x9e/0x120
[  519.697724][ T2095]  generic_file_write_iter+0x8d/0x2f0
[  519.703142][ T2095]  __kernel_write_iter+0x2d6/0x540
[  519.708414][ T2095]  dump_user_range+0x61e/0x8f0
[  519.713276][ T2095]  elf_core_dump+0x1de7/0x1f80
[  519.718075][ T2095]  coredump_write+0xacf/0xdf0
[  519.722786][ T2095]  vfs_coredump+0x24f7/0x2e60
[  519.727497][ T2095]  get_signal+0xd84/0xf70
[  519.732302][ T2095]  arch_do_signal_or_restart+0x96/0x450
[  519.737886][ T2095]  irqentry_exit+0xf9/0x560
[  519.742426][ T2095]  asm_exc_page_fault+0x26/0x30
[  519.747305][ T2095] 
[  519.749650][ T2095] read to 0xffff88811d472600 of 512 bytes by task 2095 on cpu 1:
[  519.757480][ T2095]  fat_mirror_bhs+0x1df/0x320
[  519.762181][ T2095]  fat_alloc_clusters+0x98b/0xa80
[  519.767238][ T2095]  fat_get_block+0x258/0x5e0
[  519.771862][ T2095]  __block_write_begin_int+0x400/0xf90
[  519.777362][ T2095]  cont_write_begin+0x5ff/0x970
[  519.782245][ T2095]  fat_write_begin+0x4f/0xe0
[  519.786867][ T2095]  cont_write_begin+0x1b0/0x970
[  519.791749][ T2095]  fat_write_begin+0x4f/0xe0
[  519.796415][ T2095]  generic_cont_expand_simple+0xb0/0x150
[  519.802163][ T2095]  fat_cont_expand+0x3e/0x170
[  519.806920][ T2095]  fat_setattr+0x2a5/0x8a0
[  519.811385][ T2095]  notify_change+0x872/0x8f0
[  519.816205][ T2095]  do_ftruncate+0x335/0x3c0
[  519.820740][ T2095]  __x64_sys_ftruncate+0x68/0xc0
[  519.825709][ T2095]  x64_sys_call+0x2e35/0x3000
[  519.830427][ T2095]  do_syscall_64+0xca/0x2b0
[  519.834968][ T2095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.840883][ T2095] 
[  519.843278][ T2095] Reported by Kernel Concurrency Sanitizer on:
[  519.849467][ T2095] CPU: 1 UID: 0 PID: 2095 Comm: syz.1.12487 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  519.860869][ T2095] Tainted: [W]=WARN
[  519.864687][ T2095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  519.874770][ T2095] ==================================================================